...
aaa group server radius ibs-isg
server 172.16.18.10 auth-port 1812 acct-port 1813
ip radius source-interface GigabitEthernet0/2
...
aaa accounting network ibs-isg start-stop group ibs-isg
[ aaa server radius dynamic-author ]
client 172.16.18.10 server-key 7 1533180105240B020B037B0B010618
auth-type any
ignore session-key
ignore server-key
[ subscriber feature prepaid IBS]
...
method-list accounting ibs-isg
password cisco
[ Class-map ]
class-map type traffic match-any VAS
...
class type traffic default in-out
drop
[ aaa server radius dynamic-author ]
client 172.16.18.10 server-key 7 1533180105240B020B037B0B010618
auth-type any
ignore session-key
policy-map type control ISG ]
class type control always event session-start
1 authenticate aaa list ibs-isg ignore server-key
[ bba-group pppoe global ]
...
ppp authentication pap chap ms-chap-v2 ms-chap ibs-isg
ppp authorization ibs-isg
ppp accounting ibs-isg
ppp ipcp dns 193.178.200.3 217.218.127.127
service-policy type control ISG
[ access-list ]
ip access-list extended VAS
permit ip any host 87.204.180.29
permit ip host 87.204.180.29 any
ip access-list extended VOD
permit ip any host 172.16.5.5
permit ip host 172.16.5.5 any
permit ip any host 172.16.200.2
permit ip host 172.16.200.2 any
ip access-list extended FREE
permit ip any host 172.16.100.1
permit ip host 172.16.100.1 any
ip access-list extended INTERNET
permit ip any any
[ radius server ]
radius-server attribute 44 include-in-access-req default-vrf
...