NetOp Policy Manager

Complete Policy Management System for Delivering Value-Added IP Services

HIGHLIGHTS
Value added services: Delivers a range of new services to increase average revenue per subscriber Customer self-service: Reduces operating costs by permitting subscribers to self select the services they desire through a web portal Single subscriber sign-on: Provides subscribers with a single identity across client (PPP) or clientless (DHCP) access methods including support for multiple end devices and multiple network transports Flexible Service Provisioning: Utilizes an open service definition model permitting the creation of new value added service using third party application service providers and application vendors Cooperative proxy support: Coordinates with existing RADIUS, Lightweight Directory Access Protocol (LDAP) and Extensible Authentication Protocol (EAP) servers and leverages existing RADIUS infrastructure to provide an integrated mechanism for Authentication, Authorization, and Accounting (AAA) and service delivery Open OSS integration: Extends a standardized SOAP/XML gateway to accept service activation and change requests from web portals and back office OSSs Field-proven scalability: Delivers a redundant architecture featuring clustering, and load-balancing that can grow to support millions of subscribers

In an effort to move away from flat-rate broadband access, service providers are looking to offer value added services to enhance their margins. Premium consumer and business services are keys to differentiation and increased market share. Service providers can derive direct business value in a number of ways: Generate new revenue streams from existing subscribers Enhance new subscriber growth with exciting new services Reduce customer churn by increasing existing customers loyalty Redback Networks NetOp Policy Manager (NetOp PM) enables service providers to achieve these goals by supplementing their already deployed broadband networks with a comprehensive policy management solution. NetOp PM possesses the flexibility to allow service providers to quickly deploy low risk revenue generating services such as self provisioned tiered bandwidth, and then offer more complex services such as video-on demand or pre-paid wireless access after the provider has experienced the gains from differentiated value added services and understands the market demand for such services. NetOp PM works with Redback SM 480 and SmartEdge families of products. NetOP PM leverages the strengths of the platforms to offer value added services in a cost effective manner. NetOp PM allows service delivery to millions of subscribers over multiple broadband access technologies, including DSL, cable, Wi-Fi/WiMAX, and Ethernet.

NETOP POLICY MANAGER ARCHITECTURE

Redbacks policy management architecture is built around the following components: NetOp Policy Manager software with accompanying subscriber and service database Redback SM 480 and SmartEdge Service Web Portal for the subscriber to select their service profiles (bronze, silver, gold) and top-up their prepaid card accounts.

NETOP POLICY MANAGER SERVICES

NetOp PM enables service providers to offer a wide range of new revenue-generating services. In addition to basic broadband authentication for network access based on PPP or DHCP, service providers can create services based on a variety of policy management building blocks such as authentication, filtering, multicast, metering, and queueing. Possible services include: Web-based login Wi-Fi and WiMAX access Dynamic service selection Invalid PPP login redirect Dynamic service selection Captive portal / redirect services Tiered bandwidth Bandwidth on demand Video on Demand URL filtering Dynamic traffic prioritization Scheduled time of day based access Duration-based access based on total time online Volume-based access with download limits Some of these services also create new billing models, helping to diversify the subscriber base and increase service penetration. For example, providers can charge lower prices for services that are only offered at certain times of the day or only allow a specific amount of content to be downloaded.

The broadband subscriber can use a service Web portal to login, sign up for a service, or add a premium service. The service portal delivers a service order to NetOp PM, which authenticates the subscriber and then implements the order by provisioning the appropriate policies on the SmartEdge and SM 480 platforms. The service portal is not specifically required for authentication, as NetOp PM can rely on other authentication mechanisms such as PPP username (for PPP), MAC addresses, or 802.1x EAP login . The NetOp PM architecture primarily uses the RADIUS protocol for subscriber authentication and service delivery. The Redback devices rely on RADIUS to authenticate subscribers and download policies using RADIUS attributes in a subscribers profile such as amount of bandwidth and packet classification. NetOp PM has the ability to push a policy refresh, which causes the device to dynamically update the set of policies on a subscriber circuit in a hitless manner. All this is done without dropping the subscribers existing session. NetOp PM acts as the RADIUS server, retrieving from and updating all subscriber information in a SQL database. NetOp PM also communicates with back office OSS/BSS systems via RADIUS messages or an XML/SOAP API that allows backend systems to interface directly with NetOp PM. In an environment where external RADIUS servers exist, NetOp PM will act as a RADIUS proxy, forwarding all authentication and accounting messages to these servers.

SUPPORTING A WHOLESALE/RETAIL MODEL

NetOp PM relies on RADIUS for authentication and service delivery, a protocol that has a large installed base among network operators. In a basic non-wholesale environment, where the service provider owns the customer, NetOp PM can proxy RADIUS messages to external RADIUS servers. NetOp PM can also be used in a wholesale/retail environment where ISPs or content partners retain control of their subscriber bases and the service provider is free to concentrate on service delivery. NetOp PM can proxy RADIUS AAA messages to RADIUS servers operated by ISPs.

RESOURCE MANAGEMENT AND ADMISSION CONTROL

Video deployments require management of large concurrent streams of data. Subscribers using Video-on-Demand services can be guaranteed the necessary bandwidth using NetOp PMs admission control function. Bandwidth reservations can be requested by video streaming middleware to ensure that subscribers experience the highest quality service given the networks finite resources.

BENEFITS PPP client or clientless (DHCP) access methods support multiple end devices (PC, set-top box, VoIP phone, etc.) and multiple transports (DSL, cable, Ethernet, Wi-Fi, etc.) Service consists of one or more policies. Multiple services may be applied to a subscriber. Services may be varied across node type, circuit type, access type and realm Facilitates the creation and management of services by service provider personnel Operationally proven with large installed base Load balancing among multiple servers offers scalability and redundancy Introduces no new protocols into the network - reduces complexity Interfaces with external LDAP and EAP servers for authentication and directory services Support of third party RADIUS Vendor Specific Attributes (VSAs) allows simple creation of new subscriber attributes Carrier or system integrators can customize behavior and insert additional business logic via custom hooks or callbacks Flexible method for initiating service activation and change requests to NetOp Policy Manager from portals or back office OSSs Provider has flexibility to use the included NetOp PM lightweight portal for quick ramp-up or integrate with an existing portal for advanced services Individual processes may be deployed in one or more server clusters, facilitating load-balancing and redundant configurations as well as providing enhanced scalability and performance

FEATURES Transparent subscriber access Comprehensive service model Powerful service definition GUI Standardized RADIUS as the single mechanism for authentication and service delivery Simple LDAP and EAP Integration Extensible architecture Open SOAP/XML API Jump-start Web Portal Scaleable distributed design

SYSTEM REQUIREMENTS
NetOp Policy Manager Server: Solaris 10 operating system Oracle 10g (provided) Four core UltraSPARC T2 processor, 1.28 GHz or greater 4+ GB of RAM 2 x 36 GB of hard drive space A multiple server and RAID configuration is recommended for high-volume accounting installations. A single NetOp Policy Manager deployment supports millions of subscribers. These system requirements are only a guideline for typical deployment. Specific requirements are dependent on many other factors including the number of subscribers, the rate at which subscribers login or change services, frequency of accounting, etc. NetOp Policy Manager Client: Pentium III-class PC or better or Sun Solaris workstation 512+ MB of RAM 4+ GB of hard drive space Monitor with minimum resolution of 1,024 X 768 Windows XP SP2, or Solaris 10 operating system Java Runtime Environment (JRE) 6u2 (provided) IE 6 or later, FireFox 2.0 or later Network Element Support: SmartEdge OS Release 5.0.7 or greater SM 480 OS Release 6.1.5 or greater SMS AOS 6.1.4.13 or greater Subscriber licenses for NetOp Policy Manager are available in increments of 50,000 to 1,000,000 subscribers.

All statements, specifications, recommendations, and technical and other information contained in this document are current as of the date of publication and presented without warranty of any kind, whether express or implied. Redback reserves the right to revise the information in the document at its discretion without notice. Redback shall not be liable for errors or omissions in this document. Redback shall not be held liable for damages of any kind resulting from the furnishing or use of this document. Redback product specifications are subject to change without notice. REDBACK and SmartEdge are trademarks registered at the U.S. Patent & Trademark Office and in other countries. NetOp and SMS are trademarks of Redback Networks Inc. All other products or services mentioned are the trademark, service marks, registered trademarks or registered service marks of their respective owners. 2008 Redback Networks Inc. All rights reserved.