Cisco IOS XE, Configuration Manual, Page: 33 / 358

Intelligent Services Gateway Features Roadmap
5
Cisco IOS XE
Release 2.2 ISG:Policy Control:
Policy Server:
SSG-SESM Protocol ISG supports Cisco’s proprietary protocol to
communicate with the SESM policy server. Cisco SSG-to-ISG DSL
Broadband Migration
Guide
Cisco IOS XE
Release 2.2 ISG:Policy Control:
Service Profiles ISG defines a service as a collection of policies that can
be applied to any subscriber session. Services can be
configured on the router or on an external AAA server. Configuring ISG
Subscriber Services
Cisco IOS XE
Release 2.2 ISG:Policy Control:
RADIUS Proxy
Enhancement The ISG RADIUS proxy feature enables ISG to serve as
a proxy between a client device that uses RADIUS
authentication and a AAA server. ISG RADIUS proxy
functionality enables ISG to “sniff” (look at) the
RADIUS packet flows and, upon successful
authentication, transparently create a corresponding
ISG session. Configuring ISG as a
RADIUS Proxy
Cisco IOS XE
Release 2.2 ISG:Policy Control: User
Profiles ISG user profiles specify services and functionality that
should be applied to ISG sessions for the specified
subscriber. User profiles are defined on an external
AAA server. Overview of ISG
Cisco IOS XE
Release 2.2 ISG:Session: Auth:
PBHK The ISG Port-Bundle Host Key feature serves as an
in-band signaling mechanism for session identification
at external portals. TCP packets from subscribers are
mapped to a local IP address for the ISG gateway and a
range of ports. This mapping allows the portal to
identify the ISG gateway from which the session
originated. Configuring ISG
Port-Bundle Host Key
Cisco IOS XE
Release 2.2 ISG:Session: Auth:
Single Sign-On Single sign-on eliminates the need to authenticate a
session more than once when a subscriber has access to
services provided by other devices in the administrative
domain of the access or service provider. Overview of ISG
Cisco IOS XE
Release 2.2 ISG:Session:
Authentication ISG automatic subscriber logon enables another
specified identifier to be used in place of the username
in authorization requests. Enabling the AAA server to
authorize subscribers on the basis of a specified
identifier allows subscriber profiles to be downloaded
from the AAA server as soon as packets are received
from subscribers. Configuring ISG
Policies for Automatic
Subscriber Logon
Cisco IOS XE
Release 2.2 ISG:Session: Creation:
Interface IP Session: L2 ISG IP interface sessions include all IP traffic received
on a specific physical or virtual interface. IP interface
sessions are provisioned through the CLI; that is, a
session is created when the IP interface session
commands are entered. Configuring ISG Access
for IP Subscriber
Sessions
Cisco IOS XE
Release 2.2 ISG:Session: Creation:
Interface IP Session: L3 ISG IP interface sessions include all IP traffic received
on a specific physical or virtual interface. IP interface
sessions are provisioned through the CLI; that is, a
session is created when the IP interface session
commands are entered. Configuring ISG Access
for IP Subscriber
Sessions
Table 1 Supported ISG Features in Cisco IOS XE Release 2
Release Feature Name Feature Description Where Documented