Redirecting Subscriber Traffic Using ISG Layer 4 Redirect
How to Configure ISG Layer 4 Redirect
7
Configuring Layer 4 Redirection in a Service Profile or User Profile on the AAA
Server
The Layer 4 Redirect feature can be configured as a Cisco vendor-specific attribute (VSA) in a user or
service profile on an authentication, authorization, and accounting (AAA) server. This attribute can
appear more than once in a profile to define different types of redirections for a session and can be used
in both user and service profiles simultaneously.
SUMMARY STEPS
1. Add the Layer 4 Redirect VSA to the user profile or service profile on the AAA server.
DETAILED STEPS
What to Do Next
If you configure ISG Layer 4 redirection in a service profile, you may want to configure a method of
activating the service profile; for example, control policies can be used to activate services. For more
information about methods of service activation, see the module “Configuring ISG Subscriber Services”.
Verifying ISG Traffic Redirection
Perform this task to verify the configuration and operation of ISG Layer 4 traffic redirection.
SUMMARY STEPS
1. enable
2. show redirect translations [ip ip-address]
3. show redirect group [group-name]
4. show subscriber session [detailed] [identifier identifier | uid session-id | username name]
Command or Action Purpose
Step 1
Add the Layer 4 Redirect VSA to the user profile or
subscriber profile on the AAA server.
Cisco-AVPair = “ip:l4redirect=redirect to {group
server-group-name | ip ip-address [port port-number]}
[duration seconds] [frequency seconds]”
Redirects traffic to a specified server or server group.
To Next Page
Loading...
