ISG

از ویکی پارس پویش
(تفاوت بین نسخه‌ها)
پرش به: ناوبری, جستجو
(←‏ISG service)
سطر ۱۳: سطر ۱۳:
 
===Netwotk config===
 
===Netwotk config===
  
−
راه اندازی فنی سرویس
+
<div dir=ltr>
 +
  ###############################
 +
  #      AAA configuration    #
 +
  ###############################
 +
  aaa authentication ppp ibs group radius
 +
  aaa authorization network default group radius
 +
  aaa authorization network ibs group radius
 +
  aaa authorization subscriber-service default local group radius
 +
  aaa authorization subscriber-service ibs local group radius
 +
  aaa accounting delay-start
 +
  aaa accounting update periodic 1
 +
  aaa accounting network default start-stop group radius
 +
  aaa accounting network ibs start-stop group radius
 +
  ####################
 +
  #    POD - COA    #
 +
  ####################
 +
  aaa server radius dynamic-author
 +
  client [ Accounting server's IP address ]
 +
  server-key [ Secret Key ]
 +
  auth-type any
  
 +
 +
  ###############################
 +
  #    RADIUS configuration    #
 +
  ###############################
 +
  radius-server attribute 44 include-in-access-req
 +
  radius-server attribute 8 include-in-access-req
 +
  radius-server attribute 32 include-in-access-req
 +
  radius-server attribute 32 include-in-accounting-req
 +
  radius-server attribute 55 include-in-acct-req
 +
  radius-server attribute nas-port format d
 +
  radius-server host [ Accounting server's IP address ] auth-port 1812 acct-port 1813 key [ Secret Key ]
 +
  radius-server source-ports extended
 +
  radius-server retransmit 10
 +
  radius-server timeout 10
 +
  radius-server vsa send cisco-nas-port
 +
  radius-server vsa send accounting
 +
  radius-server vsa send authentication
 +
 +
 +
  ###############################
 +
  #      BBA configuration    #
 +
  ###############################
 +
  bba-group pppoe global
 +
  virtual-template 1
 +
  mac-address autoselect
 +
  sessions per-mac limit 1
 +
  sessions per-vlan limit 10000
 +
  sessions per-mac throttle 2 30 40
 +
  sessions auto cleanup
 +
 +
 +
  #############################################
 +
  #      Virtual Template configuration      #
 +
  #############################################
 +
  interface Loopback10
 +
  ip address [ An IP !! ] [It's netmask !!]
 +
  !
 +
  interface Virtual-Template1
 +
  ip unnumbered Loopback10
 +
  ip tcp adjust-mss 1436
 +
  ip policy route-map failed
 +
  no logging event link-status
 +
  peer default ip address pool tabriz
 +
  keepalive 10 3
 +
  ppp authentication pap ibs
 +
  ppp authorization ibs
 +
  ppp accounting ibs
 +
  service-policy type control ISG
 +
 +
  ###################################
 +
  #      IP Pool configuration    #
 +
  ###################################
 +
  ip local pool [ Pool's name ] [ Start From ] [ Ends to ]
 +
  ip forward-protocol nd
 +
 +
 +
  ###################################
 +
  #    Interface configuration    #
 +
  ###################################
 +
  interface GigabitEthernet0/1.1275
 +
  description [ As descriptive as possible !!! ]
 +
  encapsulation dot1Q 1275
 +
  pppoe enable group global
 +
 +
 +
  ###################################
 +
  #      Services configurations    #
 +
  ###################################
 +
  policy-map type control ISG
 +
  class type control always event credit-exhausted
 +
  1 service-policy type service name FAILED
 +
 +
  ######################
 +
  #  Sample Service  #
 +
  ######################
 +
  ip access-list extended SAMPLE_SERVICE
 +
  permit ip 192.168.0.0 0.0.0.255 any
 +
  permit ip any 192.168.0.0 0.0.0.255
 +
  !
 +
  !
 +
  class-map type traffic match-any SAMPLE_SERVICE
 +
  match access-group output name SAMPLE_SERVICE
 +
  match access-group input name SAMPLE_SERVICE
 +
  !
 +
  !
 +
  policy-map type service SAMPLE_SERVICE
 +
  10 class type traffic SAMPLE_SERVICE
 +
  accounting aaa list ibs
 +
  police input 2000000
 +
  police output 2000000
 +
  !       
 +
 +
 +
  #################################
 +
  # Filter Failed-Users    #
 +
  #################################
 +
  route-map failed permit 10
 +
  match ip address 10
 +
  set ip next-hop 10.10.101.111
 +
  !
 +
 +
 +
 +
</div>
 
===Interface config===
 
===Interface config===
  
 
تنظیمات charge
 
تنظیمات charge

نسخهٔ ‏۳۰ ژوئن ۲۰۱۵، ساعت ۱۳:۳۸

محتویات

ISG service

مقدمه و توضیحات سرویس

Netwotk config

 ###############################
 #       AAA configuration     #
 ###############################
 aaa authentication ppp ibs group radius
 aaa authorization network default group radius 
 aaa authorization network ibs group radius 
 aaa authorization subscriber-service default local group radius 
 aaa authorization subscriber-service ibs local group radius 
 aaa accounting delay-start
 aaa accounting update periodic 1
 aaa accounting network default start-stop group radius
 aaa accounting network ibs start-stop group radius
 ####################
 #    POD - COA     #
 ####################
 aaa server radius dynamic-author
 client [ Accounting server's IP address ]
 server-key [ Secret Key ]
 auth-type any



 ###############################
 #     RADIUS configuration    #
 ###############################
 radius-server attribute 44 include-in-access-req
 radius-server attribute 8 include-in-access-req
 radius-server attribute 32 include-in-access-req 
 radius-server attribute 32 include-in-accounting-req 
 radius-server attribute 55 include-in-acct-req
 radius-server attribute nas-port format d
 radius-server host [ Accounting server's IP address ] auth-port 1812 acct-port 1813 key [ Secret Key ]
 radius-server source-ports extended
 radius-server retransmit 10
 radius-server timeout 10
 radius-server vsa send cisco-nas-port
 radius-server vsa send accounting
 radius-server vsa send authentication



 ###############################
 #       BBA configuration     #
 ###############################
 bba-group pppoe global
 virtual-template 1
 mac-address autoselect
 sessions per-mac limit 1
 sessions per-vlan limit 10000
 sessions per-mac throttle 2 30 40
 sessions auto cleanup



 #############################################
 #       Virtual Template configuration      #
 #############################################
 interface Loopback10
 ip address [ An IP !! ] [It's netmask !!]
 !
 interface Virtual-Template1
 ip unnumbered Loopback10
 ip tcp adjust-mss 1436
 ip policy route-map failed
 no logging event link-status
 peer default ip address pool tabriz
 keepalive 10 3
 ppp authentication pap ibs
 ppp authorization ibs
 ppp accounting ibs
 service-policy type control ISG

 ###################################
 #       IP Pool configuration     #
 ###################################
 ip local pool [ Pool's name ] [ Start From ] [ Ends to ]
 ip forward-protocol nd



 ###################################
 #     Interface configuration     #
 ###################################
 interface GigabitEthernet0/1.1275
 description [ As descriptive as possible !!! ]
 encapsulation dot1Q 1275
 pppoe enable group global



 ###################################
 #      Services configurations    #
 ###################################
 policy-map type control ISG
 class type control always event credit-exhausted
 1 service-policy type service name FAILED

 ######################
 #   Sample Service   #
 ######################
 ip access-list extended SAMPLE_SERVICE
  permit ip 192.168.0.0 0.0.0.255 any
 permit ip any 192.168.0.0 0.0.0.255
 !
 !
 class-map type traffic match-any SAMPLE_SERVICE
 match access-group output name SAMPLE_SERVICE
 match access-group input name SAMPLE_SERVICE
 !
 !
 policy-map type service SAMPLE_SERVICE
 10 class type traffic SAMPLE_SERVICE
 accounting aaa list ibs
 police input 2000000
 police output 2000000
 !        



 #################################
 #	Filter Failed-Users     #
 #################################
 route-map failed permit 10
 match ip address 10
 set ip next-hop 10.10.101.111
 !


Interface config

تنظیمات charge

برگرفته از «http://wiki.parspooyesh.com/index.php?title=ISG&oldid=1291»
ابزارهای شخصی

گویش‌ها
فضاهای نام
عملکردها
گشتن
جعبه‌ابزار