BRKOPT-3301-Deploying-Advanced-Subscriber-Manageme

©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr1©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic1BRKOPT-330114453_04_2008_c2©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic2BRKOPT-330114453_04_2008_c2DeployingAdvancedSubscriberManagementUsingIntelligentServiceGatewayBRKOPT-3301©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr2©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic3BRKOPT-330114453_04_2008_c2AgendaƒISGOverviewWhatisISG?NorthboundInterfacesISGSessionsISGServicesCiscoPolicyLanguageƒISGDeploymentModelsandArchitecturesƒISGNorthboundInterfaces–AcloserlookRADIUSRADIUSExtensionsServiceGatewayInterfaceƒStructuredISGConfigurationModel©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic4BRKOPT-330114453_04_2008_c2ISGOverviewƒISGOverviewƒISGDeploymentModelsandArchitecturesƒISGNorthboundInterfaces–ACloserLookƒStructuredISGConfigurationModel©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr3©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic5BRKOPT-330114453_04_2008_c2EvolutioninServiceProviderNetworkArchitecturesIncreasedrevenuebydecreasingcostofmanagingandmaintainingmultiplenetworksIncreasedoverallrevenuebyincreasingrevenueperuser:•customizedservices•rapiddeploymentofnewservicesbasedonmarkettrends•SubscriberSelfCareDiverged“perService”NetworksConverged“allinone”NetworksConverged“perUserperService”Networks©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic6BRKOPT-330114453_04_2008_c2Subscriberidentifiedusingmultipledimensions.Identitygathered:ƒFrommultiplesourcesandeventsƒOversessionlifecycleServicesandRulesupdatedbasedon:ƒHowsubscriberbehavesƒWhatherequiresNOWDifferentServicesandRulesappliedbasedon:ƒWhosubscriberisƒWhereheisƒWhatherequiresTheElementsofCustomizationIdentityIdentityDifferentiatedServicesDifferentiatedServicesDynamicServiceManagementDynamicServiceManagementIntelligentServiceGatewayIntelligentServiceGatewaySubscriberServicesSubscriberSessionsSubscriberServicesSessioncreation/authenticationSessioncreation/authenticationDynamicPolicyPushandPullDynamicPolicyPushandPull©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr4©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic7BRKOPT-330114453_04_2008_c2PolicyServerWhatIsISG?CiscoIntelligentServicesGateway(ISG)isalicensedfeaturesetonCiscoRoutersthatprovidesSessionManagementandPolicyManagementservicestoavarietyofaccessnetworksSubscriberSubscriberIdentityIdentityManagementManagementPolicyPolicyManagementManagementandandEnforcementEnforcementDHCPServer…AAAServerISGISGWebPortalOpenOpenNorthboundNorthboundInterfacesInterfacesSubscriberPolicyLayerSofocal,thattheentiredeviceisoftenreferredasan:IntelligentServiceGatewayrouterorsimply“TheISG”ISGISG©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic8BRKOPT-330114453_04_2008_c2PrimaryISGUseCasesSubscriberdetermineswhichVPNtojoinVPNSelf-SelectionMandatoryWebPortalforunauthenticatedusersWebAuthenticationLimited(guest)accessforunauthenticatedsubscribersOpenGardenRestricted(additionalfee)accessforauthenticatedsubscribersWalledGardenDegradeuserserviceafteramonthlyquotahasbeenexceededFair-UseAllowunknownsubscriberstoregisterthemselvestothenetworkandcollectpaymentinformationSelfSubscriptionAllowindividualsubscriberstomodifythefeatures/policiesappliedtotheiraccountSubscriberSelf-CareOn-Demand,temporaryincreaseinsubscriberbandwidth(volumeortime)TurboButtonDial-upmigration.ForlowspeedBroadbandaccessemulationBroadband-LitePer-subscriberQoStoasession–ClassBasedPolicersandShapers,Marking,QueuingDifferentiated“peruser”QoSPredefinedTiersofServiceLevels–PerSubscriberPerServiceQoSandAccountingTieredServices©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr5©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic9BRKOPT-330114453_04_2008_c2ISG’sPlaceintheNetworkƒSitsattheedgeofthenetworkƒCommunicateswithotherdevicestocontrolallaspectsofsubscriberaccessinthenetworkƒSinglepointofcontactƒSubscriberIdentificationƒSubscriberServicesDeterminationandEnforcementƒDynamicServiceupdateƒPeraccessandperserviceaccountingƒSessionLifecycleManagementWalledGardenOpenGardenGuestPortalAAAServerPolicyServerWebPortalDHCPServerSubscriberPolicyLayerVideoAudioServersInternet/Core©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic10BRKOPT-330114453_04_2008_c2WalledGardenOpenGardenInternet/CoreGuestPortalSubscriberPolicyLayerVideoAudioServersFrontendtowardthesubscriberfor:SelfSubscriptionWebLogonServiceSelection(ApplicationLevelTrigger)WebPortalHandoverofaddressestosubscribersClass-basedaddresshandoverforISGdrivenaddresspoolselectionDHCPServerSubscriberAuthenticationSubscriberAuthorization:UserandServiceProfileRepositoryPeraccessandPerServiceAccountingFront-endtowardbillingsystemAAAServerDynamicPolicyPush(ApplicationLevelTrigger)PolicyServerAAAServer,PolicyServer,WebPortalcanco-resideinthesameapplianceAAAServerPolicyServerWebPortalDHCPServerISG’sSubscriberPolicyLayer©2006,CiscoSystems,Inc.Allrightsreserved.Presentation_ID.scr6©2008CiscoSystems,Inc.Allrightsreserved.CiscoPublic11BRKOPT-330114453_04_2008_c2W