Table of Contents
Advertisement
SSG Prepaid Idle Timeout
Service Authorization
SSG sends a service authorization request to the billing server upon initial service authorization. Explicit
service authorization is required whenever a user attempts to connect to a prepaid service to ensure that
the user has sufficient credit to connect to that service. The billing server responds with the available
quota (allotment of prepaid credit) to SSG. If the returned available quota is greater than zero or not
present, SSG allows the user to connect to the service and begins metering based on the allotted quota.
For this authorization, an Access-Request is generated once the service is identified as a prepaid service.
The Access-Request is generated for service authorization regardless of the service type (for example,
virtual private dial-up network (VPDN), passthrough, proxy, or tunnel).
The billing server responds to the service authorization Access-Request with an Access-Accept that
defines the quota parameters for the connection. Authorization for a service is provided based on the
presence and content of the Quota (Attribute 26) and the Idle Timeout (Attribute 28) vendor-specific
attributes (VSAs) in the Access-Accept.
Service Reauthorization
SSG sends a service reauthorization request to the billing server at the following times:
•
•
•
The SSG Prepaid Idle Timeout feature enables you to configure how traffic is handled during
reauthorization. By default, traffic continues during reauthorization. If the billing server returns a zero
quota in the reauthorization response, SSG disconnects the connection but the data that was in progress
during the reauthorization goes through and is not accounted. You can configure SSG to either drop or
forward traffic during reauthorization. You can also configure a threshold value, which configures SSG
to reauthorize a connection with the billing server before a prepaid user's allocated quota is completely
consumed.
By configuring the ssg prepaid reauthorization drop-packet command, SSG drops the traffic on a
connection during reauthorization and the time used during the reauthorization is not accounted to that
connection. SSG deducts the reauthorization times from the total session duration time and sends the
Account Session Time (Attribute 46) in the Accounting Stop and Update packets.
If the billing server responds with a time-based connection to redirect the traffic, then SSG redirects
TCP traffic. The time of the TCP redirection is also not accounted to the user's connection.
The reauthorization request for SSG Prepaid Idle Timeout is similar to the reauthorization request for
SSG Prepaid. However, the SSG Prepaid Idle Timeout reauthorization request contains an additional
attribute: Reauthorization Reason. If the Reauthorization Reason attribute is not present, the billing
server assumes that the reason for the reauthorization request is Primary Quota Consumed. The values
of the Reauthorization Reason attribute are the following:
•
•
For more information, refer to the
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
3-4
When a prepaid user's quota is consumed
After the configured idle timeout expires
When the user's remaining quota reaches the configured threshold value
Quota Consumed (QR0)
Idle Timer Expired (QR1)
SSG Prepaid Idle Timeout, Release 12.2(15)B feature
Chapter 3
SSG Logon and Logoff
module.
OL-4387-02
Advertisement
Table of Contents
