Configuring ISG Control Policies
How to Configure an ISG Control Policy
6
Step 6
greater-than-or-equal [not] nas-port {[adapter
adapter-number] [channel channel-number]
[ipaddr ip-address] [port port-number] [shelf
shelf-number] [slot slot-number] [sub-interface
sub-interface-number] [type interface-type]
[vci vci-number] [vlan vlan-id] [vpi
vpi-number]}
Example:
Router(config-control-classmap)#
greater-than-or-equal nas-port vlan 10
(Optional) Creates a condition that evaluates true if the
specified subscriber NAS port identifier is greater than or
equal to the specified value.
Step 7
less-than [not] nas-port {[adapter
adapter-number] [channel channel-number]
[ipaddr ip-address] [port port-number] [shelf
shelf-number] [slot slot-number] [sub-interface
sub-interface-number] [type interface-type]
[vci vci-number] [vlan vlan-id] [vpi
vpi-number]}
Router(config-control-classmap)# less-than
nas-port type atm vpi 200 vci 105
(Optional) Creates a condition that evaluates true if the
specified subscriber NAS port identifier is less than the
specified value.
Step 8
less-than-or-equal [not] nas-port {[adapter
adapter-number] [channel channel-number ]
[ipaddr ip-address] [port port-number] [shelf
shelf-number] [slot slot-number] [sub-interface
sub-interface-number] [type interface-type]
[vci vci-number] [vlan vlan-id] [vpi
vpi-number]}
Example:
Router(config-control-classmap)#
less-than-or-equal nas-port ipaddr 10.10.10.10
(Optional) Creates a condition that evaluates true if the
specified subscriber NAS port identifier is less than or equal
to the specified value.
Step 9
match authen-status {authenticated |
unauthenticated}
Example:
Router(config-control-classmap)# match
authen-status authenticated
(Optional) Creates a condition that evaluates true if a
subscriber’s authentication status matches the specified
authentication status.
Step 10
match authenticated-domain {domain-name |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
authenticated-domain cisco.com
(Optional) Creates a condition that evaluates true if a
subscriber’s authenticated domain matches the specified
domain.
Step 11
match authenticated-username {username | regexp
regular-expression}
Example:
Router(config-control-classmap)# match
authenticated-username regexp "admin@.*com"
(Optional) Creates a condition that evaluates true if a
subscriber’s authenticated username matches the specified
username.
Command or Action Purpose
To Next Page
Loading...
