Scribd
Upload
57 views

ASR Config

This document contains configuration settings for a Cisco router acting as a broadband remote access server (BRAS). Key points: 1) It configures authentication, authorization, and accounting (AAA) using RADIUS with a server at 1.1.1.1. 2) It sets up virtual template 1 to provide DHCP addresses to PPPoE clients from pool pppoe 2.2.1.1-255. 3) Interfaces are configured for PPPoE termination and to apply the general policy-map for traffic policing.

Uploaded by

Mehdi Noori
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
57 views

ASR Config

This document contains configuration settings for a Cisco router acting as a broadband remote access server (BRAS). Key points: 1) It configures authentication, authorization, and accounting (AAA) using RADIUS with a server at 1.1.1.1. 2) It sets up virtual template 1 to provide DHCP addresses to PPPoE clients from pool pppoe 2.2.1.1-255. 3) Interfaces are configured for PPPoE termination and to apply the general policy-map for traffic policing.

Uploaded by

Mehdi Noori
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 3

hostname BRAS-ASR-LC

!
aqm-register-fnf
!
enable secret 5 TEST
!
aaa new-model
!
aaa group server radius netbill
server-private 1.1.1.1 auth-port 1812 acct-port 1813 key 7 TEST
ip radius source-interface TenGigabitEthernet0/1/0

aaa authentication ppp default group radius


aaa authorization config-commands
aaa authorization network default group radius
aaa accounting update periodic 5
aaa accounting network default start-stop group radius

!
aaa nas port extended
!
aaa server radius dynamic-author
client 1.1.1.1
server-key hamed
auth-type any
!
aaa session-id common
aaa policy interface-config allow-subinterface
clock timezone IRDT 3 30
no ip source-route
no ip gratuitous-arps
!
!
!
!

no ip domain lookup
ip name-server 1.1.1.1
ip name-server 1.1.1.1

!
!
!
!
!
!
!
!
!
!
subscriber templating
virtual-profile virtual-template 1
!

!
!
!
!

spanning-tree extend system-id


!
username hamed secret 5 hamed
!
redundancy
mode none
!
!
!
ip tftp source-interface TenGigabitEthernet0/1/0

policy-map 29
class General
police 30000 5625 11250 conform-action transmit exceed-action drop

policy-map 2451
class General
police 2452000 459750 919500 conform-action transmit exceed-action drop

!
!
!
!
!
!
!
bba-group pppoe test
virtual-template 1
vendor-tag circuit-id service
mac-address autoselect
sessions per-mac limit 5
sessions per-vlan limit 20000
sessions per-mac throttle 6 60 300

interface GigabitEthernet0/0/1.113
description Connected to Valiasr
encapsulation dot1Q 113
no ip redirects
no ip unreachables
no ip proxy-arp
pppoe enable group test
!
interface GigabitEthernet0/0/1.502
description Connected to abuzar
encapsulation dot1Q 502
no ip redirects
no ip unreachables
no ip proxy-arp
pppoe enable group test
!
!
interface Virtual-Template1
ip unnumbered ten 1/0/1
no ip proxy-arp
ip tcp adjust-mss 1360
no logging event link-status
peer default ip address pool pppoe
keepalive 10 5
ppp authentication pap chap
!
!

ip local pool pppoe 2.2.1.1 2.2.1.255

ip forward-protocol nd
!
no ip http server
no ip http secure-server

ip access-list extended General


permit ip any any

!
!
radius-server attribute 44 include-in-access-req default-vrf
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-access-req
radius-server attribute 32 include-in-accounting-req
radius-server attribute 55 include-in-acct-req
radius-server attribute 55 access-request include
radius-server attribute 25 access-request include
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server host 1.1.1.1 auth-port 1812 acct-port 1813 key TEST
radius-server retransmit 0
radius-server timeout 10
radius-server vsa send cisco-nas-port
!

You might also like