Aaa Servers - Cisco ASR 5500 System Administration Manual
Hide thumbs
Also See for ASR 5500:
- Administration manual (410 pages) ,
- Installation manual (192 pages) ,
- Installation procedure overview (6 pages)
Table of Contents
Advertisement
System Operation and Configuration
• Home Agent (HA) services
• Layer 2 Tunneling Protocol Access Concentrator (LAC) services
• Dynamic Host Control Protocol (DHCP) services
• Mobility Management Entity (MME) Services
• PDN Gateway (P-GW) Services
• Serving Gateway (S-GW) Services
• Intelligent Policy Control Function (IPCF) Services (PCC-Service, PCC-Policy, PCC-AF)
AAA Servers
Authentication, Authorization and Accounting (AAA) servers store profiles, perform authentication, and
maintain accounting records for each mobile data subscriber. The AAA servers communicate with the system
over an AAA interface. The system supports the configuration of up to 128 interfaces to AAA servers.
It is important to note that for Mobile IP, there can be Foreign AAA (FAAA) and Home AAA (HAAA)
servers. FAAA servers typically reside in the carrier's network. HAAA servers could be owned and controlled
by either the carrier or the home network. If the HAAA server is owned and controlled by the home network,
accounting data is transferred to the carrier via an AAA proxy server.
Important
Subscribers
Subscribers are the end-users of the service; they gain access to the Internet, their home network, or a public
network through the system.
There are three primary types of subscribers:
• RADIUS-based Subscribers: The most common type of subscriber, these users are identified by their
• Local Subscribers: These are subscribers, primarily used for testing purposes, that are configured and
Mobile IP support depends on the availability and purchase of a license bundle that includes Home Agent
(HA).
International Mobile Subscriber Identity (IMSI) number, an Electronic Serial Number (ESN), or by their
domain name or user name. They are configured on and authenticated by a RADIUS AAA server.
Upon successful authentication, various attributes that are contained in the subscriber profile are returned.
The attributes dictate such things as session parameter settings (for example, protocol settings and IP
address assignment method), and what privileges the subscriber has.
Attribute settings received by the system from a RADIUS AAA server take precedence
Important
over local-subscriber attributes and parameters configured on the system.
authenticated within a specific context. Unlike RADIUS-based subscribers, the local subscriber's user
profile (containing attributes like those used by RADIUS-based subscribers) is configured within the
context where they are created.
ASR 5500 System Administration Guide, StarOS Release 21.5
Subscribers
3
Advertisement
Table of Contents
Troubleshooting
