Thanks Hugh,

It doesn't appear that there is any issue with my Radius reply config.

When my Radius reply config is:
cisco-Policy-Up = "4Mbps",cisco-Policy-Down = "16Mbps"

The ASR output is:
USER ATTRIBUTES

addr                 0   63.245.120.110
route                0   "63.245.120.110 255.255.255.255 "
sub-policy-In        0   "4Mbps"
sub-policy-Out       0   "16Mbps"
timeout              0   604800 (0x93A80)



When I changed to cisco-avpair:
cisco-avpair = "sub-policy-In=4Mbps",cisco-avpair = "sub-policy-In=16Mbps"


The output on the ASR is the same:

USER ATTRIBUTES

addr                 0   63.245.120.110
route                0   "63.245.120.110 255.255.255.255 "
sub-policy-In        0   "4Mbps"
sub-policy-Out       0   "16Mbps"
timeout              0   604800 (0x93A80)

However the ASR displays nothing when the following is used:

cisco-avpair = "cisco-Policy-Up=4Mbps",cisco-avpair = "cisco-Policy-Down=16Mbps"


Note: The above tests are from ASR directly but wanted to confirm I have Radius 
Reply items configured properly. The issue is that the ASR is not sending 
accounting requests when a modem tries to authenticate. We are moving from 
Cisco CAR to Radiator. Working with Cisco Support. 

Regards,
Rohan

----- Original Message -----
From: "Hugh Irvine" <[email protected]>
To: "Rohan Henry" <[email protected]>
Cc: [email protected]
Sent: Tuesday, November 22, 2016 4:57:11 PM
Subject: Re: [RADIATOR] Radius SLA profile and Cisco ASR

Hello Rohan -

The Radiator dictionary contains these definitions, which match what you show 
below:


VENDORATTR      9       cisco-Policy-Up                 37      string
VENDORATTR      9       cisco-Policy-Down               38      string


However, you will need to check with Cisco for the correct format of the 
strings.

It is also often the case that you need to use the “cisco-avpair” attribute, 
but again, you will need to check with Cisco.

You will also need to do some experiments, because sometimes the official 
information is incorrect.

Watching a debug on the Cisco device while you send the RADIUS access accept is 
probably the best way to see what is going on.

regards

Hugh


> On 23 Nov. 2016, at 08:42, rohan.henry cwjamaica.com 
> <[email protected]> wrote:
> 
> Hello All,
> 
> Are the following the correct VSA's to use with Cisco ASR (1000) to define 
> broadband user speed?
> 
> cisco-Policy-Up = "4Mbps"
> cisco-Policy-Down = "16Mbps"
> 
> Thanks.
> 
> Regards,
> Rohan
> _______________________________________________
> radiator mailing list
> [email protected]
> http://lists.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
[email protected]

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, MacOSX, Solaris, VMS, NetWare etc.

_______________________________________________
radiator mailing list
[email protected]
http://lists.open.com.au/mailman/listinfo/radiator

Reply via email to