Cisco Systems OL-4387-02 manual 11-8, Set1 0.0.0.0/0.0.0.0 Set2 10.58.253.0/255.255.255.0 Set3

Chapter 11 Miscellaneous SSG Features

SSG Enhancements for Overlapping Services

Because network sets for services must be unique, the following network sets are defined internally:

Set1

0.0.0.0/0.0.0.0

Set2

10.58.253.0/255.255.255.0

Set3

10.58.254.0/255.255.255.0

Set4

10.58.102.6/255.255.255.255

The service translation mechanism then internally converts the services to the following sets:

Service Default_256

Set1

Service Bronze_256

Set2 and set3

Service Silver_512

Set2, set3, and set4

Service Gold_2048

Set2, set3, and set4

Service Platinum_1024

Set2

Policing of user traffic is based on the service to which the user is assigned. For example, using the services and sets defined above, if user A is subscribed to Default_256 at 256 Kbps, user A traffic is policed at 256 Kbps for all services. If user B is subscribed to Default_256 at 256 Kbps and Platinum_1024 at 1024 Kbps, user B traffic to the service 10.58.253.0/255.255.255.0 is policed at 1024 Kbps, but all other user B traffic is policed at 256 Kbps.

In the previous example, each set contains a single prefix. However, network sets can also contain multiple prefixes. For example, consider the following service definitions:

ssg bind service Bronze_256 <next hop ssg> 10.58.253.0/255.255.255.0 10.58.254.0/255.255.255.0

ssg bind service Default_256 <next hop ssg> 10.58.253.0/255.255.255.0 10.58.254.0/255.255.255.0 10.58.102.6/255.255.255.255 10.58.102.7/255.255.255.255

Based on the service definitions, the service translation mechanism internally defines the following network sets:

Set1

10.58.253.0/255.255.255.0

10.58.254.0/255.255.255.0

Set2

10.58.102.6/255.255.255.255

10.58.102.7/255.255.255.255

Cisco 10000 Series Router Service Selection Gateway Configuration Guide

11-8 OL-4387-02