SPI per group

When even more granular control is needed over which sessions share an SPI, an SPI sharing group identifier can be specified during IPoE or PPPoE session authentication. This overrides the default SPI sharing method for that session as configured in the SLA profile.

Per-group SPI sharing is depicted in Figure: SLA profile instance per group. The same SPI is shared by all IPoE and PPPoE sessions from the same subscriber, active on the same SAP, having the same SLA Profile assigned and having the same SPI sharing group identifier.

Note:

SPI sharing per group is not supported on HSQ with hs-sla-mode single.

Figure: SLA profile instance per group

The SPI sharing group identifier is an integer value in the range 0 to 65535 and can be specified in authentication using:

A local user database lookup:

     configure
        subscriber-mgmt
           local-user-db local-user-db-name
              ipoe | ppp
                 host host-name
                    identification-strings
                       spi-sharing-group-id <group-id>

Configure no spi-sharing-group-id to apply the def-instance-sharing method as configured in the SLA profile.

RADIUS, by including the [241.26.6527.47] Alc-SPI-Sharing-Id VSA in an Access-Accept message:
- Value "group:<group-id>" to enable SPI sharing per group identifier
- Value "default" to apply the def-instance-sharing method as configured in the SLA profile
See the 7450 ESS, 7750 SR, and VSR RADIUS Attributes Reference Guide for a detailed description of the attribute.
Diameter NASREQ, by including the Vendor specific [NOKIA-1036] Alc-SPI-Sharing grouped AVP in an AA-Answer message:
```
        Alc-SPI-Sharing ::= < AVP Header: 1036 >
                                {Alc-SPI-Sharing-Type}
                                [Alc-SPI-Sharing-Id]
```
- To enable SPI sharing per group identifier
  - [NOKIA-1037] Alc-SPI-Sharing-Type = 2
  - [NOKIA-1038] Alc-SPI-Sharing-Id = <group-id>
- To apply the def-instance-sharing method as configured in the SLA profile use [NOKIA-1037] Alc-SPI-Sharing-Type = 0
See the Diameter and Diameter Applications, AA-Answer Message — Accepted Authorization AVPs section for a detailed description of the attribute.
Diameter Gx, by including the Vendor specific [NOKIA-1036] Alc-SPI-Sharing grouped AVP in a CCA message:
```
        Alc-SPI-Sharing ::= < AVP Header: 1036 >
                                {Alc-SPI-Sharing-Type}
                                [Alc-SPI-Sharing-Id]
```
- To enable SPI sharing per group identifier
  - NOKIA-1037] Alc-SPI-Sharing-Type = 2
  - NOKIA-1038] Alc-SPI-Sharing-Id = <group-id>
- To apply the def-instance-sharing method as configured in the SLA profile use [NOKIA-1037] Alc-SPI-Sharing-Type = 0
See 7750 SR and VSR Gx AVPs Reference Guide for a detailed description of the attribute.
Python:
- alc.dts.setESM module: alc.dtc.SpiSharingGroupId = <group-id>
- alc.esm.set module: alc.esm.SpiSharingGroupId = <group-id>
See the DHCP Management, ESM-Related Python Variables section for further details.

Per-group sharing applies to PPPoE sessions and IPoE sessions (enabled on the group interface). An IPoE host setup fails when IPoE sessions are disabled on the group interface and an SPI sharing group identifier is specified.