DIAMETER Attributes. BNG DIAMETER Gx Application AVPs

Transcription

1 DIAETER Attributes BNG Supports DIAETER Gx interface for Policy and Charging Provisioning with the PCRF, and DIAETER Gy interface for Online Charging Service with OCS. This Appendix lists the applicable AVPs in each Diameter Request that is sent or received by BNG, and also some sample packets. BNG DIAETER Gx Application AVPs, on page 1 BNG DIAETER Gy Application AVPs, on page 3 BNG DIAETER NASREQ Application AVPs, on page 4 DIAETER Accounting AVP, on page 7 DIAETER Session-Id AVP, on page 8 RADIUS Attributes in DIAETER essages, on page 9 Sample Packets for BNG DIAETER essages, on page 10 BNG DIAETER Gx Application AVPs The DIAETER interface with BNG is based on the respective latest specifications and Diameter Credit Control Application () standard. The interface remains the same for any DIAETER server vendor, but the user must be aware of the set of AVPs being used to address the BNG-DIAETER deployments and use-cases. This topic lists the BNG DIAETER Gx Application AVPs. Table 1: BNG DIAETER Gx Application AVPs AVP Code Vendor AVP Format essages Source Flags Session-ID 263 Origin-Host-Name 264 Origin-Realm 296 Destination Realm 283 CC-Request-Type 416 CC-Request-Number 415 Auth-Application-ID 258 DIAETER Attributes 1

2 DIAETER Attributes DIAETER Attributes AVP Code Vendor AVP Format essages Source Flags ReAuth-Request-Type 285 RAR Username 1 Framed-IP-Address 8 Address Logical-Access-Id 302 ETSI Octect TS Physical-Access-Id 313 ETSI Octect TS *User-Equipment-Info 458 User-Equipment-Info-Type 459 User-Equipment-Info-Value 460 Result-Code 268 *Charging-Rule-Install 1001, RAR TS , V *Charging-Rule-Definition 1003, RAR TS , V Charging-Rule-Name 1004 Octect, RAR TS , V CC-Service-Identifier 439, RAR Rating-Group 432, RAR *Charging-Rule-Remove 1002 RAR TS Session-Release-Cause 1045 RAR TS Gx-Application-ID CCR Vrf-Id I IPv6-Enable I IP-Unnumbered I Inacl I Ipv6-inacl I Outacl I IPv6-outacl I Sub-Qos-Policy-In I Sub-Qos-Policy-Out I Accounting-List I 2 DIAETER Attributes

3 DIAETER Attributes BNG DIAETER Gy Application AVPs BNG DIAETER Gy Application AVPs This table lists the BNG DIAETER Gy application AVPs. Table 2: BNG DIAETER Gy Application AVPs AVP Code Vendor AVP Format essages Source Flags Session-ID 263 Origin-Host-Name 264 Origin-Realm 296 Destination Realm 283 CC-Request-Type 416 CC-Request-Number 415 Auth-Application-ID 258 ReAuth-Request-Type 285 RAR Username 1 Framed-IP-Address 8 Address *User-Equipment-Info User-Equipment-Info-Type 459 User-Equipment-Info-Value 460 Result-Code 268 Service-Context-Id 461 CCR Event-Time-Stamp 55 CCR CC-ultiple-Service-Support 455 CCR *CC-ultiple-Service 456 CC-Service-Identifier 439, RAR Rating-Group 432, RAR *Requested-Service-Unit CC-Session-Failover *Granted-Service-Unit 431 CC-Tariff-Time-Change 451 CCR-U, DIAETER Attributes 3

4 BNG DIAETER NASREQ Application AVPs DIAETER Attributes AVP Code Vendor AVP Format essages Source Flags CC-Time 420 CC-Input-Octets 412 long CC-Output-Octets 414 long CC-Total-Octets 421 long CC-Tariff-Change-Units 446 CCR-U Reporting-Reason 872 CCR-U Volume-Quota-Threshold 869 TS , V Time-Quota-Threshold 868 TS , V CC-Validity-Time 448 Quota-Holding-Time 871 Credit-Control-Failure-Handling 427 *Final-Unit-Indication 430 Final-Unit-Action 449 Termination-Cause 295 CCR-Final BNG DIAETER NASREQ Application AVPs This table lists the BNG DIAETER NASREQ application AVPs. Table 3: BNG DIAETER NASREQ Application AVPs Value Format Type Framed-IP-Address 8 ipv4addr Framed-IP-Address/ Framed-IP-Netmask 9 ipv4addr Filter-Id 11 binary Framed-TU 12 Framed-Compression 13 enum Reply-essage 18 binary Framed-Route 22 Session-Timeout 27 4 DIAETER Attributes

5 Type Format Value 28 Idle-Timeout 88 Framed-Pool binary 97 Framed-IPv6-Prefix 99 Framed-IPv6-Route 100 Framed-IPv6-Pool binary 123 Delegated-IPv6-Prefix address 135 ip:primary-dns / ip:secondary-dns address addrv vrf-id parent-session-id service-name enum disc-cause-ext disconnect-cause Ascend-Connect-Progress Acct-Unique-Session-Id inacl ipv6_inacl cisco-nas-port outacl ipv6_outacl sub-qos-policy-in sub-qos-policy-out accounting-list parent-if-handle acct-input-gigawords-ipv acct-input-octets-ipv acct-input-packets-ipv acct-output-gigawords-ipv4 DIAETER Attributes 5 DIAETER Attributes DIAETER Attributes

6 Type Format Value acct-output-octets-ipv acct-output-packets-ipv acct-input-gigawords-ipv acct-input-octets-ipv acct-input-packets-ipv acct-output-gigawords-ipv acct-output-octets-ipv acct-output-packets-ipv subscriber:command=account-logon subscriber:sd=service subscriber:sa=service subscriber:sm= svc1(interim-interval=120) ip:ip-unnumbered=<loopback> enum ipv4:ipv4-multicast=qos Correlation ip:keepalive dual-stack-delay idle-timeout-direction idlethreshold ipv4:ipv4-mtu ipv6:ipv6-mtu address md-ip-addr md-port md-dscp li-action binary intercept-id enum cisco-mpc-protocol-interface=pmipv cisco-mobile-node-identifier enum cisco-mn-service DIAETER Attributes 6 DIAETER Attributes DIAETER Attributes

7 DIAETER Attributes DIAETER Accounting AVP Value Format Type home-lma DIAETER Accounting AVP This table lists the DIAETER Accounting AVPs that describe accounting usage information related to a specific session and for a service. AVP Accounting-Record-Type Command Code 480 Description Contains the type of accounting record being sent. This is similar to Acct-Status-Type RADIUS AVP. These are the values currently defined for the Accounting-Record-Type AVP: 1 - EVENT_RECORD 2 - START_RECORD 3 - INTERI_RECORD 4 - STOP_RECORD Accounting-Record-Number Accounting-Sub-Session-Id Identifies the record within one session. For a given BNG session, START_RECORD carries the value 0 (zero) and it increases for the subsequent Accounting-Request for the same BNG Session. Contains the accounting sub-session identifier. The combination of the Session-Id and this AVP must be unique for each sub-session, and the value of this AVP must be increased by one for all new sub-sessions. Note This is not supported in BNG. AVP Considerations These AVPs are considered to be security-sensitive: Acct-Interim-Interval DIAETER Attributes 7

8 DIAETER Session-Id AVP DIAETER Attributes Accounting-Realtime-Required Acct-ulti-Session-Id Accounting-Record-Number Accounting-Record-Type Accounting-Session-Id Accounting-Sub-Session-Id Class Session-Id Session-Binding Session-Server-Failover User-Name DIAETER Session-Id AVP The Session-Id AVP (AVP code 263) is of type UTF8 and is used to identify a specific diameter application session. All messages pertaining to a given BNG subscriber session have the same Session-Id and uses the same value throughout the life of the session. The Session-Id AVP must appear immediately after the DIAETER header and it optimizes the session association while parsing the request or response. The Session-Id AVP includes a mandatory portion and an implementation-specific portion. The syntax for this AVP is: DiameterIdentity;high 32 bits;low 32 bits;optional value Table 4: Syntax Description DiameterIdentity Used to identify either: A DIAETER node for the purpose of duplicate connection and routing loop detection. A realm to determine whether the messages can be processed locally or whether they must be routed or redirected. high 32 bits low 32 bits Decimal representation of the high and low 32 bits of a increasing 64-bit value. BNG uses Session-Id (Acct-Session-ID) which is of 32 bits as of now and hence the high 32 bits is 0 (Zero) to start with. To make the DIAETER Session-Id unique, the high 32 bits is increased every time after a router reload or in process restart scenarios (such as DIAETER process restart) where the previous Session-Id is lost. This eliminates the possibility of overlapping Session-Ids in such scenarios. 8 DIAETER Attributes

9 DIAETER Attributes RADIUS Attributes in DIAETER essages optional value This is implementation specific, and it may include a Layer 2 address, timestamp and so on. BNG uses the timestamp that is retrieved when the first request is being sent to the DIAETER server for each application. The first message for NASREQ is AA-Request, and for D application, it is nitial request. The subsequent messages carry the same timestamp for the given BNG subscriber session to ensure that the same Session-Id is used in the entire span of the respective DIAETER application session. This is an example of DIAETER Session-Id AVP (with an optional value): BNG1.example.com; ;523;BNG1@ This is an example of DIAETER Session-Id AVP (without an optional value): BNG1.example.com; ;523 RADIUS Attributes in DIAETER essages A DIAETER message may include RADIUS attributes, except the ones listed in this table. These RADIUS attributes, if present, are translated internally to similar DIAETER AVPs. RADIUS Attribute RADIUS Attribute Name CHAP-Password Vendor-Specific Termination-Action Acct-Status-Type Acct-Input-Octets Acct-Output-Octets Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause Acct-Input-Gigawords Acct-Output-Gigawords essage-authenticator Nearest DIAETER AVP CHAP-Auth Group Vendor Specific AVP Authorization-Lifetime Accounting-Record-Type Accounting-Input-Octets Accounting-Output-Octets Accounting-Input-Packets Accounting-Output-Packets Termination-Cause Accounting-Input-Octets Accounting-Output-Octets No corresponding DIAETER AVP. If this attribute is present, it is checked and discarded. DIAETER Attributes 9

10 Sample Packets for BNG DIAETER essages DIAETER Attributes Sample Packets for BNG DIAETER essages This topic lists the sample packets for BNG DIAETER messages. GX - nitial essage from BNG to PCRF Session-Id [263] "cisco123.com; a;0" () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () CC-request-type [416] ccr-initial () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] () User-name [1] prepaid-user () Framed-IP-Address [8] () User-Equipment-Info [458] User-Equipment-Info-Type [459] AC (1) () User-Equipment-Info-Value [460] 0219.a220.e809 () GX - -Initial essage from PCRF to BNG Session-Id [263] "cisco123.com; a;0" () Result-code [268] 2001 () Auth-Application-ID [258] () Origin-host-name [264] "pcrf.cisco.com" () Origin-Realm [296] "cisco.com" () Destination-Realm [283] "cisco.com" () CC-request-type [416] ccr-initial () CC-request-number [415] 0 () Charging-Rule-Install [1001] () Charging-Rule-Definition [1003] () Charging Rule Name [1005] "HSI_10B" () CC-service-identifier [439] 5 () Rating group [432] 3 () Gx - Application RA-Request essage Session-Id [263] "cisco123.com; a;0" () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () Re-Auth-Request-Type [285] AUTHORIZE_ONLY (0) () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] Gx ( ) () Charging Rule Remove [1002] Charging Rule Name [1005] "HSI_10B" () () Charging Rule Install [1001] Charging-Rule-Definition [1003] () 10 DIAETER Attributes

11 DIAETER Attributes DIAETER Attributes Charging Rule Name [1005] "LOW_BW128KB" () CC-service-identifier [439] 6 () Rating group [432] 4 () Gx - Application RA-Answer essage Session-Id [263] "cisco123.com; a;0" () Result-code [268] 2001 () Auth-Application-ID [258] Gx ( ) () Origin-host-name [264] "pcrf.cisco.com" () Origin-Realm [296] "cisco.com" () Destination-Realm [283] "cisco.com" () Gx - RA-Request essage to Release the Session Session-Id [263] "cisco123.com; a;0" () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () Re-Auth-Request-Type [285] AUTHORIZE_ONLY (0) () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] Gx ( ) Session-Release-Cause [1045] UNSPECIFIED_REASON () Gy - nitial essage Session-Id [263] "cisco123.com; a;0" () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () CC-request-type [416] ccr-initial () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] 4 () User-name [1] prepaid-user () Service_Context_Id [461] "32251@3gpp.org () Framed-IP-Address [8] () Event-Timestamp [55] () CC-ultiple-service-support [455] multiple-service-supported () CC-multiple-service [456] CC-service-identifier [439] 5 () Rating group [432] 3 () CC-requested-service-unit [437] User-Equipment-Info [458] User-Equipment-Info-Type [459] AC (1) () User-Equipment-Info-Value [460] 0219.a220.e809 () Gy - -Initial essage Session-Id [263] "cisco123.com; a;0" () Result-code [268] 2001 () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () CC-request-type [416] ccr-initial () CC-request-number [415] 0 () DIAETER Attributes 11

12 DIAETER Attributes DIAETER Attributes Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] 4 () User-name [1] prepaid-user () Framed-IP-Address [8] () Event-Timestamp [55] () CC-session-failover [418] NOT_SUPPORTED (0) () CC-multiple-service [456] Granted-Service-Unit [431] CC-Tariff-Time-Change [451] 10:10:10 Thu Dec () CC-Total-Octets [414] 1000 () Volume-Quota-threshold [869] 10 Rating-Group [432] 3 () Service-Identifier [439] 5 () CC-validity-time [448] 1000 () Result-code [268] 2001 () Quota-Holding-Time [871] () Credit-Control-Failure-Handling [427] CONTINUE (1) () Gy - CCR-Update essage Session-Id [263] " cisco123.com; a;0" () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () Auth-Application-ID [258] 4 () CC-request-type [416] ccr-update () CC-request-number [415] 1 () Service_Context_Id [461] "bng1@cisco.com () Framed-IP-Address [8] () User-Name [1] "prepaid-user" () Event-Timestamp [55] () Destination-Realm [283] "cisco.com" () CC-multiple-service [456] CC-rating-group [432] 3 () Service-Identifier [439] 5 () Used-Service-Unit [446] CC-Time [420] 1 () Reporting- Reason [872] QUOTA_EXHAUSTED (3) () Used-Service-Unit [446] CC-Total-Octets [421] 2 () Reporting-Reason [872] QUOTA_EXHAUSTED (3) () CC-Input-Octets [412] 1 () CC-Output-Octets [414] 1 () User-Equipment-Info [458] User-Equipment-Info-Type [459] AC (1) () User-Equipment-Info-Value [460] 0219.a220.e809 () CCR-Update essage with Tariff Change Units CC-multiple-service [456] CC-rating-group [432] 3 () Service-Identifier [439] 5 () CC-Service-Unit [446] CC-Time [420] 166 () CC-tariff-change-units [452] units-before-tariff-change () CC-Service-Unit [446] CC-Total-Octets [421] 264 () 12 DIAETER Attributes

13 DIAETER Attributes DIAETER Attributes CC-Input-Octets [412] 132 () CC-Output-Octets [414] 132 () CC-tariff-change-units [452] units-before-tariff-change () CC-Service-Unit [446] CC-Time [420] 129 () CC-tariff-change-units [452] units-after-tariff-change () CC-Service-Unit [446] CC-Total-Octets [421] 132 () CC-Input-Octets [412] 66 () CC-Output-Octets [414] 66 () CC-tariff-change-units [452] units-after-tariff-change () Gy - -Update essage Session-Id [263] "cisco123.com; a;0" () Result-code [268] 2001 () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () CC-request-type [416] ccr-update () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] 4 () CC-session-failover [418] NOT_SUPPORTED (0) () CC-multiple-service [456] Granted-Service-Unit [431] CC-Tariff-Time-Change [451] 10:10:10 Thu Dec () CC-Total-Octets [414] 1000 () CC-final-unit-indication [430] Final-Unit-Action [449] 0 (Terminate) () Volume-Quota-threshold [869] 10 Rating-Group [432] 3 () Service-Identifier [439] 5 () Result-code [268] 2001 () Quota-Holding-Time [871] () Quota-Validity-Time [448] () Credit-Control-Failure-Handling [427] CONTINUE (1) () Gy - Sample RAR Packet Session-Id [263] "bng;167; " () Origin-host-name [264] "diameter1.cisco.com" () Origin-Realm [296] "cisco.com" () Destination-Realm [283] "cisco.com" () Destination host name [293] "diamclient1.cisco.com" () Auth-Application-ID [258] 4 () Re-Auth-Request-Type [285] Authorize-Only () Gy - Sample RAA Packet Session-Id [263] "bng;167; " () Result-code [268] 2001 () Origin-Realm [296] "cisco.com" () Origin-host-name [264] "diamclient1.cisco.com" () Origin-host-name [264] "diamclient1.cisco.com" () DIAETER Attributes 13

14 DIAETER Attributes DIAETER Attributes Origin-Realm [296] "cisco.com" () Gy - CCR-Final essage Session-Id [263] "63; A; " () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () Auth-Application-ID [258] 4 () CC-request-type [416] ccr-final () CC-request-number [415] 3 () Service_Context_Id [461] "bng1@cisco.com () Framed-IP-Address [8] () User-Name [1] "prepaid-user" () Event-Timestamp [55] () Termination_Cause [295] Diameter Administrative () Destination-Realm [283] "cisco.com" () CC-multiple-service [456] CC-rating-group [432] 3 () Service-Identifier [439] 5 () Used-Service-Unit [446] Reporting-Reason [872] FINAL (2) () CC-Time [420] 1 () Used-Service-Unit [446] Reporting-Reason [872] FINAL (2) () CC-Total-Octets [421] 2 () CC-Input-Octets [412] 1 () CC-Output-Octets [414] 1 () Gy - -Final essage Session-Id [263] "cisco123.com; a;0" () Result-code [268] 2001 () Origin-host-name [264] "cisco123.com" () Origin-Realm [296] "cisco.com" () CC-request-type [416] ccr-final () CC-request-number [415] 0 () Destination-Realm [283] "cisco.com" () Auth-Application-ID [258] 4 () CC-session-failover [418] NOT_SUPPORTED(0) () Credit-Control-Failure-Handling [427] CONTINUE (1) () 14 DIAETER Attributes