Cisco Cisco IOS Software Release 12.2(16)B
SSG Prepaid Enhancements
Information About SSG Prepaid Enhancements
4
Cisco IOS Release 12.3(4)T
The prepaid billing server performs authorization based on the same key that was used for
authentication. For example, for mobile wireless networks, where the unique key that is used for
authentication is the Calling-Station-ID attribute (attribute 31), the quota authorization would also be
performed using the Calling-Station-ID attribute.
authentication. For example, for mobile wireless networks, where the unique key that is used for
authentication is the Calling-Station-ID attribute (attribute 31), the quota authorization would also be
performed using the Calling-Station-ID attribute.
The AAA server responds to the Service Authorization Request packet with an Access-Accept packet
that defines the quota parameters for the connection. The Access-Accept packet for a Service
Authorization Request is listed in
that defines the quota parameters for the connection. The Access-Accept packet for a Service
Authorization Request is listed in
. Authorization for a service is provided based on the presence
and contents of the Quota VSA in the Access-Accept packet listed in
If a nonzero quota is returned in the authorization response, SSG creates a connection to the service
using the initial quota value in seconds for time and bytes for volume. A value of zero in a quota means
the user has insufficient credit and is not authorized to use that service; no connection is made. If the
Quota attribute is not present in the authorization response, SSG treats the connection as postpaid.
using the initial quota value in seconds for time and bytes for volume. A value of zero in a quota means
the user has insufficient credit and is not authorized to use that service; no connection is made. If the
Quota attribute is not present in the authorization response, SSG treats the connection as postpaid.
The SSG Prepaid Enhancements feature introduces support for simultaneous time- and volume-based
prepaid billing. The service authorization response can contain both quota types (for time and volume).
That is, the authorization response contains both “QT” and “QV” attributes. SSG starts a quota timer and
continuously monitors the connection with respect to volume. When either the volume or quota tokens
(a token is a unit of quota) runs out, SSG reauthorizes the connection. The next service authorization
prepaid billing. The service authorization response can contain both quota types (for time and volume).
That is, the authorization response contains both “QT” and “QV” attributes. SSG starts a quota timer and
continuously monitors the connection with respect to volume. When either the volume or quota tokens
(a token is a unit of quota) runs out, SSG reauthorizes the connection. The next service authorization
31
Calling-Station-ID
Mobile Station ISDN
Number (MSISDN)
Number (MSISDN)
The username may appear in this field if
the access technology does not provide
an MSISDN.
the access technology does not provide
an MSISDN.
55
Time-Stamp
Time-stamp
44
Acct-Session-ID
Session ID
61
NAS-Port-Type
Asynchronous
(value = 0)
(value = 0)
Table 2
Contents of Service Authorization Request Packet
Attribute ID Attribute Name
Description
Notes
Table 3
Content of Service Authorization Access-Accept Packet
Attribute
Number
Number
Attribute Name
Description
Notes
6
Service-Type
Framed-user
—
26
Vendor-Specific
Quota
Subattribute ID: 253. The value “Q”
indicates that this is the Quota VSA.
indicates that this is the Quota VSA.
Table 4
Quota VSA Elements
Attribute ID Vendor ID
Subattribute
ID and Type
ID and Type
Attribute Name
Subattribute Data
26
9
253
Control-Info
Control-Info
Quota
Q—Control-Info code for prepaid
quota.
quota.
T or V—Quota subcode for time or
volume.
volume.
Numeric string—Quota value.