Cisco Subscriber EdgeOL-4565-01

A P P E N D I X BPlug and Play Call Flow Sequence Diagrams

This appendix contains sequence diagrams for the following scenarios: Redirection of Subscribers Using Web Proxy, page B-2 Subscribers Requesting an Unresovable DNS Name, page B-3B-1 Services Manager Plug and Play Guide

Appendix B Plug and Play Call Flow Sequence DiagramsRedirection of Subscribers Using Web ProxyRedirection of Subscribers Using Web Proxy

1.2.1.1: Set permanenttcp-redirection to the SESM WebProxy

1.2.2.1.1: Permanenttcp-redirection to SESM CaptivePortal unauthenticated redirectionport

1.2:[not authenticated] //Sessiontcp-redirect

1: HTTP request to configured WebProxy

The SESM web portal uses the headers inserted by

com-cisco-sesm-RemoteAddress: com-cisco-sesm-RemotePort: To determine the IP address of the client.

The forwarded request here has the client IP addressand remote port added to the header as the Ciscospecific headers: com-cisco-sesm-RemoteAddress: com-cisco-sesm-RemotePort:

1.2.1: Detect Web Proxy request

1.2.2: HTTP redirect to Web Portal

1.2.2.1.2.1.1: HTTP response to browser with authentication page

1.2.2.1.2.1: Forwarded HTTPrequest to the Web Portal

1.2.2.1.2: Redirected HTTPrequest to Web Proxy

1.2.2.1: HTTP request to WebPortal via configured Web Proxy

Here the browser is making a request to a IP address thatwill not be reachable as thereis no session, or is not routable in general.

the web proxy:

Browser Gateway Captive Portal Web Portal Web Proxy

9931

6

1.1: Record source IP address,source port, destination IPaddress and destination port.B-2Cisco Subscriber Edge Services Manager Plug and Play Guide

OL-4565-01

Appendix B Plug and Play Call Flow Sequence DiagramsSubscribers Requesting an Unresovable DNS NameSubscribers Requesting an Unresovable DNS Name

The gateway should be configured with an open garden server similar to this:

local-profile DNSattribute 26 9 251 "O*" attribute 26 9 251 "D192.168.10.1"attribute 26 9 251 "R192.168.10.0;255.255.255.0"

Where 192.168.10.1 should be the IP address of the DNS proxyAny DNS request for a domain will match the domain confighere, so should be redirected to the DNS proxy. The DNSproxy should forward the request to the primary DNS server.

Client Gateway DNS Proxy Primary DNS Server

1.1.1: Proxy request toprimary DNS server

1.1: Redirect requests todefault DNS servers

1.1.2:[no ip address in reply]//Insert IP address of web proxy into reply

1: DNS request

9931

5B-3Cisco Subscriber Edge Services Manager Plug and Play Guide

OL-4565-01

Appendix B Plug and Play Call Flow Sequence DiagramsSubscribers Requesting an Unresovable DNS NameB-4Cisco Subscriber Edge Services Manager Plug and Play Guide

OL-4565-01

Plug and Play Call Flow Sequence DiagramsRedirection of Subscribers Using Web ProxySubscribers Requesting an Unresovable DNS Name

/ColorImageDict > /JPEG2000ColorACSImageDict > /JPEG2000ColorImageDict > /AntiAliasGrayImages false /CropGrayImages true /GrayImageMinResolution 300 /GrayImageMinResolutionPolicy /OK /DownsampleGrayImages true /GrayImageDownsampleType /Bicubic /GrayImageResolution 300 /GrayImageDepth -1 /GrayImageMinDownsampleDepth 2 /GrayImageDownsampleThreshold 1.50000 /EncodeGrayImages true /GrayImageFilter /DCTEncode /AutoFilterGrayImages true /GrayImageAutoFilterStrategy /JPEG /GrayACSImageDict > /GrayImageDict > /JPEG2000GrayACSImageDict > /JPEG2000GrayImageDict > /AntiAliasMonoImages false /CropMonoImages true /MonoImageMinResolution 1200 /MonoImageMinResolutionPolicy /OK /DownsampleMonoImages true /MonoImageDownsampleType /Bicubic /MonoImageResolution 1200 /MonoImageDepth -1 /MonoImageDownsampleThreshold 1.50000 /EncodeMonoImages true /MonoImageFilter /CCITTFaxEncode /MonoImageDict > /AllowPSXObjects false /CheckCompliance [ /None ] /PDFX1aCheck false /PDFX3Check false /PDFXCompliantPDFOnly false /PDFXNoTrimBoxError true /PDFXTrimBoxToMediaBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXSetBleedBoxToMediaBox true /PDFXBleedBoxToTrimBoxOffset [ 0.00000 0.00000 0.00000 0.00000 ] /PDFXOutputIntentProfile () /PDFXOutputConditionIdentifier () /PDFXOutputCondition () /PDFXRegistryName () /PDFXTrapped /False

/Description > /Namespace [ (Adobe) (Common) (1.0) ] /OtherNamespaces [ > /FormElements false /GenerateStructure true /IncludeBookmarks false /IncludeHyperlinks false /IncludeInteractive false /IncludeLayers false /IncludeProfiles true /MultimediaHandling /UseObjectSettings /Namespace [ (Adobe) (CreativeSuite) (2.0) ] /PDFXOutputIntentProfileSelector /NA /PreserveEditing true /UntaggedCMYKHandling /LeaveUntagged /UntaggedRGBHandling /LeaveUntagged /UseDocumentBleed false >> ]>> setdistillerparams> setpagedevice