Access-accept (authentication), Access-request (authorization), Access-accept (authorization) – Cisco Cisco Access Registrar 3.5 User Manual

Page 60

Advertising
background image

6-6

Cisco Access Registrar 3.5 Concepts and Reference Guide

OL-2683-02

Chapter 6 Prepaid Billing Solution

Generic Call Flow

Access-Accept (Authentication)

Flow 2b shows the billing server returning the authentication result. The billing server returns a failure
if the prepaid subscriber has an inadequate balance.

Flow 2s shows the Cisco AR 3.5 server sending the Access-Accept to the AAA client. This message flow
contains at least one prepaid billing-specific VSA (listed in

Table 6-3

) and may contain other access

technology-specific attributes.

Access-Request (Authorization)

In Flow 3c, the AAA client sends another Access-Request, this time to authorize the subscriber.

Table 6-4

lists the attributes required by the Cisco AR 3.5 server to authorize the subscriber. The session

key ID used must be specified using a prepaid VSA pointing to the RADIUS attribute (standard or VSA).

.In Flow 3s, the Cisco AR 3.5 server sends the Prepaid billing server to obtain a quota. The quota might
contain several values depending on the number of measurement parameters chosen.

Access-Accept (Authorization)

Flow 4b shows the billing server returning the quota array for the subscriber.

Table 6-3

Attributes Sent to AAA client in Access-Accept (Authentication)

Attribute
Number

Attribute Name

Description

Notes

26, 9

CRB__USER_TYPE

CRB_AR_INIT_AUTHENTICATE

Refer to

Vendor-Specific

Attributes, page 6-10

Optional

Table 6-4

Attributes Sent During Subscriber Authorization

Attribute
Number

Attribute Name

Description

Notes

1

User-Name

APPL: Mobile Node
Username

Required

2

NAS IP Address

Accounting Node IP Address APPL: Required, POA

31

Calling-station-ID

APPL:MSISDN or IMSI

APPL: Conditional

26, 9

CRB_AUTH_REASON
CRB_AR_INIT_AUTHORIZE

Refer to

Vendor-Specific

Attributes, page 6-10

Required

26, 9

CRB_USER_ID

APPL:PDSN address or SSG
address

APPL: Required,
Address of the PDSN

26, 9

CRB_SERVICE_ID

APPL: Service ID such as
Simple IP service, Mobile IP
service, or VPN service

26, 9

CRB_SESSION_ID

This VSA contains the
session key ID information

Required; the session
ID must be globally
unique across all clients
and across reboots of
the client

Advertising