Applies To:Show Versions
- 14.0.1, 14.0.0, 13.1.4, 13.1.3, 13.1.1, 13.1.0
Overview: Provisioning dynamic subscribers
If you have subscribers that are managed on a separate policy charging and rules function (PCRF), you can connect the BIG-IP® system to that policy server to provision dynamic subscribers. Dynamic subscribers are subscribers that are managed by a PCRF.
The BIG-IP system receives traffic from GGSN, a gateway between the GPRS mobile network and the Internet. When a subscriber makes a request that is routed to the BIG-IP system, the Policy Enforcement Manager™ queries the PCRF over a Gx interface. The PCRF responds with information about the subscriber. This information is stored on the BIG-IP system, which recognizes the subscriber in future requests.
You can use dynamic subscriber provisioning alone or in combination with static subscribers.
Provisioning dynamic subscribers
On the Main tab, click
.The Date Plane Listeners screen opens.
Click Data Plane.
The Data Plane screen opens.
Click Add Group.
The New Virtual Group screen opens.
- In the Name field, type a unique name for the listener.
In the Destination Address field, type the IP address of the
virtual server. For example, 10.0.0.1 or
Note: When you use an IPv4 address without specifying a prefix, the BIG-IP® system automatically uses a /32 prefix.Tip: You can use a catch-all virtual server (0.0.0.0) to specify all traffic that is delivered to the BIG-IP® system. Configure the source and destination setting, during forwarding mode only. In the relay mode, the client does not have an IP address and the DHCP provides the client with an IP address.The system will create a virtual server using the address or network you specify.
- For the Service Port setting, type or select the service port for the virtual server.
From the Protocol list, select the protocol of the traffic for
which to deploy enforcement policies (TCP,
UDP, or TCP and UDP).
The system will create a virtual server for each protocol specified.
To use network address translation, from the Source Address
Translation list, select Auto Map.
The system treats all of the self IP addresses as translation addresses.
- For the VLANs and Tunnels setting, move the VLANs and tunnels that you want to monitor from the Available list to the Selected list.
- For the VLANs and Tunnels setting, move the VLANs and tunnels that you want to monitor for RADIUS traffic from the Available list to the Selected list.
In the Policy Provisioning area, select enforcement policies to apply to the
The system applies the global policy to all subscribers in parallel with the subscriber policies, and must be configured with unknown subscriber policy. High-precedence global policies override conflicting subscriber policies, and low-precedence policies are overridden by conflicting subscriber policies.
For Global Policy, move policies to apply to all subscribers
to High Precedence or Low Precedence.
Note: For URL categorization to take effect, you need to associate the enforcement policy with a classification profile.
- For Unknown Subscriber Policy, move policies to use if the subscriber is unknown to Selected.
- For Global Policy, move policies to apply to all subscribers to High Precedence or Low Precedence.