Re: Imposing Radius quota to the aggregation router without

Hi Carlos,

As you are guessing, you can enable radius accounting interim updates
(definitely a good idea for long session lifetimes where users could exceed
their cap) - for example set the interim reporting interval to 5 minutes and
have a cron job on the server find users that need to be changed and send
CoAs to them to the limited speed. To reverse the change, have another
script to bounce things back at the end of the billing cycle.

Some service providers where I am have a concept of peak and off-peak which
each has certain limits before shaping, interim updates and CoA can be quite
helpful in design products with that kind of flexibility.

Cheers,
Adam

On Mon, Apr 4, 2011 at 9:06 AM, Carlos G Mendioroz <tron_at_huapi.ba.ar> wrote:

> Cool.
> Where you able to trigger a change from radius based on traffic ?
> That would need integration of some sort of flow export too, or is there
> a periodic account option ? I was used to start-stop or stop-only
> radius accounting.
>
> -Carlos
>
> Adam Booth @ 03/04/2011 19:38 -0300 dixit:
>
> Hi Amin,
>>
>> Changing user profile without clearing sessions requires RADIUS Change of
>> Authorization (RFC 3576) It depends on the AAA Server and the NAS to
>> support this. I've done this with freeradius and a non-Cisco BRAS/BNG. I
>> don't think its supported in regular IOS images though so you may need to
>> investigate using an Intelligent Service Gateway software image on your
>> 7200
>> for CoA support.
>>
>> Cheers,
>> Adam
>>
>> On Mon, Apr 4, 2011 at 6:50 AM, Carlos G Mendioroz <tron_at_huapi.ba.ar>
>> wrote:
>>
>> By clearing the sessions automatically ? :)
>>> I would guess that some sort of CAR is bound to the user's ppp sessions
>>> when they are above the quota, but that is bound at sesssion start, so
>>> you need a new session to do the rate limit, hence the need of clearing.
>>>
>>> You may clear all sessions regularly, put a low session timeout so they
>>> clear themselves or come up with some scripting to clear sessions that
>>> correspond to users that have recently gone over quota.
>>>
>>> -Carlos
>>>
>>> Amin @ 03/04/2011 16:54 -0300 dixit:
>>>
>>> Hi experts,
>>>
>>>>
>>>> I have an ISP with cisco router 7206VXR and freeradius, they implement a
>>>> quota limit for their customers to decrease the customer speed if he
>>>> reach
>>>> certain quota, and it works fine except they need to manually to clear
>>>> the
>>>> user, so how we could impose the quota automatically on the 7206VXR
>>>> without
>>>> clearing the user manually.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Amin
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>>>
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
> --
> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina

Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 04 2011 - 09:28:04 ART