Multiservice Activation In An Access-Accept Message - Cisco 10000 Series Configuration Manual

Dynamic Multiservice Activation and
Deactivation
This chapter describes dynamic activation and deactivation of multiple services using RADIUS
Access-Accept and change of authorization (CoA) messages. It consists of the following topics:
•
•

Multiservice Activation in an Access-Accept Message

An access-request message is sent by a RADIUS client to a RADIUS server to verify/authenticate the
user/subscriber profile included in the message. If the user or subscriber profile is acceptable, the
RADIUS server returns an Access-Accept message. If the profile is unacceptable, the RADIUS server
returns an Access-Reject message.
To enable multiservice activation, the Access-Accept message may include multiple Cisco generic
VSA 250 (SSG_ACCOUNT_INFO) entries with each VSA specifying a service name to be activated.
RSIM Format
vsa cisco generic 250 string "Aservice-name1"
vsa cisco generic 250 string "Aservice-name2"
vsa cisco generic 250 string "Aservice-name3"
RADIUS Format
07:06:23.234: RADIUS: Received from id 1645/36 11.12.13.2:1645, Access-Accept, len 112
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
07:06:23.238: RADIUS:
Upon receipt of the Access-Accept message, the specified services are extracted and each service is
activated serially. If a service activation fails, all unprocessed services from the Access-Accept message
are ignored, and any services from the Access-Accept message which have been activated are
deactivated.
For Cisco IOS Release 12.2(31)ZV only, a specific format has been adopted to nominate QoS policies
in a VSA 250 message.
OL-14660-03
Multiservice Activation in an Access-Accept Message, page 3-1
Multiservice Activation or Deactivation in CoA Message, page 3-4
authenticator 92 C5 A2 F2 24 56 37 1E - 74 F4 C6 92 B0 E8 92 4C
Vendor, Cisco
ssg-account-info
Vendor, Cisco
ssg-account-info
Vendor, Cisco
ssg-account-info
Cisco 10000 Series Router Access Network Control Protocol Configuration Guide
C H A P T E R
[26] 23
[250] 17 "Aservice-name-1"
[26] 23
[250] 17 "Aservice-name-2"
[26] 23
[250] 17 "Aservice-name-3"
3
3-1