Cisco Wireless LAN Controller Configuration Guide, Release 7.4
Configuring Proxy Mobile IPv6
Downloads: This chapterpdf (PDF - 1.2MB) The complete bookPDF (PDF - 18.89MB) | Feedback

Configuring Proxy Mobile IPv6

Information About Proxy Mobile IPv6

Proxy Mobile IPv6 (PMIPv6) is a network-based mobility management protocol that supports a mobile node by acting as the proxy for the mobile node in any IP mobility-related signaling. The mobility entities in the network track the movements of the mobile node and initiate the mobility signaling and set up the required routing state.

The main functional entities are the Local Mobility Anchor (LMA) and Mobile Access Gateway (MAG). The LMA maintains the reachability state of the mobile node and is the topological anchor point for the IP address of the mobile node. The MAG performs the mobility management on behalf of a mobile node. The MAG resides on the access link where the mobile node is anchored. The controller implements the MAG functionality.

In the Cisco 5500 Series, Cisco WiSM2, and Cisco 8500 Series controllers, PMIPv6 Mobility Access Gateway (MAG) support for integration with Local Mobility Anchor (LMA) such as Cisco ASR 5000 Series in cellular data networks.

For PMIPv6 clients, controller supports both central web authentication and local web authentication.

Guidelines and Limitations

  • IPv6/dual stack clients are supported. IPv6 clients are not supported. IPv6 addresses for the client are not learnt if the WLAN is marked for PMIPv6.
  • PMIPv6 is not supported on local switching WLANs on FlexConnect APs.
  • Roaming between controllers is supported only on PMIPv6-enabled WLANs.

Configuring Proxy Mobile IPv6 (GUI)


    Step 1   Choose Controller > PMIPv6 > General to open the PMIPv6 General page.
    Step 2   Enter the values for the following parameters:
    • Maximum Bindings Allowed—Maximum number of binding updates that the controller can send to the MAG. The valid range is between 0 to 40000.
    • Binding Lifetime—Lifetime of the binding entries in the controller. The valid range is between 10 to 65535 seconds. The default value is 3600. The binding lifetime should be a multiple of 4 seconds.
    • Binding Refresh Time—Refresh time of the binding entries in the controller. The valid range is between 4 to 65535 seconds. The default value is 300 seconds. The binding refresh time should be a multiple of 4 seconds.
    • Binding Initial Retry Timeout—Initial timeout between the proxy binding updates (PBUs) when the controller does not receive the proxy binding acknowledgments (PBAs). The valid range is between 100 to 65535 seconds. The default value is 1000 seconds.
    • Binding Maximum Retry Timeout—Maximum timeout between the proxy binding updates (PBUs) when the controller does not receive the proxy binding acknowledgments (PBAs). The valid range is between 100 to 65535 seconds. The default value is 32000 seconds.
    • Replay Protection Timestamp—Maximum amount of time difference between the timestamp in the received proxy binding acknowledgment and the current time of the day. The valid range is between 1 to 255 milliseconds. The default value is 7 milliseconds.
    • Minimum BRI Retransmit Timeout—Minimum amount of time that the controller waits before retransmitting the BRI message. The valid range is between 500 to 65535 seconds. The default value is 1000 seconds.
    • Maximum BRI Retransmit Timeout—Maximum amount of time that the controller waits before retransmitting the Binding Revocation Indication (BRI) message. The valid range is between 500 to 65535 seconds. The default value is 2000 seconds.
    • BRI Retries—Maximum number of times that the controller retransmits the BRI message before receiving the Binding Revocation Acknowledgment (BRA) message. The valid range is between 1 to 10. The default value is 1.
    Step 3   Click Apply.

    To clear your configuration, click Clear Domain.

    Step 4   To create the LMA, follow these steps:
    1. Choose Controller > PMIPv6 > LMA and click New.
    2. Enter the values for the following parameters:
      • Member Name—Name of the LMA connected to the controller.
      • Member IP Address—IP address of the LMA connected to the controller.
    3. Click Apply.
    Step 5   To create a PMIPv6 profile, follow these steps:
    1. Choose Controller > PMIPv6 > Profiles and click New.
    2. On the PMIPv6 Profile > New page, enter the values for the following parameters:
      • Profile Name—Name of the profile.
      • Network Access Identifier—Name of the Network Access Identifier (NAI) associated with the profile.
      • LMA Name—Name of the LMA to which the profile is associated.
      • Access Point Node—Name of the access point node connected to the controller.
    3. Click Apply.
    Step 6   On the PMIPv6 Profile > New page, enter the values for the following parameters:
    • Profile Name—Name of the profile.
    • Network Access Identifier—Name of the Network Access Identifier (NAI) associated with the profile.
    • LMA Name—Name of the LMA to which the profile is associated.
    • Access Point Node—Name of the access point node connected to the controller.
    Step 7   To configure PMIPv6 parameters for a WLAN, follow these steps:
    1. Choose WLANs > WLAN ID to open the WLANs > Edit page.
    2. Click the Advanced tab.
    3. Under PMIP from the PMIP Mobility Type drop-down list, choose the mobility type from the following options:
      • None—Configures the WLAN with Simple IP
      • PMIPv6—Configures the WLAN with only PMIPv6
    4. From the PMIP Profile drop-down list, choose the PMIP profile for the WLAN.
    5. In the PMIP Realm box, enter the default realm for the WLAN.
    6. Click Apply.
    Step 8   Click Save Configuration.

    Configuring Proxy Mobile IPv6 (CLI)


      Step 1   To configure MAG, use these commands:
      • To configure maximum binding update entries allowed, enter this command: config pmipv6 mag binding maximum units
      • To configure the binding entry lifetime, enter this command: config pmipv6 mag lifetime units
      • To configure the binding refresh interval, enter this command: config pmipv6 mag refresh-time units
      • To configure the initial timeout between PBUs if PBA does not arrive, enter this command: config pmipv6 mag init-retx-time units
      • To configure the maximum initial timeout between PBUs if PBA does not arrive, enter this command: config pmipv6 mag max-retx-time units
      • To configure the replay protection mechanism, enter this command: config pmipv6 mag replay-protection {timestamp window units | sequence-no | mobile-node-timestamp}
      • To configure the minimum or maximum amount of time in seconds that the MAG should wait before it retransmits the binding revocation indication (BRI) message, enter this command: config pmipv6 mag bri delay {min | max} units
      • To configure the maximum number of times the MAG should retransmit the BRI message before it receives the binding revocation acknowledgment (BRA) message, enter this command: config pmipv6 mag bri retries units
      • To configure the list of LMAs for the MAG, enter this command: config pmipv6 mag lma lma-name ipv4-address ip-address
      Step 2   To configure a PMIPv6 domain name, enter this command:

      config pmipv6 domain domain-name

      Note   

      This command also enables the MAG functionality on the controller.

      Step 3   To add a profile to a PMIPv6 domain, enter this command:

      config pmipv6 add profile profile-name nai {user@realm | @realm | *} lma lma-name apn apn-name

      Note   

      NAI stands for network access identifier. APN stands for access point name.

      Step 4   To delete a PMIPv6 entity, enter this command:

      config pmipv6 delete {domain domain-name | lma lma-name | profile profile-name nai {user@realm | @realm | *}}

      Step 5   To configure the PMIPv6 parameters for the WLAN, use these commands:
      • To configure the default realm for the WLAN, enter this command: config wlan pmipv6 default-realm {realm-name | none} wlan-id
      • To configure the mobility type for a WLAN or for all WLANs, enter this command: config wlan pmipv6 mobility-type {none | pmipv6} {wlan-id | all}
      • To configure the profile name for a PMIPv6 WLAN, enter this command: config wlan pmipv6 profile-name name wlan-id
      Step 6   Save your changes by entering this command: save config
      Step 7   To see the PMIPv6 configuration details, use the following show commands:
      • To see the details of a profile of a PMIPv6 domain, enter this command: show pmipv6 domain domain-name profile profile-name
      • To see a summary of all the PMIPv6 profiles, enter this command: show pmipv6 profile summary
      • To see the global information about the PMIPv6 for a MAG, enter this command: show pmipv6 mag globals
      • To see information about the MAG bindings for LMA or NAI, enter this command: show pmipv6 mag bindings {lma lma-name | nai nai-name}
      • To see statistical information about MAG, enter this command: show pmipv6 mag stats domain domain-name peer peer-name
      • To see information about PMIPv6 for all clients, enter this command: show client summary
      • To see information about PMIPv6 for a client, enter this command: show client details client-mac-address
      • To see information about PMIPv6 for a WLAN, enter this command: show wlan wlan-id