NETOP SUITE NETOP POLICY MANAGER (PM) Complete Policy Management System for Delivering Value-Added IP Services Figure 1) NetOp PM Server and Subscriber Services Key benefits Value added services: Delivers a range of new services to increase average revenue per subscriber Resource Admission Control: Ensures the best IPTV viewing experience in heavy Video On Demand environments by managing access to network resources Customer self-service: Reduces operating costs by permitting subscribers to self select the services they desire through a web portal Single subscriber sign-on: Provides subscribers with a single identity across client (PPP) or clientless (DHCP) access methods including support for multiple end devices and multiple network transports Flexible Service Provisioning: Utilizes an open service definition model permitting the creation of new value added service using third party application service providers and application vendors Cooperative proxy support: Coordinates with existing RADIUS, Lightweight Directory Access Protocol (LDAP) and Extensible Authentication Protocol (EAP) servers and leverages existing RADIUS infrastructure to provide an integrated mechanism for Authentication, Authorization, and Accounting (AAA) and service delivery Open OSS integration: Extends a standardized SOAP/XML gateway to accept service activation and change requests from web portals and back office OSSs Field-proven scalability: Delivers a redundant architecture featuring clustering, and loadbalancing that can grow to support millions of subscribers Ericsson's NetOp Policy Manager (NetOp PM) enables service providers to achieve these goals by supplementing their already deployed broadband networks with a comprehensive policy management solution. NetOp PM possesses the flexibility to allow service providers to quickly deploy low risk revenue generating services such as self provisioned tiered bandwidth, and then to roll-out incremental complex services such as video-on demand or pre-paid wireless access on a common platform providing an unique service model that leverages an unified subscriber account and subscriber location.
Figure 2) NetOp PM Architecture NetOp PM works with SmartEdge families of products. NetOp PM leverages the strengths of the platforms to offer value added services in a cost effective manner. NetOp PM allows service delivery to millions of subscribers over multiple broadband access technologies, including DSL, cable, Wi-Fi/WiMAX, and Ethernet. In an effort to move away from flat-rate broadband access, service providers are looking to offer value added services to enhance their margins. Premium consumer and business services are keys to differentiation and increased market share. Service providers can derive direct business value in a number of ways: Generate new revenue streams from existing subscribers Enhance new subscriber growth with exciting new services Reduce customer churn by increasing existing customer loyalty NetOp Policy Manager architecture (figure 2) Ericsson s policy management architecture is built around the following components: NetOp Policy Manager software with accompanying subscriber and service database Ericsson SmartEdge Service Web Portal for the subscriber to select their service profiles (bronze, silver, gold) and top-up their prepaid card accounts. The broadband subscriber can use a service Web portal to login, sign up for a service, or add a premium service. The service portal delivers a service order to NetOp PM, which authenticates the subscriber and then implements the order by provisioning the appropriate policies on the SmartEdge and third party platforms. The service portal is not specifically required for authentication, as NetOp PM can rely on other authentication mechanisms such as PPP username (for PPP), 802.1x EAP login, or device based MAC address or DHCP Option 82 authentication. The NetOp PM architecture primarily uses the RADIUS protocol for subscriber authentication and service delivery. Broadband Network Gateway (BNG) devices rely on RADIUS to authenticate subscribers and download policies using RADIUS attributes in a subscriber s profile such as amount of bandwidth and packet classification. NetOp PM has the ability to push a policy refresh using RADIUS CoA, which causes the device to dynamically update the set of policies on a subscriber circuit in a hitless manner. All this is done without dropping the subscriber s existing session. NetOp PM acts as the RADIUS server, retrieving from and updating all subscriber information in a SQL database. NetOp PM also communicates with back office OSS/BSS systems via RADIUS messages or an XML/SOAP API that allows backend systems to interface directly with NetOp PM. In an environment where external RADIUS servers exist, NetOp PM will act as a RADIUS proxy, forwarding all authentication and accounting messages to these servers. Prepaid Subscriber management is supported by NetOp PM using its internal accumulation and event manager. External Charging systems can also be integrated with NetOp PM using either RADIUS or Diameter Credit Control interfaces. NetOp Policy Manager services NetOp PM enables service providers to offer a wide range of new revenue-generating services. In addition to basic broadband authentication for network access based on PPP or DHCP, service providers can create services based on a variety of policy management
Figure 3) NetOp PM Resource Admission Control Service (RACS) building blocks such as authentication, filtering, multicast, metering, and queueing. Possible services include: Web-based login Wi-Fi and WiMAX wireless access Data traffic offloading through Wi-Fi Dynamic service selection Invalid PPP login redirect Dynamic service selection Captive portal / redirect services Tiered bandwidth Bandwidth on demand Video on Demand URL filtering Dynamic traffic prioritization Scheduled time of day based access Prepaid access based on total time online Fair-usage policies with download quotas Some of these services also create new billing models, helping to diversify the subscriber base and increase service penetration. For example, providers can charge lower prices for services that are only offered at certain times of the day or only allow a specific amount of content to be downloaded. Supporting a wholesale/retail model NetOp PM relies on RADIUS for authentication and service delivery, a protocol that has a large installed base among network operators. In a basic non-wholesale environment, where the service provider owns the customer, NetOp PM can proxy RADIUS messages to external RADIUS servers. NetOp PM can also be used in a wholesale/retail environment where ISPs or content partners retain control of their subscriber bases and the service provider is free to concentrate on service delivery. NetOp PM can proxy RADIUS AAA messages to RADIUS servers operated by ISPs. Resource Admission Control Service (RACS - figure 3) Video deployments require management of large concurrent streams of data. Subscribers using Videoon-Demand services can be guaranteed the necessary bandwidth using NetOp PM s Resource Admission Control Subsystem (RACS) function. Bandwidth reservations can be requested by video streaming middleware to ensure that subscribers experience the highest quality service given the networks finite resources. As a critical component in delivering bandwidth intensive and content-driven Video On Demand, RACS overcomes common problems such as bandwidth over-provisioning and enables a new level of optimization to the existing networks infrastructure. NetOp PM provides a standards based Diameter interface for IMS applications and a SOAP interface for non-ims applications.
Features Transparent subscriber access Comprehensive service model Powerful service definition GUI Standardized interfaces for authentication and service delivery Simple LDAP and EAP Integration Extensible architecture Open SOAP/XML API Jump-start Web Portal Scaleable distributed design Benefits PPP client or clientless (DHCP) access methods support multiple end devices (PC, set-top box, VoIP phone, etc.) and multiple transports (DSL, cable, Ethernet, Wi-Fi, WiMAX, etc.) Service consists of one or more policies. Multiple services may be applied to a subscriber. Services may be varied across location, node type, circuit type, access type and realm Facilitates the creation and management of services by service provider personnel Operationally proven with large installed base Load balancing among multiple servers offers scalability and redundancy Introduces no new protocols into the network - reduces complexity Interfaces with external LDAP and EAP servers for authentication and directory services Support of third party RADIUS Vendor Specific Attributes (VSAs) allows simple creation of new subscriber attributes Carrier or system integrators can customize behavior and insert additional business logic via custom hooks or callbacks Flexible method for initiating service activation and change requests to NetOp Policy Manager from portals or back office OSSs Provider has flexibility to use the included NetOp PM lightweight portal for quick ramp-up or integrate with an existing portal for advanced services Individual processes may be deployed in one or more server clusters, facilitating load-balancing and redundant configurations as well as providing enhanced scalability and performance
System requirements for NetOp Policy Manager NetOp Policy Manager Server 6.2 Solaris 10 operating system Oracle 10g (provided) Four core UltraSPARC T2 processor, 1.2 GHz or greater 4+ GB of RAM 2 x 36 GB of hard drive space A multiple server and RAID configuration is recommended for high-volume accounting installations. A single NetOp Policy Manager deployment supports millions of subscribers. These system requirements are only a guideline for typical deployment. Specific requirements are dependent on many other factors including the number of subscribers, the rate at which subscribers login or change services, frequency of accounting, etc. NetOp Policy Manager Client Pentium III-class PC or better or Sun Solaris workstation 512+ MB of RAM 4+ GB of hard drive space Monitor with minimum resolution of 1,024 X 768 Windows XP SP2, Windows Vista Enterprise SP1, or Solaris 10 Update 6 (10/08) operating system Java Runtime Environment (JRE) 6.1, Update 6 (provided) IE 7 or later, FireFox 3.0 or later Network Element Support SmartEdge OS Release 6.1.5 or greater Subscriber licenses for NetOp Policy Manager are available in increments of 50,000 to 1,000,000 subscribers. Ericsson 100 Headquarters Drive San Jose, CA 95134-1362 USA Tel: +1 408 750 5000 Fax: +1 408 750 5599 www.ericsson.com Ericsson AB 2009. All rights reserved. Redback and SmartEdge are trademarks registered at the U.S. Patent & Trademark Office and in other countries. AOS, NetOp, SMS, User Intelligent Networks are trademarks or service marks of Telefonaktiebolaget LM Ericsson. All other products or services mentioned are the trademarks, service marks, registered trademarks or registered service marks of their respective owners. All rights in copyright are reserved to the copyright owner. Company and product names are trademarks or registered trademarks of their respective owners. Neither the name of any third party software developer nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission of such third party.