Cisco Systems OL-15491-01 appendix Endpoint, 118

Appendix A CSG2 Command Reference

ip csg radius endpoint

	secret-string	1- to 64-character clear password value for MD5 authentication. All characters
		are valid; case is significant.
		The secret-stringis always sent in plain text to the CSG2 module when the
		configuration is downloaded.
		The secret-stringmust match the secret that is specified on the RADIUS client
		(for example, the gateway general packet radio service [GPRS] support node
		[GGSN]).
	vrf sub-vrf-name	(Optional) Virtual Routing and Forwarding (VRF) table which the subscriber is
		to use for RADIUS communication.
Defaults	The secret-stringis stored in plain text.
	If no VRF table is specified for the CSG2, the CSG2 uses the global routing table for RADIUS
	communication.
	If no VRF table is specified for the subscriber, the subscriber uses the global routing table for RADIUS
	communication.
Command Modes	Global configuration
Command History	Release	Modification
	12.4(11)MD	This command was migrated from CSG1.
		Changes from CSG1:
		• The name of this command changed from radius endpoint to ip csg radius
		endpoint.
		• The configuration mode for this command changed from module CSG
		configuration to global configuration.
		• The vrf csg-vrf-nameand vrf sub-vrf-namekeywords and arguments were
		added.
		• The table table-namekeyword and argument were removed.
Usage Guidelines	A RADIUS Accounting message sent to the specified csg-address(and any port) is parsed, and is then
	acknowledged, by the CSG2.

CSG2 User Table entries created as a result of RADIUS messaging through the ip csg radius endpoint definition with a VRF configured are indexed by the configured sub-vrf-name. This enables the CSG2 to segment the subscriber space and removes ambiguity if multiple subscribers share the same IP address, provided that their entries were instantiated by RADIUS flows to CSG2 radius definitions bound to different VRFs. If the sub-vrf-nameis not configured, the User Table entries are indexed via the global routing table.

To change the RADIUS endpoint csg-vrf-nameor sub-vrf-nameassociated with a given csg-address, you must first enter the no form of the ip csg radius endpoint command for that csg-address, then enter the command with the new csg-vrf-nameor sub-vrf-name.

	Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide
A-118	OL-15491-01