To: BlueCrab who wrote (16850 ) 11/13/1999 6:41:00 PM From: Sector Investor Respond to of 42804
I thought I was done, but Kaka added more while I was doing the last two posts. More form Yahoo! "The OSS Database. The basis of the OSS is a subscriber database that is maintained locally or in conjunction with a Radius server. The subscriber records include access and provisioning information, IP addressing information and path information. A subscriber record can be accessed by user-name/password, an IP address, or a VPI/VCI permanent virtual circuit identifier. The access information includes user-ID and password data and access-control information that will work with content filtering to limit access to specific locations. For example, a residence with multiple users might have one user with full internet access while the children in the family might have a list of sites whose access was prohibited to them. The service provisioning characteristics of the subscriber record include Quality of Service (QoS) data, bandwidth allocation parameters, and time-of-day service data. For example, a child in a residence may have his access to the ineternet blocked between 7pm and 8am. The QoS options that are offered within the Red-C OSS include ATM QoS and traffic shaping and priority queuing. Prioritization of traffic can be managed according to network protocol, incoming interface, source/destination address, port and mask. There are 8 levels of priority. With this, a provider can offer service levels based on traffic type. For example, voice traffic can be queued at a higher priority than e-mail. By adding priority queuing to ATM QoS, a provider has another way to enhance his service options to subscribers. The Red-C OSS offers both Weighted Random Early Detection (WRED) and Weighted Fair Queuing (WFQ) options for priority queuing. One of the subscriber attributes is the type of queuing service that will be enabled for his sessions." "Random Early Detection (RED) was one of the first congestion avoidance methods employed. This queuing method is recommended for router software implementations that will connect to the Internet.WRED is an enhanced version of RED that allows one to take into account the priority of a packet. A priority/ class must be assigned to a packet before it can be determined how it is treated as it is passed through the router; WRED makes the best attempt to allot queuing resources according to priority. The weight factor or value associated with a priority/class is used when computing the average queue length. The weight can either be used to effect the maximum threshold value or actually slow the rate of increase of the average queue size of higher priority packets. Weighted Fair Queuing (WFQ) gives low volume traffic flows preference and then allocates the higher-volume traffic to the remaining amount of capacity. The fairness aspect ensures that larger volume traffic flows do not starve off smaller volume traffic. Security is another feature of the OSS. Secure tunnels with hardware IPSec or L2TP are feature selections for subscribers in the OSS that provide secure access between the user and its destination. This is a particularly important feature for subscribers who connect to their corporation through the Red-C. The system also provides a Secure ARP service. This service responds to subscriber ARP requests only if they arrive with proper source information. They must originate from the IP source address of the subscriber record and must be received on the correct path. This eliminates the potential of spoof attacks. The IP addressing information can be used to determine the manner in which the IP addresses are assigned to the subscriber. This can be static through the Dynamic Host Configuration Protocol (DHCP), or with Network Address Translation (NAT). Thus a subscriber may have a pernmanent IP address, one that is assigned to the session through IPCP negotiation I PPP, or one(s) that are associated with a permanent virtual circuit (PVC). In the case of PVC, a pool of addresses can be specified so that multiple users can be identified within one session. The subscriber is associated with a Virtual Network Partition (VNP) that runs as a virtual router in the Red-C System. Each partition has its own routing protocol (Static Routes, RIP, OSPF, or BGP-4). No information is shared between VNPs. This partitioning can enable the Red-C provider to support the subscribers of different providers. For example, this gives a provider the ability to offer different services particular to a particular ISP (e.g. billing and access control) and maintain administrative control for that ISP access. These services would be associated with the partition. Subscribers who were users of this ISP would be assigned to the partition. This partitioning also gives a subscriber the opportunity to sign up for multiple services. For example, the subscriber could have a service for one ISP in partition A and another service for access to his corporation in partition B. The matching of subscriber to partition is accomplished with the user logon.""The architectural overview of the Red-C System is shown in the following diagram. [Use your imagination here: Partition Record with {Radius attributer, Admin Info, DHCP Options, Access Control List, Interface List and Accounting Options} connected to Virtual Network Partition with Virtual Router over Interface and Circuit, with inputs from Subscriber Record {DHCP/NAT, IP Access Group, IP ARP, IP Source Validation, Username, Password, PPP MTU Size, Rate Limit, ATM Profile (Buffers, Counters, CLP Bit, Service Type (UBR, VBR, CBR)}] When a subscriber logs onto the system with PPP or PPPoE (PPP over Ethernet), the subscriber record is accessed either locally, or through Radius attributes. There is a matching Radius Attribute for every attribute in the local database. The decision to use the local database or Radius is an attribute of the partition. The subscriber's call related attributes are associated with a Circuit or a Call for accumulating status and statistics. The access attributes are associated with an interface within the partition"