[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]


Administering Profiles

Configuring profiles is a two step process. First you configure the Local Profile, and then you configure the Profile Selection Rule Sets.

NOTE: At minimum, each IMS AAA Server in your network needs to be configured with at least one local profile that includes the policy configuration for each 3GPP WLAN service scenario the server needs to support.


To configure Local Profile:

The content frame will display a list of any existing profiles under Local Profiles (Figure 57).


Figure 57: Main Policy Panel Dialog

From this dialog you can:

Creating a Local Profile

  1. To create a local profile, click Add or New.

The Add Profile dialog opens (Figure 58).


Figure 58: Add Profile Dialog

This dialog is divided into several sections. The top of the dialog includes the profile Name field and optional Description field. There are six tabs located at the top, one for each of the 3GPP WLAN service scenarios supported by the IMS AAA Server. Select each service scenario tab to define the attributes and/or I-WLAN policy for that particular service scenario. Refer to Table 22 for a definition of each service scenario. The Attributes tab, allows you to define the authorization attribute lists for each service scenario, and the I-WLAN Policy tab allows you to define the I-WLAN policy for each service scenario.

  1. Enter a name for the local profile in the Name field.
  2. Optionally, enter a description for the local profile in the Description field.

The description is not used during processing.

  1. Select one of the six Service Scenario tabs.
  2. To configure an authorization attribute list for the selected service scenario, select the Attributes tab and follow the procedure described in Configuring the Authorization Attributes for the Local Profile.
  3. To configure an I-WLAN policy for the selected service scenario, select the I-WLAN Policy tab and follow the procedure described in Configuring an I-WLAN Policy for the Local Profile.
  4. Repeat the above steps for each 3GPP WLAN service scenario for which you want to create an authorization policy.

Configuring the Authorization Attributes for the Local Profile

  1. To configure the authorization attributes for the local profile, select the Attributes tab from the Add Profile dialog (Figure 58).

From this dialog, you can Add, Edit or Remove attributes to/from a profile, or use the Up/Down arrows to order the list of attributes defined for the profile.

  1. Click Add.

The Add Authorization dialog opens (Figure 59).


Figure 59: Add Authorization Dialog

From this dialog you can:

Adding the Periodic Reauthorization Attribute

  1. Select the Periodic Reauthorization option from the Add Authorization dialog (Figure 59) and click Next.

The Periodic Reauthorization dialog opens (Figure 60).


Figure 60: Periodic Reauthorization Dialog
  1. Enter a value (in seconds) for the Reauthorization Interval.

This value equates to the Session-Timeout attribute and specifies the maximum number of seconds of service to be provided to the subscriber.

  1. Click the Finish button.

The Periodic Reauthorization attribute is added to the list of attributes. (Figure 61)


Figure 61: Periodic Reauthorization Attribute in Attributes List
  1. Click OK to save the configuration.

Adding a Return or Copy List to the Local Profile

  1. From the Add Profile dialog select the Attributes tab.
  2. Click Add or Edit.

The Add Authorization dialog opens (Figure 59).

  1. Select either the Attributes to be set in the response or Attributes to be copied from downstream option and click Next.

The Add Authorization dialog opens (Figure 62).


Figure 62: Add Authorization Dialog
  1. Click Add. The Add Attributes dialog appears (Figure 63).

Figure 63: Add Attributes Dialog
  1. Select the attribute you want to add from the Attributes list and click Add.
  2. Select or enter a value for the attribute.

The dialog changes according to the type of attribute list you are creating. Attributes to be set in the response requires that you enter or select a value, string, or IP address. For Attributes to be copied from downstream you just select the attribute to be copied from the attributes list.

NOTE: If you select a Diameter attribute and the response is to a RADIUS client, the attribute will not be present in the response. The server does not guard against incorrect configurations of this kind.


  1. Click Add to add the attribute/value pair to the list.
  2. When you are finished adding attribute/value pairs, click Close to return to the Add Authorization dialog.
  3. Click Finish when you have finished adding all the desired attributes to return to the Add Profile dialog.
  4. Use the Up/Down arrows to place the attributes in the order in which you want the server to place them in the response.
  5. Click OK to save the attribute configuration.

Configuring an I-WLAN Policy for the Local Profile

To configure an I-WLAN policy:

  1. Select Policy > Local Profiles.
  2. Click New.

The Add Profile dialog opens (Figure 58).

  1. Select one of the six Service Scenario tabs.
  2. Select the I-WLAN Policy tab from the Add Profile dialog (Figure 58).
  3. Click Add.

The Add Authorization dialog for I-WLAN policies opens. Figure 64 shows an example of this dialog.

NOTE: The available I-WLAN policies displayed in this dialog differ depending on the service scenario tab selected. For example, the Direct IP, Direct IP (Home), and Direct IP (Visited) service scenarios include only the Global WLAN Access and Global WLAN Direct IP Access policies.



Figure 64: Add Authorization Dialog for I-WLAN Policies
  1. Select an I-WLAN authorization and click Next.

Proceed to one of the following links:

I-WLAN Authorized W-APNs

The I-WLAN Authorized W-APNs policy specifies the W-APNs the subscriber is allowed to access (visited or home PLMN).

  1. Select I-WLAN Authorized W-APNs and click Next.

The Add Authorization dialog for Authorized W-APNs opens (Figure 65).


Figure 65: Add Authorization Dialog for Authorized W-APNs
  1. Click Add to add an authorized W-APN.

The Add Authorized W-APN dialog opens (Figure 66).


Figure 66: Add Authorized W-APN Dialog
  1. Enter the name of the W-APN you want to define authorization for in the Name field.
  2. Enter an optional description for the W-APN in the Description field.
  3. Select the Barring Type for the subscriber using the pulldown:

    NOTE: The barring type for the W-APN specifies which networks, HPLMN and/or VPLMN, the subscriber is allowed to access. When configuring the barring type, you must take into consideration the service scenario you are configuring, and the location of the IMS AAA Server you are configuring (HPLMN or VPLMN). The default is no barring.


  1. Enter a value for the Maximum Number of Accesses.

This value indicates the maximum number of concurrent authorizations the subscriber is allowed per W-APN.

  1. Enter a value for the Maximum Subscribed Bandwidth.

This value indicates the maximum bandwidth for the subscriber.

  1. Enter a value for the Charging Characteristics.

The Charging-Characteristics AVP is of type Integer, and contains the charging mode to be applied as described in 3GPP TS 32.215 [24].

  1. Enter a value for the Primary-Charging-Collection-Function.

This AVP is defined in 3GPP TS 29.229 [6] and contains the address of the Primary Charging Collection Function.

  1. Enter a value for the Secondary-Charging-Collection-Function.

This AVP is defined in 3GPP TS 29.229 [6] and contains the address of the Secondary Charging Collection Function.

  1. Click OK.

The W-APN configuration is added to the list of authorized W-APNs.

  1. Click Finish.

The I-WLAN Authorized W-APN policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

I-WLAN Allowed Visited Networks

The I-WLAN Allowed Visited Networks policy defines the VPLMNs the subscriber is allowed to access (when roaming).

  1. Select the I-WLAN Allowed Visited Networks option and click Next.

The Add Authorization for I-WLAN Allowed Visited Networks opens (Figure 67).


Figure 67: I-WLAN Allowed Visited Networks Policy Dialog
  1. From this dialog, you have the option to:

Figure 68: I-WLAN Allowed Visited Network Dialog

During the authorization process, if the server determines the subscriber is roaming, it checks this policy to determine what networks the subscriber is authorized to visit. If the network the subscriber is attempting to access is listed, or if the Allow All option is selected, the subscriber is granted access. If the network is not listed, and the Allow All option is not selected, access to the network is denied.

  1. Select one of the options from step 2 and click Finish.

The I-WLAN Allowed Visited Network policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

I-WLAN Global Access Dependence

This policy grants the subscriber access to the WLAN 3GPP IP Access service based on whether the subscriber has previously been authenticated or not for WLAN Direct IP Access.

  1. Select the I-WLAN Global Access Dependence option and click Next.

The Add Authorization for I-WLAN Global Access Dependence opens (Figure 69).


Figure 69: I-WLAN Global Access Dependence Dialog
  1. Enable or disable the Access Dependence option as follows:
  1. Click Finish.

The I-WLAN Global Access Dependence policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

I-WLAN Global Maximum Number of Accesses

This policy indicates the global maximum number of concurrent authorizations the subscriber is allowed per W-APN.

  1. Select the I-WLAN Global Maximum Number of Accesses option and click Next.

The Add Authorization dialog for I-WLAN Global Maximum Number of Accesses opens (Figure 70).


Figure 70: I-WLAN Global Maximum Number of Access Dialog
  1. Use the arrows to select the limit value.

    NOTE: This limit value shall be used only if the Maximum Number of Accesses value is not defined in the I-WLAN Authorized W-APNs policy for the requested W-APN.


  2. Click Finish.

The I-WLAN Global Maximum Number of Access policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

I-WLAN Global Maximum Subscribed Bandwidth

This policy indicates the global maximum bandwidth for the subscriber.

  1. Select the I-WLAN Global Maximum Subscribed Bandwidth option and click Next.

The Add Authorization dialog for I-WLAN Global Maximum Subscribed Bandwidth opens (Figure 71).


Figure 71: I-WLAN Global Maximum Subscribed Bandwidth Dialog

This value shall be used only if the Maximum Subscribed Bandwidth parameter is not defined in the I-WLAN Authorized W-APNs policy for the requested W-APN.

  1. Click Finish.

The I-WLAN Global Maximum Subscribed Bandwidth policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

Global Wireless LAN Access

This policy allows mobile operators to bar 3GPP and WLAN interworking subscriptions.

  1. Select the Global Wireless LAN Access option and click Next.

The Add Authorization dialog for Global Wireless LAN Access opens (Figure 72).


Figure 72: Global Wireless LAN Access
  1. Enable or disable Global WLAN Access as follows:
  1. Click Finish.

The Global Wireless LAN Access policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

Global WLAN 3GPP IP Access

This policy allows mobile operators to disable all W-APNs for a subscriber at one time.

  1. Select the Global WLAN 3GPP IP Access option and click Next.

The Add Authorization dialog for Global WLAN 3GPP IP Access opens (Figure 73).


Figure 73: Global WLAN 3GPP IP Access Dialog
  1. Enable or disable the Global WLAN 3GPP IP Access option as follows:
  1. Click Finish.

The Global WLAN 3GPP IP Access policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

Global WLAN Direct IP Access

This policy specifies whether or not the subscriber is authorized for WLAN Direct IP Access which allows direct access to external IP networks such as the Internet from the WLAN. This is only applicable to the WLAN Direct IP Access.

  1. Select the Global WLAN Direct IP Access option and click Next.

The Add Authorization dialog for Global WLAN Direct IP Access opens (Figure 74).


Figure 74: Global WLAN Direct IP Access Dialog
  1. Enable or disable the Global WLAN Direct IP Access option as follows:
  1. Click Finish.

The Global WLAN Direct IP Access policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

Global Charging Data

This policy defines the Global Charging Data used as the default for any parameter that is not specified more specifically in the I-WLAN Authorized W-APNs policy.

  1. Select the Global Charging Data option and click Next.

The Add Authorization dialog for Global Charging Data opens (Figure 75).


Figure 75: Global Charging Data Dialog
  1. Enter a value for the Charging Characteristics.

The Charging-Characteristics AVP is of type Integer, and contains the charging mode to be applied as described in 3GPP TS 32.215 [24].

  1. Enter a value for the Primary-Charging-Collection-Function.

This name AVP is defined in 3GPP TS 29.229 [6] and contains the address of the Primary Charging Collection Function.

  1. Enter a value for the Secondary-Charging-Collection-Function.

This name AVP is defined in 3GPP TS 29.229 [6] and contains the address of the Secondary Charging Collection Function.

  1. Click Finish.

The Global Charging Data policy is added to the list of I-WLAN policies for the profile.

  1. Click OK to save the Local Profile.

    NOTE: Global attributes will be interpreted as the default to be used, only if the attribute is not defined for the current W-APN in the I-WLAN Authorized W-APNs policy. For example, if a value for Maximum Number of Accesses is specified in the I-WLAN Authorized W-APNs policy, it will take override over any value set in I-WLAN Global Maximum Number of Accesses.


Editing a Local Profile

After you have added a local profile, you can edit everything except the profile name.

To edit an existing profile in the IMS AAA Server:

  1. Select Policy > Local Profiles.
  2. Select the profile you want to edit from the list of profiles and click Edit.

The Edit Profile dialog (Figure 76) opens.


Figure 76: Edit Profile Dialog
  1. Select the appropriate Service Scenario tab.
  2. Select either the Attributes tab or the I-WLAN Policy tab.

From the Attributes tab, you can:

From the I-WLAN Policy tab, you can:

Refer to either Configuring the Authorization Attributes for the Local Profile117 or Configuring an I-WLAN Policy for the Local Profile120 for information on the fields in these dialogs.

Deleting a Local Profile

To delete a Local Profile:

  1. Select Policy > Local Profiles.

The Local Profiles dialog opens.

  1. Select the local profile you want to delete and click Delete.
  2. You are prompted to confirm the delete operation. Click Yes to delete the profile or No to cancel the operation.

Refreshing the List of Profiles

To refresh the list of Local Profiles:

  1. Select Policy from the main Administrator panel and select the expansion tool to expose the sub-panels.
  2. Select the Local Profiles. The Local Profiles dialog is displayed (Figure 57).
  3. Click Refresh to refresh the list of local profiles.

[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]