Cisco OL-4387-02 Configuration Manual page 78

SSG Enhancements for Overlapping Services
Because network sets for services must be unique, the following network sets are defined internally:
Set1
0.0.0.0/0.0.0.0
Set2
10.58.253.0/255.255.255.0
Set3
10.58.254.0/255.255.255.0
Set4
10.58.102.6/255.255.255.255
The service translation mechanism then internally converts the services to the following sets:
Service Default_256
Set1
Service Bronze_256
Set2 and set3
Service Silver_512
Set2, set3, and set4
Service Gold_2048
Set2, set3, and set4
Service Platinum_1024
Set2
Policing of user traffic is based on the service to which the user is assigned. For example, using the
services and sets defined above, if user A is subscribed to Default_256 at 256 Kbps, user A traffic is
policed at 256 Kbps for all services. If user B is subscribed to Default_256 at 256 Kbps and
Platinum_1024 at 1024 Kbps, user B traffic to the service 10.58.253.0/255.255.255.0 is policed at
1024 Kbps, but all other user B traffic is policed at 256 Kbps.
In the previous example, each set contains a single prefix. However, network sets can also contain
multiple prefixes. For example, consider the following service definitions:
ssg bind service Bronze_256 <next hop ssg>
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
ssg bind service Default_256 <next hop ssg>
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
10.58.102.6/255.255.255.255
10.58.102.7/255.255.255.255
Based on the service definitions, the service translation mechanism internally defines the following
network sets:
Set1
10.58.253.0/255.255.255.0
10.58.254.0/255.255.255.0
Set2
10.58.102.6/255.255.255.255
10.58.102.7/255.255.255.255
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
11-8
Chapter 11 Miscellaneous SSG Features
OL-4387-02