AW: [cisco-bba] SESM & 7301's

[p.gaspar at mobilkom.at]

Hi,

the protocol between SSG and SESM is actualy RADIUS with few vendor-specific
attributes in the packets. SESM should be able to work with LDAP but I can't
say anything more as I was never interested in the services part of the SSG
installation. There exists an API for programing your own interaction with
SSG, so you don't need to use SESM if you can develope your own solution
(that will cooperate with LDAP)

More info can be found under:
http://www.cisco.com/en/US/products/sw/netmgtsw/ps4889/products_installation
_and_configuration_guide_chapter09186a00801b124e.html#1045039

Peter
 

> -----Ursprüngliche Nachricht-----
> Von: cisco-bba-bounces at puck.nether.net
> [mailto:cisco-bba-bounces at puck.nether.net]Im Auftrag von Gordon Smith
> Gesendet: Mittwoch, 14. April 2004 21:31
> An: Cisco bba list (E-mail)
> Betreff: [cisco-bba] SESM & 7301's
> 
> 
> Hmm... seems like my mail client wants a holiday... I'd 
> better try again  :-)
> 
> I have a requirement for an aggregation solution for 
> broadband customers.
> The aggregation devices should be able to do on-the-fly 
> manipulation of customer connections e.g. dynamically reduce 
> their allocated bandwidth when a data cap is reached.
> Customer self-service is also desired.
> 
> The same devices will also be terminating VoIP traffic and 
> applying diff-serv tags.
> 
> I've been informed that combining the SESM software with SSG 
> enabled routers will allow us to do this, because SESM uses a 
> proprietary protocol to talk to the SSG routers, but there 
> appears to be no info at all on Cisco's site relating to this 
> proprietary protocol. What I'm after is tcp ports etc that 
> need to be allowed through in order for this to work.
> 
> Basically, what we're wanting to do is create a Cisco 
> equivalent of the Juniper ERX/SDX system i.e. cutomer driven, 
> dynamic rate limits (without forcing a disconnect), worm 
> mitigation, etc.
> 
> I understand that the SESM needs to run in SPE mode - has 
> anyone ever got it working with OpenLDAP?
> 
> Cheers,
> Gordon
> 
> _______________________________________________
> cisco-bba mailing list
> cisco-bba at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
>