IMS AAA Server Release 1.1 Administration Guide > Policy > Configuring Local Profile Selection

Configuring Local Profile Selection

During the authorization process, the IMS AAA Server uses Profile Selection Rule Sets to select the local profile used to authorize the request. To configure the Profile Selection Rule Sets:

• Select Policy > Local Profiles Selection.

The content frame displays any Profile Selection Rule Sets that you have already configured (Figure 77).

Figure 77: Main Local Profile Selection Dialog

From this dialog you can:

• Click Refresh to refresh the list of profile selection rule sets.
• Click Apply to apply the changes you have made in the profile selection dialogs.
• Click Reset to reset the changes you made in the profile selection dialogs.
• Click Add to add a new profile selection rule set.
• Click Edit to edit an existing profile selection rule set.
• Click Remove to delete an existing profile selection rule set.
• Use the Up/Down arrow buttons to re-order the list of profile selection rule sets.

You can also configure:

• What you want the server to do when no match is found during the profile selection process using the "When there are no ruleset matches, do the following" dialog. See Configuring What to Do When There Are No Ruleset Matches140.
• What you want the server to do when the HSS is unavailable using the "When HSS is unavailable, do the following" dialog. See Configuring What to Do When the HSS Is Unavailable141.

Creating a Profile Selection Rule Set

Profile Selection Rules Sets consist of ordered lists of user defined attributes and/or I-WLAN parameters. During the authorization process, the IMS AAA Server uses user-defined Profile Selection Rule Sets to select the local profile used to authorize the request. To select the correct profile for authorization, the server compares the HSS or downstream server response, with the Profile Selection Rule Sets in the order in which the sets are defined. If a match is found, the local profile associated with the Profile Selection Rule Set, is merged with the HSS or downstream server response, to form a complete profile used to authorize that subscriber's requests.

To create a Profile Selection Rule Set:

1. From the Local Profile Selection dialog, click Add.

The Add Profile Matching Rule Set dialog opens (Figure 78).

Figure 78: Add Profile Matching Rule Set Dialog

2. Use the pulldown in the Profile field to select the profile for which you want to create the Profile Selection Rule Set.
3. Click Add.

The Add Matching Rule dialog opens. Figure 79 shows an example of this dialog.

Figure 79: Add Matching Rule Dialog

Select either the user defined attributes option or one of the I-WLAN authorization parameters to add to the Profile Selection Rule Set.

4. Select the desired option to create a matching rule and click Next.
5. Refer to one of the following procedures:

Configuring User Defined Attribute Matching Rules or Configuring I-WLAN Policy Matching Rules

Configuring User Defined Attribute Matching Rules

To configure user defined attribute matching rules:

1. Select the User Defined Attributes option from the Add Matching Rule dialog (Figure 79) and click Next.

The Add Matching Rule Dialog for User Defined Attributes (Figure 80) opens.

Figure 80: Add Matching Rule Dialog for User Defined Attributes

2. Click Add.

The Add Attribute dialog opens (Figure 80).

3. Use the scroll bar to select the attribute you want to add and click Add.

The Attribute Value dialog opens. Figure 80 shows an example dialog for the WLAN-UE Local IP Address attribute value.

4. Enter the value for the attribute and click OK.
5. Repeat steps 3 through 4 until all desired attribute values have been entered and click Close on the Add Attribute dialog (Figure 80).
6. Click Finish in the Add Matching Rule dialog.

The attributes are displayed in the Add Profile Matching Rule Set dialog. Each row represents a rule. A rule can contain one or more attributes. The example shown in Figure 81 shows a single rule containing three attribute values.

Figure 81: Add Profile Matching Rule Set Dialog

7. Click OK to add the rule to the Profile Selection Rule Set.

Figure 82: Example Profile Selection Rule Set

8. Use the Up/Down arrow buttons to place the rule sets in the desired order.
9. Click Apply to apply the changes to the Profile Selection Rule Set.

Configuring I-WLAN Policy Matching Rules

To configure I-WLAN Policy matching rules:

1. Select an I-WLAN policy from the Add Matching Rule dialog (Figure 83) and click Next.

Figure 83: Add Matching Rule Dialog for I-WLAN Policy

2. Configure the matching rule I-WLAN policy by referring to the procedures under: Configuring an I-WLAN Policy for the Local Profile.
3. Click Finish in the Add Matching Rule dialog.
4. The I-WLAN Policy is displayed in the Add Profile Matching Rule Set dialog.

As an example, Figure 84 shows the I-WLAN Allowed Visited Networks policy set to the Allow All option.

Figure 84: I-WLAN Policy Added to Add Profile Matching Rule Set

5. Click OK to add the matching rule to the Profile Selection Rule Set (Figure 85).

Figure 85: I-WLAN Policy Added to Profile Selection Rule Set

6. Use the Up/Down arrows to place the rule sets in the desired order.
7. Click Apply to apply the changes to the Profile Selection Rule Set.

Configuring What to Do When There Are No Ruleset Matches

If no Profile Selection Rule Set match is found, the server selects what is configured in the "When there are no ruleset matches, do the following" (see bottom section of Figure 85). This dialog allows you to reject all requests if no match is found by selecting the Reject All option, or to use a specific profile by selecting the Use Selected Profile option. For example, you may define a profile with very limited access capabilities to be used in this situation.

The dialog for this feature is at the bottom of the Profile Selection Rule Set dialog (Figure 85) and is highlighted in Figure 86.

Figure 86: No Rules Matches Dialog

1. To configure this feature:

• Select the profile to use if no match is found by selecting the Use Selected Profile option and using the pulldown menu to select the desired profile. You must have previously configured the profile you want to use if you select this option.

or

• Select the Reject All option to reject all requests that do not have a matching rule.

2. Click Apply to apply the changes to the Profile Selection Rule Set.

Configuring What to Do When the HSS Is Unavailable

Another feature available through the Local Profile Selection menu is the ability to tell the server how to handle requests when the HSS is unavailable. If the HSS is unavailable for some reason, you have the option to reject all requests by using the Reject All option. Alternatively, you can continue to process authorization requests in this situation by selecting the Use Selected Profile option. This option lets you continue to process authorization requests using the specified profile even though the HSS is unavailable. You can use a standard profile, or create a unique profile to be used only in this situation.

The server handles accesses to the HSS as follows:

The server queries the HSS. If the HSS responds, the server then checks the matching rule sets defined in the Local Profile Selection dialog for a match. If no match is found, the server selects what is configured in the When there are no ruleset matches, do the following option. If the server does not get a response from the HSS query, or if the HSS is unavailable, the server selects what is configured in the When HSS is unavailable do the following option.

The dialog for this feature is at the bottom of the Profile Selection Rule Set dialog (Figure 85) and is highlighted in Figure 87.

Figure 87: When HHS Is Unavailable Dialog

1. To configure this feature:

• Select the profile to use when the HSS is unavailable by selecting the Use Selected Profile option and using the pulldown menu to select the desired profile. You must have previously configured the profile you want to use if you select this option.

or

• Select the Reject All option to reject all requests when the HSS is unavailable.

2. Click Apply to apply the changes to the Profile Selection Rule Set.

Editing Profile Selection

To edit the profile selection:

• Select Policy > Local Profile Selection.

From this dialog you can:

• Add a new Profile Matching Rule Set by clicking Add. See Creating a Profile Selection Rule Set135.
• Re-order the lists of Profile Selection Rule Sets attributes by selecting each rule set and using the Up/Down arrows to place the rules sets in the desired order.
• Remove a Profile Selection Rule Set by selecting it and clicking Remove.
• Edit an existing Profile Selection Rule Set by selecting it and clicking Edit. See Editing Profile Selection Rule Sets142.
• Edit what you want the server to do when there are no rule set matches, see Configuring What to Do When There Are No Ruleset Matches140.
• Edit what you want the server to do if the HSS is unavailable, see Configuring What to Do When the HSS Is Unavailable141.

Editing Profile Selection Rule Sets

1. From the Local Profile Selection dialog, select the Profile Selection Rule Set you want to edit and click Edit.

The Add Profile Matching Rule Set dialog (Figure 81) is opens.

2. Select the rule you want to edit from the list and click Edit.

The Edit Profile Matching Rule dialog opens (Figure 88).

Figure 88: Edit Profile Matching Rule Dialog

From this dialog select Add to add a new matching rule to the set, or Edit or Delete to edit or delete an existing matching rule. Follow the instructions in Configuring User Defined Attribute Matching Rules and Configuring I-WLAN Policy Matching Rules to complete this procedure.

3. Click OK.

The changes to the matching rule are displayed in the Edit Profile Matching Rule dialog.

4. Click OK again.

The changes are reflected in the Add Profile Matching Rule Set dialog.

5. Click OK again and the rule set is displayed in the list of Profile Selection Rule Sets.

Resetting the Changes Made to the Profile Selection Rule Sets

You can reset the changes made to the Profile Selection Rule Sets by selecting the Reset button before you have applied the changes. Once the changes have been applied (by selecting Apply), you cannot reset the changes.

1. From the Profile Selection Rule Sets dialog, select Reset.

You are prompted with the following dialog to confirm the reset.

2. Select Yes to reset all changes or No to cancel the reset operation.

Refreshing the List of Profile Matching Rules

After you have removed a profile matching rule or applied changes to the profile selection rule sets, you may want to refresh the list of Profile Selection Rule Sets by selecting the Refresh from the Local Profile Selection dialog.