Subscriber Traffic And Policy Management (BNG) On The ASR9000 . - Cisco

1y ago
9 Views
2 Downloads
6.04 MB
47 Pages
Last View : 1d ago
Last Download : 2m ago
Upload by : Abby Duckworth
Transcription

Subscriber Traffic andPolicy Management(BNG) on the ASR9000and ASR1000

Agenda The next wave of Broadband ISG Overview ASR1k as BNG/ISG ASR 9k as BNG#CiscoPlusCA

The Next Wave of Broadband#CiscoPlusCA

Evolution in SP Network ArchitecturesDiverged “perService”NetworksConverged “Allin One”NetworksConverged“User Centric”Networks Increased revenue by decreasingcost of managing andmaintaining multiple networks Increased overall revenue by increasingrevenue per user Customized services Rapid deployment of new services based onmarket trends Subscriber Self Subscription and Self Care

The New User Experience – Cisco ISGEnabling the Next Wave of BroadbandAdd SubscribersRegisterLog inAdd ServicesPay As YouGo!Pay WhatYou y creditBuyBuy: 19.99Buy: 29.99Buy: 39.99Add ValueBrandedVoDBrandedTV( 4.99/movie)( 29.99)BrandedPhone( 15.99 LD)

The elements of customizationSubscriber identified using multipledimensions. Identity gathered:SubscriberSessionsIdentity From multiple sources and events Over session lifecycleDifferentiatedServicesDifferent Services and Rulesapplied based on: Who subscriber is Where he is What he requiresSubscriberServicesSession ervices and Rules updated based on :Dynamic ServiceManagement How subscriber behaves What he requires NOWDynamic PolicyPush and PullSubscriberServices

Building the Identity and Assigning ServicesSubscriberISGIdentitiesServicesExampleDHCP Exchange StartsDHCP Exchange Completes(*)Subscriber Authentication(*)Dynamic Service UpdateT0T1T2TNSubscriber SessionBHAVANISubscriber SessionBHAVANISubscriber SessionSubscriber SessionMAC Addr:IP Addr:Username:Service:00:DE:34:F1:C0:28?DEFAULT SRVDEFAULT SRVOnly permitsmanagement trafficthrough the sessionMAC Addr:IP DEFAULT SRVMAC Addr:IP havaniPPU SRVPPU SRVPay Per Use Service:- Permits all traffic- 512K/1Mbps US./DS- Accounting enabled onsession(*) Order of operations not representative of a real call flowMAC Addr: 00:DE:34:F1:C0:28IP Addr:10.1.1.211Username: BhavaniService: PREMIUM FR SRVPREMIUM FR SRVFlat Rate Premium Data Service:- Permits all traffic- 1M/8Mbps US/DS

Access Technology AbstractionDSLDSLAMCableWalled Garden Subscriber-centric services regardless of:Access TechnologyAccess Protocol Access Technology:Legacy DSL/ATMMetro Ethernet, Wireless LAN, Cable Access Protocol:IPPPPATM/EthernetSwitchCMTSOpen GardenAccessEthernet802.11 or802.16DistributionBRAS/BNG

PPP to IP MigrationKey RequirementsThere are 3 subscribersconnected uthenticationand 0JohnMikeTedJohnMikeTedJohn and Mike are HSIusers, Ted is VoIP userG0/1.1010.1.1.10 John10.1.1.20 Mike10.1.1.30 TedJohnMikeTedSubscribers are John,Mike and Ted.G0/1.10Subscribers addressesshould be:10.1.1.10 John10.1.1.20 Mike10.1.1.30 TedCreate a per subscriberconstruct over a sharedinterface (“subscribersession”)Uniquely establishsubscriber identity anddetermine services andservice levels persubscriberAssign a unique IP addressto each subscriber basedon provider domain

What is ISG?Subscriber Policy PolicyManagementandEnforcement Cisco Intelligent Services Gateway (ISG) isa licensed feature set on Cisco IOS thatprovides Session Management and PolicyManagement services to a variety of accessnetworksAddresses PPPoE to IPoE migration whilemaintaining all subscriber managementfunctionsISGSo focal, that the entire device is often referred as an:Intelligent Services Gateway router or simply “The ISG”

ISG Overview#CiscoPlusCA

ISG’s place in the networkAAAAggregation Deployed at access orservice edge Communicates with otherdevices to control allaspects of subscriberaccess in network Single point of contactPolicyPortalDHCPInternet/CoreSubscriber Identification:based on:- who he is,- where he is,- how he behaves- what he requiresSubscriber Authentication:- PPP CHAP/PAP- Transparent Auto Logon (TAL)- Web Logon- RADIUSSubscriber Services Determination and EnforcementDynamic Service updateSession Lifecycle Management: establishment, configuration and tear dow

ISG’s Subscriber Policy LayerSubscriber Policy LayerAAAServerPolicyServerWebPortalDHCPServerAAA ServerSubscriber AuthenticationSubscriber Authorization: User and ServiceInternet/CoreProfile RepositoryPer access and Per Service AccountingFront-end toward billing systemPolicy ServerDynamic Policy Push (Application Level Trigger)Web PortalFront end toward the subscriber for:Self SubscriptionWeb LogonService Selection (Application Level Trigger)DHCP ServerHand over of addresses to subscribersClass-based address handover for ISG driven address pool selectionGuestPortalOpen GardenVideoAudioServersWalled GardenNote: AAA Server, Policy Server, Web Portal can co-reside in the sample appliance

ISG’s Dynamic Policy ActivationDynamic Policy Pull(e.g. Automatic Service-ProfileDownload on Session Establishment)Subscriber Policy LayerDHCP WebPolicy AAAServer Portal Server ServerDynamic Policy Push(e.g. “Turbo Button”)Application/Service Layer eventSubscriber Policy LayerDHCP Web Policy AAAServer Portal Server ServerNetworkLayerEventGuestPortalOpen GardenWalled GardenGuestPortalOpen GardenWalled Garden

ISG’s Northbound InterfacesSubscriber Policy net/CoreGuestPortalOpen GardenVideoAudioServersWalled GardenRADIUS Interface, for subscriber AAA functionalities and Policyservice downloadPULLRADIUS Extensions (RFC 3576) and XML based (SGI(*)) PolicyOpen Interfaces, for dynamic, administrator or subscriberPUSHdriven, session and service management functions(*) SGI: Services Gateway Interface

The Subscriber Session in ISGISG SessionSubscriber Policy riber 1Subscriber 1sessionSubscriber 2Subscriber 3Internet/CoreGuestPortalOpen GardenVideoAudioServersWalled GardenSubscriber 2sessionSubscriber 3session Construct within Cisco IOS that represents a subscriber– subscriber: billable entity and/or an entity that should be authenticated/authorize Common context on which services are activated Created at first sign of peer activity (FSOL First Sign Of Life)

Dynamic Session InitiationISG Session ISG sessions are initiated at the First Sign of Life (FSOL) FSOL depends on the Session TypeIP Sessions - FSOLPPP Sessions - FSOL. there are options .Unclassified MAC or IPData TrafficPPP Call Request (LCP)DHCPDHCP discoverRADIUS RADIUSAccess Request ORAccounting StartWirelessClientAP IP packet with unknown MACor IP source addressUse MAC for L2-connected IPsessionsUse IP for routed IP sessions DHCP Discover message ISG must be DHCP Relay orServer RADIUS Access/Accnt Start ISG must be a Radius Proxy Typically used in PWLAN andWiMAX environments

SessionAuthenticationAuthentication: Allow Access to Network Resources Only toRecognized UsersAuthentication models supported: Access Protocol Native Authentication:– PPP: CHAP/PAP– IP: EAP for wireless client– DHCP Authentication Transparent Auto Logon (TAL):– Authenticates using subscriber relatednetwork identifiers– e.g. MAC/IP address, DHCP Option 82,PPPoE Tags. Web LogonAuthentication Is Not Mandatory on a Session,but Used in Most SituationsISG Session

ISG’s Subscriber Authentication- IP sessionsIP – common scenarios Web LogonWebPortalAAAServerRADIUSData TrafficredirectionUsername: WebLogonUsernameTAL: Option82 AuthDHCP exchangeAccess SW inserts Option USUsername:MAC/RemoteID:CircuitIDEAP AuthRADIUS(EAP based auth)AAAServerRADIUSUsername:EAP usernameAPTAL:IP/MACData Traffic-AAAServerRADIUSUsername:MAC or IP User traffic redirected to Web Portal to enter credentialsUser Credentials propagated to ISGISG uses credentials to authenticate user with AAA serverApplicable to all session types Access Switch inserts Option82 Circuit and Remote ID in DHCPRequests ISG performs authentication using a combination of Circuit andRemoteID ISG session must be DHCP initiated User starts EAP authentication with Access Point (AP) ISG impersonates RADIUS server toward AP, and RADIUS clienttoward real server ISG learns session authentication status by proxying RADIUSmessages betw/ real RADIUS client and Server ISG session must be RADIUS initiated ISG performs authentication using identifiers from subscriber traffic(source IP/MAC) Typically used in topologies w/ L2 connected subscribers to supportclients w/ static IP address or in IP-routed topologies

Session TerminationIP and PPP SessionsISG SessionWeb LogoffIdle and Absolute Timeouts/Timer ExpiryWebPortalRADIUS CoAAccount-LogoffPPP Sessions ExclusivelyIP Sessions ExclusivelyICMP/ARP keepalive failurePPP and PPPoX protocol eventsppp disconnect; ppp keepalives or L2TPhellos failureRADIUS PoD (Packet Of Disconnect)PolicyManagerKeepalive failureICMP Keepalives used for routed sessionsARP keepalives used for l2-connected sessionsDHCPOR DHCPlease expiryDHCP ReleaseRADIUS PoDEAPWirelessClientAPRADIUSRADIUSAccounting nsonly

ISG ServicesISG servicesFeatures Service: A collection of features that are applicable on a subscriber session Service {feat.1, feat.2,.,feat.n}SessionAdministrationPortbundle (PBHK)Keepalives:ICMP and ARP basedTimeouts:Idle, AbsoluteTraffic ConditioningQoS:Security:Traffic ForwardingControlSubscriber Address Assignment ControlRedirection: Initial, Permanent, PeriodicVRF assignment: Initial, TransferL2TP assignmentTraffic AccountingPostPaidPrepaid: Time/Volume basedTariff SwitchingInterimBroadcastPolicing, MQCPer User ACLsAssociated toPrimary Services Primary Service: Contains one “traffic forwarding” feature and optionallyother features; only one primary service can be active on a session

ISG Feature ationSubscriber SessionTC3 ISG Classification resemblesModular QoS CLI (MQC) IP ACL (standard or extended)are used to create differentialflows (Traffic nServices Each Traffic Class can have adifferent set of features applied A Traffic Class and associatedfeatures also referred asTC service A Default TC can be used to droptraffic that could not be classified

Defining Services1AAA Server Services defined in Service Profiles Standard and Vendor SpecificRADIUS attributes used On demand download on aneed basis Premium HSI serviceshould be activatedon the session No definition yetavailable Service Activated on session Service Stored in local cachewhile in use by at least 1 sessions Services defined on Service Policies:policy-map type service name RADIUS Access-acceptFeatures associated w/ service13 Services permanently storedin local databaseISG Services pre-configured using CLI3 Definition of all existing Servicestypically pre-downloaded on Box(supporting the SGI Interface) Pre-download of all existing servicesRADIUS Access-requestUsername: Premium HSIPassword: service pwd 4Policy Manager Services defined in XML2 Services permanently storedin local databaseSGI RequestPremium, Standard, BasicHSI service definitions2SGI Response

How Services Are Activated on a Session?During SubscriberAuthentication/AuthorizationVia an External PolicyManager/Web PortalRADIUSCoA or SGIRequestRADIUSAcc-acceptSubscriber Subscriber is successfullyauthenticated RADIUS Response includesServices and Features to activateon Session (from UserProfile)Subscriber Service Activation request sentby External Policy Managers viaa RADIUS CoA or a SGIRequest messagefromdataplaneactionsData ControlPolicyplane plane planeDHCP Web Portal / AAAServer Policy Server ServereventsSubscriber Policy LayerDHCP Web Portal / AAAServer Policy Server ServerRADIUSAcc-reqfromexternal PMAdministratorSubscriber Policy LayerVia the On-Box PolicyManager Policy Plane determines what actionsto take on session based on eventsactions *include* applying a service Control Plane ensures actions aretaken –i.e. provisions the data plane Data Plane enforces traffic conditioningpolicies to the session

ASR1000 as BNG/ISG#CiscoPlusCA

Broadband Aggregation ArchitectureBNGMobile CoreContent FarmSubscriberESE BNGWiFi MeshGGSNMobileVODAccessAggregationTVSIPPDN GWHAIP / MPLS S /IPAggregation NetworkMPLS/IPAccess NodeMSE BNGISG(SP-WiFi)LNS

ASR1000 BNG/ISGDeployment models –LAC/LNS/ISGMigration from Legacy Broadbandnetworks – ATM & EthernetWholesale and Retail optionsWireline and Wireless (WiFi)aggregationSubscriber ServicesSubscriber auto provisioningDynamic service creationIPv4 & IPv6-based servicesRange of scale for small toLarge networksHA & ISSUSub-4K to 64K sessions scale5G to 40G (160G future)128K queues1RU to 13RU form-factorStateful Intra-chassisredundancyIn Service SoftwareUpgrade

Why ASR1000 for BNG/ISG?Feature richness & services supportIPv6 Subscriber Support:IPv4 Address Exhaust solutionsSP WiFi AggregationLegacy Broadband Migration optionsWholesale Broadband DeploymentHigh Availability and ISSU Prepaid services, Per subscriber Firewall, Portal integration for selfprovisioning, Policy server solutions, Services accounting within asession, Integrated DPI (by mid-CY11) etc Dual-stack subscribers - PPPoE now and IPoE by mid-CY11) IPv6 native sessions with ISG IPv6 subscribers tunneled in L2TP NAT44 - maximum of 2M NAT sessions NAT64 - stateless model now and stateful NAT64 by mid-CY11 6RD - IPv6 Rapid Deployment tunneling model LNS - aggregating the hotspots ISG - Managing individual subscriber authentication, services, billingetc NAT - Providing translation for private IPv4 address to public PPPoEoA PPPoA RBE LNS PW based backhaul RA-MPLS HA for PPP, L2TP, AAA HA for IPoE and TCs

HLRASR1k in SP Wi-Fi - TodayDHCPAAAWLCAccess Network PolicyL2 ConnectedAPAZRL3ASR1KISGLACResidential WiFiGxCGFGaMobile Home Network Policy IPoE Sessions:DHCP initiated,unclassified IP orMAC-addressinitiator, RadiusProxy initiator L4 Redirect Traffic Classes Postpaid & PrepaidAccounting Dynamic RateLimiting LI Radius CoA Interface Per-User ACLs IP Session Keep-alives,timeouts VRF Transfer Port Bundle Host Key(PBHK) Stateful inter-chassisredundancy with HSRP Max scale: 32k Sessionswith ESP40/RP2VLANAPAP/CPEPCRFFeatures & Scale – (IOS XE 3.6S)APL3 ConnectedGyPortalAPL2 SwitchOCSTunnel (L2TP)LNSInternet

SP Wi-Fi Target bile Home Network PolicyWLCAccess Network PolicyL2 Connected4G CorePGW/LMAAPL2 SwitchAZRL3L3 ConnectedASR1KIWAGLMA/sGRE aggGn’GTPGGSN3G CoreAPAP/CPEInternetMAG/sGRE InitiatorResidential WiFiTarget Scale: 128k sessions

ASR1000 iWAG – Phase 1: IOS XE 3.8SHLRDHCPAAAOCSPCRFCGFPortalAPGyAPGxGaMobile Home Network PolicyWLCL2 ConnectedAccess Network Policy4G CorePGW/LMAFeatures: L2 Access & AAA Policy1. EAP - FSOL: Radius Proxy/DHCP2. TAL - FSOL: Unclassified MAC3. Web Logon - FSOL: DHCP GGSN/LMA selection via AAA attribute Overlapping MNO address support with multiple SSIDScale: 32k authenticatedASR1KIWAGGn’GTPGGSN3G CoreInternet

ASR 9000 BNG#CiscoPlusCA

ASR 9000 System PortfolioOne Edge System to meet all of your needs LC / Chassis240G Line CardsFrom 512K to 2M MACs learned inHardware From 1.3M to 4M IPv4 prefixes From 512k to 2M IPv6 prefixesHyper-Intelligent Video buffering for lossless multicast In-line video monitoring Integrated G.709 SyncE / IEEE 1588-2008 PTP timing Tunneling services optimizedASR 9001ASR 9006ASR 9010ASR 99222 RU6 slots (¼ rack)10 slots (½ rack)22 slots (fullrack)2 IO Slots4 LC 2 RSP8 LC 2 RSP20 LC440G440G1.2TB3.2 Tb6.4 Tb48 TbMax Bandwidth / SlotBW / Chassis 240 GbDouble your system capacity by upgrading any ASR 9000 product to an ASR 9000 nV System

Route Switch Processor 440 More than 2x boosted System Capacity 220Gbps FDX per Slot (220G in 220G out) Fully compatible and supported on all existing chassis types(9006 & 9010) Ultra High Speed Control Plane MultiCore Intel CPU (Nehalem Class) Huge Scale through High Memory option 12GB Memory at FCS for -SE version Time and Synchronization IEEE 1588 v2 PTP support GPS ToD BITS Dedicated Virtualization Cluster EoBC 10GE ports on-board 2010 Cisco and/or its affiliates. All rights reserved.Multi-Stage Switch-fabricSystem DesignLinecard w/Ultra High CapacityFabric AccessRedundantNextGenSwitch FabricLinecard w/Ultra High CapacityFabric AccessCisco Confidential35

ASR 9000 BNG: IPoE SessionsIPoE sessionsRADIUSIPoE CPERoutedResidentialA 1G and 10G ports Support for LAG Logical (dot1q or QinQ) interfaces with ambiguous vlandefinition Configurable on 1:1 and N:1 relationships betw/VLANand IPoE Session DHCP based Discovery and packet based triggers Session lifecycle based on DHCP Lease Tracking andSplit Lease authentication methodsSTBResidentialGPONMSANVDSL Transparent : NAS portIPoEsessions– DHCP Option 82– DHCP Option 60STB– vlan encapIPoE CPEBridged 2010 Cisco and/or its affiliates. All rights reserved.Web Based with HTTP redirectionForwarding model can be Native IP, MPLS ans L3VPNCisco Confidential36

ASR 9000 BNG: PPP and IP/DHCPEnabling Smooth Coexistence Coexistence of PPPoEoE and IP/DHCPbased subscribers on same EthernetinterfaceRADIUSDHCPPortal Enables step-wise migration Unified Session managementprovide seamless management RADIUS based methods to authenticateand account IP/DHCP based subscribersRADIUS / AAApush/pullPer Sub/ServiceAccountingSelf-provisioning/ Selfcare NAS port DHCP Option 82 DHCP Option 60 DHCP Proxy IP/DHCP Session Flexibility IP based and VLAN based DHCPsessions enable support for 1:1 andN:1 VLAN models 2010 Cisco and/or its affiliates. All rights nsIP address Mgt.DHCP ProxyCisco Confidential37

BNG and CGN NAT44 on ISMingress LCPrivate IPv4Subscribersegress LCISMCGN supportedat full ppSVIVLANPublic IPv4Translatedsubscriber’s trafficforwarded oninterface in outsideVRFCompliant with standard NAT behaviors (RFC4787, RFC5382, RFC5508)Subscriber sessiontraffic sent to ISMthrough VRF mappingor ABFISM performstranslation andforward packetinto outside VRF

ASR 9000 nV (Network Virtualization) TechnologySimplify operations & scaleASR 9000 “nV System”CloudASR 9000nVSimplify OperationsReduce overall TCOIntegrated A to stem and services scaleASR9000vASR9000vIncreased ServiceVelocityQuickly deploy new services

BNG Satellite Cluster Geo-redundant Dual Homing High AvailabilityMSANVDSLHomenxGEASR 9000BNG nVASR 9000DistributionSatelliteCore Huge 1GE Fan-out toward DSLAM Single-Chassis-like look & feel andManagement of Cluster Membersand Satellite Increase capacity Satellites appear like ASR 9000Linecards Simplified topology, No Spanningtree/MC-LAG or other L2redundancy protocols needed 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential42

Creating an ASR 9000 Virtual System with nV TechnologyEnables a self protected, self managed ASR 9000 virtualized systemThird-PartyServices/ ContentRemoteRemoteVirtualized Control & Data PlaneInter-chassis ConnectionsControlplaneDataplaneControlplaneASR 9KSeries Core01ActiveRSPDataplaneEdgeRemote nodes are viewed as linecards andremote platforms are discovered automatically. AggregationRemote nodes are provisioned by the host.AcceSoftware images for remote nodes can beupgraded automatically and features are in sync. ssA self-managed access is created allowing scaleto be decoupled from a single LCLCVirtualized control plane achieved via EOBC betweenRSP’s provides hitless outage upon node failure.Virtualized data plane achieved through linecard interchassis connections.A self-protected virtual chassis is created doubling thesystem capacity.

BNG nV Edge – Distributed ArchitecturesBNG on Aggregation – Access Node Dual 2 single access bundle (LAG) for AccessNode dual homing– Active/Standby member link, OR– Source based (US), Destination based(DS) loadbalancing– No MC-LAG, PADO delay (PPPoE),Access redundancy protocol 2010 Cisco and/or its affiliates. All rights reserved.D2H2-B single access subnet to subscriber– Single subscriber subnet advertised towardcore (minimizes subnet fragmentationissues)– No split subnets– No host route advertisement stateful failover– no session re-establishment on node failureCisco Confidential44

BNG nV Edge – Centralized ArchitecturesAnnounce allSubscriber IPAddress PoolsAgg.LAGor AGASR 9000Virtual ClusterH1-AAct.D1MC-LAGR0Stb.D2 Upstream Core routers perform FlowBased ECMPCoreH2-AAct.A2H1-BStb.R1H2-BAnnounce allSubscriber IPAddress Poolsall traffic to a given subscriber will endon a single chassis Since only one link per LAG is active, Subscriber SLA integrity is kept 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential45

BNG nV Edge – CentralizedArchitectures Failover and Packet FlowAnnounce allSubscriber IPAddress PoolsAgg.LAGor R 9000Virtual ct.R1H2-BAnnounce allSubscriber IPAddress Pools Upstream Core routers perform FlowBased ECMPtraffic to a given subscriber will end upon a single chassis Since only one link per LAG is active, all Subscriber SLA integrity is kept 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential46

BNG Satellite – Low Total Cost of OwnershipMSANVDSLHome Huge 1GE Fan-out towardDSLAMnxGEASR 9000BNG nVASR 9000DistributionSatelliteCore Auto detect and provisioningbetween nV Host and Satellites Satellites appear like ASR 9000Linecards, same features andconsistency Single image upgrade Simplified architectureASR 9000v 2010 Cisco and/or its affiliates. All rights reserved.ASR 903ASR 901Cisco Confidential47

Q&A#CiscoPlusCA

We value your feedback.Please be sure to complete the Evaluation Form for this session.Access today’s presentations at cisco.com/ca/plusFollow @CiscoCanada and join the #CiscoPlusCA conversation

ISG’s Subscriber et/CoreA construct inCisco IOS thatrepresentssubscriberISG subscriber session: created at First Sign Of Life (FSOL)N:1 relationship between session and interfaceFSOLPPP SessionsIP SessionPPP call requestReceived Packet w/ unknown IP or MAC sourceaddressIP or MAC initiated IP sessionDHCP DiscoverDHCP initiated IP sessionRADIUS RequestRADIUS initiated IP session

construct over a shared Subscriber Access Detection Subscriber authentication and authorization Subscriber address management G0/1.10 Create a per subscriber interface ("subscriber session") G0/1.10 John Mike Ted John Mike Ted Subscribers are John, Mike and Ted. John and Mike are HSI users, Ted is VoIP user There are 3 subscribers

Related Documents:

Verifying the Scheduling and Shaping Configuration for Subscriber Access. 70. Configuring Hierarchical CoS Scheduling on MPLS Ethernet Pseudowire Subscriber Interfaces. Interfaces. 72. Enhanced Subscriber Management Subscriber Logical Interfaces or Interface Sets Over Underlying . Logical Interfaces for a CoS scheduler Hierarchy. 72

A subscriber key is a text field that contains a unique value assigned to each subscriber. The subscriber key is used: When a subscriber you import or create already exists in the system. When a subscriber appears multiple times on a data extension (helps with deduplication).

Per-Subscriber Support of Maximum Transmission Unit for Dynamic Profiles. 54. Understanding Per-subscriber Support of Maximum Transmission Unit for Dynamic Profiles. 54. Configuring Per-subscriber Maximum Transmission Unit for Dynamic Profiles. 56. Dynamic Variables Overview. 58. Predefined Variables in Dynamic Profiles. 60. Junos OS Predefined .

the Subscriber to a reduction in the fees to be paid by it. 7.4 If the Subscriber does not meet the system requirements pursuant to Annex 1 or does not make adaptions pursuant to section 4.2 in a timely manner and malfunctions in the Amadeus System originate therefrom, Amadeus Germany shall be entitled to disconnect the Subscriber from the

SCHOOL RETIREE PREMIUMS WITH1 EMPLOYER CONTRIBUTION (MONTHLY RATE) LEVEL OF COVERAGE CDHP POS Subscriber Only 69.31 146.06 Subscriber 1 Child 101.76 213.04 Subscriber Children 145.46 302.80 Subscriber Spouse 309.66 488.49 Family 359.20 590.21 1 Eligibility information can be found in the Retiree Benefits Guide.

Subscriber Agreement for each individual Subscriber accessing NASDAQ U.S. data. NASDAQ's definition of Non-Professional Subscriber may permit individuals associated with certain non- commercial organizations (i.e., family investment trusts, investment clubs, etc.) to access NASDAQ U.S. market data at Non-Professional rates.

(viii) VDI Subscriber will designate one or more access stewards who will manage the access of VDI Subscriber personnel, as appropriate, in accordance with the terms of this Agreement ("Access Steward(s)"). VDI Subscriber shall notify Visa of its Access Stewards using the enrollment form attached hereto as Exibit D. VDI Subscriber may modify

BIOLOGY . SCIENCES ABOUT EARTH . SCIENTIFIC-THEORETICAL JOURNAL. Issued two times a year . Founder – Educational institution «Brest state university named after A.S. Pushkin» 2 / 2010. According to the order of Supreme certification commission 9 from January 15, 2010, the journal «Vesnik of Brest University» was included to the List of editions of the Republic of Belarus for publ