【正文】 PDSN AAA CSG Service 1 Service 2: Local Multimedia Service 3 QS BMA GET( ? This is the first access to Service 2 by the user CSG needs to obtain quota first SvcAuthReq ? CSG Sends SvcAuthReq(UserName, Service 2) to QS SvcAuthRsp ? QS takes a part of the user’s credit (say, €1), converts it to equivalent number of “bytes” (say, 1Meg) and sends SvcAuthResp(UserName, service2, 1Meg) to CSG. GET( ? CSG forwards the original request to the content server, meters traffic on this connection, and keeps deducting from the 1Meg quota. ? CSG sends billing records (CDRs) to the BMA, either periodically or at the end of the transaction CDR 38 169。 2022 Cisco Systems, Inc. All rights reserved. CSG Billing CSG username Database Billing and Mediation Partners Quota Server Mediation Agent Request quota per service Report used quota Quota Request Src IP Dest IP URL username TOS … Accounting Records XML (optional) 36 169。 2022 Cisco Systems, Inc. All rights reserved. Services Billing Billing Mediation SSG Open Garden Inter Browsing Per packet Per download Per message Per Url Free Charge based on ?Value ?Brand ?Control 34 169。 2022 Cisco Systems, Inc. All rights reserved. CMX Billing SSG Postpaid Billing Accounting START/Accounting STOP are sent to the AAA The RADIUS Accounting Records contain per service volume and time accounting, that can be used by billing systems to bill the user SSG Prepaid Billing Based on the SSG prepaid features Check a subscriber’s available credit to determine whether to connect the subscriber to a service and how long the connection can last SSG interacts with the AAA server and the prepaid billing to determine the quota values and usage When the quota runs out, SSG performs reauthorization 32 169。 Profiling Via Active Middleware To Business Operations 30 169。 2022 Cisco Systems, Inc. All rights reserved. Learning who the subscriber is Accounting messages are “paid attention to” ONLY Other RADIUS messages are passed through to the RADIUS SERVER AAA RADIUS Accounting Proxy RADIUS Accounting Endpoint AAA RADIUS Accounting sent from the AAA (or other RADIUS Proxy) to the CSG ?RADIUS ACCOUNTING START 29 169。 CSG PDSN WLAN Notebook 27 169。 2022 Cisco Systems, Inc. All rights reserved. Mobile Data Services “Gateway” – Network/Content Usage Collection amp。 2022 Cisco Systems, Inc. All rights reserved. Service Summary Host Objects Connection Objects Subscriber INTERNET VOD QUAKE HostObj Service Objects NAT NAT 25 169。 2022 Cisco Systems, Inc. All rights reserved. SSG Service Object Building Blocks Service Object ? Maintains Info about SSG service ? Service Name ? Service IP Domain(s) ? Other Service Attributes 23 169?！? ServiceInfo = “vpdn:l2tptunnelpassword=cisco”, ServiceInfo = “vpdn:ipaddresses=”, ServiceInfo = “vpdn:tunnelid=tunnelxyx”, ServiceInfo = “TT” Tunnel information service type Tunnel RADIUS 21 169。 2022 Cisco Systems, Inc. All rights reserved. SSG Service Access : L2TP ?LAC initiates L2TP tunnel to destination LNS, SSGPPP session is established ?SSGNAT is performed between subscriber’s IP address and LNS assigned IP address ?Traffic is sent out the tunnel virtualaccess interface based on service route definition ?Radius AAA is done by SSG Provider’s local AAA server(RADIUSB) Tunnel (L2TP) Service Type RADIUSA Subscriber Connection LAC LNS RADIUSB Pool: PPP Session IOSNAT SSG 20 169。1813?！? ServiceInfo = “。 2022 Cisco Systems, Inc. All rights reserved. SSG Service Access : ProxyRADIUS The SSG terminates user sessions from hosts to the SSG and makes a virtual Connection from the SSG to the service destination The SSG will Authenticate and Authorize the service via the remote Radius Server. The SSG does NAT if the remote RADIUS user authorization includes IP address ProxyRadius Service Type Web Portal Application Intra Inter Extra RADIUS HTTP TRAFFIC Radius Request Radius Reply(accept/IP) NAT RADIUS SSG 18 169?！? ServiceInfo = ?！? ServiceInfo = “TP” service destination route definition Service Type passthrough RADIUS 16 169。 SSG 15 169。 2022 Cisco Systems, Inc. All rights reserved. SSG Service Access Types Pass Th ro ugh ? Traf fic is forwa rded v ia next ho p ta ble ? AAA is p er forme d by SSG ? NAT is a voided ? Su ite d to st andard Inte r ac cess Prox y ? User is authentica te d to th e r emote se rvice vi a a prox y R ADIUS r equest /re pl y tr ansa ct ion ? Th is se rv i ce ty pe support s NAT ? Wel l s uit e when u se r a uthentic at io n is re qu ire d using R ADIUS Tunnel ? Th e S SG i nitia te s an LT2 P tunn el to the re mote LNS ? User aut hentic at i on is su pporte d using bo th PAP