Cisco Systems OL-4387-02 Example 6-1 SSG AutoDomain, Example 6-3 AutoDomain Exclude File Format

Chapter 6 Service Connection

SSG AutoDomain

Example 6-1 SSG AutoDomain

ssg auto-domain mode extended

select called-station-id nat user-address

download exclude-profile ssg-auto-domain-exclude-profile cisco exclude apn cisco

exclude domain motorola

Example 6-2shows the format for defining a new vendor-specific attribute, SSG Control-Info VSA(253), which is required for the AutoDomain exclude profile on the AAA server.

Example 6-2 AutoDomain Exclude Profile SSG VSA Format

code: 253, 'X' len: > 4

+-+-+-+-+-+-+-+-+-+-+...-+ ab c defp g +-+-+-+-+-+-+-+-+-+-+...-+

a = 26 (Radius attribute for vendor specific)

b= len (length of the Radius vendor-specific)

c= 9 (Cisco vendor ID)

d= 253 (sub-attribute ID for Service-Info)

e= len (length of the vendor-specific filter)

p= 'X' (Excluded Name List Entry Flag)

g= "A<apn-name>" or (Add this name to APN exclude list) "D<domain-name>" (Add this name to Domain name exclude list)

Example 6-3shows a sample configuration for an AutoDomain exclude file.

Example 6-3 AutoDomain Exclude File Format

user = ssg-auto-domain-exclude-profile{ radius=SSGDictionary { check_items= {

2=cisco

}

reply_attributes= { 9,253="XDcisco" 9,253="XDmotorola" 9,253="XAalcatel" 9,253="XAnokia"

}

}

}

Cisco 10000 Series Router Service Selection Gateway Configuration Guide

OL-4387-02 6-3