Subscriber aware service chaining
To configure service chaining for the above deployment by using the CLI
add ns ip 192.168.10.1 255.255.255.0 -type snip
add ns ip 192.168.20.1 255.255.255.0 -type snip
add ns ip 192.168.30.1 255.255.255.0 -type snip
add ns ip 192.168.40.1 255.255.255.0 -type snip
add ns ip 192.168.50.1 255.255.255.0 -type snip
add ns ip 192.168.60.1 255.255.255.0 -type snip
add ns ip 100.1.1.1 255.0.0.0 -type snip
add ns ip 200.201.1.1 255.0.0.0 -type snip
add vlan 10
add vlan 20
add vlan 30
add vlan 40
add vlan 50
add vlan 60
add vlan 100
add vlan 200
bind vlan 10 -ifnum 1/4 -tagged -IPAddress 192.168.10.1 255.255.255.0
bind vlan 20 -ifnum 1/4 -tagged -IPAddress 192.168.20.1 255.255.255.0
bind vlan 20 -ifnum 1/4 -tagged -IPAddress 192.168.30.1 255.255.255.0
bind vlan 20 -ifnum 1/4 -tagged -IPAddress 192.168.40.1 255.255.255.0
bind vlan 20 -ifnum 1/4 -tagged -IPAddress 192.168.50.1 255.255.255.0
bind vlan 20 -ifnum 1/4 -tagged -IPAddress 192.168.60.1 255.255.255.0
bind vlan 100 -ifnum 1/2 -tagged -IPAddress 100.1.1.1 255.0.0.0
bind vlan 200 -ifnum 1/3 -tagged -IPAddress 200.201.1.1 255.0.0.0
set ns param -servicePathIngressVLAN 100
set subscriber gxinterface -servicepathAVP 1001 1005 -servicepathVendorid 10415
set subscriber param -interfaceType RadiusAndGx
add service sd1 10.102.232.200 DIAMETER 3868
add lb vserver vdiam DIAMETER 0.0.0.0 0 -persistenceType DIAMETER -persistAVPno 263
bind lb vserver vdiam sd1
set ns diameter -identity netscaler.sc1.net -realm pcrf1.net
set subscriber gxInterface -vServer vdiam -pcrfRealm pcrf1.net -holdOnSubscriberAbsence YES -idleTTL 1200 -negativeTTL 120
add service srad1 10.102.232.236 RADIUSListener 1813
set subscriber radiusInterface -listeningService srad1
-
PCRF does not have the subscriber information.
-
The subscriber information does not include this AVP.
-
The appliance is unable to query the PCRF. For example, the service representing the PCRF is DOWN.
add ns servicefunction SF1 -ingressVLAN 20
add ns servicefunction SF2 -ingressVLAN 40
add ns servicefunction SF3 -ingressVLAN 60
add ns servicepath pol1
bind ns servicepath pol1 -servicefunction SF1 -index 255
bind ns servicepath pol1 -servicefunction SF2 -index 254
bind ns servicepath pol1 -servicefunction SF3 -index 253
add ns servicepath pol2
bind ns servicepath pol2 -servicefunction SF2 -index 255
add ns servicepath pol3
bind ns servicepath pol3 -servicefunction SF1 -index 255
add subscriber profile * -subscriberrules default_path
add lsn pool pool1
bind lsn pool pool1 200.201.1.1
add lsn client client1
bind lsn client client1 -network 100.0.0.0 -netmask 255.0.0.0
add lsn group group1 -clientname client1
bind lsn group group1 -poolname pool1
add netprofile np1
set netprofile np1 -overrideLsn ENABLED
set lb vserver vs1 -netprofile np1
add service vas1 192.168.10.2 ANY 80 -usip YES
add service vas2 192.168.30.2 ANY 80 -usip YES
add service vas3 192.168.50.2 ANY 80 -usip YES
add service sint 200.10.1.10 ANY 80 -usip YES
add lb vserver vs1 ANY -m MAC -l2Conn ON
add lb vserver vs2 ANY -m MAC -l2Conn ON
add lb vserver vs3 ANY -m MAC -l2Conn ON
add lb vserver vint ANY -m MAC -l2Conn ON
bind lb vserver vs1 vas1
bind lb vserver vs2 vas2
bind lb vserver vs3 vas3
bind lb vserver vint sint
add cs vserver cs1 ANY * 80 -l2Conn ON
add cs action csact1 -targetLBVserver vs1
add cs action csact2 -targetLBVserver vs2
add cs action csact3 -targetLBVserver vs3
add cs action csactint -targetLBVserver vint
add cs policy cspol1 -rule "SUBSCRIBER.SERVICEPATH.IS_NEXT("SF1") && SYS.VSERVER("vs1").STATE.EQ(UP)" -action csact1
add cs policy cspol2 -rule "SUBSCRIBER.SERVICEPATH.IS_NEXT("SF2") && SYS.VSERVER("vs2").STATE.EQ(UP)" -action csact2
add cs policy cspol3 -rule "SUBSCRIBER.SERVICEPATH.IS_NEXT("SF3") && SYS.VSERVER("vs3").STATE.EQ(UP)" -action csact3
bind cs vserver cs1 -policyName cspol1 -priority 110
bind cs vserver cs1 -policyName cspol2 -priority 120
bind cs vserver cs1 -policyName cspol3 -priority 130
bind cs vserver cs1 -lbvserver vint
To configure service chaining on the appliance by using the GUI
-
Navigate to System > Network > IPs and add the subnet IP addresses.
-
Navigate to System > Network > VLANs and add VLANs, Bind the VLANs to the interfaces and subnet IP addresses.
-
Navigate to Traffic Management > Service Chaining > Configure Service Path Ingress VLAN and specify an ingress VLAN.
-
Navigate to Traffic Management > Subscriber > Parameters > Configure Subscriber Parameters and specify the following:
-
Interface Type: Specify RadiusAndGx.
-
Configure a diameter virtual server, PCRF realm, and the subscriber GX interface parameters.
-
Specify the RADIUS interface parameters.
-
-
Navigate to Traffic Management > Service Chaining > Service Function and add service functions to associate a value-added service with an ingress VLAN.
-
Navigate to System > Network > Large Scale NAT. Click Pools and add a pool. Click Clients and add a client. Click Groups and add a group and specify the client. Edit the group and bind the pool to this group.
-
Navigate to System > Network > Net Profiles and add a net profile. Select Override LSN. Optionally, navigate to System > Network > Settings > Configure Layer 3 Parameters and verify that Override LSN is not selected.
-
Navigate to Traffic Management > Load Balancing > Virtual Servers and configure the virtual servers and value-added services on the appliance. Bind the services and the net profile to the virtual server.
-
Navigate to Traffic Management > Content Switching > Virtual Servers and configure a virtual server, policy, and action. Specify the target load balancing virtual server.