Cisco Systems OL-4387-02 manual Restrictions for SSG Prepaid Idle Timeout

Chapter 3 SSG Logon and Logoff

SSG Prepaid Idle Timeout

Restrictions for SSG Prepaid Idle Timeout

The SSG Prepaid Idle Timeout feature has the following restrictions:

•The Cisco 10000 router supports only time-based SSG Prepaid for a service connection. Quotas are measured in seconds. You cannot change the unit of measure.

•The Cisco 10000 router does not support returning a quota when the connection is idle.

•After a user runs out of quota and then replenishes the quota at the billing server, SSG receives the updated quota and resumes the connection only after the next reauthorization.

Prerequisites for SSG Prepaid Idle Timeout

The SSG Prepaid Idle Timeout feature requires the following:

•You must enable SSG accounting before you can use the SSG Prepaid feature. SSG accounting is enabled by default. If it has been disabled, reenable it by using the ssg accounting command in global configuration mode.

•The SSG Prepaid feature requires the AAA server to support prepaid billing.

•You must configure the SSG to send Attribute 55 in accounting requests.

Configuration of SSG Prepaid Idle Timeout

To configure the SSG Prepaid Idle Timeout feature, configure the SSG Prepaid and SSG TCP Redirect features. For more information, refer to the SSG Prepaid, Release 12.2(4)B feature module and the SSG TCP Redirect for Services, Release 12.2(4)B feature module.

Configuration Example for SSG Prepaid Idle Timeout

Example 3-3shows how to configure the SSG Prepaid feature to provide the prepaid billing server with session ID and time-stamp information.

Example 3-3 SSG Prepaid Service

radius-server attribute 44 include-in-access-req radius-server attribute 55 include-in-acct-req

Example 3-4shows how to configure the SSG TCP Redirect feature. The commands configure a captive portal group called "DefaultRedirectGroup," add two servers to "DefaultRedirectGroup," and redirect prepaid users to the newly created captive portal.

Example 3-4 SSG TCP Redirect

ssg enable

ssg tcp-redirect

server-group DefaultRedirectGroup

server	10.0.0.1 8080
server	10.0.0.20 80
end
redirect	prepaid-user to DefaultRedirectGroup
	Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02		3-5