Using the cisco-avpair="lcp:interface-config" RADIUS Attribute
Configuring the keepalive Command
For PPP sessions, the keepalive command sets the keepalive timer for a specific interface. To ensure
proper scaling and to minimize CPU utilization, set the timer for 60 seconds or longer. The default value
is 10 seconds:
interface Virtual-Template1
ip unnumbered Loopback1
keepalive 60
no peer default ip address
ppp authentication pap
Note
For IP sessions, the keepalives are not enabled by default. Enabling keepalives for IP sessions provides
the same capability as PPP keepalives except that ICMP or ARP is used to test the presence of
subscribers. For more information about Using ARP for Keepalive Messages and Using ICMP for
Keepalive Messages, see the feature documentation at:
http://www.cisco.com/en/US/docs/ios-xml/ios/isg/configuration/xe-3s/Configuring_ISG_Policies_for_
Session_Maintenance.html
Scaling the L2TP Tunnel Configurations
To prevent head-of-the-line blocking of the IP input process and save system resources, configure the
vpdn ip udp ignore checksum command:
Router(config)# vpdn ip udp ignore checksum
When you configure this command, the router directly queues the L2TP Hello packets and Hello
acknowledgements to the L2TP control process. We recommend that you configure this command in all
the scaled LAC and LNS L2TP tunnel configurations.
If you do not configure the vpdn ip udp ignore checksum command, the L2TP software sends the
packets to UDP to validate the checksum. When too many packets are queued to the IP input process,
the router starts Selective Packet Discard (SPD) mechanism that causes IP packets to be dropped.
Head-of-the-line blocking of the IP input process might occur in other nonL2TP configurations. A flush
Note
occurring on an input interface indicates that the SPD mechanism is discarding packets.
Using the cisco-avpair="lcp:interface-config" RADIUS Attribute
When you use the lcp:interface-config RADIUS attribute to reconfigure the virtual access subscriber
interface, scaling decreases on the Cisco ASR 1000 Series Router for the following reasons:
•
•
Cisco ASR 1000 Series Aggregation Services Routers Software Configuration Guide
6-6
The lcp:interface-config command syntax includes an IOS interface configuration command. This
command is any valid IOS command that can be applied to an interface. When the
lcp:interface-config attribute is downloaded from the RADIUS server to the Cisco ASR 1000
Series Router, the command parser is activated to configure the interface according to AV-pair,
determining if the option is valid and then applying the configuration to the virtual access interface
(VAI).
The lcp:interface-config command degrades the call rate.
Chapter 6
Broadband Scalability and Performance
OL-16506-10