Cisco Systems OL-4387-02 manual SSG Open Garden, Configuration Example for SSG Prepaid

Chapter 6 Service Connection

SSG Open Garden

Configuration Example for SSG Prepaid

Example 6-4configures a global prepaid server group named ssg_prepaid and attaches the server group to the SSG.

Example 6-4 Attaching a Global Prepaid Server Group to the SSG

Router(config)# aaa group server radius ssg_prepaid

Router(config-sg)#server 1.2.3.4 auth-port 1645 acct-port 1646

Router(config-sg)# exit

Router(config)# ssg aaa group prepaid ssg_prepaid

SSG Open Garden

An Open Garden is a collection of networks or web sites that subscribers can access as long as they have physical access to the network. Subscribers do not have to provide authentication information before accessing the networks in an Open Garden. The network is not restricted by service selection, subscription, or policing.

Figure 6-1shows a network topology that includes Open Garden networks.

Figure 6-1 Open Garden Network Topology

Open garden 1

SSG

Open garden 2

Next-hop gateway

62669

If SSG receives a packet from a subscriber that is destined for the Open Garden, SSG forwards the packet even if the subscriber is not authenticated. SSG forwards all packets destined for the Open Garden whether or not the subscriber is authenticated.

If SSG receives a packet from a subscriber that is not destined for the Open Garden and the subscriber is not authenticated, SSG drops the packet. If the subscriber is authenticated, SSG forwards the packet.

While most SSG services must be bound to an interface or next-hop address, it is not necessary to bind Open Garden services that are directly connected to the SSG router. Service binding is mandatory, however, for Open Garden services that are routed through a next-hop address.

For more information, refer to the SSG Open Garden, Release 12.2(4)B feature module.

Cisco 10000 Series Router Service Selection Gateway Configuration Guide

OL-4387-02 6-5