You can create subscriber sites and add a Grid member as a collector member and RPZ members to the site in order to scale the number of subscribers that the system can support. The subscriber collector caches the subscriber data received from the NAS gateways and parental control policies from Infoblox Harmony product. The RPZ members use the cached subscriber data and the policies to resolve DNS queries. You can add a maximum of five Grid members to the subscriber site. Note that one Grid member can serve only one subscriber site. The subscriber identity information cached in the subscriber cache is replicated between the Grid members in the subscriber site.

You can manage the subscriber sites in the following ways:

• Create a subscriber site, as described in Adding Subscriber Sites.
• View subscriber sites, as described in Viewing Subscriber Sites.
• Modify the properties of a subscriber site, as described in Modifying Subscriber Sites.
• Delete a subscriber site, as described in Deleting Subscriber Sites.
• View NAS gateway message rates for the accounting servers of the subscriber site, as described in Viewing NAS Gateway Message Rates.

Adding Subscriber Sites

To add a subscriber site:

1. From the Data Management tab -> DNS tab -> Subscriber Services Deployment tab -> Subscriber Sites tab, click the Add icon.
2. In the Add Subscriber Site wizard, complete the following:
   
   • Name: Enter the name of the subscriber site.
   • Maximum Subscribers: Specify the maximum number of subscribers for the subscriber site. This represents the overall size of the subscriber cache. You can enter a value between 10000 to 10000000.
   • Comment: You can enter additional information about the subscriber site.

   • Members: In the Members table, click the Add icon to add Grid members to the site. If there are multiple members, the Member Selector dialog box is displayed, from which you can select a member. Click the required member name in the dialog box. You can also delete a member from the list.
     Note that a Grid member can support only one subscriber site.

3. Click Next to configure NAS gateways for the subscriber site. Complete the following:
   
   • Listen on RADIUS port number: Enter the UDP port number that the collector member uses to collect accounting information from the NAS gateway. You can enter an integer from 1 to 65535. The default is 1813.
   • NAS Gateways: You must add at least one NAS gateway to the subscriber site in order to start the subscriber collection service. You can add up to 20 NAS gateways. Click the Add icon and complete the following to add a NAS gateway:
     
     • Name: Enter the name of the NAS gateway.
     • IP Address: Enter the IP address of the NAS gateway.
     • Shared Secret: Enter a shared secret that can be used to authenticate the communication between the RADIUS accounting server and the collector member. This shared secret must match the one you entered on the RADIUS server.
     • Confirm Shared Secret: Enter the shared secret again.
     • Send Protocol Acknowledgment: Select this check box to send an acknowledgment to the client when the collector member receives accounting information from the NAS gateway.
     • Comment: Enter additional information about the NAS gateway.

     • Click Add to add the NAS gateway.
       You can select a NAS gateway configuration and click the Edit icon to modify it or click the Delete icon to delete it.

4. This step is required only if Infoblox Subscriber Parental Control is enabled. Click Next to configure the parental control blocking IP addresses. Complete the following:
   

   • Parental Control Blocking IP Addresses: You can configure two sets of IPv4 and IPv6 addresses that are used as blocking VIP addresses. The parental control subscribers are redirected to the following blocking IP addresses whenever the domain queried by the subscriber is blocked based in the subscriber parental control policy.
     Complete the following:

     • IPv4 Address (primary): Enter the primary blocking IPv4 address.
     • IPv4 Address (secondary): Enter the secondary blocking IPv4 address.
     • IPv6 Address (primary): Enter the primary blocking IPv6 address.
     • IPv6 Address (secondary): Enter the secondary blocking IPv6 address.
   • Policy Management Addresses: You can add IP addresses of the policy management servers to which the appliance sends APIs about the expired parental control policies. Click the Add icon. Grid Manager adds a row to the Policy Management Addresses table. Click the row and enter the IP address in the Address field. To delete an IP address, select the check box and then click the Delete icon.
   • Content Proxy Addresses: You can add IP addresses of Infoblox Harmony product. The appliance will forward the subscriber session to Infoblox Harmony for in-line processing of the subscriber session, depending on the policies. Click the Add icon. Grid Manager adds a row to the Content Proxy Addresses table. Click the row and enter the IP address in the Address field. To delete an IP address, select the check box and then click the Delete icon.
5. Save the configuration, or click Next to continue to the next step where you define extensible attributes as described in Managing Extensible Attributes.

Modifying Subscriber Sites

To modify a subscriber site:

1. From the Data Management tab -> DNS tab -> Subscriber Services Deployment tab -> Subscriber Sites tab, click the Action icon next to the subscriber site name and select Edit from the menu.
2. The Subscriber Site Properties editor provides the following tabs from which you can modify data:
   • In the General tab, you can modify the information you previously entered through the wizard, as described in Adding Subscriber Sites.

   • In the NAS Gateways tab, you can edit the NAS gateways configured for the subscriber site, as described in Adding Subscriber Sites.

     ---

     Note: If you make any changes to the NAS gateway configuration, the subscriber collector will automatically restart within 30 seconds. However, the subscriber data collected in the subscriber cache is not affected by the NAS gateway configuration changes.

     ---

     
     

   • If Subscriber Parental Control is enabled, the Parental Control tab is displayed. You can modify the information in the Parental Control tab, as described in Adding Subscriber Sites.
   • You can enter or edit information in the Extensible Attributes tab, as described in Managing Extensible Attributes.
3. Save the configuration.

Deleting Subscriber Sites

To delete a subscriber site:

1. From the Data Management tab -> DNS tab -> Subscriber Services Deployment tab -> Subscriber Sites tab, click the Action icon next to the subscriber site name and select Delete from the menu.
2. In the Delete Confirmation (Subscriber Site) dialog box, click Yes.

Viewing Subscriber Sites

To view subscriber sites:

1. From the Data Management tab -> DNS tab -> Subscriber Services Deployment tab -> Subscriber Sites tab.
2. Grid Manager displays the following information for each subscriber site:

• • Actions: Click the Action icon (shown as a gear in each row) next to a selected subscriber site and choose from the following:
    • Edit: Modify certain general properties.
    • Delete: You can delete the subscriber site.
    • Extensible Attributes: Add or modify extensible attributes.
    • View NAS Gateway Message Rates: Displays the message rates of the NAS gateways configured for the subscriber site. For information, see Viewing NAS Gateway Message Rates.
  • Name: The name of the subscriber site.
  • Comment: Information about the subscriber site.
  • Site: Displays values that were entered for this predefined attribute.

You can also do the following:

• Edit the subscriber site information.
  • Select the subscriber site, and then click the Edit icon.
• Delete a subscriber site.
  • Select the subscriber site, and then click the Delete icon.
• Export the list of subscriber sites.
  • Click the Export icon.
• Print the list of subscriber sites.
  • Click the Print icon.
• Use filters and the Go to function to narrow down the list. With the autocomplete feature, you can just enter the first few characters of an object name in the Go to field and select the object from the possible matches.
• Create a quick filter to save frequently used filter criteria:
  • In the filter section, click Show Filter and define filter criteria for the quick filter.
  • Click Save and complete the configuration In the Save Quick Filter dialog box.
• The appliance adds the quick filter to the quick filter drop-down list in the panel. Note that global filters are prefixed with [G], local filters with [L], and system filters with [S].
• Sort the subscriber sites in ascending or descending order by column.

Viewing NAS Gateway Message Rates

You can view the NAS gateways (accounting log servers) configured for the subscriber site and the message rate for each NAS gateway.

To view the NAS gateway message rates:

1. From the Data Management tab -> DNS tab -> Subscriber Services Deployment tab -> Subscriber Sites tab.
2. In the Subscriber Sites tab, click the Action icon (shown as a gear in each row of the table) next to the respective subscriber site and select View NAS Gateway Message Rates from the list.
3. The NAS Gateway Message Rates dialog box displays the following information for the selected subscriber site:

• • Name: The name of the NAS gateway.
  • IP Address: The IP address of the NAS gateway.
  • Message Rate: The message rate of the NAS gateway.