Cisco Systems OL-4387-02 Uživatelský manuál Strana 17
- Strana / 110
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
1-3
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02
Chapter 1 Service Selection Gateway Overview
Service Selection Gateway
Default Network
The default network is a location that SSG allows unauthenticated users to access. The default network
is a single IP address or subnet, typically the IP address of the SESM application although other types
of servers can also be defined as the default network. The default network supports the port-bundle host
key.
The default network enables special processing of traffic to and from the default network. Because traffic
to and from SESM requires special processing and the Cisco 10000 series router cannot distinguish
between SESM and non-SESM traffic, we recommend that you define the SESM server as the default
network and place other servers in the Open Garden network.
Note Traffic to and from a non-SESM server does not require special processing.
The SSG typically forwards packets to and from the default network through the router’s PXF forwarding
engine. However, SSG also forwards default network traffic through the route processor (RP) as follows:
Packets from a User and Destined for the Default Network
If the port-bundle host key is:
• Enabled—SSG forwards the packets through the RP.
• Disabled—SSG forwards the packets through the PXF forwarding engine.
Packets from the Default Network and Destined for an SSG User
• SSG forwards the packets through the RP if either of the following conditions are met:
–
The port-bundle host key is enabled.
–
The port-bundle host key is disabled, TCP is the transport protocol, and the packets are
associated with an active TCP redirect mapping.
• Otherwise, SSG forwards the packets through the PXF forwarding engine.
Access Protocols
On the subscriber side of the network, the Cisco 10000 series router supports SSG features for the
following protocols and encapsulations:
• PPPoE
• PPPoA
• RBE
• RFC 2684 IP
On the network side, the router supports receiving SSG traffic on the following interface types:
• ATM PVCs and subinterfaces
• Ethernet interfaces and subinterfaces
• POS interfaces
• Serial and channelized interfaces
- Text Part Number: OL-4387-02 1
- CONTENTS 3
- 6 Service Connection 6-1 4
- Contents 5
- 9 Interface Configuration 9-1 6
- 10 SSG TCP Redirect 10-1 6
- Document Conventions 10
- Related Documentation 11
- Obtaining Documentation 11
- Documentation Feedback 12
- TAC Case Priority Definitions 13
- Cisco TAC Website 13
- Opening a TAC Case 13
- About This Guide 14
- Service Selection Gateway 15
- Default Network 17
- Access Protocols 17
- Supported SSG Features 18
- SSG Restrictions 18
- SSG Prerequisites 20
- SSG Architecture Model 20
- Scalability and Performance 23
- Limitations and Restrictions 24
- SSG Logon and Logoff 25
- SSG Autologoff 26
- SSG Prepaid Idle Timeout 27
- Service Authorization 28
- Service Reauthorization 28
- Example 3-4 SSG TCP Redirect 29
- SSG Session and Idle Timeout 30
- Authentication and Accounting 31
- RADIUS Accounting Records 32
- Service Selection Methods 35
- Web Service Selection 36
- SESM and SSG Performance 37
- Service Connection 39
- SSG AutoDomain 40
- Example 6-1 SSG AutoDomain 41
- SSG Prepaid 42
- SSG Open Garden 43
- SSG Port-Bundle Host Key 44
- Exclude Networks 46
- Service Profiles 49
- Cached Service Profiles 52
- SSG Hierarchical Policing 55
- Interface Configuration 59
- Access Side Interfaces 60
- Network Side Interfaces 61
- SSG TCP Redirect 63
- Initial Captivation 65
- Configuring SSG TCP Redirect 68
- Miscellaneous SSG Features 71
- Packet Filtering 73
- SSG Unconfig 75
- Configuration of SSG Unconfig 76
- Service Translation 77
- Service Definitions 80
- Internal Network Sets 80
- Services-to-Sets Conversion 80
- Expansion of Service IDs 81
- Network Sets: 82
- Troubleshooting RADIUS 84
- Per-Service Statistics 84
- SSG Configuration Example 87
- SSG Implementation Notes 93
- GLOSSARY 97
- Glossary 100
- OL-4387-02 100
Související produkty a manuály pro Brány / ovladače Cisco Systems OL-4387-02
(12 stránky)
(30 stránky)© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.067 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce