Cisco Cisco Prime Access Registrar 6.0 Release Notes

Page of 12
 
2
Cisco Prime Access Registrar 6.0.1 Release Notes
OL-29190-01
  New and Enhanced Features in Cisco Prime Access Registrar 6.0.1
New and Enhanced Features in Cisco Prime Access Registrar 
6.0.1
Prime Access Registrar introduces the following features:
TACACS+ Command Authorization Support
Prime Access Registrar provides command authorization support to authorize the cmd mode commands. 
Command authorization is based on device access rules and the decision to authorize is based on 
command sets and conditions or expressions defined for the access rules. They determine whether to 
authorize a set of commands for the user or not.
If you enable TACACS+ command authorization for a service, you must define the following:
Command sets—You must configure the list of commands with the arguments and the action to 
perform: permit or deny. 
Device access rules—You must configure the conditions or expressions and the command sets that 
are applicable to the access rule if the conditons are met.
Service—You must enable the device access and associate the device access rules for the service.
When a packet enters the service, it selects the first device access rule and evaluates the condition. If the 
condition is met, then the service applies the device access rule for the request. If the command that is 
processed matches a command listed in the command set, the service decides on whether to permit the 
command for the user or not based on the permissions set up.
SIGTRAN-M3UA Enhancements
Prime Access Registrar provides the following enhancements for SIGTRAN-M3UA:
Map Restore Data Authorization Support
Prime Access Registrar provides the Map Restore Data functionality to fetch the profile information of 
a subscriber from the HLR. You can configure an M3UA service with the AuthorizationInfoLookUp 
parameter as Map-Restore to use this functionality. The GUI is updated with new fields to support this 
functionality.