Cisco Systems OL-4387-02 Manuel d'utilisateur Page 77
- Page / 110
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
11-7
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02
Chapter 11 Miscellaneous SSG Features
SSG Enhancements for Overlapping Services
SSG Enhancements for Overlapping Services
Overlapping services are services for which the route prefix of one service matches or is contained
within the route prefix of another service. For example, the service definition 172.16.253.0/24 overlaps
with the service definition 172.16.0.0/16 because the prefix 172.16 is contained in both definitions. The
definition 0.0.0.0/0 overlaps all other possible services.
In releases prior to Cisco IOS Release 12.2(16)BX2, the Cisco 10000 router does not allow users to be
subscribed to a service if that service overlaps another service to which a different user is subscribed.
To enable service providers to use existing overlapping definitions, the Cisco 10000 router provides the
following SSG enhancements:
• Service Translation—Translates overlapping service definitions to a set of non-overlapping service
definitions.
• Expansion of Service IDs—Expands the number of service IDs supported from seven to 15. The
router uses service IDs to determine which services a user is subscribed to and how to police the
user traffic.
For more information, see the following sections:
• Service Translation, page 11-7
• Expansion of Service IDs, page 11-11
Service Translation
The service translation mechanism translates overlapping service definitions to a set of non-overlapping
service definitions that are used internally to the router. Instead of using the service definitions that the
Cisco Subscriber Edge Services Manager (SESM) downloads, the router uses the translated network sets
to provide the desired behavior. A network set can contain a single unique prefix or multiple unique
prefixes.
To further clarify service translation for the Cisco 10000 router, consider the following example in which
services that are defined in SESM are converted to sets (for example, service networks). The
Cisco 10000 router uses these sets internally to provide the desired behavior. The following services are
defined in the example:
ssg bind service Default_256 <next hop ssg>
0.0.0.0/0.0.0.0
ssg bind service Bronze_256 <next hop ssg>
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
ssg bind service Silver_512 <next hop ssg>
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
10.58.102.6/255.255.255.255
ssg bind service Gold_2048 <next hop ssg>
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
10.58.102.6/255.255.255.255
ssg bind service Platinum_1024 <next hop ssg>
10.58.253.0/255.255.255.0
- Text Part Number: OL-4387-02 1
- CONTENTS 3
- 6 Service Connection 6-1 4
- Contents 5
- 9 Interface Configuration 9-1 6
- 10 SSG TCP Redirect 10-1 6
- Document Conventions 10
- Related Documentation 11
- Obtaining Documentation 11
- Documentation Feedback 12
- TAC Case Priority Definitions 13
- Cisco TAC Website 13
- Opening a TAC Case 13
- About This Guide 14
- Service Selection Gateway 15
- Default Network 17
- Access Protocols 17
- Supported SSG Features 18
- SSG Restrictions 18
- SSG Prerequisites 20
- SSG Architecture Model 20
- Scalability and Performance 23
- Limitations and Restrictions 24
- SSG Logon and Logoff 25
- SSG Autologoff 26
- SSG Prepaid Idle Timeout 27
- Service Authorization 28
- Service Reauthorization 28
- Example 3-4 SSG TCP Redirect 29
- SSG Session and Idle Timeout 30
- Authentication and Accounting 31
- RADIUS Accounting Records 32
- Service Selection Methods 35
- Web Service Selection 36
- SESM and SSG Performance 37
- Service Connection 39
- SSG AutoDomain 40
- Example 6-1 SSG AutoDomain 41
- SSG Prepaid 42
- SSG Open Garden 43
- SSG Port-Bundle Host Key 44
- Exclude Networks 46
- Service Profiles 49
- Cached Service Profiles 52
- SSG Hierarchical Policing 55
- Interface Configuration 59
- Access Side Interfaces 60
- Network Side Interfaces 61
- SSG TCP Redirect 63
- Initial Captivation 65
- Configuring SSG TCP Redirect 68
- Miscellaneous SSG Features 71
- Packet Filtering 73
- SSG Unconfig 75
- Configuration of SSG Unconfig 76
- Service Translation 77
- Service Definitions 80
- Internal Network Sets 80
- Services-to-Sets Conversion 80
- Expansion of Service IDs 81
- Network Sets: 82
- Troubleshooting RADIUS 84
- Per-Service Statistics 84
- SSG Configuration Example 87
- SSG Implementation Notes 93
- GLOSSARY 97
- Glossary 100
- OL-4387-02 100
Produits connexes et manuels pour Passerelles/contrôleurs Cisco Systems OL-4387-02
(12 pages)
(30 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.179 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels