Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Global Service Templates (SRC CLI)

    A global service template is a unique service template that specifies rendering used as part of any mode of any other service template. It is used to control rendering of service-independent requests, such as AbortSession. This template is unique in that its modes, attributes, and variables are available to all services that you define. It is therefore a mandatory part of any router configuration. The global service template is called in every possible scenario.

    The examples in this procedure use the following configuration:

    • sic group=g1
    • device template=dt1
    • mode=authentication
    • attribute identifier-attr1
    • attribute=Unisphere-Service-Timeout

    Creating an SIC Global Service Template (SRC CLI)

    Use the following statements to create an SIC global service template:

    shared sic group identifier device-template id global-template {description description;}

    To create an SIC global service template:

    1. From configuration mode, access the statement that configures the global.
      [edit]user@host# edit shared sic group identifier device-template id global-template
    2. (Optional) Specify a description for the template.
      [edit shared sic group g1 device-template dt1 global-template]user@host# set description description

    Configuring the Mode of the SIC Global Service Template (SRC CLI)

    Use the following statements to configure the mode of global service template:

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session)

    To configure the mode of the SIC global service template:

    • From configuration mode, access the statement that configures the global service template mode. For example, to specify the authentication mode:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication

    Configuring Variables for the SIC Global Service Template (SRC CLI)

    Variables control the behavior of the rendering process.

    Use the following statements to configure global service template variables:

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) variable name {value value;type (integer | string);}

    To configure variables in the global service template:

    • From configuration mode, access the statement that configures variables for the global service template and specify a name for the variable. For example, to create a variable named var1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication variable var1

      Specify the type of variable you want to add to the template. For example, to specify an integer for the variable:

      [edit shared sic group g1 device-template dt1 global-template mode authentication variable var1]user@host# set type integer

      Where the type is either:

      • integer
      • string
    • Specify the value of the variable. For example, to specify a value of 5 for the variable:
      [edit shared sic group g1 device-template dt1 global-template mode authentication variable var1]user@host# set value 5

    Configuring Normal Attributes for the SIC Global Service Template (SRC CLI)

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes {}
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id normal {name name;copy-from copy-from;}

    To configure normal attributes to be included in the global service template:

    1. (Optional) From configuration mode, access the statement that configures normal attributes and specify an identifier for the attribute. For example, to create an identifier named attr1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1
    2. (Optional) Specify the attribute as a normal attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1]user@host# edit normal
    3. Specify the name of the attribute. For example, to specify the attribute Unisphere-Service-Timeout:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 normal]user@host# set name Unisphere-Service-Timeout
    4. (Optional) Specify the attribute to copy the value from. For example, to copy the value from the Session-Timeout attribute contained in the downstream AAA server response, and place it in the Unisphere-Service-Timeout attribute:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 normal]user@host# set copy-from Session-Timeout
    5. Verify the configuration.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 normal]user@host# show
      copy-from Session-Timeout;
      name Unisphere-Service-Timeout;
      
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 normal]
      user@host#
      

    Configuring Required Attributes for the SIC Global Service Template (SRC CLI)

    With required attributes, if the renderer finds the attribute in the downstream AAA server response, it copies the value into the RADIUS message for the router, otherwise, rendering fails.

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes {}
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id required {name name;copy-from copy-from;}

    To configure required attributes to be included in the global service template:

    1. (Optional) From configuration mode, access the statement that configures required attributes and specify an identifier for the attribute. For example, to create an identifier named attr1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1
    2. (Optional) Specify the attribute as a required attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1]user@host# edit required
    3. Specify the name of the attribute. For example, to specify the attribute Unisphere-Service-Timeout:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 required]user@host# set name Unisphere-Service-Timeout
    4. (Optional) Specify the attribute to copy the value from. For example, to copy the value from the Session-Timeout attribute contained in the downstream AAA server response, and place it in the Unisphere-Service-Timeout attribute:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 required]user@host# set copy-from Session-Timeout
    5. Verify the configuration.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 required]user@host# show
      copy-from Session-Timeout;
      name Unisphere-Service-Timeout;
      
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 required]
      user@host#
      

    Configuring Default Attributes for the SIC Global Service Template (SRC CLI)

    With default attributes, if the renderer finds the attribute in the downstream AAA server response, it copies the value into the RADIUS message. Otherwise, it creates the attribute name with the specified value.

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes {}
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id default {name name;value value;copy-from copy-from;}

    To configure default attributes to be included in a global service template:

    1. (Optional) From configuration mode, access the statement that configures default attributes and specify an identifier for the attribute. For example, to create an identifier named attr1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1
    2. (Optional) Specify the attribute as a default attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1]user@host# edit default
    3. Specify the name of the attribute. For example, to specify the attribute Unisphere-Service-Timeout:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 default]user@host# set name Unisphere-Service-Timeout
    4. Specify the value of the attribute. For example, to specify the value of 5:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 default]user@host# set value 5
    5. (Optional) Specify the attribute to copy the value from. For example, to copy the value from the Session-Timeout attribute contained in the downstream AAA server response, and place it in the Unisphere-Service-Timeout attribute:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 default]user@host# set copy-from Session-Timeout

      If the rendering process finds the attribute in the downstream AAA server response, it copies the value into the RADIUS message. Otherwise, it creates the attribute name with the specified value.

    6. Verify the configuration.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 default]user@host# show
      copy-from Session-Timeout;
      name Unisphere-Service-Timeout;
      value 5;
      
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 default]
      user@host#
      

    Configuring Parameterized Attributes for the SIC Global Service Template (SRC CLI)

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes {}
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id parameterized {format format;name name;}

    To configure parameterized attributes to be included in a global service template:

    1. (Optional) From configuration mode, access the statement that configures parameterized attributes and specify an identifier for the attribute. For example, to create an identifier named attr1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1
    2. (Optional) Specify the attribute as a parameterized attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1]user@host# edit parameterized
    3. (Optional) Specify the format of the parameterized attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 parameterized]user@host# set format format
    4. Specify the name of the attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 parameterized]user@host# set name name
    5. Verify the configuration.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 parameterized]user@host# show
      name Unisphere-Service-Timeout;
      
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 parameterized]
      user@host#
      

    Configuring Override Attributes for the SIC Global Service Template (SRC CLI)

    With override attributes, whether or not the renderer finds the attribute in the downstream AAA server response, it creates the attribute name with the specified value.

    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes {}
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id
    shared sic group identifier device-template id global-template mode (authentication | accounting | abort-session) attributes attribute id override {name name;value value;}

    To configure override attributes to be included in a global service template:

    1. (Optional) From configuration mode, access the statement that configures override attributes and specify an identifier for the attribute. For example, to create an identifier named attr1:
      [edit]user@host# edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1
    2. (Optional) Specify the attribute as an override attribute.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1]user@host# edit override
    3. Specify the name of the override attribute. For example, to specify the attribute Unisphere-Service-Timeout:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 override]user@host# set name Unisphere-Service-Timeout
    4. Specify the value of the attribute. For example, to specify a value of 5:
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 override]user@host# set value 5
    5. Verify the configuration.
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 override]user@host# show
      name Unisphere-Service-Timeout;
      value 5;
      
      [edit shared sic group g1 device-template dt1 global-template mode authentication attributes attribute attr1 override]
      user@host#
      

    Published: 2014-12-10