Hi Guys,
I’m trying to configure per session shaping on LNS.
This is my guide:
http://www.cisco.com/en/US/docs/ios/12_2sb/feature/guide/sbsbpssq.html
This is the policy-map:
!
policy-map limit
class class-default
shape peak 16000
!
The VPDN-GROUP:
vpdn-group RONVPDNGroupL2TP
! Default L2TP VPDN group
description RON VPDN Group L2TP
accept-dialin
protocol l2tp
virtual-template 1
local name ron.com
lcp renegotiation always
l2tp tunnel hello 40
no l2tp tunnel authentication
l2tp tunnel retransmit retries 5
l2tp ip udp checksum
!
And the Virtual-Template:
interface Virtual-Template1
description Template L2TP$FW_INSIDE$
mtu 1400
ip unnumbered Loopback2
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
ip inspect appfw_100 out
ip tcp adjust-mss 1360
no snmp trap link-status
keepalive 15 3
ppp authentication pap callin
service-policy output limit
The virtual-access interfaces (sub-interfaces) should clone the config from virtual-template 1.
Here you can see the VPDN session
router#sh vpdn session
L2TP Session Information Total tunnels 1 sessions 1
LocID RemID TunID Username, Intf/ State Last Chg Uniq ID
Vcid, Circuit
31549 4515 2946 ronald….., Vi2.1 est 00:18:02 14
Here you can see the config, in fact is cloned from virtual-template1, but the policy-map is not working
router#sh interfaces virtual-access 2.1
Virtual-Access2.1 is up, line protocol is up
Hardware is Virtual Access interface
Interface is unnumbered. Using address of Loopback2 (1.1.1.1)
MTU 1400 bytes, BW 10000 Kbit/sec, DLY 100000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: IPCP
PPPoVPDN vaccess, cloned from Virtual-Template1
Vaccess status 0×0
Protocol l2tp, tunnel id 2946, session id 31549
Keepalive set (15 sec)
484 packets input, 61722 bytes
370 packets output, 71248 bytes
Last clearing of “show interface” counters never
Theres is no policy-map applied in the interface
router#show policy-map interface virtual-access 2.1
router#
This is the ppp-session:
fonesixlin01#sh ppp all
Interface/ID OPEN+ Nego* Fail- Stage Peer Address Peer Name
———— ——————— ——– ————— ——————–
Vi2.1 LCP+ PAP+ IPCP+ LocalT 213.134.44.178 \
Any idea?
Best,
Ronald