Cisco Systems OL-4387-02 Manuel d'utilisateur Page 1

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

xCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideDocument ConventionsNote This guide also includes a

GlossaryGL-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02PVPPermanent virtual path. Virtual path that consists of

GlossaryGL-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02TTCPConnection-oriented transport layer protocol that pro

GlossaryGL-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02XxDSLVarious types of digital subscriber lines. Examples

IN-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02INDEXAaaa group server radius command 6-4AAA servers, proxy servi

IndexIN-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02download exclude-profile 6-8no ssg enable force-cleanup 11-5

IndexIN-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02network-side 9-3transparent passthrough 9-1Internet Protocol

IndexIN-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02PPPoEdefinitionG-3PPPoEoA, definition G-3PPPoE over Ethernet

IndexIN-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Port-Bundle Host Key 6-6, 6-8Prepaid 6-4Service-Defined Cook

IndexIN-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02interfaces 1-3, 9-1, 9-3, 9-4logon and logoff 3-1network acc

IndexIN-7Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02VPI G-5VPI/VCIimplementation notesB-3service profiles 11-1su

xiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideRelated DocumentationCaution Means reader be carefu

IndexIN-8Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02

xiiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideDocumentation FeedbackDocumentation CD-ROMCisco do

xiiiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideObtaining Technical AssistanceCisco TAC WebsiteTh

xivCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideObtaining Additional Publications and InformationO

CHAPTER1-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-021Service Selection Gateway OverviewThe Service Selection Ga

1-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewService Selection

1-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewService Selection

1-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewSupported SSG Fea

1-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewSSG Restrictions•

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMM

1-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewSSG Prerequisites

1-7Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewSSG Architecture

1-8Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 1 Service Selection Gateway OverviewSSG Architecture

CHAPTER2-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-022Scalability and PerformanceThe infrastructure of the servi

2-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 2 Scalability and PerformanceLimitations and Restrict

CHAPTER3-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-023SSG Logon and LogoffThe Cisco 10000 series router supports

3-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 3 SSG Logon and LogoffSSG AutologoffSSG AutologoffThe

3-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 3 SSG Logon and LogoffSSG Prepaid Idle TimeoutConfigu

3-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 3 SSG Logon and LogoffSSG Prepaid Idle TimeoutService

3-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 3 SSG Logon and LogoffSSG Prepaid Idle TimeoutRestric

iiiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02CONTENTSAbout This Guide ixAudience ixDocument Organization ixDocu

3-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 3 SSG Logon and LogoffSSG Session and Idle TimeoutExa

CHAPTER4-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-024Authentication and AccountingThe Cisco 10000 series router

4-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 4 Authentication and AccountingRADIUS Accounting Reco

4-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 4 Authentication and AccountingRADIUS Accounting Reco

4-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 4 Authentication and AccountingRADIUS Accounting Reco

CHAPTER5-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-025Service Selection MethodsThe Cisco 10000 series router sup

5-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 5 Service Selection MethodsWeb Service SelectionRestr

5-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 5 Service Selection MethodsWeb Service SelectionSESM

5-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 5 Service Selection MethodsWeb Service Selection

CHAPTER6-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-026Service ConnectionThe Cisco 10000 series router supports t

ContentsivCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Configuration of SSG Autologoff 3-2Configuration Example fo

6-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG AutoDomainYou can configure S

6-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG AutoDomainExample 6-1 SSG Aut

6-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG PrepaidSSG PrepaidThe SSG Pre

6-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG Open GardenConfiguration Exam

6-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG Port-Bundle Host KeyRestricti

6-7Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionSSG Port-Bundle Host KeyFor each

6-8Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionExclude NetworksPrerequisites for

6-9Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionMutually Exclusive Service Select

6-10Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 6 Service ConnectionMutually Exclusive Service Selec

CHAPTER7-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-027Service Profiles and Cached Service ProfilesThe RADIUS ser

ContentsvCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Restrictions for SSG Open Garden 6-6Configuration of SSG Ope

7-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 7 Service Profiles and Cached Service ProfilesService

7-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 7 Service Profiles and Cached Service ProfilesService

7-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 7 Service Profiles and Cached Service ProfilesCached

7-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 7 Service Profiles and Cached Service ProfilesCached

7-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 7 Service Profiles and Cached Service ProfilesCached

CHAPTER8-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-028SSG Hierarchical PolicingThe SSG Hierarchical Policing fea

8-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 8 SSG Hierarchical PolicingRestrictions for SSG Hiera

8-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 8 SSG Hierarchical PolicingConfiguration Examples for

8-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 8 SSG Hierarchical PolicingConfiguration Examples for

CHAPTER9-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-029Interface ConfigurationWhen an interface is configured as

ContentsviCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02CHAPTER 9 Interface Configuration 9-1Transparent Passthroug

9-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 9 Interface ConfigurationTransparent PassthroughAcces

9-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 9 Interface ConfigurationMulticast Protocols on SSG I

9-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 9 Interface ConfigurationMulticast Protocols on SSG I

CHAPTER10-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-0210SSG TCP RedirectThe SSG TCP Redirect feature redirects c

10-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectThe SSG TCP Redirect feature alwa

10-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectFigure 10-1 Restricting Access to

10-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectTypically, if a service is connec

10-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectThe following sections describe t

10-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectConfiguring SSG TCP RedirectTo co

10-7Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectConfiguration Examples for SSG TC

ContentsviiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Configuration of Packet Filtering 11-5Configuration Exampl

10-8Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 10 SSG TCP RedirectConfiguration Example for Port Li

CHAPTER11-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-0211Miscellaneous SSG FeaturesThis chapter describes the fol

11-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesRADIUS Virtual Circuit

11-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesPacket FilteringConfigu

11-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesPacket FilteringDownstr

11-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG UnconfigConfigurati

11-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG UnconfigPrerequisit

11-7Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for Ov

11-8Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for Ov

11-9Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for Ov

ContentsviiiCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02

11-10Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for O

11-11Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for O

11-12Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 11 Miscellaneous SSG FeaturesSSG Enhancements for O

CHAPTER12-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-0212Monitoring and Maintaining SSGTo monitor and maintain SS

12-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 12 Monitoring and Maintaining SSGTroubleshooting RAD

12-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 12 Monitoring and Maintaining SSGMonitoring the Para

12-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Chapter 12 Monitoring and Maintaining SSGMonitoring the Para

A-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02APPENDIXASSG Configuration ExampleExample A-1 is a sample SSG conf

A-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix A SSG Configuration ExampleExample A-1 Cisco 10000 R

A-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix A SSG Configuration Examplessg accounting interval 3

ixCisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02About This GuideThis guide provides information about the Service S

A-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix A SSG Configuration Exampleinterface FastEthernet0/0

A-5Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix A SSG Configuration Exampleinterface ATM8/0/1no ip a

A-6Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix A SSG Configuration Example exec-timeout 0 0 passwor

B-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02APPENDIXBSSG Implementation NotesTable B-1 provides information ab

B-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix B SSG Implementation NotesLocal Forwarding Cannot be

B-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix B SSG Implementation NotesRADIUS Proxy Not Supported

B-4Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Appendix B SSG Implementation Notes

GL-1Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02GLOSSARYAauthenticationA security feature that allows access to i

GlossaryGL-2Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02EencapsulationThe technique used by layered protocols in

GlossaryGL-3Cisco 10000 Series Router Service Selection Gateway Configuration GuideOL-4387-02Ppermanent virtual circuitA fixed virtual circuit between