Cisco ISG/SSG module
The Cisco ISG/SSG module is used together with the ISG/SSG gateway as a RADIUS-server of authorization and tariffication, making it possible to create the so called ISG/SSG-service profiles and serves for setting of SSG/ISG service profiles. Technological service parameters, sent to the ISG/SSG gateway, can be set in profiles.
In accordance with the Cisco specification the following types of services are supported.
| Pass-through | It is used for Internet access. The gateway can redirect traffic to any interface of a network appliance by way of usual routing or next hop gateway table. The content of the next hop gateway table can be set in Billmaster. |
| Transparent pass-through | It opens non-tariffed access to services for customers. It can be used, for example, to access content servers, as well as for integration of ISG/SSG into network, where tariffication is performed by other means. |
| Proxy service | Access to services of third party operators. The ISG/SSG gateway redirects authorization requests to a third party AAA-server, the address of which shall be specified in Billmaster. |
| Tunnel
| The ISG/SSG gateway supports tunneling protocol Layer 2 Tunnel Protocol (L2TP) and can create tunnels. |
Authorization
Authorization can be performed in Billmaster, and for third party operators – on their AAA-servers. During first accessing of external resources by customers the SSG/ISG gateway redirects requests to the SESM web-portal, which opens a page with a request to enter login and password. The data entered are then forwarded to the gateway, and from there – to Billmaster.
Billmaster identifies customers and confirms authorization, as well as returns technological parameters of services, available to a customer. The gateway redirects the information about available services into SESM, and the latter builds the service selection menu. Customers connect to services and after that the gateway requests in Billmaster quotas for these services (maximum possible duration of sessions or available volume of traffic).
Billmaster calculates quotas based on customer’s balance and different parameters. After quotas exhaust the gateway does not disconnect the customer, but performs service reauthorization, i.e. requests quotas again. If customer’s funds are sufficient, Billmaster gives new quotas, and the session continues.
Tariffication
Tariff plans SSG/ISG give the following opportunities:
- calculation of session cost by time and the cost of incoming/outgoing traffic taking into account tariffication schedules;
- one-time payments for ISG/SSG services, i.e. disconnect services through the web-portal, payment for reconnection is not charged;
- subscription fee charging;
- one-time charges.
