Cisco IOS XE Intelligent Services User Manual

Configuring ISG as a RADIUS Proxy
Configuration Examples for ISG RADIUS Proxy
14
accounting method-list FWDACCT
client 10.45.45.2
timer request 5
!
client 10.45.45.3
key aashica#@!$%&/
timer ip-address 120
!
!
! This control policy references the method list called "RP" that was configured using the
aaa authorization radius-proxy command above.
policy-map type control PROXYRULE
class type control always event session-start
1 proxy aaa list RP
!
!
!
bba-group pppoe global
!
!
interface GigabitEthernet 2/1/0
ip address 10.45.45.1 255.255.255.0
ip subscriber routed
initiator radius-proxy
no ip route-cache cef
no ip route-cache
no cdp enable
!
! The control policy "PROXYRULE" is applied to the interface.
service-policy type control PROXYRULE
!
!
radius-server host 10.2.36.253 auth-port 1812 acct-port 1813 key cisco
radius-server host 10.76.86.83 auth-port 1665 acct-port 1666 key rad123
radius-server vsa send accounting
radius-server vsa send authentication
aaa new-model
!
!
aaa group server radius EAP
server 10.2.36.253 auth-port 1812 acct-port 1813
!
ISG RADIUS Proxy and Layer 4 Redirect: Example
The following example shows an ISG policy configured for both ISG RADIUS proxy and Layer 4
redirection:
aaa authorization network default local
!
redirect server-group REDIRECT
server ip 10.255.255.28 port 23
!
class-map type traffic match-any traffic1
match access-group input 101
!
policy-map type service service1
class type traffic traffic1
redirect list 101 to group REDIRECT
!
policy-map type control PROXYRULE

Cisco IOS XE Intelligent Services Specifications

General

Brand	Cisco
Model	IOS XE Intelligent Services
Category	Gateway
Language	English