Supported Platforms
Disabling PCRF Control of a Subscriber Session
When a subscriber has been provisioned with Gx-Plus, services for that subscriber can be activated and deactivated only by the PCRF. Accordingly, AAA rejects any RADIUS CoA requests for subscribers provisioned by Gx-Plus. Similarly, CLI-based service activation and deactivation do not work while a subscriber is remotely provisioned.
Network administrators without PCRF access or authority may need to override PCRF control on a particular subscriber session to troubleshoot the session or correct the subscriber services. You can disable PCRF control by issuing the request network-access aaa subscriber set session-id command. In response, the router sends a termination notice to the PCRF, but does not actually log out the subscriber.
When you have confirmed that provisioning is disabled, you can then activate or deactivate subscriber services for that session with the request network-access aaa subscriber add session-id and request network-access aaa subscriber delete session-id commands, respectively. These commands fail if provisioning is still enabled.
Another consequence of disabling provisioning for a subscriber session is that RADIUS change of authorization (CoA) messages can modify the session.
Before you begin, determine or verify the ID for the session by displaying the session IDs of all current subscribers with the show subscribers detail or show network-access aaa subscribers command.
To disable control by the PCRF over a subscriber session:
- Disable provisioning for the specified subscriber session
ID.user@host> request network-access aaa subscriber set session-id subscriber-session-id provisioning-state none
- (Optional) Verify that provisioning is disabled for the
session.user@host> show network-access aaa subscribers session-id subscriber-session-id detail
For example, to disable provisioning for subscriber larry:
user@host> show network-access aaa subscribersUsername Logical system/Routing instance Client type Session-ID ... larry default:default dhcp 55 ...
user@host> request network-access aaa subscriber set session-id 55 provisioning-state
noneuser@host> show network-access aaa subscribers session-id 55 detail Type: dhcp Username: larry@isp5.net Stripped username: larry AAA Logical system/Routing instance: default:default Target Logical system/Routing instance: default:retail-onlinecompany-ca Access-profile:retailer-onlinecompany-sjc Session ID: 55 Accounting Session ID: 55 Multi Accounting Session ID: 0 IP Address: 192.168.44.104 Authentication State: AuthStateActive Accounting State: Acc-Start-Send Provisioning-type: none Service name: basic-service Service State: SvcActive Session ID: 56 Session uptime: 00:01:45
