Cisco Cisco IOS Software Release 12.3(4)T
SSG Proxy for CDMA2000
Information About SSG Proxy for CDMA2000
3
Cisco IOS Releases 12.2(15)B and 12.3(4)T
Use of Autodomain When SSG Is Acting As a RADIUS Proxy in CDMA2000 Networks
In autodomain mode, SSG bypasses user authentication at the Network Attached Storage (NAS)
Authentication, Authorization and Accounting (AAA) server. SSG instead downloads a generic profile
for the specified autodomain. This profile may be a service profile for simple autodomain or a virtual
user profile in extended mode autodomain. When SSG is acting as a RADIUS proxy in a CDMA2000
network, the profile returned in an Access-Accept from the AAA server must contain the
3GPP2-IP-Technology VSA to indicate to SSG whether this call setup is for a Simple IP call or for a
Mobile IP call. Even if a network supports only one type of user (either all Simple IP users or all Mobile
IP users), the Access-Accept packets received from the AAA must contain the 3GPP2-IP-Technology
VSA. In networks that support only one type of user, the autodomain profiles can be formatted to contain
the correct attribute. In networks that support both Mobile IP and Simple IP users simultaneously, the
Access-Accept packets must contain the correct attribute for the type of user. The AAA server must be
able to modify the contents of the generic autodomain profile so that it contains the correct VSA. SSG
must receive a real rather than a cached response from the AAA server for each user logon. SSG Service
Profile Caching must be disabled when SSG Autodomain is enabled and SSG is acting as a RADIUS
proxy in a CDMA2000 network that supports both Simple IP and Mobile IP users.
Authentication, Authorization and Accounting (AAA) server. SSG instead downloads a generic profile
for the specified autodomain. This profile may be a service profile for simple autodomain or a virtual
user profile in extended mode autodomain. When SSG is acting as a RADIUS proxy in a CDMA2000
network, the profile returned in an Access-Accept from the AAA server must contain the
3GPP2-IP-Technology VSA to indicate to SSG whether this call setup is for a Simple IP call or for a
Mobile IP call. Even if a network supports only one type of user (either all Simple IP users or all Mobile
IP users), the Access-Accept packets received from the AAA must contain the 3GPP2-IP-Technology
VSA. In networks that support only one type of user, the autodomain profiles can be formatted to contain
the correct attribute. In networks that support both Mobile IP and Simple IP users simultaneously, the
Access-Accept packets must contain the correct attribute for the type of user. The AAA server must be
able to modify the contents of the generic autodomain profile so that it contains the correct VSA. SSG
must receive a real rather than a cached response from the AAA server for each user logon. SSG Service
Profile Caching must be disabled when SSG Autodomain is enabled and SSG is acting as a RADIUS
proxy in a CDMA2000 network that supports both Simple IP and Mobile IP users.
Information About SSG Proxy for CDMA2000
This section comprises the following information about the SSG Proxy for CMDA2000 feature:
•
•
•
•
•
•
•
•
•
SSG Proxy for CDMA2000
The SSG proxy for CDMA2000 extends the functionality of the existing SSG RADIUS proxy so that it
may be used in CDMA2000 networks.
may be used in CDMA2000 networks.
When used in a CDMA2000 network, SSG provides RADIUS proxy services to the packet data serving
node (PDSN) and the Home Agent (HA) for both Simple IP and Mobile IP authentication. SSG also
provides service selection management and policy-based traffic direction for subscribers.
node (PDSN) and the Home Agent (HA) for both Simple IP and Mobile IP authentication. SSG also
provides service selection management and policy-based traffic direction for subscribers.
SSG Proxy for CDMA2000, used with Cisco Subscriber Edge Services Manager (SESM), provides users
with on-demand services and service providers with service management and subscriber management.
with on-demand services and service providers with service management and subscriber management.
SSG Proxy for CDMA2000 supports time- and volume-based usage accounting for Simple IP and
Mobile IP sessions. Prepaid and postpaid services are supported. Host accounting records can be sent to
multiple network elements, including Content Service Gateways (CSGs), Content Optimization Engines
(COEs), and Wireless Application Protocol (WAP) gateways.
Mobile IP sessions. Prepaid and postpaid services are supported. Host accounting records can be sent to
multiple network elements, including Content Service Gateways (CSGs), Content Optimization Engines
(COEs), and Wireless Application Protocol (WAP) gateways.