Cisco Systems OL-4387-02 manual Exclude Networks, Mutually Exclusive Service Selection

Chapter 6 Service Connection

Exclude Networks

Prerequisites for SSG Port-Bundle Host Key

The SSG Port-Bundle Host Key feature has the following requirements:

•The Cisco 10000 router supports the SSG Port-Bundle Host Key feature for Cisco SESM Release 3.1(1) or later.

•A default network must be configured and routable from SSG.

Configuration of SSG Port-Bundle Host Key

The port-bundle host key is disabled by default. To enable the host key and enter the SSG port map configuration mode, use the ssg port-map enable command in global configuration mode.

After you enable the host key, perform the following configuration tasks:

•Specify the subscriber traffic to be port-mapped by using the following command in SSG port configuration mode:

Router(config-ssg-port)# destination range start-portto end-port[ip A.B.C.D]

•Specify the SSG source IP addresses by using the following command in SSG port configuration mode:

Router(config-ssg-port)# source ip {interface ip-address}

•Specify the length of the port bundle by using the following command in SSG port configuration mode:

Router(config-ssg-port)# length port-bundlelength

For more information on configuring the SSG Port-Bundle Host Key feature, refer to the

SSG Port-Bundle Host Key, Release 12.2(4)B feature module.

Exclude Networks

The Exclude Networks feature allows you to specify networks to which users cannot automatically log on. To add names to the autodomain download exclusion list, use the download exclude-profilecommand in SSG autodomain configuration mode.

For more information, refer to the SSG AutoDomain, Release 12.2(4)B feature module.

Mutually Exclusive Service Selection

The Mutually Exclusive Service Selection feature restricts a subscriber to accessing only one service at a time in a specified group of services.

A service group is a collection of services defined in a service group profile. A subscription to a service group implies subscription to all of the services in the group. It also implies the ability to select all of the services in the group. However, when a group is defined as mutually exclusive, SESM limits service selection to one service at a time within the group.

Cisco 10000 Series Router Service Selection Gateway Configuration Guide

6-8 OL-4387-02