Cisco Cisco Packet Data Interworking Function (PDIF) Guía Para Resolver Problemas
Understanding the Service Operation and Configuration
Terminology ▀
Cisco ASR 5000 Series Packet Data Serving Node Administration Guide ▄
OL-22939-01
Subscribers
Subscribers are the end-users of the service who gain access to the Internet, their home network, or a public network
through the system. There are three primary types of subscribers/users:
through the system. There are three primary types of subscribers/users:
RADIUS-based Subscribers: The most common type of subscriber, these users are identified by their
International Mobile Subscriber Identity (IMSI) number, an Electronic Serial Number (ESN), or by their
domain name or user name and are configured on and authenticated by a RADIUS AAA server.
domain name or user name and are configured on and authenticated by a RADIUS AAA server.
Upon successful authentication various attributes (contained in the subscriber profile) are returned that dictate
such things as session parameter settings (e.g. protocol settings, IP address assignment method, etc.), and what
privileges the subscriber has (e.g. Simple IP, Mobile IP, etc.).
such things as session parameter settings (e.g. protocol settings, IP address assignment method, etc.), and what
privileges the subscriber has (e.g. Simple IP, Mobile IP, etc.).
Attribute settings received by the system from a RADIUS AAA server take precedence over local-subscriber
attributes and parameters configured on the system.
attributes and parameters configured on the system.
Local Subscribers: These are subscribers, primarily used for testing purposes, that are configured and
authenticated within a specific context. Unlike RADIUS-based subscribers, the local subscriber‘s user profile
(containing attributes like those used by RADIUS-based subscribers) is configured within the context where
they are created.
(containing attributes like those used by RADIUS-based subscribers) is configured within the context where
they are created.
When local subscriber profiles are first created, attributes for that subscriber are set to the system's default
settings. The same default settings are applied to all subscriber profiles including the subscriber named default
(created automatically by the system for each system context; refer to the Default Subscribers and Realm-based
Subscriber Templates section for more information). When configuring local profile attributes, the changes are
made on a subscriber-by-subscriber basis.
settings. The same default settings are applied to all subscriber profiles including the subscriber named default
(created automatically by the system for each system context; refer to the Default Subscribers and Realm-based
Subscriber Templates section for more information). When configuring local profile attributes, the changes are
made on a subscriber-by-subscriber basis.
Attributes configured for local subscribers take precedence over context-level parameters. However, they could
be over-ridden by attributes returned from a RADIUS AAA server.
be over-ridden by attributes returned from a RADIUS AAA server.
Management Subscribers: A management user is an authorized user who can monitor, control, and configure the
system through its command line interface (CLI) or Web Element Manager application. This management can
be performed either locally, through the system‘s console port, or remotely through the use of the Telnet or
secure shell (SSH) protocols. Management users are typically configured as a local subscriber within the
localout-of-band management context, which is used exclusively for system management and administration.
Like a local subscriber, the management subscriber‘s user profile is configured within the context where they
are created (in this case the localout-of-band management context). However, management subscribers may
also be authenticated remotely via RADIUS, if a AAA configuration exists within the localout-of-band
management context.
be performed either locally, through the system‘s console port, or remotely through the use of the Telnet or
secure shell (SSH) protocols. Management users are typically configured as a local subscriber within the
localout-of-band management context, which is used exclusively for system management and administration.
Like a local subscriber, the management subscriber‘s user profile is configured within the context where they
are created (in this case the localout-of-band management context). However, management subscribers may
also be authenticated remotely via RADIUS, if a AAA configuration exists within the localout-of-band
management context.
Default Subscribers and Realm-based Subscriber Templates
Used for RADIUS-based subscribers, default subscribers – created on a per context basis, and subscriber templates –
optionally created on per realm basis, contain default AAA attributes that can be used by subscribers who are remotely
authenticated within a specific context or domain alias (AAA realm) when needed.
optionally created on per realm basis, contain default AAA attributes that can be used by subscribers who are remotely
authenticated within a specific context or domain alias (AAA realm) when needed.
Default Subscriber
When each context is created, the system automatically creates a subscriber named default. There is only one default
subscriber per context. The profile for the subscriber named default provides a configuration template of attribute values
subscriber per context. The profile for the subscriber named default provides a configuration template of attribute values