Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /home/newdedyk/domains/bkmanuals.com/public_html/includes/pages/manual_inc.php on line 26
Cisco Systems OL-4387-02 manuale d’uso - BKManuals

Cisco Systems OL-4387-02 manuale d’uso

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110

Vai alla pagina of

Un buon manuale d’uso

Le regole impongono al rivenditore l'obbligo di fornire all'acquirente, insieme alle merci, il manuale d’uso Cisco Systems OL-4387-02. La mancanza del manuale d’uso o le informazioni errate fornite al consumatore sono la base di una denuncia in caso di inosservanza del dispositivo con il contratto. Secondo la legge, l’inclusione del manuale d’uso in una forma diversa da quella cartacea è permessa, che viene spesso utilizzato recentemente, includendo una forma grafica o elettronica Cisco Systems OL-4387-02 o video didattici per gli utenti. La condizione è il suo carattere leggibile e comprensibile.

Che cosa è il manuale d’uso?

La parola deriva dal latino "instructio", cioè organizzare. Così, il manuale d’uso Cisco Systems OL-4387-02 descrive le fasi del procedimento. Lo scopo del manuale d’uso è istruire, facilitare lo avviamento, l'uso di attrezzature o l’esecuzione di determinate azioni. Il manuale è una raccolta di informazioni sull'oggetto/servizio, un suggerimento.

Purtroppo, pochi utenti prendono il tempo di leggere il manuale d’uso, e un buono manuale non solo permette di conoscere una serie di funzionalità aggiuntive del dispositivo acquistato, ma anche evitare la maggioranza dei guasti.

Quindi cosa dovrebbe contenere il manuale perfetto?

Innanzitutto, il manuale d’uso Cisco Systems OL-4387-02 dovrebbe contenere:
- informazioni sui dati tecnici del dispositivo Cisco Systems OL-4387-02
- nome del fabbricante e anno di fabbricazione Cisco Systems OL-4387-02
- istruzioni per l'uso, la regolazione e la manutenzione delle attrezzature Cisco Systems OL-4387-02
- segnaletica di sicurezza e certificati che confermano la conformità con le norme pertinenti

Perché non leggiamo i manuali d’uso?

Generalmente questo è dovuto alla mancanza di tempo e certezza per quanto riguarda la funzionalità specifica delle attrezzature acquistate. Purtroppo, la connessione e l’avvio Cisco Systems OL-4387-02 non sono sufficienti. Questo manuale contiene una serie di linee guida per funzionalità specifiche, la sicurezza, metodi di manutenzione (anche i mezzi che dovrebbero essere usati), eventuali difetti Cisco Systems OL-4387-02 e modi per risolvere i problemi più comuni durante l'uso. Infine, il manuale contiene le coordinate del servizio Cisco Systems in assenza dell'efficacia delle soluzioni proposte. Attualmente, i manuali d’uso sotto forma di animazioni interessanti e video didattici che sono migliori che la brochure suscitano un interesse considerevole. Questo tipo di manuale permette all'utente di visualizzare tutto il video didattico senza saltare le specifiche e complicate descrizioni tecniche Cisco Systems OL-4387-02, come nel caso della versione cartacea.

Perché leggere il manuale d’uso?

Prima di tutto, contiene la risposta sulla struttura, le possibilità del dispositivo Cisco Systems OL-4387-02, l'uso di vari accessori ed una serie di informazioni per sfruttare totalmente tutte le caratteristiche e servizi.

Dopo l'acquisto di successo di attrezzature/dispositivo, prendere un momento per familiarizzare con tutte le parti del manuale d'uso Cisco Systems OL-4387-02. Attualmente, sono preparati con cura e tradotti per essere comprensibili non solo per gli utenti, ma per svolgere la loro funzione di base di informazioni e di aiuto.

Sommario del manuale d’uso

  • Pagina 1

    Corporate He adquarters Cisc o Syst ems , Inc . 170 West Ta sman Drive San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 526-4100 C i s c o 1 0000 S e r i e s R o u t e r S e r v i c e S election Gate w a y Configuration Guide January 20 04 Text Pa rt Nu mber: OL-4387- 02[...]

  • Pagina 2

    THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI ON, AND RECOMMENDA TIONS IN T HIS MANUAL ARE BELIEVED TO BE ACCURATE BU T ARE PRESEN TED WITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TA KE FULL RESPONSIBILITY FOR THEIR AP PLICATION OF ANY PR[...]

  • Pagina 3

    iii Cisco 10000 Seri es Router Service Selection Gateway Configurat ion Guide OL-4387-02 CONTEN TS About Th is Guide ix Audienc e ix Document Organi zation ix Document Convent ions x Relat ed D ocum ent atio n xi Obtain ing Docu mentati on xi Cisco. com xi Document ation C D-ROM xii Orderi ng Documenta tion xii Document ation F eedback xii Obtain i[...]

  • Pagina 4

    Cont ent s iv Cisco 10000 Ser ies Router Ser vice Selecti on Gateway Confi guration Guid e OL-4387-02 Config uratio n of SSG Auto logoff 3-2 Config uratio n Exampl e for SSG Autol ogoff 3-3 SSG Prepai d Idle Timeou t 3-3 Servic e Author izati on 3-4 Servic e Reaut horizat ion 3-4 Restri ctions for S SG Pr epaid I dle Ti meout 3-5 Prereq uisite s fo[...]

  • Pagina 5

    Content s v Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Restri ctions for SSG Open Gard en 6-6 Config uration of SSG Open Ga rden 6-6 Config uration Exampl e for SSG Open Gar den 6-6 SSG Port- Bundle Hos t Key 6-6 Restri ctions for SSG Port- Bundle Hos t Key 6-7 Prereq uisite s for SSG Po rt-B undle Host [...]

  • Pagina 6

    Cont ent s vi Cisco 10000 Ser ies Router Ser vice Selecti on Gateway Confi guration Guid e OL-4387-02 CHAPTER 9 Interf ace Configur ation 9-1 Transp arent Passth rough 9-1 Access Si de Inter faces 9-2 Network Si de Inter faces 9-3 Restri ctions of Trans parent Pa ssthrou gh 9-3 Config urati on of Tran sparent Passth rough 9-3 Multic ast Pro tocols [...]

  • Pagina 7

    Content s vii Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Config urati on of Pack et Filte ring 11-5 Config urati on Exampl e for Pac ket Filt ering 11 -5 SSG U nconfig 11-5 Restri ctions for SSG Unco nfig 11-5 Prereq uisite s for SSG Unc onfig 11-6 Config uration of SSG Uncon fig 11-6 Config uration Exam[...]

  • Pagina 8

    Cont ent s viii Cisco 10000 Ser ies Router Ser vice Selecti on Gateway Confi guration Guid e OL-4387-02[...]

  • Pagina 9

    ix Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 About This Guide This gu ide pr ovides in forma tion abo ut th e Ser vice Sel ection Gateway (SSG) f eat ures of the C isco 10 000 Series Rou ter . The SSG feature s are sup ported in Cis co IOS Relea se 12.2( 16)BX and late r relea ses. Audience Thi s guid e[...]

  • Pagina 10

    x Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 About Thi s Guide Document Conventi ons Note Th is guide also incl udes a gl ossary of t erms use d in the doc ument a nd an ind ex to help you loc ate topi cs. Document Co nventions This guid e uses th e following conv enti ons: • Bold is used f or comman d[...]

  • Pagina 11

    xi Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 About Thi s Guide Relat ed Docume ntation Cautio n Means re a d e r b e c a re f ul . In this situation, you might do somethin g that could result in equipment dam age or loss of dat a. War ni n g Means danger . Y ou are in a situation that could cause bodily[...]

  • Pagina 12

    xii Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 About Thi s Guide Docum entation Fe edback Documenta tion CD-ROM Cisco documentati on and additio nal literature are a v ailable in a Cisco Documentation CD-R OM packag e, w hich ma y have shipped with your produ ct. The Do cume ntati on CD-ROM is upd ated r[...]

  • Pagina 13

    xiii Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 About Thi s Guide Obtaining Technical Assistance Cisco TAC W ebsite The Cisco T A C website provides onl ine docume nts and to ols for troub leshoot ing and re solving technical issues wi th Ci sco pr oducts and te chnolo gies . The C isco T A C web site is[...]

  • Pagina 14

    xiv Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 About Thi s Guide Obtainin g Addi tional Pub lications and Informat ion Obtaining Ad ditional Publication s and Informatio n Informa tion ab out Cisco pro ducts, t echnologi es, and ne twork soluti ons is av ailable from various online and printe d source s.[...]

  • Pagina 15

    C HAPTER 1-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 1 Service Selection Gateway Overview The Service Selec tion Gate way feature, a v ailable in Cisco IOS Release 12.2(16)BX or later , o f fers a switching solu tion to service pro vider s. W orking in conjuncti on with the Cisco Subscrib er Edge Serv[...]

  • Pagina 16

    1-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 1 S ervice Selection Gateway Overview Service Selec tion Gateway Figur e 1 -1 SSG T opology Ex ample Note Th e Cisco 1000 0 series rou ter does not supp ort tunnel ing of SSG user s. The Cisc o 100 00 ser ies ro uter adds the Open Ga rden and default[...]

  • Pagina 17

    1-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 Service Sele ction Ga teway O verview Service Selection Gateway Default Network The defau lt network is a loca tion that SSG allo ws u nauthentic ated users to acc ess. The default netw ork is a sin gle IP addre ss or subn et, t ypical ly the I P a[...]

  • Pagina 18

    1-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 1 S ervice Selection Gateway Overview Supported SSG Feature s Supported SSG Features The C isco 10 000 s eries r outer suppo rts the follo wing SSG feat ures and function ality: • SSG Logo n and L ogoff, page 3-1 • Authent icati on and Account in[...]

  • Pagina 19

    1-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 Service Sele ction Ga teway O verview SSG Re stric tions • The Cisco 100 00 router’ s SSG software and forwarding softw are handle multiple us ers attached to a single Cisco IOS softw are interf ace in dif ferent w ays, which could res ult in u[...]

  • Pagina 20

    1-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 1 S ervice Selection Gateway Overview SSG Prerequisi tes SSG Prerequisites The SSG featur e has the follo wing prereq uisites : • The Cisco 1000 0 series rou ter mu st be running Cisc o IOS Release 1 2.2(16)BX or later . • The perfo rma nce ro ut[...]

  • Pagina 21

    1-7 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 Service Sele ction Ga teway O verview SSG Archit ecture Mo del In Figure 1-2 , subs cribers access the SESM web po rtal appl ication u sing an y web b row ser on a v ariety of devices (su ch as a desk top co mputer over DSL). The Cisco 10000 se rie[...]

  • Pagina 22

    1-8 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 1 S ervice Selection Gateway Overview SSG Ar chitecture M odel[...]

  • Pagina 23

    C HAPTER 2-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 2 Scalability and Performance The inf rastructure of the serv ice prov ider mu st be capable of support ing the se rvices the enterprise custom er or Intern et service p rovid er (ISP) want s to of fer its subs cribers. It must also be able to scale[...]

  • Pagina 24

    2-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 2 Scala bility and Performance Limitati ons and Rest riction s No w , consider th e follo wing re vised service defin itions in which two dif f erent servic es are def ined. These service de finitio ns allo w all users to conne ct to the Standard ser[...]

  • Pagina 25

    C HAPTER 3-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 3 SSG Logon and Logoff The Ci sco 1000 0 se ries rou ter sup ports the foll owing SSG featu res for logon a nd log off related functions: • Single Host Lo gon, pag e 3-1 • SSG Autolog off, page 3- 2 • SSG Prepai d Idle T imeou t, page 3-3 • [...]

  • Pagina 26

    3-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 3 S SG Logon and L ogoff SSG Auto log off SSG Autologoff The SS G Auto log off feature en ab les S SG to verif y conne ctivity w ith eac h host. SSG che cks the st atus of the connec tion with e ach hos t at configured inte rvals. If SSG find s that [...]

  • Pagina 27

    3-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 3 SSG Logon and Logoff SSG Prep aid Idl e Timeout Configuration Example for SSG Autologoff Exam ple 3-1 shows ho w to enable autologo ff with ARP ping. Example 3 -1 SSG A utolog of f Using ARP Ping ssg auto-logoff arp interval 60 Exam ple 3-2 shows h[...]

  • Pagina 28

    3-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 3 S SG Logon and L ogoff SSG Prepaid Idle Ti meout Service Authorization SSG sends a service aut horization req uest to the billing serv er upon initial servic e authorizatio n. Explicit service a uthorizat ion is req uired when e ver a user attempts[...]

  • Pagina 29

    3-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 3 SSG Logon and Logoff SSG Prep aid Idl e Timeout Restrictions for SSG Prepa id Idle Timeout The SSG Prepaid I dle T imeout feat ure h as the f ollo wing restri ctions: • The Ci sco 10000 router suppo rts only time -based SSG Prepa id for a servic [...]

  • Pagina 30

    3-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 3 S SG Logon and L ogoff SSG Session an d Idle Timeout Exam ple 3-5 sho ws ho w to conf igure the SSG TCP Redir ect fea ture f or a sp ecif ic serv ice. Th e comma nds redi rect all prepaid s ervice tr af fi c to the ca pti v e porta l group called &[...]

  • Pagina 31

    C HAPTER 4-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 4 Authentic ation and Accou nting The C isco 10 000 seri es r outer supp orts th e follo wing SSG f eatures for authentic ation a nd acc ountin g related f unctions: • SSG Full Username RADIUS Attrib ute, page 4-1 • RADIUS Acco unting Record s, [...]

  • Pagina 32

    4-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 4 A uthentication and Accounting RADIUS Ac counting Records RADIUS Accounting Records SSG sends acc ounting reco rds with the associa ted attrib utes to the RADIUS acco unting serv er when the follo w ing ev ents occu r: • Account Login and Lo gout[...]

  • Pagina 33

    4-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 4 Authenticati on and Acco unting RADIUS Accounting Re cords Service C onnectio n and Termi nation SSG also s ends a RADI US accoun ting-req uest reco rd to t he local RAD IUS serv er w hen a use r access es or te rminates a servic e. The Acct-Stat u[...]

  • Pagina 34

    4-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 4 A uthentication and Accounting RADIUS Ac counting Records Exam ple 4-6 shows the informat ion conta ined in an accounti ng-stop re cord for ser vic e termina tion. Example 4 -6 RADIUS A ccounting-St op Recor d f or Service T er mina tion NAS-IP-Add[...]

  • Pagina 35

    C HAPTER 5-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 5 Service Selection Methods The Cisco 100 00 series ro uter supports the follo wing se rvice selec tion methods: • PPP T erminated Aggregation, page 5-1 • PT A-Mul tidomain, page 5-1 • W eb Se rvice Sele ction, pa ge 5-2 This c hapter d escrib[...]

  • Pagina 36

    5-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 5 Service Sele ction Met hods Web Service Sel ection Restrictions for PTA-MD A user cannot co nnect to multiple service s that are simultaneo usly in differ ent VRFs. Web Service Selection W eb service selection en ables users to concurrently acc ess[...]

  • Pagina 37

    5-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 5 Serv ice Selection Methods Web Service Selection SESM and SSG Performa nce Packets sent betwe en the SSG a nd the SE SM might re quire p rocessing by th e Cisco 1 0000 ro uter Rou te Process or (RP) , instea d of the par allel ex pres s forwar ding[...]

  • Pagina 38

    5-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 5 Service Sele ction Met hods Web Service Sel ection[...]

  • Pagina 39

    C HAPTER 6-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 6 Service Connection The Ci sco 10 000 seri es ro uter s upport s the follo wing SSG feat ures for ser vice co nnecti on: • SSG AutoD omain, page 6- 1 • SSG Prepaid, page 6-4 • SSG Open Gard en, page 6-5 • SSG Port-Bundle Host K ey , page 6-[...]

  • Pagina 40

    6-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 6 Service C onnect ion SSG Auto Dom ain Y ou c an con figure SSG Au toDoma in in basic or extend ed mode . In basic mode, the AutoDoma in pro file do wnloaded from the AAA ser ver is a se rvice prof ile. T his service p rofi le is a proxy o r VPDN se[...]

  • Pagina 41

    6-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 6 Serv ice Connect ion SSG AutoDomain Example 6 -1 SSG A utoDomain ssg auto-domain mode extended select called-station-id nat user-address download exclude-profile ssg-auto-domain-exclude-profile cisco exclude apn cisco exclude domain motorola Exampl[...]

  • Pagina 42

    6-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 6 Service C onnect ion SSG Prepaid SSG Prepaid The SSG Pr epaid feat ure a llo ws a use r to conn ect to a ser vice if the use r has pr epaid f or the service. SSG checks a subscrib er’ s av ailable credit to determine w hether to co nnect th e sub[...]

  • Pagina 43

    6-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 6 Serv ice Connect ion SSG Open Garden Configuration Example for SSG Prepaid Exam ple 6-4 configure s a global p repa id server group named ssg_prepaid and attach es the server gr oup to the SSG. Example 6 -4 At tachi ng a Global Pr epaid Server G r [...]

  • Pagina 44

    6-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 6 Service C onnect ion SSG Port-Bund le Host Key Restrictions for SSG Open Garden The SSG Open Gar den featur e has the follo wing res trictio ns: • RADIUS acc ounting records are no t created for Open Gard en service s. • The C isco 1000 0 route[...]

  • Pagina 45

    6-7 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 6 Serv ice Connect ion SSG Po rt-Bun dle Ho st Ke y For each T CP session betw een a subs criber and t he SESM server , SSG use s one port fr om t he port bundle as the port map. Port mappi ngs are flagged as eligible f or reuse on the basis of inact[...]

  • Pagina 46

    6-8 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 6 Service C onnect ion Exclude N etworks Prerequisites for SSG Port-Bundle Host Key The SSG Port-Bun dle Host K ey feature ha s the following requ ireme nts: • The Ci sco 1000 0 route r support s the SSG Port-B undle H ost Key feature f or Cisco SE[...]

  • Pagina 47

    6-9 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 6 Serv ice Connect ion Mutually Exclusive Service Selection A SESM configurat ion op tion c ontrol s the SESM action when a su bscriber is a lread y logge d int o one service and the n selects another service in the group: • SESM can a utomaticall [...]

  • Pagina 48

    6-10 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 6 Service C onnect ion Mutually Exclusive Ser vice Selecti on[...]

  • Pagina 49

    C HAPTER 7-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 7 Service Profiles and Cached Service Profiles The RA DIUS se rver or the SESM downloa ds servi ce pro files to the Ci sco 1000 0 ser ies rou ter ( SSG node) as needed . T ypically , the SSG remov es the servi ce prof ile from memory afte r the user[...]

  • Pagina 50

    7-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 7 Service Profiles and C ached Service Profiles Service Profi les Upstream Acce ss Con trol List Specif ies ei ther an IOS standard acc ess contro l list or a n exte nded acc ess control li st to be applied to upstrea m traffic coming from the user .[...]

  • Pagina 51

    7-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 7 Serv ice Profiles and Cached Serv ice Profiles Service Profiles Service-Defined Cookie Enabl es you to includ e user -def ined inf ormati on in RADIUS aut henticati on and acco unting reque sts. Service-Info = “ Vstrin g ” Note • SSG does not[...]

  • Pagina 52

    7-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 7 Service Profiles and C ached Service Profiles Cached S ervice Profiles If the SESM web applica tion is designed to use HTML frames, then this attribu te also specifi es whether the serv ice is displa yed in a ne w bro wser windo w or in a fram e in[...]

  • Pagina 53

    7-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 7 Serv ice Profiles and Cached Serv ice Profiles Cached Service Profiles • If the servi ce prof ile e xists and it is ac ti ve, SSG us es the service p rofi le to process th e logon request. • If the ser vice prof ile e xists, b ut it is inac ti [...]

  • Pagina 54

    7-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 7 Service Profiles and C ached Service Profiles Cached S ervice Profiles[...]

  • Pagina 55

    C HAPTER 8-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 8 SSG Hierarchical Policing The SSG Hierarchical Po licing feature ensure s that a subscriber does not utilize additio nal bandwidth for o verall ser vice or for a specifi c service that is outside the bounds of the subscriber’ s contract with the[...]

  • Pagina 56

    8-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 8 SSG Hierar chical P olicing Restrictions for SSG Hie rarchical Policing Restrictions for SSG Hierarchical Policing The SS G Hier arch ical Polic ing feat ure has the fo llowing restric tions : • When using SSG hierarchical policin g on Cisco 1000[...]

  • Pagina 57

    8-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 8 SSG Hierarc hical Policing Configuration Examples for SSG Hierarchical Policing Configuration E xamples for SSG Hiera rchical Policing Example 8-1 Configur in g a RADIUS Service Profile for P er -Session Pol icing Router(config)# local-profile cisc[...]

  • Pagina 58

    8-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 8 SSG Hierar chical P olicing Configur ation Examp les for SSG Hierar chical Pol icing[...]

  • Pagina 59

    C HAPTER 9-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 9 Interface Configuration When an inter face i s conf igured as a n SSG uplink or d own link interf ace, non-SSG traff ic is not allo wed to pass through th e interf ace. Y ou conf igure inte rfaces tha t are connecte d to services as uplink interf [...]

  • Pagina 60

    9-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 9 Interface Co nfiguration Transpar ent Passt hrough Access S ide Interfa ces For access side int erfaces, t he interf ace t ype determines t he method used to indicate an interfa ce as SSG or transparent passthroug h. If you enable SSG glob ally , S[...]

  • Pagina 61

    9-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 9 Interface Configurat ion Multicast Protocols on SSG Interfaces Network Side Interfaces For network side inte rfaces, SSG up link interfa ces can ac cept and for ward both SSG traff ic and transp arent passth rough tr af fic . The SSG softw are clas[...]

  • Pagina 62

    9-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 9 Interface Co nfiguration Multicas t Protocols on SSG Interfa ces Configuration of Multicast Pr otocols on SSG Interfaces For SSG to fo rward mu lticast pack ets to the Cisco IOS routing engine, conf igure the follo wing: • Conf igure the interf a[...]

  • Pagina 63

    C HAPTER 10-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 10 SSG TCP Redirect The SSG TCP Red irect feature r edirect s cert ain user pack ets to an a lternati v e loca tion th at can handle the pack ets in a suita ble manner . This feature w orks in c onjunction with th e SESM web int erface. SSG TCP Red[...]

  • Pagina 64

    10-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 10 SSG TC P Redi rect The SSG T CP Redire ct feat ure always send s redire cted packets to a capt i ve portal group tha t consist s of one or more servers. SSG selects one server from the gro up in a rou nd-robin fashion to rece i ve the redir ected[...]

  • Pagina 65

    10-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 10 SSG TCP Redirect Figur e 1 0-1 Restr icting Access t o Networ ks w ithin A uthor ized Services The fo llowing describes th e behavior of redi rection for unauth oriz ed service s: • If a pack et arri ves f rom an unautho rized SSG user o r it i[...]

  • Pagina 66

    10-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 10 SSG TC P Redi rect T ypically , if a serv ice is con nected, SSG fo rwar ds pack ets to a user and pa cke ts from a user e ve n if the packets do not mat ch the pro tocol and TC P ports speci fied for redirect ion. Howev er , the behavior of init[...]

  • Pagina 67

    10-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 10 SSG TCP Redirect The foll owin g sections describe the se tasks in more deta il: • Configuration Consid eration s for SSG T CP Redir ect, pa ge 10-5 • Conf iguring Po rt-Based Redi rection for U nauthe nticat ed Use rs, pag e 10- 5 • Limiti[...]

  • Pagina 68

    10-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 10 SSG TC P Redi rect Configuring SSG TC P Redirect T o c onfigure SSG TCP R edire ct, use the f ollowing co mmand s beginnin g in glob al configurati on mod e: For more detailed informatio n, refer to the SSG TCP Redir e ct for Services , Release 1[...]

  • Pagina 69

    10-7 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 10 SSG TCP Redirect Configuration Example s for SSG TCP R edirect This sec tion pro vides the follo wing examp le conf igurations: • Configurati on Exam ple fo r Ser ver Groups, pag e 10-7 • Configurati on Exampl e for Network Lists, pag e 10-7 [...]

  • Pagina 70

    10-8 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 10 SSG TC P Redi rect Configuration Example for Po rt Lists Exam ple 10 -5 sh o ws how to configure a port l ist named ports fo r TCP redi rectio n of HTTP p ackets and associ ate the po rt list to the serv er g roups na med servi ceRedir ect1 and i[...]

  • Pagina 71

    C HAPTER 11-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 11 Miscellaneous SSG Fe atures This chapte r describes the follo wing SSG feature s: • VPI/VCI St atic Bindin g to a Service Profile, page 11-1 • RADIUS V irt ual C ircui t Loggin g, pa ge 11 -2 • AAA Server Gr oup Support fo r Proxy Service [...]

  • Pagina 72

    11-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures RADIUS Virtua l Circuit Logging RADIUS Virtual Circuit Logging RADIUS V irtual Circuit ( VC) Logging extends and modifies the RADIUS network access server (NAS) port field to ca rry V PI/VCI in format ion. With RADI [...]

  • Pagina 73

    11-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 1 Miscellaneo us SSG Feat ures Packet Fil tering Configuration of AAA Server Gr oup Support for Proxy Services T o configure AAA Serv er Group Supp ort for Proxy Services, use the RADIUS Server attribute . This Service-In fo ve ndor- specif ic att[...]

  • Pagina 74

    11-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures Packet Fi ltering Downstrea m Access Control List—o utacl Specif ies either a Cisco I OS standa rd A CL or an e xtended A CL to be appl ied to d o wnstre am traf fic goin g to the user . Cisco-AVpair = "ip:out[...]

  • Pagina 75

    11-5 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 1 Miscellaneo us SSG Feat ures SSG Unco nfig Configuration of Packet Filt ering T o conf igur e SSG A CLs, us e the foll o wing Cisco -A V pair attrib utes: • Do wnstream Acces s Contro l List (outac l) Cisco-AVpair = "ip:outacl [ # numbe r[...]

  • Pagina 76

    11-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures SSG Uncon fig Prerequisites for SSG Unconfig Y ou must en able SSG be fore you con f igure SSG Unconfig. Configuration of SSG Unconfig T o c onfigure SSG Unco nfig, perform any of the fol lowing option al tasks: • [...]

  • Pagina 77

    11-7 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 1 Miscellaneo us SSG Feat ures SSG Enh ancements for Overla pping S ervices SSG Enhancemen ts for Overlapping Services Ove rlapping service s are services for which the rou te pref ix of one service match es or is contained within the rout e prefi[...]

  • Pagina 78

    11-8 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures SSG Enhanc ements for Overlapping Services Because network se ts for services m ust be uniqu e, the f ollow ing netwo rk sets are d efi ned internally: Set1 0.0.0.0 /0.0.0. 0 Set2 10.58 .253.0/255 .255. 255.0 Set3 10[...]

  • Pagina 79

    11-9 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 1 Miscellaneo us SSG Feat ures SSG Enh ancements for Overla pping S ervices The serv ice translat ion mech anism then in ternally con verts the ser vices to t he fol lo wing sets: Serv ice B ronze _25 6 Set1 Service Sil ver_512 Set1 and set2 The s[...]

  • Pagina 80

    11-10 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures SSG Enhanc ements for Overlapping Services Configuration of Service Translation T o enable ser vice trans lation on the rou ter , enter the fol low ing comm and in gl obal con fi guration mode: Configuration Example[...]

  • Pagina 81

    11-11 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 1 1 Miscellaneo us SSG Feat ures SSG Enh ancements for Overla pping S ervices Service B_512 Set2, set3, and set4 Servic e C_2048 Set2, set3, and set4 Servic e D_1024 Set2 Expansio n of Service IDs The Cisco 10000 router us es service IDs to determi[...]

  • Pagina 82

    11-12 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapte r 11 Miscellane ous SSG F eatures SSG Enhanc ements for Overlapping Services Netw ork Set s: Set1 0.0.0.0 /0.0.0. 0 Set2 10.58.25 2.0/ 255.25 5.255. 0 Set3 10.58.25 3.0/ 255.25 5.255. 0 Set4 10.58.25 4.0/ 255.25 5.255. 0 Set5 10.58.10 2.6/ 255.25 5.[...]

  • Pagina 83

    C HAPTER 12-1 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 12 Monitoring and Maintaining SSG T o monitor and maintain SSG, use the follow ing commands in pr iv ilege d EXEC mode: Command Purpose Router# show ssg interface [ interface-number | brief ] Displays a list of all SSG interf aces, the bind directi[...]

  • Pagina 84

    12-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 12 Monitoring and Maintaining SSG Troubles hooting RA DIUS Troubleshooting RADIUS T o troubleshoot communic ation between the RADIUS server and SSG, enter the deb ug radius comm and in privileged EXEC mode. Per-Service Statistics The Ci sco 100 00 s[...]

  • Pagina 85

    12-3 Cisco 10000 S eries Router S ervice Selecti on Gateway Conf iguration Gui de OL-4387-02 Chapter 12 Moni toring and Mai ntaining SSG Monitoring the Parallel Express Forwarding Engine Monitoring the Pa rallel Exp ress Forwarding E ngine T o moni tor the parall el ex pre ss forw ard ing (PXF ) engi ne, us e the fol lo wi ng comm ands in pri vi le[...]

  • Pagina 86

    12-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Chapter 12 Monitoring and Maintaining SSG Monito ring the Para llel Expre ss Forw arding Engi ne[...]

  • Pagina 87

    A- 1 Cisco 10000 S eries Rout er Service Sel ection Gateway C onfigur ation Guide OL-4387-02 APPEND IX A SSG Configuration Example Exam ple A-1 is a sa mple SSG c onfiguration for the C isco 100 00 series router ba sed on t he topol ogy in Figure A-1 . The config uration in cludes AAA, PPP , SSG, and RADIUS. The SSG co nfig uration enables the Port[...]

  • Pagina 88

    A- 2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Appendix A SSG Con figurati on Example Example A -1 Cis co 1 00 0 0 Rout er SSG Configur ation ! version 12.2 no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone no servi[...]

  • Pagina 89

    A-3 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 Append ix A SSG Configuratio n Exampl e ssg accounting interval 300 ssg profile-cache ssg default-network 192.168.2.50 255.255.255.255 ssg service-password servicecisco ssg radius-helper auth-port 1812 acct-port 1813 ssg radius-helper key cisco ssg maxservic[...]

  • Pagina 90

    A- 4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Appendix A SSG Con figurati on Example interface FastEthernet0/0/0 description Connected to LAB Backbone ip address 192.168.2.60 255.255.255.0 no ip route-cache cef full-duplex ! interface GigabitEthernet1/0/0 no ip address no negotiation auto ! interface G[...]

  • Pagina 91

    A-5 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 Append ix A SSG Configuratio n Exampl e interface ATM8/0/1 no ip address shutdown no atm ilmi-keepalive ! interface ATM8/0/2 no ip address shutdown no atm ilmi-keepalive ! interface ATM8/0/3 no ip address shutdown no atm ilmi-keepalive ! interface Virtual-Te[...]

  • Pagina 92

    A- 6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Appendix A SSG Con figurati on Example exec-timeout 0 0 password lab ! ntp clock-period 17181406 ntp update-calendar end[...]

  • Pagina 93

    B-1 Cisco 10000 S eries Rout er Service Sel ection Gateway C onfigur ation Guide OL-4387-02 APPEND IX B SSG Implementation Notes Ta b l e B - 1 prov ides information about ho w SSG is implemented on the Cisco 10000 ser ies router. F or additional information about g eneral SSG limitations, see the “SSG Restrictions” section on page 1-4 , the ?[...]

  • Pagina 94

    B-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Appendix B SSG Implementation Notes Local F orw arding Cann ot be enable d or disa bled through th e CLI. Only sev en serv ices ( network sets ) can be bo und to an u plink inter face. If a service cannot be cre ated on the toaster , then no connection is cr[...]

  • Pagina 95

    B-3 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 Append ix B SSG Implemen tation N otes RADI US Proxy N ot Su ppor ted. Se r v i ce P r o fi l es MTU Size Attribute—In Directory Enabled Serv ice Se lection Subscription (DESS) mode, SESM does no t support the use o f the MTU Size attribute. Service-Define[...]

  • Pagina 96

    B-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 Appendix B SSG Implementation Notes[...]

  • Pagina 97

    GL-1 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 GLOSSAR Y A authentication A security feat ure that allows access to informa tion to be gr anted on an individual basis. B bandwidth The range of fr equenc ies a tra nsmission line or ch annel ca n car ry . The gr eater the ban dwidth, the greater the inf o[...]

  • Pagina 98

    Glos sary GL-2 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 E encaps ulation The techniq ue used by layered protoc ols in whic h a layer adds header in format ion to the pro tocol data unit (PDU) from t he layer abov e. Ethernet One of the most co mmon loca l area networ k (LAN) w iring sche mes, Ethe rnet[...]

  • Pagina 99

    Glossary GL-3 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 P permanent virtual circui t A fix ed virtua l circuit between two users. Th e public data netwo rk equi v alent of a leased lin e. No call setup or clea ring pr ocedur es are ne eded. point-to-point subinterfac e W ith point-to- point subin terfac[...]

  • Pagina 100

    Glos sary GL-4 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 PVP Permanent vir tual path. V irtual path that con sists of PVCs. PXF Pa ralle l Exp ress F orwar ding. Also re ferred to as fast forwar der . A pipelined, multiprocessor parallel packet engi ne, optim ized for fast packet for warding . R RADIUS [...]

  • Pagina 101

    Glossary GL-5 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 T TCP Connec tion-oriented tr ansport lay er protocol that pro vides reliabl e full-duple x data transmission. TCP is part of the T CP/IP protocol stack. turbo access control list A function of th e PXF pipeline tha t determines whet her a packet m[...]

  • Pagina 102

    Glos sary GL-6 Cisco 10000 Serie s Router Servic e Se lection Gate way Co nfiguration Guide OL-4387-02 X xDSL V arious t ypes o f digit al sub scrib er line s. Exam ples includ e ADSL, H DLS, an d VDSL.[...]

  • Pagina 103

    IN-1 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 INDEX A aaa gr oup ser ver ra dius co mmand 6-4 AAA ser vers, pr oxy serv ices 11-2, 11-3 acces s-side inter faces 9-2 accou nting for SS G 4-1 to 4-4 accou nting reco rds (RADIUS) 4-2, 4-3 Account Session Time (Att ribute 46) 3-4 Acct-In fo a ttribut e 6-9[...]

  • Pagina 104

    Index IN-2 Cisco 10000 Serie s Router Servi ce Selection Gate way Configuratio n Guide OL-4387-02 downl oa d exclud e-pro fil e 6-8 no ss g ena ble fo rce-clea nup 11-5 PXF 12-3 show pxf cpu ac cess-lists 12-3 pxf cpu buffe rs 12-3 pxf cp u cef 12-3 pxf cp u cef me mory 12-3 pxf cpu conte xt 12-3 pxf cpu mrou te 12-3 pxf cpu queu e 12-3 pxf cpu sch[...]

  • Pagina 105

    Inde x IN-3 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 network-si de 9-3 transparent pa ssthrough 9-1 Intern et Protocol G-2 ISP G-2 L L2TP implemen tation notes B-1 local fo rwarding, implementation notes B-2 logging in to SSG 3-1 logging o n to SSG se rvices 7-4, 7-5 login RADIUS 4-2 logon implemen tat[...]

  • Pagina 106

    Index IN-4 Cisco 10000 Serie s Router Servi ce Selection Gate way Configuratio n Guide OL-4387-02 PPPoE definition G- 3 PPPoEoA, definition G-3 PPPoE over Ethernet G-3 PPPoE over IEEE 802 .1Q VLAN definition G- 3 PPPoX G-3 PPP terminated aggregation definition G- 3 PPP terminated aggregation. See PTA PPP termina ted aggregation multidomai n. See PT[...]

  • Pagina 107

    Inde x IN-5 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 Port-Bun dle Host Ke y 6-6, 6-8 Prepaid 6-4 Servic e-Defin ed Co okie at tribute 7-3 Service De scription att ribute 7-3 servic e groups 6-8 service IDs, network sets 11-11, 11-12 Servic e Mode attribute 7-3 Service Ne xt-Hop G ateway attr ibute 7-3 [...]

  • Pagina 108

    Index IN-6 Cisco 10000 Serie s Router Servi ce Selection Gate way Configuratio n Guide OL-4387-02 interfac es 1-3, 9-1, 9-3, 9-4 logon a nd log off 3-1 network a ccess 6-8 Open Gard en 6-5, 6-6 open gard en G-2 packet f iltering 11-3, 11-4, 11-5 Port-Bun dle Host Ke y 6-6, 6-8 prepaid i dle timeout 3-3, 3-5, 3-6 prepaid serv ices 6-4, 6-5 protoc ol[...]

  • Pagina 109

    Inde x IN-7 Cisco 10000 Series R outer Ser vice Select ion Gateway Conf igurati on Guide OL-4387-02 VPI G-5 VPI/VCI implemen tation notes B-3 service prof iles 11-1 subscr ib er 11-2 VRF G-5 VSA definition G- 5 W web service sele ction 5-2 web sites acce ssing thr ough Open Gard en 6-5, 6-6 X xDSL G-6[...]

  • Pagina 110

    Index IN-8 Cisco 10000 Serie s Router Servi ce Selection Gate way Configuratio n Guide OL-4387-02[...]