English dropdown-ico

Cisco Systems 3.5 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Cisco Systems 3.5, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Cisco Systems 3.5 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Cisco Systems 3.5. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Cisco Systems 3.5 should contain:
- informations concerning technical data of Cisco Systems 3.5
- name of the manufacturer and a year of construction of the Cisco Systems 3.5 item
- rules of operation, control and maintenance of the Cisco Systems 3.5 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Cisco Systems 3.5 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Cisco Systems 3.5, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Cisco Systems service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Cisco Systems 3.5.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Cisco Systems 3.5 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Corporate Headquarters Cisco Systems, In c. 170 West Tasman Drive San Jose, CA 951 34-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553-NETS (638 7) Fax: 408 526-4100 Cisco A ccess Registrar 3.5 Concepts and Reference Guide Jul y 20 04 Customer Order Number: Text Part Number: OL -2683-02[...]

  • Page 2

    THE SPECIFICATION S AND INFORMATION RE GARDING THE PRODU CTS IN THIS MANUAL ARE SUBJECT TO CHAN GE WITHOUT NOTICE. ALL STATEMENTS , INFORMATION, AND RECOMMENDATI ONS IN THI S MANUAL ARE BE LIEVED TO BE A CCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIB ILITY FOR THEIR APPLICATION OF ANY PR[...]

  • Page 3

    iii Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 CONTENTS About This Guide ix Obtaining Documentation ix World Wide We b ix Ordering Documentation x Documentation Feedback x Obtaining Technical Assistance x Cisco.com x Technical Assistance Center xi Contacting TAC by Using the Cisco TAC Website xi Contacting TAC by Telephone [...]

  • Page 4

    Contents iv Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Script Processing Hierarchy 2-8 Cross Server Session and Resource Management 2-9 Overview 2-9 Session-Service Service Step and Radius-Session Se rvice 2-10 Configuring a Front Line Cisco Access Registrar 2-10 Configure Central AR 2-11 CHAPTER 3 Cisco Access Registrar Sc[...]

  • Page 5

    Contents v Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 ParseServiceAndAARealmHints 3-6 ParseServiceAndAASRealm Hints 3-6 ParseServiceAndProxyHints 3-6 ParseServiceHints 3-7 ParseTranslationGroupsBy CLID 3-7 ParseTranslationGroupsBy DNIS 3-7 ParseTranslationGroupsBy Realm 3-7 UseCLIDAsSessionKey 3-7 USRIncomin gScript 3-7 USR[...]

  • Page 6

    Contents vi Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Rep Members Subdirectory 4-8 Rep Members/Slave1 4-8 Name 4-8 IPAddress 4-8 Port 4-8 CHAPTER 5 Understanding SNM P 5-1 Overview 5-1 Supported MIBs 5-1 RADIUS-AUTH-CLIENT-MIB 5-1 RADIUS-AUTH-SERVER-MIB 5-2 RADIUS-ACC-CLIENT-MIB 5-2 RADIUS-ACC-SERVER-MIB 5-2 SNMP Traps 5-2[...]

  • Page 7

    Contents vii Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Accounting S tart 6-7 Data Flow 6-7 Access-Request (Quota Dep leted) 6-8 Accept-Accept (Quota Depleted) 6-8 Accounting Stop (Session End) 6-9 Accounting Response (Final Status) 6-9 Vendor-Specific Attributes 6-10 G LOSSARY[...]

  • Page 8

    Contents viii Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02[...]

  • Page 9

    ix Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 About This Guide This document pr ovides infor mation to help you und erstand RADIUS con cepts and to help you de v elop a better understandi ng of the Cisco Access Re gistrar 3.0 serv er . Thi s document contains the follo wing chapters: • Chapter 1, “Overvie w ,” ov ervi[...]

  • Page 10

    x Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 About This Guide Obtaining Te chnical Assistance Ordering Documentation Cisco documentation is a vail able in the follo wing ways : • Registered Cisco Direct Customers can order Cisco Product do cumentation from the Netw orking Products MarketPlace: http://www .cisco.com/cgi-bi[...]

  • Page 11

    xi Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 About This Guide Obtaining Technical Assista nce Customers and partners can self-register on Cisco.com to obtain additional personalized i nformation and services. Registered users can order products, check on the status of an order, access technical support, and vie w benefits [...]

  • Page 12

    xii Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 About This Guide Obtaining Te chnical Assistance[...]

  • Page 13

    CH A P T E R 1-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 1 Overview The chapter provides an overvie w of the RADIUS se rver , including connection steps, RADIU S message types, and using Cisco Access Registrar as a pr oxy server . Cisco Access Registrar is a RADIUS (Remote Authenti cation Dial-In User Servic e) server th[...]

  • Page 14

    1-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew RADIUS Protocol Figure 1 -1 Pack et Exchange Be tw een User , NAS, and RADIUS Cisco Access Registrar can also reject the packet if it needs to den y network access to the user . Or, Cisco Access Registrar may issue a challenge that the N A S sends to the use[...]

  • Page 15

    1-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 1 Overview RADIUS Protocol Step 8 Cisco Access Registrar formats the response based on the Response dictionary an d sends it back to the client (N AS). Step 9 The N AS recei ves the response an d communicates with the user , whic h may include sending the user an IP add[...]

  • Page 16

    1-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew RADIUS Protocol The Attribute Dictionary The Attrib ute dictionary contains a list of preconf igured authentication, auth orizati on, and accounting attributes that can be part of a client’ s or user’ s co nf iguration. The dictionary en tries translate [...]

  • Page 17

    1-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 1 Overview Basic Authentica tion and Authorization Figure 1 -2 Pro xying to an LD AP Server f or A uthentication Basic Authentication and Authorization This section pro vides basic in formation about ho w Cisco Access Registrar performs the basic RADIUS functions of aut[...]

  • Page 18

    1-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 1 Overvi ew Basic Authentication and Authorization – Performs resource management fo r each Resource Manager in th e Session Manager . The Cisco AR server directs the req uest to the approp riate resource mana ger listed in /Radius/SessionManagers/<Nam e>/<Re[...]

  • Page 19

    CH A P T E R 2-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 2 Understanding Cisco Access Registrar This chapter describes the Cisco Access Registrar ob ject structure, and e xplains when Ci sco Access Registrar references each of these objects during the processing of client requests. Cisco Access Registrar lets you manipul[...]

  • Page 20

    2-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cisco Access Registrar Hierarchy UserLists and Groups Cisco Access Registrar lets you organize your us er community through th e configuration objects UserLists , users , and UserGroups . • Use UserLists to group us ers b y orga[...]

  • Page 21

    2-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cisco Access Registrar Hie rarchy For e xample, to use Services for authentication: • When you want the authentication to be performed b y the Cisco Access Registrar RADIUS serv er , you can specify the local service. In this, c[...]

  • Page 22

    2-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cisco AR Dire ctory Structure concurrently , you might creat e two Session Manage rs and three Resource Managers. One dynamic IP Resource Manager that is referenced b y both Session Managers, and two concur rent session Resource M[...]

  • Page 23

    2-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Program Flow Scripting Points Cisco Access Registrar lets you in vok e scripts you can use to affect the Request, Response, or En vironment dictionaries. Client or NAS Scripting Points Ta b l e 2 - 3 sho ws the location of the scr[...]

  • Page 24

    2-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Program Flow Authentication and/or Authorization Scripting Points Ta b l e 2 - 4 sho ws the location of t he scripting points within the section that determines wheth er to perform authentication and/or authorizatio n. T able 2-4 [...]

  • Page 25

    2-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Program Flow Session Management The Session Management feature requires the cli ent (N AS or proxy) to send all RADIUS accountin g requests to the Cisco Access Registrar serv er perform ing session management. (Th e only exception[...]

  • Page 26

    2-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Program Flow • The secondary server w ill not kno w about th e cu rrent acti ve sessions that are maintained on the primary server . Any resources managed b y the se condary serv er must be distinct fro m those managed by the p [...]

  • Page 27

    2-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cross Se rver Session and Resource Managemen t T able 2-8 Cisco A ccess Registr ar Pr ocessing Hierar c h y for Outg oing Scr ipts Cross Server Session and Resource Management Prior to Cisco AR1.6, sessions and resources were ma n[...]

  • Page 28

    2-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cross Server Sessio n and Resource Management When the front line Cisco AR server receives the acc ess-request, it does the regul ar AA processing. If the packet is not rejected and a Cent ral Resource Cisco AR server is al so co[...]

  • Page 29

    2-11 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 2 Understanding Cisc o Access Registrar Cross Se rver Session and Resource Managemen t IncomingScript = OutgoingScript = OutagePolicy = RejectAll OutageScript = MultipleServersPolicy = Failover RemoteServers/ 1. central-server [ //localhost/Radius/RemoteServers ] centr[...]

  • Page 30

    2-12 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 2 Und erstanding Cisco Access Registrar Cross Server Sessio n and Resource Management[...]

  • Page 31

    CH A P T E R 3-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 3 Cisco Access Registrar Scripts This chapter describes the scripts pr ovided with Cisco Access Registrar . Using Cisco AR Scripts The Cisco Access Registrar scripts are stored in /localhost/Radius/Scripts . Most of the scripts are written in the RADIUS Extension l[...]

  • Page 32

    3-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts AltigaOutgoingScript AltigaOutgoi ngScript maps Altig a attrib utes from Cisc o Access Registrar’ s global attribute space to the appropriate Altiga-proprietary attributes. ANAAAOutgoing AN AAA Outgoing can be r[...]

  • Page 33

    3-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts AuthorizeTelnet AuthorizeT elnet is referenced from either the user record for users who’ s sessions are always telnet or from the from the scr ipt Authori zeService, which checks the request to determine whic h [...]

  • Page 34

    3-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts ExecDNISRule ExecDNISRule is referenced from the polic y engine to determine the auth entication and authori zation service and policy based on the DNIS set in the polic y engine. ExecFilterRule ExecFilterRul e is[...]

  • Page 35

    3-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts LDAPOutage LD APOutage is referenced from LD AP Services as OutageScript. LD APOutage logs wh en the LD AP binding is lost. MapSourceIPAddress MapSourceIP Address is referenced from the Cisco Access Registrar serv [...]

  • Page 36

    3-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts ParseProxyHints ParseProxy Hints is referenced from the N AS IncomingScript scripting point. It lo oks for a realm name on the user name at tribute as a hi nt of which AAA services should be used fo r this request[...]

  • Page 37

    3-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 3 Cisco Access Registrar Scripts Using Cisco AR Scripts ParseServiceHints ParseServiceHints is referenced from the N AS Incomi ngScript scripting poi nt. Check to see if we are gi ven a hint of the service type or the r ealm. If so, se t the appropriate attrib utes in t[...]

  • Page 38

    3-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 3 Cisc o Access Registrar Scripts Using Cisco AR Scripts USROutgoingScript USR OutgoingScript maps USR attr ibutes from Ci sco Access Regist rar’ s global attribu te space to the appropriate USR-proprietary attributes.[...]

  • Page 39

    CH A P T E R 4-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 4 Understanding Replication This chapter describes Cisco Access Re gistrar's conf ig uration replicat ion features, functions, limitation s and operation. Replication Overview Cisco Access Registrar replication feature can maintain identical config urations on[...]

  • Page 40

    4-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replic ation Works When there is a configuration change , the master serv er propagates the change set to all member serv ers ov er the netw ork. All member server s hav e to update their conf iguration after receiving the change set not[...]

  • Page 41

    4-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replicat ion Works Slave Server Step 1 When the slav e server recei ves the transaction, its contents are verif ied. Step 2 Once verif ied, the changes are appl ied to the sla ve serv er's database Step 3 The changes are then applie[...]

  • Page 42

    4-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication How Replic ation Works Transaction Data Verification When the master prepares a transaction for replica tio n to a slav e, the master calculate s a 2's complement Cyclic Redundancy Check (CRC) for each element (individual conf igur atio[...]

  • Page 43

    4-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication C onfiguration Settings Full Resynchronization Full Resynchronization means that the slav e has missed more transactions than are stored in the master's replication archi ve and cann ot be resynchron ized automaticall y . Th[...]

  • Page 44

    4-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication Configuration Settings RepType RepT ype indicates the type of replication. The choices a v ailable are SMDBR and NONE. When RepT ype is se t to NONE, repli cation is disabled. T o ena ble replication, s et RepT ype to SMDBR for S[...]

  • Page 45

    4-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication C onfiguration Settings If the sla ve should go do wn or otherwise be taken of f line, the v alue of RepT ransactionArchiv eLimit and the frequency o f aregcmd sa ves wi ll determine ho w long the sla ve may be of f-line before a[...]

  • Page 46

    4-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 4 Unde rstanding Replication Replication Configuration Settings Rep Members Subdirectory The Rep Members subdirectory cont ains the list of sla ves to which the master will replicate transactio ns. Rep Members/Slave1 Each slav e is added much like a client is added. Ea[...]

  • Page 47

    CH A P T E R 5-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 5 Understanding SNMP This chapter pro vides informatio n about Cisco Access Registrar support for SNMP . Overview Cisco Access Registrar 3.0 provides SNMP MIB and trap support for users of network management systems. The supported MIBs enable the ne twork ma nageme[...]

  • Page 48

    5-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps RADIUS-AUTH-SERVER-MIB The RADIUS-A UTH-SER VER-MIB describ es the server side of the RADIUS authen tication protocol. The information cont ained in this MIB describe s managed objects used for managin g a RADIUS authentication server . [...]

  • Page 49

    5-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s Supported Traps The traps supported by Cisco Access Registrar enab le Cisco AR to notify interested management stations of e vents, f ailure, or impending f ailure conditions. T raps are a network message of a specif ic f or ma t is s ue[...]

  • Page 50

    5-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps carOtherAuthServerNotResponding carOtherA uthSer verNotResponding indicates that an au thentication server i s not responding to a request sent from this serv er . This trap has three objects: • radiusA uthServerAddr ess— indicates t[...]

  • Page 51

    5-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s carOtherAccServerResponding carOtherAccServerResponding signifi es that an accounting serv er that had pre viously sent a not r esponding messag e is now responding to req uests from th e Cisco AR server . This trap has three objects: ?[...]

  • Page 52

    5-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps These files are option al and are only used to configu re the extensibl e portions of the agent, the v alues of the community strings, and the optional trap destinations. By def ault, the f irst community string (“public” by def ault[...]

  • Page 53

    5-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 5 Understanding SNMP SNMP Trap s Community String A community string is used to authenticate the trap message sender (SNMP agent) to the trap recipient (SNMP management station). A communit y string is required in the list o f trap recei vers.[...]

  • Page 54

    5-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 5 Un derstanding SNMP SNMP Traps[...]

  • Page 55

    CH A P T E R 6-1 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 6 Prepaid Billing Solution This chapter describes the generic call flo w between the t hree components required to supp ort a prepaid billing solution usi ng the RADIUS protocol: the AAA client, the Cisco Access Registrar 3.5 server , and a prepaid billing server .[...]

  • Page 56

    6-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Overview Cisco AR 3.5 prov ides maximum flexibil ity to billin g server s by allo wing the metering v ariable to be modif ied as the service is used. This requires netw ork nodes to measure all parameters all the time, b ut to report v alues [...]

  • Page 57

    6-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Configuring Prepaid Billing Configuring Prepaid Billing Cisco AR 3.5 uses a pr epaid service to support prepaid b illing solutions. A prep aid service has the follo wing properties: [ //localhost/Radius/Services/prepaid ] Name = prepaid Descri[...]

  • Page 58

    6-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Figur e 6-1 Gener ic Call Flow Diagr am Generic Call Flow This section describes th e generic call flo w for the Cisco AR 3.5 prep aid billing soluti on. The call flo w is controlled b y the AAA client. The Cisco AR 3.5 serv[...]

  • Page 59

    6-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow Note In the follo wing attrib ute tables, entries be ginning with APPL indicate applicat ion-specif ic attribu tes. Another application migh t use the fi eld for dif ferent purp ose or ignore the field. All the f i elds with [...]

  • Page 60

    6-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Access-Accept (Authentication) Flow 2b sho ws the billing serv er returning the authentication resul t. The billing server return s a failure if the prepaid subscriber ha s an inadequate balance. Flow 2s sho ws the Cisco AR [...]

  • Page 61

    6-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow In Flow 4s , the Cisco AR 3.5 serv er con verts the quota array recei ved into VSA s and sends an Access-Acce pt with the assembl ed VSAs to the AAA c lient. Ta b l e 6 - 5 lists the prepaid-specific VSAs that might be includ[...]

  • Page 62

    6-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Access-Request (Quota Depleted) Flow 7c sho ws the client sending an Access-Request to the Cisco AR 3.5 server because at least one quota has been depleted. The Acc ess-Request includes different measurements of ho w much of[...]

  • Page 63

    6-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow Accounting Stop (Session End) In Flow 9c , the client sends an Accounting-Stop to the Cisco AR 3 .5 server to end th e session. The Accounting-Stop message includes an updated quota array w ith the usag e adjustments since th[...]

  • Page 64

    6-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow Vendor-Specific Attributes V endor-speci fic a ttrib utes are in cluded in spec if ic RADIUS packets to communicate prepaid user balance information from the Cisco AR 3.5 serv er to the AAA client, and actual usage, either [...]

  • Page 65

    6-11 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solution Generic Call Flow CRB_USER_TYPE crb-entity-type Int8 4s T ype of user: 1. Prepaid user 2. Post-paid with no credit lim it 3. Post-paid with credit limit 4. In v alid user The source for this VSA value could be from the Su bscriber profil e or[...]

  • Page 66

    6-12 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 Chapter 6 Prepaid Billing Solutio n Generic Call Flow CRB_TERMIN A TE_CA USE crb-terminate-cause Int8 4se Identif ies why a subscriber f ailed authentication: 1. Exceeded the balance 2. Exceeded the o verdr aft 3. Bad credit 4. Services suspended 5. In v alid User CRB_PRIV A T[...]

  • Page 67

    GL-1 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 GLOSSARY A Access point A de vice that bridges the wir eless link on one side to the wired n etwork on the other . Analog Channel A circuit-switched commu nication path intended to carry 3.1 KHz audio in each direction. ARP Address Resolution Prot ocol is the TCP/IP protocol t[...]

  • Page 68

    Glossary GL-2 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 CSU/DSU Channel Service Unit/Data Service Un it isolates your network from y our exchange carr ier’ s network. It also receiv es the timing, lo w-lev el framing inform ation, and data passed fro m the termination point. CSU/DSUs are specific to the general circuit t[...]

  • Page 69

    Glossar y GL-3 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 F FT Field T echni cian is someone w ho installs your ca ble modem in you r house. Frame Relay Frame Relay is a cost-ef fecti ve, lightwei ght, many-to-man y , medium-speed, virtual network , link-layer technology . I ISDN Integrated Services Digi tal Netw ork enable[...]

  • Page 70

    Glossary GL-4 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 M MIB Manageme nt Information Base—D atabase of network ma nagement informa tion used and ma intained by a network manageme nt protocol such as SNM P . The value of a MIB obj ect can be changed or retrie ved using SNMP comm ands. MIB objects are or ga nized in a tre[...]

  • Page 71

    Glossar y GL-5 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 P packet A bloc k of data in a standa rd format for transmission. PAP Password Authenticati on Protocol is a simple PPP authentication mechanis m in whic h a cleartext username and password are transmitted to pro ve identit y . Payload The contents of a request packe[...]

  • Page 72

    Glossary GL-6 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 RADIUS Dictionary The RADIUS dictionary passes in formation between a script and the RADIUS ser ver , or between scripts running on a single packet. RADIUS Proxy In order to pro vide for the routing of RADI US authentication and acco unting requests, a RADIUS proxy ma[...]

  • Page 73

    Glossar y GL-7 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 Service A means of specifying the method to use to perfo rm a function. A service can be specified for the follo wing functions: auth entication, authorizatio n, accounting, and authenticat ion-authorization. For example, a service can specify that authentication be [...]

  • Page 74

    Glossary GL-8 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02 T TACACS T erminal Access Controller A ccess Control System, a an authentication server that validates user IDs and passwords, thus controlling entry into systems. Telnet A service that lets you log in to a system o ve r a network just as though y ou were logging in f[...]

  • Page 75

    Glossar y GL-9 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 VPN V irtual Pri vate Netw ork is a way for companies to use the Internet to securely transport pri vate data. VRF V irtual routing and forwarding. A per VPM routing t a ble on the PE router . Each VPN instantiated on that PE router has its own VRF . X X.25 A reliabl[...]

  • Page 76

    Glossary GL-10 Cisco Access Registrar 3.5 Co ncepts and Reference Guide OL-2683-02[...]

  • Page 77

    IN-1 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 INDEX A AAA Servers multiple 2-9 Access Registrar definition 1-1 objects 2-1 Access-Accept 2-7 Access-Challenge 1-2 Accounting attributes 1-4 database 1-1 definition 1-1 AltigaOutgoingScript 3-2 ANAAAOutgoing 3-2 AscendIncomingScrip t 3-2 AscendOutgoing Script 3-2 Attribute Di[...]

  • Page 78

    Index IN-2 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02 RadiusServer object 2-1 RepIPMaster 4-7 Replication ix, 4-1 archive 4-3 automatic resync hronization 4-4 configuration settings 4-5 data flow 4-2 data integrity 4-3 hot configuration 4-5 hot-standby 4-1 impact on request processing 4-5 RepIPAddress 4-7 RepTransactionArch[...]

  • Page 79

    Index IN-3 Cisco Access Registra r 3.5 Concepts and Reference Guide OL-2683-02 definition 1-2 SLIP 1-4 SNMP ix, 5-1 configuration files 5-5, 5-6 traps 5-2 SNMP Configuration community string 5-7 snmp.conf file 5-6 snmpd.conf file 5-6 T Tcl scripts 3-1 tMapSourceIPAddress 3-5 tParseAARealm 3-5 tParseServiceAndAAASRealmHints 3-6 tParseServiceAndA ARe[...]

  • Page 80

    Index IN-4 Cisco Access Registrar 3.5 Concepts a nd Reference Guide OL-2683-02[...]