Chapter 6
Service Connection
Configuration Example for SSG Prepaid
Example 6-4
to the SSG.
Example 6-4
Router(config)# aaa group server radius ssg_prepaid
Router(config-sg)# server 1.2.3.4 auth-port 1645 acct-port 1646
Router(config-sg)# exit
Router(config)# ssg aaa group prepaid ssg_prepaid
SSG Open Garden
An Open Garden is a collection of networks or web sites that subscribers can access as long as they have
physical access to the network. Subscribers do not have to provide authentication information before
accessing the networks in an Open Garden. The network is not restricted by service selection,
subscription, or policing.
Figure 6-1
Figure 6-1
If SSG receives a packet from a subscriber that is destined for the Open Garden, SSG forwards the packet
even if the subscriber is not authenticated. SSG forwards all packets destined for the Open Garden
whether or not the subscriber is authenticated.
If SSG receives a packet from a subscriber that is not destined for the Open Garden and the subscriber
is not authenticated, SSG drops the packet. If the subscriber is authenticated, SSG forwards the packet.
While most SSG services must be bound to an interface or next-hop address, it is not necessary to bind
Open Garden services that are directly connected to the SSG router. Service binding is mandatory,
however, for Open Garden services that are routed through a next-hop address.
For more information, refer to the
OL-4387-02
configures a global prepaid server group named ssg_prepaid and attaches the server group
Attaching a Global Prepaid Server Group to the SSG
shows a network topology that includes Open Garden networks.
Open Garden Network Topology
Open garden 1
SSG
Next-hop gateway
SSG Open Garden, Release 12.2(4)B feature
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
SSG Open Garden
Open garden 2
module.
6-5