Cisco Systems OL-4387-02 Network Router User Manual


 
6-5
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02
Chapter 6 Service Connection
SSG Open Garden
Configuration Example for SSG Prepaid
Example 6-4 configures a global prepaid server group named ssg_prepaid and attaches the server group
to the SSG.
Example 6-4 Attaching a Global Prepaid Server Group to the SSG
Router(config)# aaa group server radius ssg_prepaid
Router(config-sg)# server 1.2.3.4 auth-port 1645 acct-port 1646
Router(config-sg)# exit
Router(config)# ssg aaa group prepaid ssg_prepaid
SSG Open Garden
An Open Garden is a collection of networks or web sites that subscribers can access as long as they have
physical access to the network. Subscribers do not have to provide authentication information before
accessing the networks in an Open Garden. The network is not restricted by service selection,
subscription, or policing.
Figure 6-1 shows a network topology that includes Open Garden networks.
Figure 6-1 Open Garden Network Topology
If SSG receives a packet from a subscriber that is destined for the Open Garden, SSG forwards the packet
even if the subscriber is not authenticated. SSG forwards all packets destined for the Open Garden
whether or not the subscriber is authenticated.
If SSG receives a packet from a subscriber that is not destined for the Open Garden and the subscriber
is not authenticated, SSG drops the packet. If the subscriber is authenticated, SSG forwards the packet.
While most SSG services must be bound to an interface or next-hop address, it is not necessary to bind
Open Garden services that are directly connected to the SSG router. Service binding is mandatory,
however, for Open Garden services that are routed through a next-hop address.
For more information, refer to the SSG Open Garden, Release 12.2(4)B feature module.
Open garden 1
Open garden 2
Next-hop gateway
SSG
62669