Hi Steve, if you put DPI between LAC - LNS, I think it will difficult for DPI to recognize per user traffic, because it inside tunnel (cmiiw). The common implementation is to put DPI after LNS. For per user traffic shaping you can use radius attribut on the LNS, you can see below http://www.cisco.com/en/US/docs/ios/12_2sb/feature/guide/sbsbpssq.html
regards On Thu, 2009-04-30 at 19:22 +0100, Steve McCrory wrote: > Are you aware of any techniques (expect DPI) that would allow us to > inspect a users traffic as their VPDN session passes through our network > via a series of tunnels? > recognise > Is it possible to terminate a user temporarily to apply some sort of QoS > before forwarding them onto to their final destination LNS? > > Steven > > Steven McCrory > > Senior Network Engineer > > Netservices PLC > Waters Edge Business Park > Modwen Road > Manchester, M5 3EZ > > www.netservicesplc.com > > -----Original Message----- > From: Arie Vayner (avayner) [mailto:[email protected]] > Sent: 30 April 2009 18:11 > To: Steve McCrory; [email protected] > Subject: RE: [c-nsp] Per session shaping > > Steve, > > >From what I know this is meant to be used on the terminating LNS... > > Arie > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Steve McCrory > Sent: Thursday, April 30, 2009 19:35 > To: [email protected] > Subject: [c-nsp] Per session shaping > > Afternoon all, > > > > I've been asked to look into the capabilities of the Cisco IOS feature > 'Per-Session Shaping and Queuing' and I am looking for some expertise > from anyone who has utilized this feature. > > > > I would like to know if it is possible to shape an SSS session that is > forwarded on to another LNS or is this feature specifically for shaping > subscriber sessions that terminate locally? > > > > I tried configuring a service policy on the virtual-template that is > associated with the VPDN group for the incoming L2TP tunnel but this > appear to break everything and debugging radius identifies a 'nas-error' > as the cause: > > > > *Apr 30 15:26:50.187: RADIUS: Acct-Terminate-Cause[49] 6 nas-error > [9] > > > > Cheers > > > > Steven > > > > Steven McCrory > > > > Senior Network Engineer > > > > Netservices PLC > > Waters Edge Business Park > > Modwen Road > > Manchester, M5 3EZ > > > > www.netservicesplc.com <http://www.netservicesplc.com> > > > > > > -------- > NetServices plc, Company No. 4178393, > Registered Office: NetServices House, 31 Modwen Road, > Waters Edge Business Park, SALFORD, M5 3EZ > -------- > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > -------- > NetServices plc, Company No. 4178393, > Registered Office: NetServices House, 31 Modwen Road, > Waters Edge Business Park, SALFORD, M5 3EZ > -------- > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ K-Music: online music shop - Download ribuan lagu favorit di http://music.kongkoow.com/ Disclaimer This is an e-mail from PT Indosat Mega Media intended solely for the named addressee(s). It is confidential and may contain legally privileged information. Therefore, any unauthorized use, disclosure or copying of this information is strictly prohibited. PT Indosat Mega Media does not accept liability for any email loss or files damage. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
