Cisco Cisco Packet Data Gateway (PDG) Guida Alla Risoluzione Dei Problemi
Service Configuration Procedures
Configuring the Destination Context Attribute ▀
Cisco ASR 5000 Series Access Service Network Gateway Administration Guide ▄
OL-22953-01
Configuring the Destination Context Attribute
Once a user is authenticated, an AAA attribute is returned in the access-accept message that contains the name of the
destination context where the subscriber originates. For RADIUS-based subscribers, this is the SN-VPN-Name attribute,
or SN1-VPN-Name attribute in some RADIUS dictionaries.
destination context where the subscriber originates. For RADIUS-based subscribers, this is the SN-VPN-Name attribute,
or SN1-VPN-Name attribute in some RADIUS dictionaries.
The system supports subscriber profiles configured locally within a context though subscriber templates or on a
RADIUS server. Configure subscribers on the system within the contexts in which they were created. Refer to the
System Operation and Configuration chapter of this document for a discussion of the role of subscriber default, which is
automatically configured for each context, and realm-based subscriber templates, which serve as a default subscriber
template for users whose domain portion of their username matches a domain alias within a context. These special
subscriber templates provide a set of default attributes that you can use to populate missing values for an authenticated
RADIUS-based subscriber. The parameter that contains this attribute value is called the ip context-name.
RADIUS server. Configure subscribers on the system within the contexts in which they were created. Refer to the
System Operation and Configuration chapter of this document for a discussion of the role of subscriber default, which is
automatically configured for each context, and realm-based subscriber templates, which serve as a default subscriber
template for users whose domain portion of their username matches a domain alias within a context. These special
subscriber templates provide a set of default attributes that you can use to populate missing values for an authenticated
RADIUS-based subscriber. The parameter that contains this attribute value is called the ip context-name.
The System Operation and Configuration chapter also explains that you must manually configure these attributes for
both the subscriber default template and any created realm-based subscriber template.
both the subscriber default template and any created realm-based subscriber template.
One of the rules you must configure is a parameter that allows subscriber data traffic to be routed between source and
destination contexts. This section provides instructions for configuring that rule. Refer to the Command Line Interface
Reference for information pertaining to other subscriber profile parameters.
destination contexts. This section provides instructions for configuring that rule. Refer to the Command Line Interface
Reference for information pertaining to other subscriber profile parameters.
These instructions assume that you are at the root prompt for the Exec mode:
Step 1
Enter the configuration mode by entering:
The following prompt appears:
Step 2
Enter the context configuration mode:
context_name is the name of the system source context designated for Default subscriber configuration. The name must
be from 1 to 79 alpha and/or numeric characters and is case sensitive.
be from 1 to 79 alpha and/or numeric characters and is case sensitive.
The following prompt appears:
Step 3
Enter the subscriber configuration mode for the Default subscriber by entering the following command: