ELTEX ESR-1511 - Page 627

ESR series service routers.ESR-Series. User manual
627
Service name for a session (A – the service is enabled, N – the service is disabled):
Cisco-Account-Info = "{A|N}<SERVICE_NAME>"
Service profile:
<SERVICE_NAME> Cleartext-Password := <MACADDR>
Matches class-map name in ESR settings:
Cisco-AVPair = "subscriber:traffic-class=<CLASS_MAP>",
Action that is applied to the traffic by ESR (permit, deny, redirect):
Cisco-AVPair = "subscriber:filter-default-action=<ACTION>",
The ability of IP flows passing (enabled-uplink, enabled-downlink, enabled, disabled):
Cisco-AVPair = "subscriber:flow-status=<STATUS>"
Add a subnet, in which ESR is located, to the clients.conf file:
client ESR {
ipaddr = <SUBNET>
secret = <RADIUS_KEY>
}
In this case the RADIUS server configuration will be as follows:
Add the following strings to the 'clients.conf' file:
client BRAS {
ipaddr = 192.168.1.1
secret = password
}
Add the following strings to the 'users' file (specify a client MAC address instead of <MAC>):
"54-E1-AD-8F-37-35" Cleartext-Password := "54-E1-AD-8F-37-35"
User-Name = "Bras_user",
Session-Timeout = 259200,
Idle-Timeout = 259200,
Cisco-AVPair += "subscriber:policer-rate-in=1000",
Cisco-AVPair += "subscriber:policer-rate-out=1000",
Cisco-AVPair += "subscriber:policer-burst-in=188",
Cisco-AVPair += "subscriber:policer-burst-out=188",
Cisco-Account-Info = "AINTERNET"
INTERNET Cleartext-Password := "INTERNET"
User-Name = "INTERNET",
Cisco-AVPair = "subscriber:traffic-class=INTERNET",
Cisco-AVPair += "subscriber:filter-default-action=permit"