Redirecting Subscriber Traffic Using ISG Layer 4 Redirect
How to Configure ISG Layer 4 Redirect
3
When traffic is redirected, ISG modifies the destination IP address and TCP port of upstream packets to
reflect the destination server. For downstream packets, ISG changes the destination IP address and port
to the original packet’s source.
Layer 4 Redirect Applications
The Layer 4 Redirect feature supports the following applications:
•
TCP redirection for unauthenticated users and unauthorized services
HTTP traffic from subscribers can be redirected to a web dashboard where the subscribers can log
on so that authentication and authorization can be performed.
•
Initial and periodic redirection for advertising captivation
Subscriber traffic can be redirected to a sponsor’s web page for a brief period of time at the start of
the session or periodically throughout the session.
•
Redirection of application traffic
Application traffic from a subscriber can be redirected so as to provide value-added services. For
example, a subscriber’s SMTP traffic can be redirected to a local mail server that can function as a
forwarding agent for the mail.
•
Domain Name System (DNS) redirection
DNS queries may be redirected to a local DNS server. In some deployments, such as public wireless
LAN (PWLAN) hotspots, subscribers may have a static DNS server addresses, which may not be
reachable at certain locations. Redirecting DNS queries to a local DNS server allows applications to
work properly without requiring reconfiguration.
How to Configure ISG Layer 4 Redirect
There are three ways to apply Layer 4 redirection to sessions. One way is to configure redirection
directly on a physical main interface or logical subinterface. A second way is to configure a service
profile or service policy map with the Layer 4 redirect attribute in it, and apply that service to the session.
A third way is to configure the Layer 4 redirect attribute in the user profile.
The following tasks describe how to configure Layer 4 redirection. The first task is optional. One or more
of the next three tasks is required. The last task is optional.
For examples of Layer 4 redirection configuration for specific applications (such as unauthenticated user
redirect), see the
“Configuration Examples for ISG Layer 4 Redirect” section on page 9
.
•
Defining a Redirect Server Group, page 3
•
Configuring Layer 4 Redirection on an Interface, page 4
•
Configuring Layer 4 Redirection in a Service Policy Map, page 5
•
Configuring Layer 4 Redirection in a Service Profile or User Profile on the AAA Server, page 7
•
Verifying ISG Traffic Redirection, page 7
Defining a Redirect Server Group
Perform this task to define a group of one or more servers to which traffic will be redirected. Traffic will
be forwarded to servers in a rotating fashion.
Содержание IOS XE
Страница 14: ...About Cisco IOS XE Software Documentation Additional Resources and Documentation Feedback xii ...
Страница 28: ...Using the Command Line Interface in Cisco IOS XE Software Additional Information xiv ...
Страница 36: ...Intelligent Services Gateway Features Roadmap 8 ...
Страница 46: ...Overview of ISG Feature Information for the Overview of ISG 10 ...
Страница 70: ...Configuring ISG Control Policies Feature Information for ISG Control Policies 24 ...
Страница 128: ...Configuring ISG Access for IP Subscriber Sessions Feature Information for ISG Access for IP Subscriber Sessions 44 ...
Страница 136: ...Configuring MQC Support for IP Sessions Feature Information for MQC Support for IP Sessions 8 ...
Страница 194: ...Configuring ISG Policies for Automatic Subscriber Logon Feature Information for ISG Automatic Subscriber Logon 12 ...
Страница 224: ...Configuring ISG Subscriber Services Feature Information for ISG Subscriber Services 20 ...
Страница 336: ...Configuring ISG Integration with SCE Feature Information for Configuring ISG Integration with SCE 16 ...
Страница 344: ...Service Gateway Interface Feature Information for Service Gateway Interface 8 ...