Configuring ISG Control Policies
How to Configure an ISG Control Policy
10
DETAILED STEPS
Command or Action Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode.
• Enter your password if prompted.
Step 2
configure terminal
Example:
Router# configure terminal
Enters global configuration mode.
Step 3
policy-map type control policy-map-name
Example:
Router(config)# policy-map type control
MY-POLICY
Creates or modifies a control policy map, which is used to
define a control policy and enters control policy-map
configuration mode.
Step 4
class type control {control-class-name |
always} [event {access-reject | account-logoff
| account-logon | acct-notification |
credit-exhausted | dummy-event | quota-depleted
| radius-timeout | service-failed |
service-start | service-stop |
session-default-service | session-restart |
session-service-found | session-start |
timed-policy-expiry}]
Example:
Router(config-control-policymap)# class type
control always event session-start
Specifies a control class for which actions may be
configured and enters control policy-map class
configuration mode.
• A policy rule for which the control class is always will
always be treated as the lowest priority rule within the
control policy map.
Step 5
action-number authenticate aaa list list-name
Example:
Router(config-control-policymap-class-control)#
1 authenticate aaa list LIST1
(Optional) Initiates an authentication request.
Step 6
action-number authorize [aaa list list-name]
[password password] [upon network-service-found
{continue | stop}] identifier
{authenticated-domain | authenticated-username
| auto-detect | circuit-id [plus remote-id] |
dnis | mac-address | nas-port | remote-id [plus
circuit-id] | source-ip-address | tunnel-name |
unauthenticated-domain |
unauthenticated-username | vendor-class-id}
Example:
Router(config-control-policymap-class-control)#
1 authorize identifier source-ip-address
(Optional) Initiates a request for authorization on the basis
of the specified identifier.
To Next Page
Loading...
Need help?
General