[Basic Training]Diameter Protocol Overview ISSUE5.00

8/18/2019 [Basic Training]Diameter Protocol Overview ISSUE5.00

1/30

www.huawei.com

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved.

iameter!rotocol

"verview


2/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age2

#oreword

The iameter protocol is intended to provide anAuthentication, Authori$ation and Accounting %AAA&

'ramewor( 'or applications such as networ( access

or )! mo*ility


3/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age+

e'erences

#C+--

+/!! T 21.221


4/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age

"*3ectives

4pon completion o' this course, you will *e a*le to5 now the structure o' iameter protocol.

escri*e the application o' iameter in the )!

condition escri*e the procedure o' the iameter application


5/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age-

Contents

1. Diameter Protocol Overview

2. iameter 'or )! Applicatioin


6/30


Contents

7. iameter !rotocol "verview

1.1 Diameter introduction

7.2 iameter 'ramewor(

7.+ 8essage structure


7/30


PPP

:hat;s iameter< iameter protocol

An AAA protocol, provide Authentication, Authori$ation

and Accounting %AAA& 'unction

Advanced than =radius>, so it is called =diameter>

NAS

Traditional network

Radius

AAA client

DSL

3G

WLAN

Diameter

future network

AAA server AAA server


8/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age

?ew demands on AAAprotocols ?etwor( access re@uirements 'or AAA protocols

#ailover

Transmissionlevel security

elia*le transport Agent support

erverinitiated messages

Capa*ility negotiation !eer discovery and conBguration

oaming support


9/30


Characteristic

The iameter *ase protocol provides the 'ollowing'acilities

elivery o' A!s %attri*ute value pairs&

Capa*ilities negotiation Drror notiBcation

DEtensi*ility, through addition o' new commands and

A!s %re@uired in FAAADG&.

Iasic services necessary 'or applications, such as

handling o' user sessions or accounting


10/30


Contents


7.7 iameter introduction

1.2 Diameter framework

7.+ 8essage structure


11/30


iameter 'ramewor(

iameter speciBcation consists The iameter *ase protocol

Transport !roBle FAAATA?

Applications

8o*ile )!v F)A88)! application ?ADG F?ADG application

)! application

J

Diameter Base protocol, Transport profileDiameter Base protocol, Transport profile

NASREQ

application

MI

applicationEA

application

SI

application

……


12/30


iameter node type

iameter node type Client

A iameter Client is a device at the edge o' the networ(

that per'orms access control. An eEample o' a iameter

client is a ?etwor( Access erver %?A& or a #oreign Agent

%#A&.

erver A iameter erver is one that handles authentication,

authori$ation and accounting re@uests 'or a particular

realm. Iy its very nature, a iameter erver 84T support

iameter applications in addition to the *ase protocol.

Agent


13/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age7+

ole o' iameter Agents

There are 'our (inds o' iameter Agents !roEy Agent or !roEy

elay Agent or elay

edirect Agent Translation Agent


14/30


Contents


7.7 iameter introduction

7.2 iameter 'ramewor(

1.3 Message structure


15/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age7-

iameter !4

iameter !4 includes two parts5 iameter header

iameter A!

version Message Length

command

ags

R P ! r r r r

"ommand#"ode

$%%lication#&D

'o%#()#'o% &denti*er

nd#to#nd &denti*er

$+Ps ...

! " # $ % & ' ( ) * ! " # $ % & ' ( ) * ! " # $ % & ' ( ) * ! "

! " # $


16/30


iameter !4

Command code

"ommand#,ame $((rev "ode

A*ortessione@uest A 29

A*ortessionAnswer AA 29

Accountinge@uest AC 297

AccountingAnswer ACA 297

Capa*ilitiesDEchangee@uest CD 2-9

Capa*ilitiesDEchange Answer CDA 2-9

evice:atchdoge@uest : 20

evice:atchdogAnswer :A 20

essionTermination e@uest T 29-

essionTermination Answer TA 29-


17/30


iameter !4

A! The iameter protocol consists o' a header 'ollowed *y

one or more Attri*utealue!airs %A!s&. An A!

includes a header and is used to encapsulate protocol

speciBc data %e.g., routing in'ormation& as well as

authentication, authori$ation or accounting in'ormation

A! structure

$+P "ode$+P ags

+ M P r r r r r

$+P Length

+endor#&D -o%t

$+P data/

! " # $ % & ' ( ) * ! " # $ % & ' ( ) * ! " # $ % & ' ( ) * ! "

! " # $


18/30


DEample

4se CE message as an eEample

I+S- .SS

Diameter messa/e0 1AA

Diameter 2eader A3s

ommand code

1AA

A3 2eader

'!$

A3 code

"!%"&

A3 len/t2

A3 data

'!$0 server capa4ilities


19/30


Contents


2. Diameter for 0&P $%%licatioin


20/30


iameter 'or )! Application

'ramewor(

SI 1A SI 1ASI server" SI sever#

Diameter

server

Diameter

1AR51AA

6IR56IA

Diameter

R5A

SAR5SAA

RTR5RTA


21/30


Command code in )!Application

"ommand#,ame $((rev "ode

4serAuthori$atione@uest 4A +00

4serAuthori$ationAnswer 4AA +00

erverAssignmente@uest A +07

erverAssignmentAnswer AA +07

Location)n'oe@uest L) +02

Location)n'oAnswer L)A +02

8ultimediaAuthe@uest 8A +0+

8ultimediaAuthAnswer 8AA +0+

egistrationTerminatione@uest T +0

egistrationTerminationAnswer TA +0

!ush!roBlee@uest !! +0-

!ush!roBleAnswer !!A +0-


22/30


A! code in )! application

"ommand#,ame "ode

isited?etwor()dentiBer 607

!u*lic)dentity 602

erver?ame 60+

erverCapa*ilities 608andatoryCapa*ility 60-

"ptionalCapa*ility 606

4serata 609

)!?um*erAuth)tems 60

)!Authenticationcheme 601

)!Authenticate 670

)!Authori$ation 677

)!AuthenticationConteEt 672


23/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age2+


"ommand#,ame "ode

)!Authata)tem 67+

)!)tem?um*er 67

erverAssignmentType 67-

eregistrationeason 676

easonCode 679

eason)n'o 67

Charging)n'ormation 671

!rimaryDventCharging#unction?ame 620

econdaryDventCharging#unction?ame 627

!rimaryChargingCollection#unction?ame 622

econdaryChargingCollection#unction?ame 62+

4serAuthori$ationType 62


24/30



"ommand#,ame "ode

4serataAlreadyAvaila*le 62-

ConBdentialityey 626)ntegrityey 629

upported#eatures 62

#eatureList) 621

#eatureList 6+0

upportedApplications 6+7


25/30

Copyright © 2006 Huawei Technologies Co., Ltd. All rights reserved. !age2-

iameter signaling procedurein )! Application

DEample %register&

HSS S-CSCFI-CSCF

"7SI re/ister #71AR

$71AA%7SI re/ister

&7MAR

'7MAA(7%!" unaut2ori8ed

)7%!" unaut2ori8ed*7SI re/ister

"!71AR

""71AA"#7SI re/ister

"$7SAR"%7SAA

"&7#!! 9:"'7#!!9:


26/30


4AK4AA 4serAuthori$ationre@uestKanswer

4ser registerK4ser deregister )CC# H to @uery the CC#

H Action i' the )8!4 is allowed to roam in the visited networ(

i' the )8!4 is allowed to authori$ed to register i' the )8!4 isn;t *arred

H eturn CC# ?ame or

CC# Capa*ilities


27/30


8AK8AA 8ultimediaAuthentication re@uestKanswer

CC#H to retrieve authentication vectors'rom the H

H Action

Chec( the register status o' the user and 3udge i' the CC# name e@ual to the server name stored in H

eturns the As%A?MA4T?MNDMCM)& that CC#

re@uests


28/30


AKAA erverAssignmentre@uestKanswer

CC#H to noti'y to register or deregister the user CC# H to re@uest the user pro'ile

H Action

Chec( the user current register state and update to thenew register state

tore the CC# server name 'or the user

eturn the user proBle andKor charging in'ormation to

CC#


29/30


ummary

!lease descri*e the diameter application in registerprocedure


30/30

T2ank ;ouwww72uawei7com

Date post:	07-Jul-2018
Category:	Documents
Upload:	amjad-khattak
View:	218 times
Download:	1 times

[Basic Training]Diameter Protocol Overview ISSUE5.00

Documents