思科移动交换CMX课件

CiscoMobileExchangeCiscoMobileExchange概况1

您的内容打在这里，或者通过复制您的文本后。概况2

您的内容打在这里，或者通过复制您的文本后。概况3

您的内容打在这里，或者通过复制您的文本后。+++整体概况概况1+++整体概况SLAmonitoringSLAmonitoringSLAmonitoringAccessYours,anyone’sCoreYours,anyone’sServicesYours,anyone’sOperatorControlpoint1OperatorControlpoint2CiscoMobileExchange

SolutionSet:GivingcontrolbacktotheoperatorMS:MobileStationSGSN:ServicingGPRSSupportNodeGGSN:GatewayGPRSSupportNodePDSN:PacketDataServingNodeCMX:CiscoMobileExchangeMSFC:MultilayerSwitchFeatureCardRLB:RadiusLoad-balancerFWLB:FirewallLoad-balancerSSG:ServiceSelectionGatewayPOP:PointofPresenceCSG:ContentServicesGatewayBMA:BillingMediationAgentSESM:SubscriberEdgeServiceManagerSLASLASLAAccessCoreServicesOpeTheCiscoMobileExchangeScopeRadioEdgeMobileInternetEdgeAggregationMSCRadiusWebPortalServicesSelectionMIPL2TPGREIPSecMPLSIPV4IPV6CMXL2/L3FeaturesSessionestablishmentIProuting&forwardingAddressallocationUserauthenticationAccessselectionAccountingVPNedgefunctionL4+FeaturesServiceprofileContentbilling/accountingCharginggatewayLoadbalancingNetworkmanagementVPNIntranetInternetInternetISP/ASPMVNOOpenGardenVPNWalledGardenWLAN2.5/3GBSC/PCFCDMA1X/DO/DVSGSNGGSNPDSNHAPacketGWGGSN

HAPDSN

802.11

VPNSGSNServiceProxyPassthroughTunnelSSGsTheCiscoMobileExchangeScopFrameworkofsolutionstargetedattheSubscriberInternetEdgeAcollectionofCiscodevicesthatprovideconsistentmobileandIPservicesDeliverscosteffectiveandscalablesolutionstomeettheneedsofMobileOperatorsDemonstratesCiscoIOS/IPvalueaddservicesLeverageCatalyst7600familywithIP,mobile&contentfunctionalityWhatisCMX?CiscoMobileExchangeNetworkManagement

andOperationsPlatformsfor

PerformanceandReliabilityLoadBalancingandcontinuousavailability.MobileServicesServiceSelectionContentMonitoringAdvancedBillingPacketGateways(GPRS/UMTS,PDSN,HA,…)WhatisCMX?CiscoMobileExchaAgendaSSGCSGBillingHardwareAgendaSSGServiceSelectionEnableServiceSelectionSSGServiceTypesServiceAccessSSGProxyPassthruUsernamePasswordInternetaccessTunnelAccessingcontentpartnernetworksCorporateaccessAutoserviceslogon(basedonuserconfiguredsettings)ServiceSelectionEnableServicTypicalServiceSelectionCallFlowRouterSESMAAAServerPPPWebRequestRedirectionUnAuthUserPageLoginResponseLoginInfoAuthenticationGetProfileAccesscontrolandserviceselectionServiceaccessbasedonuserprofileSSGClientAccessControlPDSNAccounting-StartAccounting-StartTypicalServiceSelectionCallServiceSelection(SSG,SESM,AAA...)FeaturesInclude:CaptivePortalOpenGarden(Freeservices)WalledGarden(Premiumservices)PrepaidServicesHierarchicalPolicingSubscriberSelf-CareAdvertisingRADIUS/DirectoryAuthenticationLocationbrandingAutologinWebServicesGatewayServiceSelection(SSG,SESM,SSGServicesSSGprovidesawaytogivedifferenttypesofsubscriberaccesstoparticularIPdomains.TheIPDomainscanbeasinglehost,asubnetworkormultiplenetworks.Dependingontheconfigurationtheservicescanbeauthenticatedorfreeaccess.SSGServicesSSGprovidesawayOPEN-GARDEN(FreeServices)Walled-GARDEN(Authenticated

Services)Services–NetworkorApplicationAccessSubscriberServicesSSGBackboneSESMOPEN-GARDENWalled-GARDENServicServiceControlUserExperienceTime/VolumePrepaid/PostpaidAllowed&ChargedNotAllowedServiceControlUserExperiencSSGServiceSummaryHostObjects ConnectionObjects SubscriberINTERNETVODQUAKEHost-ObjServiceObjectsNATNATL2TPPROXYRoutedSSGServiceSummaryHostObjecSSGServiceAccessTypesSSGServiceAccessTypesSSGServiceAccess:Passthru

RadiusAAAisdonebySSGProvider’slocalAAAserverTrafficissentout“bound”interfacebasedonserviceroutedefinitionUsenext-hoptableorexplicitbindingsPassthroughServiceTypeIntranetInternetSSGR,RADIUSR;00

SSGSSGServiceAccess:PassthruSSGServiceDefinition:PassthruPassthroughServiceType

SamplePassthroughServiceProfilezap-com Password=“servicecisco”,Service-Type=Outbound Service-Info=“I”, Service-Info=“R00;55”, Service-Info=“TP”

servicedestination

routedefinitionServiceType-passthroughRADIUSSSGServiceDefinition:PasstSSGServiceDefinition:PassthruPassthroughServiceType

(Internet)

SamplePassthroughServiceProfileintranet Password=“servicecisco”,Service-Type=Outbound Service-Info=“IInternet”, Service-Info=“R;”,Service-Info="R;;E", Service-Info=“TP”

servicedestination

routedefinition

(specialcaseforInternet)servicetype-passthroughRADIUSSSGServiceDefinition:PasstSSGServiceAccess:Proxy-RADIUSTheSSGterminatesusersessionsfromhoststotheSSGandmakesavirtualConnectionfromtheSSGtotheservicedestinationTheSSGwillAuthenticateandAuthorizetheserviceviatheremoteRadiusServer.TheSSGdoesNATiftheremoteRADIUSuserauthorizationincludesIPaddressProxy-RadiusServiceTypeWebPortalApplicationIntranetInternetExtranetRADIUSHTTPTRAFFICRadiusRequest0RadiusReply(accept/IP)0NATRADIUSSSGSSGServiceAccess:Proxy-RADSSGServiceDefinition:Proxy-RADIUSProxy-RadiusServiceTypeIPAddress,Portsandshared-secretofRemoteAAA

SampleProxyServiceProfileproxy-servicePassword=“servicecisco”,Service-Type=Outbound Service-Info=“IProxy-service”, Service-Info=“R0;55”, Service-Info=“S;1812;1813;cisco”, Service-Info=“TX”

serviceroutedefinitionservicetype-proxyRADIUSSSGServiceDefinition:ProxySSGServiceAccess:L2TPLACinitiatesL2TPtunneltodestinationLNS,SSG-PPPsessionisestablishedSSG-NATisperformedbetweensubscriber’sIPaddressandLNSassignedIPaddressTrafficissentoutthetunnelvirtual-accessinterfacebasedonserviceroutedefinitionRadiusAAAisdonebySSGProvider’slocalAAAserver(RADIUS-B)Tunnel(L2TP)ServiceTypeSSG-PPP

VPDN

R,RADIUS-ASubscriberConnectionLACLNSRADIUS-BPool:192.168.1.xPPPSessionIOS-NAT0SSGSSGServiceAccess:L2TPLACiSSGServiceDefinition:L2TPTunnel(L2TP)ServiceType

SampleTunnelServiceProfiletunnel1 Password=“servicecisco”,Service-Type=Outbound Service-Info=“IVPDNTunnelService”, Service-Info=“R;”, Service-Info=“vpdn:l2tp-tunnel-password=cisco”, Service-Info=“vpdn:ip-addresses=”, Service-Info=“vpdn:tunnel-id=tunnelxyx”, Service-Info=“TT”

Tunnelinformationservicetype-TunnelRADIUSSSGServiceDefinition:L2TPTSSG–HostObjectBuildingBlocksHostObjectMaintainsuserinformationUserIPaddressCreatedattimeofuserAccountlogonListofServicesusercanaccessSSG–HostObjectBuildingBloSSG-ServiceObjectBuildingBlocksServiceObjectMaintainsInfoaboutSSGserviceServiceNameServiceIPDomain(s)OtherServiceAttributesSSG-ServiceObjectBuildingSSG-ConnectionObjectBuildingBlocksConnectionObjectAccountinginformationServiceQoSCreatedattimeofServicelogonSSG-ConnectionObjectBuildiServiceSummaryHostObjects ConnectionObjects SubscriberINTERNETVODQUAKEHost-ObjServiceObjectsNATNATL2TPPROXYPassThruServiceSummaryHostObjects AgendaSSGCSGBillingHardwareAgendaSSGMobileDataServices“Gateway”–

Network/ContentUsageCollection&EnforcementVideoVoiceContentWalledGardenPersonalized

Portal!CompanyAIPVPNAAAServerInternetContentprovider/aggregatorBContentprovider/aggregatorABypipingalltrafficthroughthe“Gateway”forprepaid,theoperatorcanenableconsistent,real-timeprepaidenforcementandcontrol.Mediation/BillingSystemBusiness/ratingrulesContentproviderpricingLDAPDirectorySSG&CSGPDSNWLANNotebookMobileDataServices“Gateway”CSGprovidesthefollowingfeaturesandfunctionality:PostpaidBilling,BMALoadSharingHTTP1.0ContentBillingHTTP1.1ContentBillingPostpaidFTPBillingNon-HTTPTrafficPrepaidContentBillingandAccountingObtainingUserIDsLearningClientIPAddressesviaInspectionofX-Forwarded-ForHeadersFilteringAccountingRADIUSProxySupportHTTPRecordsReportingFlexibilityHTTPErrorCodeReportingStatefulRedundancyIntermediateBillingRecordsPacketCountsFragmentSupportMMSExcludeWAPConnectionlessandConnectionOrientatedCSGprovidesthefollowingfeaLearningwhothesubscriberisRadiusAccountingflowDataflowAccountingmessagesare“paidattentionto”ONLYOtherRADIUSmessagesarepassedthroughtotheRADIUSSERVERRadiusAccountingflowDataflowAAARADIUSAccountingProxyRADIUSAccountingEndpoint

AAARADIUSAccountingsentfromtheAAA(orotherRADIUSProxy)totheCSGRADIUSACCOUNTINGSTARTLearningwhothesubscriberisIntelligenceintheDataPathCSGAAARadiusflowDataflowsService1:Userself-careBalanceinquiries,Accountreplenishment,AdviceofChargeMMSBearerTrafficService2ThirdPartyhostedmultimediaService3:NewsStockquotes,Sportsscores,WeatherService4:DownloadsRingtones,screensavers,etcExampleServicesFreeBearerBillperTimeFromQuota1BillperClickFromQuota2BillperVolumeFromQuota3RealTimeInteractionAuthorisation;ProfilingViaActiveMiddlewareToBusinessOperationsIntelligenceintheDataPathCAgendaSSGCSGBillingHardwareAgendaSSGCMXBillingSSGPostpaidBillingAccountingSTART/AccountingSTOParesenttotheAAATheRADIUSAccountingRecordscontainperservicevolumeandtimeaccounting,thatcanbeusedbybillingsystemstobilltheuser

SSGPrepaidBillingBasedontheSSGprepaidfeaturesCheckasubscriber’savailablecredittodeterminewhethertoconnectthesubscribertoaserviceandhowlongtheconnectioncanlastSSGinteractswiththeAAAserverandtheprepaidbillingtodeterminethequotavaluesandusageWhenthequotarunsout,SSGperformsreauthorization

CMXBillingSSGPostpaidBillinCMXBilling(Cont.)CSGContentPostpaidBillingCSGlogsusertrafficandgeneratesURL-basedcontentCDRsThecontentCDR’sarethensenttoaChargingGateway(orbillingmediationdevice)overGTP’CSGContentHotBillingChecksforavailablefundswhenauserwanttoaccessaparticularcontent(acontentisidentifiedbyaparticularURL,itisalsocalledperpagebilling)WithinthisURLtheuserwillbeavailabletodownloadsomefiletodopereventbillingTheCSGcanaccountforthepages(URL)andfortheeventsThebillingservermayterminatetheusersessionwhentheusercreditreacheszeroCMXBilling(Cont.)CSGContentServicesBillingBillingMediationSSGOpenGardenInternetBrowsingPerpacketPerdownloadPermessagePerUrlFreeChargebasedonValueBrandControlServicesBillingBillingSSGOpenBilling

systemRADIUSaccountingserverServicesBillingandPre-PaidServices

Subscriberorserviceconnection-basedSupportforprepaidandpostpaidmodelsFlexiblebillingallowsproviderstochargeforanyserviceinanymannerSSGBilling

systemRADIUSServicesBCSGBillingCSGRadiusAccountingflowDataflowusernameDatabaseBillingandMediationPartnersQuotaServerMediationAgentRequestquotaperserviceReportusedquotaQuotaRequestSrcIPDestIPURLusernameTOS…AccountingRecordsXML(optional)CSGBillingCSGRadiusAccountinCallFlows(UserSign-On)PDSNAAACSGService1Service2Service3QSBMAAcct-Start

UserLogsInAcct-Startreplicated

Acct-StartisreceivedbyCSGUsrProfileReq

CSGRequeststheUser’sProfileUsrProfileRsp

QS(QuotaServer)SendstheUser’sProfilecontaininghisBillingPlanCallFlows(UserSign-On)PDSNAFirstServiceAccess(Service2)PDSNAAACSGService1Service2:LocalMultimediaService3QSBMAGET(/s2/recentgoals/beckham-goal.mpg)

ThisisthefirstaccesstoService2bytheuserCSGneedstoobtainquotafirstSvcAuthReq

CSGSendsSvcAuthReq(UserName,Service2)toQSSvcAuthRsp

QStakesapartoftheuser’scredit(say,€1),convertsittoequivalentnumberof“bytes”(say,1Meg)andsendsSvcAuthResp(UserName,service2,1Meg)toCSG.GET(/s2/recentgoals/beckham-goal.mpg)

CSGforwardstheoriginalrequesttothecontentserver,meterstrafficonthisconnection,andkeepsdeductingfromthe1Megquota.

CSGsendsbillingrecords(CDRs)totheBMA,eitherperiodicallyorattheendofthetransactionCDRFirstServiceAccess(ServiceContinuedAccesstoService2PDSNAAACSGService1Service2:LocalMultimediaService3QSBMAGET(/s2/worldcup/ronaldo.mpg)

CSGstillhasmoreService2quotafortheuser,say0.7Meg.Usersendsnewrequest,foranothertransactionunderService2.

CSGwillkeepusingthisquotaforanyfurtheraccessestoservice2.CSGforwardstherequest,andtheuseraccessesthisserviceaslongasthereissufficientquota

WhenCSGreachesalowthresholdfortheuser’squotaforaservice,itre-authorizestheuserforthatserviceSvcReAuthContinuedAccesstoService2PAccesstoService3PDSNAAACSGService1Service2:LocalMultimediaService3StockQuotesQSBMAGET(/getQuote?s=CSCO&d=1d)

Theuserrequestsastockquote,whichmatchesService3.CSGhasnotauthorizedtheuserforService3yet.SvcAuthReq

CSGSendsSvcAuthReq(UserName,Service3)toQS.Service3isbilledperdownload,sothequotaserverdeductsmoney(say,another€1)fromtheuser’saccountwhichwillallow10downloads.SvcAuthRsp

QSsendsSvcAuthResp(UserName,service2,10)toCSG,whichallowstheuser10downloadsinservice3

CSGforwardstherequesttothecontentserver,andtheusergetsthequote.CSGnowhassufficientquotaforanother9stockquotes.AccesstoService3PDSNAAACSGSSelf-care(FreeService)GGSNAAACSGService1:SelfCareService2:LocalMultimediaService3:StockQuotesQSBMAGET(/editprofile.html)

Theusertriestogototheselfcarewebsitetoedithisprofile,oraddmoneytohisprepaidcredit.SvcAuthReq

CSGSendsSvcAuthReq(UserName,Service1)toQS.Service1isfree,sothequotaserverallowsCSGalargenumberofdownloadswithoutdeductingmoneyfromtheuser’saccount.SvcAuthRsp

QSsendsSvcAuthResp(UserName,service2,0xffffffff)toCSG,whichallowstheuser0xffffffffdownloadsinservice1

CSGforwardstherequesttothecontentserver.CSGstillhasvirtuallyinfinitenumberofdownloadsfromthisservicewithoutaskingformorequota.Self-care(FreeService)GGSNAACustomerFeatures,Advantages&Benefits

Postpaid/PrepaidBillingEnablesdifferentiatedbillingforindividualpiecesofContentAddsUserIdentityinformationWatchesRadiusAccountingStarts/Stops/ON/OFFProvisionforcustomer-suppliedXMLfeedfromadatabaseorCIBReportsindividualtransactions(ContentBilling)Flowinfo:bytesuploaded/downloaded,starttime,stoptime,TOSURL,HTTP,TCP,IP,FTP/TFTP,WAP,RTSPExcluderetransmittedbytesforTCPGTP’feedforBillingMediationsystemsCustomerFeatures,AdvantagesDataReported(forHTTP)ReportedusingGTP’V0AcknowledgementsRetransmitsBackupreceiverLoadsharingHTTPHeaderRecord:CorrelatorSource&DestinationIPaddressesSource&DestinationPortnumbersUsername(max64bytes)URL(max512bytes)ContentofHostfieldinHTTPheader(max64bytes)ContentofUser-AgentfieldinHTTPheader(max64bytes)Contentof“From”fieldinHTTPheader(max256bytes)Customerstring(max16bytes)HTTPStatisticsRecord:CorrelatorSource&DestinationIPaddressesSource&DestinationPortnumbersTypeofService(TOS)fromfirstpacketoreachGET/PostProtocolHTTPErrorCode(ifanHTTPapplication-levelerrorwasdetected)Flags:Connectioninitiator(serverorclient)Connectionterminator(serverorclient)TCPtermination(FIN,RST,timeout)IPbytestransferredineachdirectionIPpacketstransferredineachdirectionTCPbytestransferredineachdirectionConnectionstarttimeanddurationServiceIDandSessionIDQuotausedHTTPdataisreportedintworecords:HTTPHeaderrecordisreportedatthebeginningoftheGETrequest,HTTPStatisticsarereportedattheendoftheflow.ForHTTP1.1persistentconnections,apairofaccountingrecordsisgeneratedforeachGET.Whenplacedafteraproxy(e.g.,contentengineorWAPgateway),CSGcanbeconfiguredtousetheIPaddressfromthex-forwarded-forHTTPheadertoresolvetheusername.DataReported(forHTTP)ReportDataReported(forconnectionorientedWAP)CSG_WAP_STATSRecord:WSPPDUType(Connect,GET,POST,PUSH/ConfirmedPUSH,Disconnect)CorrelatorWTPInfo(normal,abortedorincomplete)AbortreasoncodeWTPTransactionClassWSPContentType(e.g.0X3Eforapplication/vnd.wap.mms-message)WSPResponseCodeBrowserStringBytesuploadedBytesdownloadedRetransmittedbytesuploadedRetransmittedbytesdownloadedSourceIPaddressDestinationIPaddressSourceportDestinationportTOSProtocolUsername(max64bytes)URL(max512bytes)Customerstring(max16bytes)ServiceIDandSessionIDQuotausedConnectionstarttimeanddurationTheCSG_WAP_STATSrecordisgeneratedattheconclusionofeachconnection-orientedWAPtransactionBytecountsintheWAPStatsTLVreflectthetotalbytesforthetransactionthatbeginswiththereportedWSPPDUtype.Forexample,aGETbeginsatransactionthatsuccessfullyconcludeswithanACKtothefinalREPLY.ThebytecountstallyallIPbytesfortheseWAPpacketsandforACKsbelongingtothistransaction.MultipleWAPtransactionshappenoverasingleUDPsession.WhentheUDPsessionendsduetoaDISCONNECToraninactivitytimeout,theCSGgeneratesasummaryUDPstatisticsrecorddetailingbytecountsfortheentireUDPsession.Thestatistics/infoincludeddependsontheWSPPDUtype.DataReported(forconnectionDataReported(forGenericTCPandUDP)TCPRecord:Source&DestinationIPaddressesSource&DestinationPortnumbersTypeofService(TOS)fromfirstpacketProtocolFlags:Connectioninitiator(serverorclient)Connectionterminator(serverorclient)TCPtermination(FIN,RST,timeout)IPbytestransferredineachdirectionIPpacketstransferredineachdirectionTCPbytestransferredineachdirectionConnectionstarttimeanddurationServiceIDandSessionIDQuotausedUsernameUDPRecord:SourceIPaddressDestinationIPaddressSourcePortDestinationPortTypeofService(TOS)fromfirstpacketProtocolFlags:ConnectioninitiatorIPbytestransferredineachdirectionIPpacketstransferredineachdirectionFlowstarttimeanddurationServiceIDandSessionIDQuotausedUsernameTCPflows(withoutHTTPorFTPcontentprocessing)orUDPflowswillresultinthefollowingdatarecords:DataReported(forGenericTCPDeliveringCSGBillingRecordsCSGBillingrecordsarereportedtobillingmediationagent(BMA)usingGTP’V0UDPtransport,butreliabilitybuiltinvia:AcknowledgementsRetransmitsBackupreceiverMultiplebillingrecordscanbereportedineachGTP’messageSupportloadsharingtomultipleBMAsHighestefficiencywiththerequiredreliabilityDeliveringCSGBillingRecords

350Packets

Content-basedBillingCiscoMediationPartner

/banners/banners

/index.htm

/music/rap/rap2.mp3

600Packets1mp3fileand2000Packets350packetsofgeneralbrowsing=>includedinbasicaccess600packetsforadbanners=>chargeto1mp3eventand2000packetsofpremiumcontent=>billperratingplanBillableitemsforthistransactionCustomer:JohnSmithGeneralBrowsingforPreferredCustomer=NoChargeCustomer:BAdvertising:$.02x600=$12.00Customer:JohnSmithPurchaseforPremiumRapMusic:…rap2.mp3:$2permp3event+$.004x2000=$8.00350PacketsContent-basedBilAgendaSSGCSGBillingHardwareAgendaSSGSSG–PlatformsCisco7200Cisco7600/6500MWAMCisco10KCisco7301SSG–PlatformsCisco7200CiscoSSG–DataStructuresMemoryUsageHostObject –1KbytesServiceObject –1KbytesConnectionObject –1.5KbytesNotes:Theseareapproximatevalues.SSG–DataStructuresMemoryContentServicesGatewayHigh-performancelayer4-7packetinspectionandbillingplatformSingle-slotlinecardforCatalyst6500or7600Customnetwork-processor-basedhardwareContentServicesGatewayHigh-p提问与解答环节Questionsandanswers提问与解答环节结束语

CONCLUSION

感谢参与本课程，也感激大家对我们工作的支持与积极的参与。课程后会发放课程满意度评估表，如果对我们课程或者工作有什么建议和意见，也请写在上边，来自于您的声音是对我们最大的鼓励和帮助，大家在填写评估表的同时，也预祝各位步步高升，真心期待着再次相会！结束语

CONCLUSION

感谢参与本课程，也感激大家对我感谢观看Theusercandemonstrateonaprojectororcomputer,orprintthepresentationandmakeitintoafilm感谢观看CiscoMobileExchangeCiscoMobileExchange概况1

您的内容打在这里，或者通过复制您的文本后。概况2

您的内容打在这里，或者通过复制您的文本后。概况3

您的内容打在这里，或者通过复制您的文本后。+++整体概况概况1+++整体概况SLAmonitoringSLAmonitoringSLAmonitoringAccessYours,anyone’sCoreYours,anyone’sServicesYours,anyone’sOperatorControlpoint1OperatorControlpoint2CiscoMobileExchange

SolutionSet:GivingcontrolbacktotheoperatorMS:MobileStationSGSN:ServicingGPRSSupportNodeGGSN:GatewayGPRSSupportNodePDSN:PacketDataServingNodeCMX:CiscoMobileExchangeMSFC:MultilayerSwitchFeatureCardRLB:RadiusLoad-balancerFWLB:FirewallLoad-balancerSSG:ServiceSelectionGatewayPOP:PointofPresenceCSG:ContentServicesGatewayBMA:BillingMediationAgentSESM:SubscriberEdgeServiceManagerSLASLASLAAccessCoreServicesOpeTheCiscoMobileExchangeScopeRadioEdgeMobileInternetEdgeAggregationMSCRadiusWebPortalServicesSelectionMIPL2TPGREIPSecMPLSIPV4IPV6CMXL2/L3FeaturesSessionestablishmentIProuting&forwardingAddressallocationUserauthenticationAccessselectionAccountingVPNedgefunctionL4+FeaturesServiceprofileContentbilling/accountingCharginggatewayLoadbalancingNetworkmanagementVPNIntranetInternetInternetISP/ASPMVNOOpenGardenVPNWalledGardenWLAN2.5/3GBSC/PCFCDMA1X/DO/DVSGSNGGSNPDSNHAPacketGWGGSN

HAPDSN

802.11

VPNSGSNServiceProxyPassthroughTunnelSSGsTheCiscoMobileExchangeScopFrameworkofsolutionstargetedattheSubscriberInternetEdgeAcollectionofCiscodevicesthatprovideconsistentmobileandIPservicesDeliverscosteffectiveandscalablesolutionstomeettheneedsofMobileOperatorsDemonstratesCiscoIOS/IPvalueaddservicesLeverageCatalyst7600familywithIP,mobile&contentfunctionalityWhatisCMX?CiscoMobileExchangeNetworkManagement

andOperationsPlatformsfor

PerformanceandReliabilityLoadBalancingandcontinuousavailability.MobileServicesServiceSelectionContentMonitoringAdvancedBillingPacketGateways(GPRS/UMTS,PDSN,HA,…)WhatisCMX?CiscoMobileExchaAgendaSSGCSGBillingHardwareAgendaSSGServiceSelectionEnableServiceSelectionSSGServiceTypesServiceAccessSSGProxyPassthruUsernamePasswordInternetaccessTunnelAccessingcontentpartnernetworksCorporateaccessAutoserviceslogon(basedonuserconfiguredsettings)ServiceSelectionEnableServicTypicalServiceSelectionCallFlowRouterSESMAAAServerPPPWebRequestRedirectionUnAuthUserPageLoginResponseLoginInfoAuthenticationGetProfileAccesscontrolandserviceselectionServiceaccessbasedonuserprofileSSGClientAccessControlPDSNAccounting-StartAccounting-StartTypicalServiceSelectionCallServiceSelection(SSG,SESM,AAA...)FeaturesInclude:CaptivePortalOpenGarden(Freeservices)WalledGarden(Premiumservices)PrepaidServicesHierarchicalPolicingSubscriberSelf-CareAdvertisingRADIUS/DirectoryAuthenticationLocationbrandingAutologinWebServicesGatewayServiceSelection(SSG,SESM,SSGServicesSSGprovidesawaytogivedifferenttypesofsubscriberaccesstoparticularIPdomains.TheIPDomainscanbeasinglehost,asubnetworkormultiplenetworks.Dependingontheconfigurationtheservicescanbeauthenticatedorfreeaccess.SSGServicesSSGprovidesawayOPEN-GARDEN(FreeServices)Walled-GARDEN(Authenticated

Services)Services–NetworkorApplicationAccessSubscriberServicesSSGBackboneSESMOPEN-GARDENWalled-GARDENServicServiceControlUserExperienceTime/VolumePrepaid/PostpaidAllowed&ChargedNotAllowedServiceControlUserExperiencSSGServiceSummaryHostObjects ConnectionObjects SubscriberINTERNETVODQUAKEHost-ObjServiceObjectsNATNATL2TPPROXYRoutedSSGServiceSummaryHostObjecSSGServiceAccessTypesSSGServiceAccessTypesSSGServiceAccess:Passthru

RadiusAAAisdonebySSGProvider’slocalAAAserverTrafficissentout“bound”interfacebasedonserviceroutedefinitionUsenext-hoptableorexplicitbindingsPassthroughServiceTypeIntranetInternetSSGR,RADIUSR;00

SSGSSGServiceAccess:PassthruSSGServiceDefinition:PassthruPassthroughServiceType

SamplePassthroughServiceProfilezap-com Password=“servicecisco”,Service-Type=Outbound Service-Info=“I”, Service-Info=“R00;55”, Service-Info=“TP”

servicedestination

routedefinitionServiceType-passthroughRADIUSSSGServiceDefinition:PasstSSGServiceDefinition:PassthruPassthroughServiceType

(Internet)

SamplePassthroughServiceProfileintranet Password=“servicecisco”,Service-Type=Outbound Service-Info=“IInternet”, Service-Info=“R;”,Service-Info="R;;E", Service-Info=“TP”

servicedestination

routedefinition

(specialcaseforInternet)servicetype-passthroughRADIUSSSGServiceDefinition:PasstSSGServiceAccess:Proxy-RADIUSTheSSGterminatesusersessionsfromhoststotheSSGandmakesavirtualConnectionfromtheSSGtotheservicedestinationTheSSGwillAuthenticateandAuthorizetheserviceviatheremoteRadiusServer.TheSSGdoesNATiftheremoteRADIUSuserauthorizationincludesIPaddressProxy-RadiusServiceTypeWebPortalApplicationIntranetInternetExtranetRADIUSHTTPTRAFFICRadiusRequest0RadiusReply(accept/IP)0NATRADIUSSSGSSGServiceAccess:Proxy-RADSSGServiceDefinition:Proxy-RADIUSProxy-RadiusServiceTypeIPAddress,Portsandshared-secretofRemoteAAA

SampleProxyServiceProfileproxy-servicePassword=“servicecisco”,Service-Type=Outbound Service-Info=“IProxy-service”, Service-Info=“R0;55”, Service-Info=“S;1812;1813;cisco”, Service-Info=“TX”

serviceroutedefinitionservicetype-proxyRADIUSSSGServiceDefinition:ProxySSGServiceAccess:L2TPLACiniti