Cisco Intelligent Wireless Access Gateway Manual de usuario

Intelligent Wireless Access Gateway Configuration Guide

First Published: July 26, 2013

Last Modified: March 28, 2014

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-30226-03

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

CHAPTER 1

Overview of the Intelligent Wireless Access Gateway 1

Finding Feature Information 1

Prerequisites for the iWAG 2

Restrictions for the iWAG 2

Information About the iWAG 2

Benefits of the iWAG 3

AAA Attributes 3

Supported Hardware and Software Compatibility Matrix for the iWAG 7

How to Configure the iWAG 8

Configuring the iWAG for Simple IP Users 8

Configuring the iWAG for 3G Mobile IP Users 8

Configuring Authentication, Authorization, and Accounting for the iWAG 8

Configuring DHCP when the iWAG Acts as a DHCP Proxy 10

Configuring the Cisco ISG Class Map and Policy Map for the iWAG 12

Configuring a Session Initiator for the iWAG 15

Configuring a Tunnel Interface for the iWAG 16

Enabling Mobile Client Service Abstraction 17

Configuring the GTP of the iWAG 18

Configuring the iWAG for 4G Mobile IP Users 21

Configuring PMIPv6 for the iWAG 21

Enabling Mobile Client Service Abstraction 21

Additional References 22

Feature Information for the Intelligent Wireless Access Gateway 23

CHAPTER 2

IP Sessions Over Gigabit EtherChannel 25

Finding Feature Information 25

Restrictions for IPoGEC 25

Intelligent Wireless Access Gateway Configuration Guide

OL-30226-03 iii

Information About IP Sessions over Gigabit EtherChannel 26

Supported Features for IPoGEC 26

Configuring IP Sessions over Gigabit EtherChannel 26

Configuring Member Links for IP Sessions over Gigabit EtherChannel 28

Configuration Examples for IP Sessions Over Gigabit EtherChannel 29

Additional References 29

Feature Information for IP Sessions over Gigabit EtherChannel 30

CHAPTER 3

Multiple-Flow Tunnel 33

Finding Feature Information 33

Information About Multiple-Flow Tunnel 33

Additional References 34

Feature Information for Multiple-Flow Tunnel 35

CHAPTER 4

Service Provider WiFi: Support for Integrated Ethernet Over GRE 37

Finding Feature Information 37

Information About Ethernet Over GRE 38

Restrictions for Configuring Ethernet Over GRE 38

Prerequisites for Configuring Ethernet Over GRE 39

Information About Configuring Ethernet Over GRE 39

EoGRE Deployment with PMIPv6 Integrated for Mobility Service 42

EoGRE Deployment with GTP Integrated for Mobility Service 43

EoGRE Deployment with ISG Integrated for Simple IP Service 43

Supported Features 44

How to Configure the EoGRE Feature 45

Example: Configuring the EoGRE Feature 46

Additional References 48

Feature Information for Configuring Ethernet Over GRE 49

CHAPTER 5

GTPv2 Support in the iWAG 51

Finding Feature Information 51

Restrictions for GTPv2 of the iWAG 51

Information About GTPv2 in the iWAG 52

Intelligent Wireless Access Gateway Configuration Guide

iv OL-30226-03

Contents

GTPv2 Configuration 52

RADIUS Configuration 53

Intra-iWAG Roaming 53

Configuration for the GTPv1 and GTPv2 Roaming Scenario 53

Additional References 54

Feature Information for GTPv2 Support in the iWAG 55

CHAPTER 6

iWAG SSO Support for GTP 57

Finding Feature Information 57

Information About iWAG SSO Support for GTP 57

Enabling SSO Support for the GTP 58

Additional References 59

Feature Information for iWAG SSO Support for GTP 60

CHAPTER 7

Configuring ISG Policy Templates 61

Finding Feature Information 61

Restrictions for Configuring ISG Policy Templates 61

Information About Configuring ISG Policy Templates 61

How to Configure ISG Policy Templates 62

Additional References 62

Feature Information for Configuring ISG Policy Templates 63

CHAPTER 8

Cisco ISG Accounting Accuracy for LNS Sessions 65

Finding Feature Information 65

Information About Cisco ISG Accounting Accuracy for LNS Sessions 65

Additional References 66

Feature Information for Cisco ISG Accounting Accuracy for LNS Sessions 67

CHAPTER 9

Dual Stack Support for PMIPv6 and GTP 69

Finding Feature Information 69

Information About Dual-Stack Support for PMIPv6 69

Intelligent Wireless Access Gateway Configuration Guide

OL-30226-03 v

Contents

Features Supported for Dual-Stack PMIPv6 Sessions 70

Information About Dual-Stack Support for GTP 70

Restrictions for Dual-Stack GTP 70

AAA Attributes for Dual Stack 70

Configuration Examples for Dual-Stack PMIPv6 71

Example: Configuring an Access List Traffic Classmap for Dual-Stack PMIPv6 71

Example: Configuring a Classmap for Dual-Stack PMIPv6 71

Example: Configuring a Policymap for Dual-Stack PMIPv6 72

Example: Configuring a Control Policy for Dual-Stack PMIPv6 72

Example: Configuring an Access Interface for Dual-Stack PMIPv6 73

Example: Configuring the Local Mobility Anchor for Cisco ASR 5000 Routers 73

Example: Configuring Mobile Access Gateways for Dual-Stack PMIPv6 74

Configuration Examples for Dual-Stack GTP 75

Example: Configuring Dual-Stack Sessions for GTP 75

Example: Configuring an Interface to PGW or GGSN 75

Example: Configuring a Control Policy for Dual-Stack GTP 75

Example: Configuring an Access Interface for Dual-Stack GTP 75

Enabling IPv6 Routing 76

Additional References 76

Feature Information for Dual-Stack Support for PMIPv6 and GTP 77

CHAPTER 10

Flow-Based Redirect 79

Finding Feature Information 79

Flow-Based Redirect for Adult Content Filtering 80

Flow-Based Redirect for Selective IP Traffic Offload 81

Activating and Deactivating the Flow-Based Redirect Feature Through Vendor-Specific

Attributes 82

Configuring Flow-Based Redirect for a Traffic Class Service 82

Examples 85

Best Practices for Configuring the NAT on the Cisco ASR 1000 Series Routers 87

NAT Overloading and Port Parity 88

NAT Interface Overloading with VRF 88

Additional References 89

Feature Information for Flow-Based Redirect 89

Intelligent Wireless Access Gateway Configuration Guide

vi OL-30226-03

Contents

CHAPTER 11

Call Flows for Simple IP Users 91

Finding Feature Information 91

Simple IP Unclassified MAC Authentication (MAC TAL and Web Login) Call Flows 91

Simple IP Unclassified MAC with MAC TAL Authentication Call Flow 93

Simple IP Unclassified MAC with Web Login Authentication Call Flow 95

Simple IP Unclassified MAC Authentication Call Flow Configuration 96

Additional References 98

Feature Information for Call Flows for Simple IP Users 99

CHAPTER 12

Call Flows for 3G and 4G Mobile IP Users 101

Finding Feature Information 101

3G DHCP Discover Call Flow 101

3G DHCP Discover Call Flow Configuration 104

4G DHCP Discover Call Flow 108

4G DHCP Discover Call Flow Configuration 110

4G Roaming Call Flow 111

4G Roaming Call Flow Configuration 114

Additional References 115

Feature Information for Call Flows for 3G and 4G Mobile IP Users 116

116

CHAPTER 13

Call Flows for Dual-Stack PMIPv6 and GTP 117

Finding Feature Information 117

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for PMIPv6 Call Flow 118

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for PMIPv6 Call Flow 121

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for GTP Call Flow 124

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for GTP Call Flow 126

Additional References 128

Feature Information for Call Flows for Dual-Stack PMIPv6 and GTP 129

130

CHAPTER 14

iWAG Scalability and Performance 131

Intelligent Wireless Access Gateway Configuration Guide

OL-30226-03 vii

Contents

iWAG Scaling 131

Restrictions for iWAG Scalability 132

Layer 4 Redirect Scaling 133

Configuring Call Admission Control 133

Walk-by User Support for PWLAN in iWAG 133

Additional References 134

Feature Information for iWAG Scalability and Performance 135

Intelligent Wireless Access Gateway Configuration Guide

viii OL-30226-03

Contents

CHAPTER 1

Overview of the Intelligent Wireless Access

Gateway

Service providers use a combination of WiFi and mobility offerings to offload their mobility networks in

the area of high-concentration service usage. This led to the evolution of the Intelligent Wireless Access

Gateway (iWAG).

The iWAG provides a WiFi offload option to 4G and 3G service providers by enabling a single-box solution

that provides the combined functionality of Proxy Mobile IPv6 (PMIPv6) and GPRS Tunneling Protocol

(GTP) on the Cisco Intelligent Services Gateway (Cisco ISG) framework. This document provides information

about the iWAG and how to configure it, and contains the following sections:

•Finding Feature Information, page 1

•Prerequisites for the iWAG, page 2

•Restrictions for the iWAG, page 2

•Information About the iWAG, page 2

•How to Configure the iWAG, page 8

•Additional References, page 22

•Feature Information for the Intelligent Wireless Access Gateway, page 23

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest caveats and

feature information, see Bug Search Tool and the release notes for your platform and software release. To

find information about the features documented in this module, and to see a list of the releases in which each

feature is supported, see the feature information table at the end of this module.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support.

To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.

Intelligent Wireless Access Gateway Configuration Guide

OL-30226-03 1

Prerequisites for the iWAG

•Enable mobile client service abstraction (MCSA).

•Enable the ipv6 unicast-routing command.

Restrictions for the iWAG

•Roaming from a 3G mobility network to a WLAN is not supported for the GTP and Cisco ISG sessions.

•IP subscriber-routed (L3) sessions are not supported.

•IPv6 and quality of service (QoS) are not supported in a 3G mobility network.

•Only newly established calls are offloaded to the WLAN Third-Generation Partnership Project (3GPP)

IP access.

•The iWAG solution for WLAN offload is currently available only for the 3G Universal Mobile

Telecommunications System (UMTS).

Information About the iWAG

The iWAG deployment includes a combination of simple IP users (traditional ISG and WiFi) and mobile IP

users (PMIPv6 or GTP tunneling). The term mobility service is used to refer to either the GTP service or the

PMIPv6 service applied to user traffic. The iWAG provides mobility services to mobile IP users, and as a

result, a mobile client can seamlessly access a 3G or 4G mobility network. However, the iWAG does not

provide mobility services to simple IP users. Therefore, simple IP users can access the Public Wireless LAN

(PWLAN) network through the Cisco ISG. Clients are devices that access WiFi Internet (public wireless),

where possible. However, if WiFi is not available, the same clients can

connect to the Internet service using a 3G or 4G mobility network.

The iWAG has a transport or switching element with Cisco ISG subscriber awareness. The iWAG also has

RADIUS-based authentication and accounting, and policy-based subscriber routing for the WiFi wholesale

model.

For more information about the iWAG, see the Overview of iWAG video.

Intelligent Wireless Access Gateway Configuration Guide

2OL-30226-03

Overview of the Intelligent Wireless Access Gateway

Prerequisites for the iWAG

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Puerta de Cisco

Cisco

Cisco VG202 Manual de usuario

Cisco

Cisco ATA 188 Manual de servicio

Cisco

Cisco AS5400XM Instrucciones originales

Cisco

Cisco VG350 Manual de usuario

Cisco

Cisco 3522 BRI Manual de instalación y operación

Cisco

Cisco Linksys WAG310G Manual de usuario

Cisco

Cisco Small Business SPA8800 Manual de usuario

Cisco

Cisco AS5400XM Manual de usuario

Cisco

Cisco DPC3929 Manual de usuario

Cisco

Cisco DPC2420 Manual de usuario

Cisco

Cisco WAG54G Manual de usuario

Cisco

Cisco ASR 5000 Manual de instrucciones

Cisco

Cisco EPC3925 Manual de usuario

Cisco

Cisco ENH900EXT Manual de usuario

Cisco

Cisco LINKSYS AG241 Manual de usuario

Cisco

Cisco TES301 Manual de usuario

Cisco

Cisco SLM224G4PS Guía de inicio rápido

Cisco

Cisco 3545 PRI Manual de instalación y operación

Cisco

Cisco VG400 series Manual de instrucciones

Cisco

Cisco AudioCodes MP-1288 Manual de usuario

Cisco

Cisco SPA232D Manual de instrucciones

Cisco

Cisco AS5400 Series Manual de usuario

Cisco

Cisco DPC3940 Manual de usuario

Cisco

Cisco ASR 5000 Series Manual de instrucciones

Manuales populares de Puerta de otras marcas

LST

LST M500RFE-AS Manual de usuario

Kinnex

Kinnex Media Gateway Manual de usuario

2N Telekomunikace

2N Telekomunikace 2N StarGate Manual de usuario

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manual de usuario

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manual de usuario

Telsey

Telsey CPVA 500 - SIP Manual de usuario

RTA

RTA 460A-NNA4 Hoja de especificaciones

Shaw

Shaw Gateway HDPVR Manual de usuario

ABB

ABB VSN900 Guía de inicio rápido

Commander

Commander Pulse Manual de usuario

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manual de usuario

NETGEAR

NETGEAR C6300BD Manual de usuario

Amit

Amit CDW531AM Manual de usuario

HMS

HMS Netbiter EasyConnect EC150 Manual de usuario

Huawei

Huawei EchoLife HG620 Manual de usuario

AT&T

AT&T U-verse 3801 Manual de uso y cuidado

Logic IO

Logic IO RTCU MX2 turbo Manual de usuario

Suttle

Suttle MediaMAX MXM-521 Manual de usuario