Go to primary content
User Data Repository Diameter User's Guide
Release 12.4
E92984-01
Go To Table Of Contents
Contents

Previous
Previous
Next
Next

Diameter Connection configuration elements

Table 3-18 describes the fields on the Connections Edit and Insert pages. Data input notes only apply to the Insert and Edit pages.

Note:

Any request for a list of connections does not include any dynamically-created connection instances.

When you select a connection route groups, you can specify to pass over connections that have too high of a DOIC loss rate.

If an element is not applicable to RADIUS connections (AAA protocol is RADIUS), the element is greyed out.

Note:

If you attempt to add or edit RADIUS connections, you cannot set values for the Local Initiate Port, Alternate Local IP Address, IPFE Initiator DAMP, Alternate Peer IP Address, Transport FQDN, CEX Configuration Set, Transport Congestion Abatement Timeout, Remote Busy Usage, Remote Busy Abatement Timeout, Message Priority Setting, Message Priority Configuration Set, Suppress Connection Unavailable Alarm, Suppress Connection Attempts, and Test Mode fields.

Note:

If you attempt to add or edit Diameter connections, you cannot set values for the Shared Secret Configuration Set, Message Authenticator Configuration Set, Status-Server Configuration Set, and UDP Port fields.

Table 3-18 Connections Configuration Elements

Field (* indicates required field) Description Data Input Notes
* Connection Name Name of the connection. The name must be unique in the system.

Format: field

Range: 1 - 32 characters

Transport Protocol

Type of transport protocol used by this connection.

The selected transport protocol must be supported by both the associated local node and peer node.

If AAA protocol is selected as RADIUS, only UDP is offered.

For Floating (IPFE) connections, the transport protocol selected for this connection must be included in the Supported Protocols for the IPFE target set.
  • TCP connections are not allowed when the target set is configured to be SCTP_ONLY
  • SCTP connections are not allowed when the target set is configured to be TCP_ONLY
  • When the target set is configured to be TCP_AND_SCTP, then both TCP and SCTP connections are allowed.

Note:

Do not enable IPSEC if the connection is configured with TLS/TCP or DTLS/SCTP protocol; enabling both IPSEC and TLS/TCP or DTLS/SCTP is not recommended as this would have significant performance impact.

Format: options

Range: SCTP, TCP, TLS/TCP, DTLS/SCTP, UDP

Default: SCTP

* AAA Protocol The AAA protocol for this connection, which defines the connection as diameter or RADIUS.

Format: List

Range: Diameter, RADIUS

Default: blank

* Local Node

Local node associated with the connection.

The local node must use the same transport protocol as the peer node. The entries in the local node field are links to the Diameter > Configuration > Local Nodes [Filtered] page, which shows only the selected entry.

If two IP addresses are configured for the local node, it is recommended that an alternate IP Address be configured for the peer node. The peer’s alternate IP address is used as a fallback for the initiation of the SCTP connection establishment if the peer’s IP address is unreachable, as well as for the validation of the IP addresses advertised by the peer in the INIT/INIT_ACK SCTP chunk.

Note:

It is recommended that separate local nodes be used for uni-homed and multi-homed SCTP connections.

Format: List

Range: all configured local nodes

Default: blank

* Connection Mode
The connection can have one of the following connection modes:
  • Initiator Only - indicates the local node initiates the connection to the peer node.

    Note:

    If a initiator only connection is created and a TSA selected, check if IPFE initiator connection support is enabled on the target set.
    • If yes, allow IPFE initiator connection support. You must select from the DA-MP's port range if you want to explicitly configure the initiator port.
    • If no, IPFE initiator connection support is not allowed.
  • Responder Only - indicates the local node only responds to the connection initiated from the peer node. The local initiate port field is not available when the responder only is selected here.

    Responder Only connections associated with a Peer Node are not considered listen ports (SCTP, TCP, TLS, or DTLS).

  • Initiator & Responder - indicates the local node initiates a connection to the peer node and responds to connection initiations from the peer node.

    When configured with a TSA and as initiator & responder, the DA-MP uses the TSA as the source IP address for initiating connections and for all subsequent signaling traffic over that connection.

  • RADIUS Server - indicates that the DSR receives incoming RADIUS requests from a peer node that is a RADIUS client.
  • RADIUS Client - indicates that the DSR sends RADIUS requests to a peer node that is a RADIUS Server.

The Connection Mode must be the same for all connections to the same peer.

For UNI-HOMED Connections,
  • If the Connection Mode is Initiator & Responder and Peer Node Identification is set to IP Address for any connections to the peer, then the following combination must be unique for each connection to the peer: peer FQDN (from peer nodes configuration), peer Realm (from peer nodes configuration), transport protocol, local IP, local listen port (from local nodes configuration), Must Include application IDs in the CEX Configuration Set.
  • If the Connection Mode is Initiator & Responder and Peer Node Identification is Transport FQDN or Peer Diameter Identity FQDN for at least one connection to the peer, then the following combination must be unique for each connection to the peer: peer FQDN (from peer nodes configuration), peer Realm (from peer nodes configuration), transport protocol, local IP, local listen port (from local nodes configuration), Must Include application IDs in the CEX Configuration Set.
  • The connection local IP Address and local initiate port combination cannot be the same as the local IP Address and listen port combination of one of the local nodes or of another connection.
For MULTI-HOMED Connections,
  • If the Connection Mode is Initiator & Responder and Peer Node Identification is set to IP Address for any connections to the peer, then the following combination must be unique for each connection to the peer: peer FQDN (from peer nodes configuration), peer Realm (from peer nodes configuration), transport protocol, local IP pair, local listen port (from local nodes configuration), Must Include application IDs in the CEX Configuration Set.
  • If the Connection Mode is Initiator & Responder and Peer Node Identification is Transport FQDN or Peer Diameter Identity FQDN for any connections to the peer, then the following combination must be unique for each connection to the peer: peer FQDN (from peer nodes configuration), peer Realm (from peer nodes configuration), transport protocol, local IP pair, local listen port (from local nodes configuration), Must Include application IDs in the CEX Configuration Set.
  • If the Connection Mode is Initiator & Responder and Transport FQDN is NOT specified in any connections to the peer, then the following combination must be unique for each connection the peer: Transport FQDN, peer Realm, transport protocol, local IP pair, Remote IP pair, local listen port, Must Include application IDs.
  • The connection Local IP Address pair and Local Initiate Port combination cannot be the same as the Local IP Address pair and Listen Port combination of one of the local nodes or of another connection.

Format: List

Range: diameter: initiator only, responder only, initiator & responder

RADIUS: RADIUS server, RADIUS client

Default: initiator & responder

Dynamic Indicates whether or not the element was created dynamically (YES) or statically (NO). NO is assigned for all element instances, except for those created via Dynamic peer Discovery.

Format: checkbox (read-only on the element [Edit] page)

Range: checked (the element was created as a result of Dynamic Discovery), unchecked

Default: unchecked

Local Initiate Port

The IP source port number to be used when the connection is an initiator.

This field is not available and is set to Blank when the connection Mode is Responder Only.

Initiator port ranges are divided into automatically assigned and DCL-assigned sub-ranges. Depending on the type of initiator connection, fixed or IPFE, there are two or more user/DCL sub-ranges.

DCL (Diameter Transport Layer) is the software layer of the stack which implements diameter transport connections.

If the connection remains fixed, a warning is generated if the configured port is out of range for an initiator connection type. If you convert the fixed initiator connection to an IPFE initiator connection, you must select from the DA-MP's port range if you want to explicitly configure the initiator port. See Connection Capacity Dashboard Functions for more information about fixed and IPFE initiator connections.

Format: numeric

Range: 1024-49151

Default: Blank

UDP Port For RADIUS Server connections, this is the UDP port on which the DSR expects to receive incoming RADIUS requests for this connection. For RADIUS Client connections, this is the UDP port at the destination peer node that receives the RADIUS request sent by the DSR.

Format: List

Range: local (RADIUS server connections) or peer node (RADIUS client connections) UDP port numbers

Default: blank

IP Owner Identifies the DA-MP that owns this connection attribute. Each RCL instance ignores connection attributes that are not exclusively assigned to its local DA-MP.

Format: read-only

Range: IP owner

Default: blank

* Local IP Address

The IP address to be used as local node Address for this connection.

A local node must be selected before the list becomes available, containing the IP Addresses corresponding to the selected local node.

When configuring diameter TCP connections, only MP static IP addresses, TSAs and alternate TSAs can be selected as the local IP Address.

If an IPFE alternate target set Address (selected from the local node's IP Address list) is assigned to the local IP Address of a diameter connection, then the alternate local IP Address selection is disabled. In this case, a Uni-homed connection is configured, but using the target set's alternate IP address as the only local IP Address for the connection.

Note:

Uni-homed and multi-homes are applicable only to SCTP/Diameter connections; they are not applicable to RADIUS/UDP connections.

When configuring RADIUS connections, only MP static IP addresses can be selected as local IP Address.

Each IP address in the list has an identifying tag appended to it, as follows:
  • In Active/Standby DA-MP NEs, a DA-MP VIP is appended with (VIP).
  • In Multiple-Active DA-MP NEs, a static IP address owned by the DA-MP is appended with the Server Hostname of the DA-MP, for example, (DA-MP1).
  • IPFE target set Addresses are appended with the target set Name, for example, (TSA1).
  • For each IPFE connection listed on the View screen, the local IP Address field displays (TSA# or TSA#-a) after the IP address, where # is the target set number and -a is an alternate TSA.

Format: List

Range: all configured IP addresses for the selected local node

Default: blank

Alternate Local IP Address

The IP address to be used as the alternate local node Address for this connection.

A local node must be selected and the selected connection transport protocol must be SCTP before the list becomes available, containing the IP Addresses of the selected local node.

Note:

SCTP can be selected as a protocol only for diameter connections.

IPFE target set Addresses are appended with the target set Name, for example, (TSA1).

If an IPFE target set Address (selected from the local node's IP Address list) is assigned to the local IP Address of a diameter connection, then the only valid selection for the alternate local IP Address is the corresponding IPFE alternate target set Address (for example: if TSA1 is assigned to a local IP address of a diameter connection, then the only valid selection for the alternate local IP Address is TSA1-a.

This address is used only for SCTP Multi-homing; it must be different from the selected local IP Address. An IPFE TSA and an alternate TSA cannot be identical.

Note:

SCTP can be selected as a protocol only for diameter connections.

Format: List

Range: all configured IP addresses for the selected local node

Default: blank

IPFE Initiator DAMP

The IPFE initiator DA-MP for this connection.

When the addition of a new floating IPFE connection is being validated, OAM validates that the addition of the floating IPFE connection does not cause, for each DA-MP in the subject target set, the total number of connections allocated to the DA-MP, to exceed the DA-MP's total capacity. If the available capacity on one or more DA-MPs in the subject target set is less than zero and any DA-MP in the subject target set is included in more than one target set, OAM allows the floating IPFE connection to be added, but also issues a warning message.

If the validation fails and the subject target set does not overlap any other target set, OAM computes the available capacity for the entire subject target set (by computing available capacity for each DA-MP and summing them). If the target set available capacity is less than zero, the validation fails and an error code is generated.

Format: List

Range: available DA-MP IP addresses configured for the TSA selected for local IP Address

Default: blank or IPFE initiator DA-MP

* Peer Node

Peer node associated with the connection.

The peer node must use the same IP protocol as the local node. The entries in the peer node field are links to the Diameter > Configuration > Peer Nodes [Filtered] page which shows only the selected entry.

Format: List

Range: all configured peer nodes

Default: blank

Peer Node Identification

Specifies how the peer node's IP address(es) is derived when initiating a connection to the peer, and whether the peer node's IP address(es) is validated when responding to a connection from the peer.

Transport FQDNs use the remote IP address(es) configured for this connection when initiating a connection to the peer, and to validate the peer node's IP address(es) when responding to a connection from the peer.

Use the remote IP address(es) configured for this connection when initiating a connection to the peer and to validate the peer node's IP address(es) when responding to a connection from the peer.

If no IP Address has been selected and no transport FQDN has been specified, then the only accepted choice is peer diameter identity FQDN.

Use None for this connection when responding to a connection from the peer and do not validate the peer node's IP address(es).

Use the DNS resolved FQDN address configured for the peer node associated with this connection when initiating a connection to the peer, and do not validate the peer node's IP address(es) when responding to a connection from the peer.

The FQDN configured for the connection takes precedence over the peer's diameter Identity FQDN.
  • If the peer node Identification is set to IP Address, then the transport FQDN field cannot be changed and the peer IP Address list is available.
  • If the peer node Identification is set to transport FQDN, then the peer IP Address list is not available and the transport FQDN field can be changed.
  • If the peer node Identification is set to peer diameter Identity FQDN, then both the transport FQDN field and the peer IP Address list is not available.

Format: options

Range: None, IP Address

Default: IP Address

Peer IP Address

The IP Address to be used as the peer node address for this connection.

A peer node must be selected before the list becomes available, containing the IP Addresses of the selected peer node.

Format: List

Range: available IP addresses

Default: blank

Alternate Peer IP Address

The IP Address to be used as the alternate peer node address for this connection.

A peer node must be selected and the selected connection transport protocol must be SCTP before the list becomes available, containing the IP Addresses of the selected peer node.

This address is used only for SCTP Multi-homing; it must be different from the selected peer IP Address.

Format: List

Range: available IP addresses

Default: blank

Transport FQDN Fully Qualified Domain Name for this connection.

The transport FQDN is used for DNS lookup when peer node Identification is set to transport FQDN.

If a responder only connection is created without a peer node IP Address and Transport FQDN is selected, transport FQDN is required even though it is not applicable. In this case, an error code is generated (when using Transport FQDN with initiator connections.

Format: case-insensitive string consisting of a list of labels separated by dots. A label can contain letters, digits, dash (-), and underscore (_). A label must begin with a letter, digit, or underscore, and must end with a letter or digit. Underscore can be used only as the first character.

Range: FQDN - up to 255 characters; label - up to 63 characters

* Connection Configuration Set

Connection Configuration Set associated with the connection.

The entries in the connection Configuration Set field are links to the Connection Configuration Sets (Filtered) page, which displays the attributes of only the selected entry.

Format: List

Range: all configured connection Configuration Sets, Default connection Configuration Set.

Default: blank

CEX Configuration Set

CEX Configuration Set associated with the connection.

The entries in the CEX Configuration Set field are links to the CEX Configuration Sets (Filtered) page, which shows only the selected entry.

Format: List

Range: all configured CEX Configuration Sets, "Default" CEX Configuration Set.

Default: blank

* Capacity Configuration Set

Capacity Configuration Set associated with the connection. The Capacity Configuration Set defines reserved and maximum ingress message processing rates and alarms thresholds for this connection.

The entries in the Capacity Configuration Set field are links to the Capacity Configuration Sets (Filtered) page, which displays only the selected entry.

The addition of any connection having non-zero Reserved Ingress MPS is subject to capacity validation rules, which are discussed in the connection Capacity Validation content.

See the MP Profiles information in Diameter Common User's Guide.

Format: List

Range: all configured Capacity Configuration Sets, "Default" Capacity Configuration Set

Default: "Default" Capacity Configuration Set

* Transport Congestion Abatement Timeout

The amount of time spent at Egress transport Congestion Levels 3, 2, and 1 during Egress transport Congestion Abatement

Format: numeric

Range: 3 - 60 seconds

Default: 5 seconds

* Remote Busy Usage

Defines which Request messages can be forwarded on this connection after receiving a DIAMETER_TOO_BUSY response from the connection's peer.

Disabled
The connection is not considered to be BUSY after receiving a DIAMETER_TOO_BUSY response. All Request messages continue to be forwarded to (or rerouted to) this connection.
Enabled
The connection is considered to be BUSY after receiving a DIAMETER_TOO_BUSY response. No Request messages are forwarded to (or rerouted to) this connection until the Remote Busy Abatement Timeout expires.

Format: List

Range: Disabled, Enabled

Default: Disabled

Remote Busy Abatement Timeout If Remote Busy Usage is set to Enabled or Host Override, this defines the length of time in seconds the connection is considered BUSY from the last time a DIAMETER_TOO_BUSY response was received.

Format: numeric

Range: 3 - 60 seconds

Default: 5 seconds

Message Priority Setting Defines the source of Message Priority for a Request message arriving on the connection. Possible settings are:
  • blank - use the Default Message Priority Configuration Set
  • Read from Request Message - read the message priority from the ingress Request (--- appears in the Message Priority Configuration Set column)
  • User Configured - Apply the user-configured Message Priority Configuration Set selected for the connection

Format: options

Range: blank, Read from Request Message, User Configured

Default: blank

Message Priority Configuration Set The Message Priority Configuration set used if Message Priority Setting is User Configured

Format: List

Range: all configured Message Priority Configuration Sets

Default: blank

Egress Message Throttling Configuration Set

Egress Message Throttling Configuration Set associated with the connection. The Egress Message Throttling Configuration Set defines the maximum Egress Message Rate and thresholds used to set the congestion level for the connection.

The entries in the Egress Message Throttling Configuration Set field are links to the Egress Message Throttling Configuration Sets (Filtered) page, which displays only the selected entry.

Format: List

Range: all configured Egress Message Throttling Configuration Sets

Default: blank

Shared Secret Configuration Set The Shared Secret Configuration Set used for this connection. (RADIUS only)

Format: List

Range: all configured Shared Secret Configuration Sets

Default: -Select-

Message Authenticator Configuration Set The Message Authenticator Configuration Set used for this connection. (RADIUS only)

Format: List

Range: all configured Message Authenticator Configuration Sets

Default: -Select-

Message Conversion Configuration Set The Message Conversion Configuration Set MO assigned to this RADIUS connection. (RADIUS only)

Format: list

Range: blank

Default: -Select-

Ingress Status-Server Configuration Set The Ingress Status-Server Configuration Set used for this connection. (RADIUS only)

Format: List

Range: all configured Ingress Status-Server Configuration Sets

Default: -Select-

Suppress Connection Unavailable Alarm If checked, this suppresses the connection attempts on the unavailable connections when a connection attribute is configured and turned ON for the connection object, then the connection unavailable alarm on those connections is not raised.

Format: checkbox

Range: checked (YES) or unchecked (NO)

Default: unchecked

Suppress Connection Attempts

If checked, suppresses the connection attempts when a diameter peer nodes status becomes available.

This attribute is not applicable for responder only connection modes. It is only applicable for initiator only and initiator and responder connection modes. With any configuration edit action that results in connection mode to responder only mode, the attribute value is returned to the default value.

Format: checkbox

Range: checked (YES) or unchecked (NO)

Default: unchecked

Test Mode If checked, the connection is in Test Mode.

Format: checkbox

Range: checked (YES), not checked (NO)

Default: not checked