Manual Chapter :
About Subscriber and Policy Provisioning
Applies To:
Show VersionsBIG-IP PEM
- 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0
About Subscriber and Policy Provisioning
Overview: Subscriber and policy provisioning
The Policy Enforcement Manager™ (PEM™) is flexible in
extracting Attribute Value Pair (AVPs) from Radius and encoding AVPs to and from PCRF. This
solves interoperability issues to a larger extent. The configuration includes creation of RADIUS
and Gx protocol profiles. The RADIUS AVPs, diameter AVPs, as well as manually defined parameters
can be stored as subscriber attributes in the BIG-IP® system.
Subscriber and policy provisioning addresses the following factors:
- Different AVPs in RADIUS accounting messages are extracted and mapped to subscriber attributes for the session. This is used for subscriber identity, additional subscriber characterization related to network type, location and so on, and their changes. For example, RAT-Type, 3GPP-Location-Info, 3GPP-SGSN-Address, or allowing discovery of certain events included and covered by the accounting process.
- Add AVPs specified in CCR-I, CCR-u, CCR-T and RAA messages and also extract AVPs from CCA-I, CCA-U and RAR. For example, one can configure to send multiple Subscription-ID read over RADIUS to PCRF.
- Custom policy decisions from AVPs can be made with use of extracted parameters. For example, Operator can configure policy based on RAT-type (2G/3G/4G) or any custom AVP extracted of the subscriber.
- Extracted parameters can be inserted in to reporting records over HSL and Gx.
Task summary
Configuring RADIUS
in PEM profile
You can create a custom PEM RADIUS protocol
profile and add a message defining how the RADIUS message is to be processed in the
Policy Enforcement Manager. Radius messages configured on subscribers can be in, out or
any direction.
- On the Main tab, click.The Configuration screen opens.
- ClickCreate.The New RADIUS Profile screen opens.
- In theNamefield, type a unique name for the profile.
- In theDescriptionfield, type optional descriptive text for the profile.
- From theSubscriber ID Typelist, select an option which the identifier represents when the subscriber session is created.OptionsSubscriber ID TypeE164A number that defines the format of an MSISDN international phone number (up to 15 digits).NAIA fully qualified network name that identifies a subscriber and the home network to which the subscriber belongs.IMSIA globally unique code number, that identifies a GSM, UMTS, or LTE mobile phone user.PrivateThe subscriber ID type is private for the given deployment.
- From theSubscriber ID Listlist, in theSubscriber ID Namesetting, type the subscriber ID name.Enabled.
- From theSubscriber ID Listlist, in theOrdersetting, type the order of RADIUS AVPs when constructing the subscriber ID.
- From theSubscriber ID Listlist, in theRADIUS AVPsetting, select the value of RADIUS AVP which you have used to create the subscriber ID.
- From theSubscriber ID Listlist, in thePrefixsetting, type the suffix string to be added to THE extracted subscriber ID attribute that is specified in the RADIUS AVP for the subscriber session created.
- From theSubscriber ID Listlist, in theSuffixsetting, type the suffix string when constructing subscriber ID with the value of the RADIUS AVP.
- To configure the RADIUS Message, clickCreate & Add RADIUS Message.The Policy Enforcement Manager creates a new RADIUS message page, where you can configure the AVP List.
- ClickFinished.
You have created a custom RADIUS profile.
Configuring RADIUS
AVP in PEM profile
You can create a RADIUS AVPs that could be used to
extract RADIUS attributes for subscriber sessions. PEM already has a list of predefined
standard AVP attributes already defined as part of configuration.
- On the Main tab, click.The RADIUS AVP screen opens.
- ClickCreate.The Subscriber Attribute Properties screen opens.
- In theNamefield, type a unique name for the profile.
- In theDescriptionfield, type optional descriptive text for the profile.
- From theData Typelist, select an option for the data type of the RADIUS AVP.OptionsData Type3GPP RAT TypeThe value format to be encoded or decoded as the 3GPP-RAT-Type defined in 3GPP TS 29.061.3GPP User Location InformationThe value format to be encoded or decoded as the 3GPP-User-Location-Info defined in 3GPP TS 29.061.IP AddressThe Account Status Type AVP is set to 3 (Interim-Update).IPv4 AddressThe IPv4 address in network byte order.IPv6 AddressThe IPv6 address in network byte order.IntegerThe 32-bit unsigned integer in network byte order.OctetThe TF-8 text [RFC3629], totaling 253 octets or less in length.StringThe binary data, totaling 253 octets or less in length. This includes the opaque encapsulation of data structures defined outside of RADIUS.TimeThe 32-bit unsigned value in network byte order and in seconds since 00:00:00 UTC, January 1, 1970.
- In theMinimum Lengthfield, type the minimum data length of the RADIUS AVP. The default value is0.
- In theMaximum Lengthfield, type the maximum data length of the RADIUS AVP. The default value is0.
- In theVendor ID Lengthfield, type the vendor ID of the RADIUS VSA. Type the default value is1045.
- In theVendor Typefield, type the vendor type of the RADIUS VSA. The default value is20.
- In theTypefield, type of the RADIUS AVP. The default value is26.
- ClickFinished.
You have created RADIUS AVP that help with policy decisions.
Configuring RADIUS
message
You can configure the RADIUS message in the
previously created Policy Enforcement Manager (PEM) RADIUS protocol profile, to extract
AVPs for the subscriber session creation in the ingress direction. PEM provides the list
of RADIUS messages which are populated with well known standard AVPs that are extracted
to create attributes, in the subscriber session. To apply mapping between RADIUS AVPs TO
PEM subscriber attributes, create mapping between each RADIUS AVP.
- On the Main tab, click.The RADIUS AVP screen opens.
- In theNamefield, type a unique name for the profile.
- From theDirectionlist, in theAVP Listsetting, selectAny,InorOutto process the radius message in both ingress and egress, ingress or egress direction respectively.
- From the Message Type list, select an option which the identifier represents when the subscriber session is created.OptionsMessage TypeAccounting Request StartThe Account Status Type AVP is set to 1 (Start).Accounting Request StopThe Account Status Type AVP is set to 2 (Stop).Accounting Request Interim UpdateThe Account Status Type AVP is set to 3 (Interim-Update).
- To apply mapping between RADIUS AVPs and PEM subscriber attributes configure the actions you want to implement.
- In theAVPfield, type the name of the application service to which the AVP belongs.
- In theDefaultfield, type the default value that is used in the subscriber session, if the RADIUS message is not present.
- From theIngresslist, select theImportoption for the RADIUS AVP to be parsed and the value to be stored in the subscriber attribute. The default value isNone.
- From theRADIUS AVPlist, select the name of the RADIUS AVP. The default value isNone.
- From theSubscriber Attributelist, select the name of the subscriber session attribute to be mapped to RADIUS AVP. The default value isNone.
- ClickFinished.
You have created a custom RADIUS message.
Configuring Diameter in PEM profile
You can create a custom Diameter protocol
profile and add a message which is defined as the Gx Credit-Control-Request (CCR), in
any direction.
- On the Main tab, click.The Configuration screen opens.
- ClickCreate.The New Diameter Profile screen opens.
- In theNamefield, type a unique name for the profile.
- In theDescriptionfield, type optional descriptive text for the profile.
- From theSubscriber ID Typelist, select an option which the identifier represents when the subscriber session is created.OptionsSubscriber ID TypeE164A number that defines the format of an MSISDN international phone number (up to 15 digits).NAIA fully qualified network name that identifies a subscriber and the home network to which the subscriber belongs.IMSIA globally unique code number, that identifies a GSM, UMTS, or LTE mobile phone user.PrivateThe subscriber ID type is private for the given deployment.
- From theDiameter AVPlist, in theSubscriber IDsetting, select the Diameter AVP.
- From theType AVPlist, in theSubscriber IDsetting, select the AVP that is specified in message that should be matched.
- To configure the Diameter Message, clickCreate & Add Diameter Message.The Policy Enforcement Manager creates a new Diameter protocol profile message.
- ClickFinished.
You have created a custom Diameter
profile.
Configuring Gx
message
You can configure the Gx message in the Policy
Enforcement Manager. The message is defined as RADIUS accounting on the ingress
direction.
- In theNamefield, type a unique name for the profile.
- From theDirectionlist, in theAVP Listsetting, selectAny,InorOutto process the radius message in both ingress and egress, ingress or egress direction respectively.
- From the Message Type list, select the message type.
- From theAVP Listsetting, apply mapping of Diameter AVPs to subscriber session attribute for specific Gx message, by configuring the following:
- In theAVP Namefield, type the name of the application service to which the AVP belongs.
- In theDefaultfield, type the diameter AVP default value.
- From theProtected Flaglist, selectEnabledto choose the value of the protected flag, in the diameter AVP, when the message is inserted. This flag only applies to diameter AVP in outgoing message.The parent AVP inherits flags of child AVPs.
- From theMandatory Flaglist, selectEnabledto choose the value of the mandatory flag, in the diameter AVP, when the message is inserted. This flag only applies to diameter AVP in outgoing message.
- From theVendor-Specific Flaglist, selectEnabledto choose the value of the vendor-specific flag, in the diameter AVP, when the message is inserted. This flag only applies to diameter AVP in outgoing message.
- From theDiameter AVPlist, select the name of a configured diameter AVP. The default value isNone.
- In theParent Labelfield, type the name of a parent label which groups AVPs that can be combined.The AVPs with the same parent-label are combined in the same grouped AVP.
- From theSubscriber Attributelist, select the name of a configured subscriber session attribute. The default value isNone.
- From theInclude Interim Messagelist, selectEnabledfor the AVP to be included in the interim-message (ccr-u only) updates which are generated if there is any change related to session parameters.This flag only applies to Diameter AVP in outgoing message.
- From theInclude Reporting Messagelist, selectEnabledfor the AVP to be included in the reporting message (ccr-u only) updates which are generated for reporting usage information.This flag only applies to Diameter AVP in outgoing message.
- ClickFinished.
You have created a custom Gx message.
Configuring
Subscriber Attributes in PEM profile
You can configure subscriber attributes in PEM
profile. The subscriber attributes are used for storing values imported from RADIUS or
DIAMETER and manually or iRule set of values for further use.
- On the Main tab, click.The Subscriber Attributes screen opens.
- ClickCreate.The Subscriber Attribute Properties screen opens.
- In theNamefield, type a unique name for the profile.
- In theDescriptionfield, type optional descriptive text for the profile.
- From theImportlist, selectEnabledfor the subscriber attribute to be imported (parsed) from the incoming messages. The default value isNone.
- From theExportlist, selectEnabledfor the subscriber attribute to be exported (inserted) to the outgoing messages. The default value isEnabled.
- From theWell Known Attribute IDlist, select an option for an identifier of a well-known (built-in) subscriber attribute.The system provides a special handling for well-known subscriber attributes. Session reporting records have the most well-known attributes by default.
- ClickFinished.
You have created a subscriber attribute in PEM profile.
Configuring
Diameter AVP in PEM profile
You can configure Diameter AVP, that can be used
in Gx messages.
- On the Main tab, click.The Diameter AVP screen opens.
- ClickCreate.The Diameter AVP Properties screen opens.
- In theNamefield, type a unique name for the profile.
- In theDescriptionfield, type optional descriptive text for the profile.
- From theParent AVPlist, selectNonefor name of the parent AVP, if it is in a grouped AVP.
- In theAVP Codefield, type the AVP code of the diameter AVP.
- From theData Typelist, select the data type of the diameter AVP. The default value isOctet String.
- In theLengthfield, type the data length of the diameter AVP.
- In theVendor IDfield, type the vendor ID of the diameter Vendor Specific Attribute (VSA).
- ClickFinished.
You have configured Diameter AVP.