Cisco IOS XE, Configuration Manual

Page: 324 / 358

Configuring ISG Integration with SCE
How to Configure ISG Integration with SCE
4
How to Configure ISG Integration with SCE
Before configuring ISG and SCE integration, verify that you have configured ISG for control and access
policies, accounting, session maintenance, and network access regulation. Details on all these
configurations are found in the
Cisco IOS XE Intelligent Services Gateway Configuration Guide.
It is also necessary to have the SCE configured appropriately. Instructions for configuring the SCE are
in the
Cisco Service Control Engine (SCE) Software Configuration Guide, Release 3.1 .
Perform the following tasks to configure ISG integration with SCE:
•
Configuring Communication Between SCE and ISG, page 4
• Configuring SCE Connection Parameter on ISG, page 6
•
Configuring Control Policy on the Policy Manager, page 7
• Configuring Services, page 9
Configuring Communication Between SCE and ISG
Communication between the SCE and the ISG device is managed by an external policy delegation (EPD)
handler module in Cisco IOS software. The EPD implements the control bus on the ISG and handles all
messaging between the ISG device and SCE. Details of communications between the ISG and AAA
servers are found in the
Cisco IOS Intelligent Services Gateway Configuration Guide. This task is
necessary to establish the parameters for the communication between the ISG device and the SCE,
including the following:
• Port to which CoA messages are sent from the ISG device and SCE
•
Port on which ISG should receive access, accounting, and connection management requests from
SCE
• Shared secret between the ISG device and SCE
To configure communication between SCE and the ISG device, enter the following commands on the
ISG device.
SUMMARY STEPS
1. enable
2. configure terminal
3. aaa server radius {sesm | proxy | policy-device}
4.
client ipaddress [port coa destination port] [key shared secret]
5. authentication port port number
6.
accounting port port number
7. key shared secret
8. exit