Feedback
|
Table Of Contents
Cisco 4G LTE Software Installation Guide
Prerequisites for Configuring Cisco 4G LTE Wireless WAN EHWICs
Restrictions for Configuring Cisco 4G LTE WAN EHWICs
Information About Cisco 4G LTE Wireless WAN EHWICs
How to Configure Cisco 4G LTE Wireless WAN EHWICs
Verifying Signal Strength and Service Availability
Configuring a Modem Data Profile
Locking and Unlocking the SIM Card Using a PIN Code
Automatic SIM Authentication To Set Up Data Call With a Locked SIM
Configuring the Cellular Interface
Configuration Examples for 4G LTE EHWICs
Basic Cellular Interface Configuration
Cellular Interface Configuration for Always-On Connection
Dialer-Watch Configuration without External Dialer Interface
Dialer-Persistent Configuration with External Dialer Interface
GRE Tunnel over Cellular Interface Configuration
4G-LTE Wireless Modem as Backup with NAT and IPSec
Verifying Service Availability
Modem Troubleshooting Using the Remote Diagnostic Port
Modem Settings for North America and Carriers Operating on 700 MHz Band
Electronic Serial Number (ESN)
Feature Information for Cisco 4G LTE EHWIC
Cisco 4G LTE Software Installation Guide
First Published: March 16, 2012Last Updated: April 10, 2013, OL-25146-04This document provides an overview of the software features and configuration information for Cisco EHWIC-4G-LTEs. Cisco EHWIC-4G-LTEs are single-wide 4G Wireless WAN (WWAN) EHWICs supported on Cisco Integrated Services Router Generation 2 (ISR G2).
For Cisco EHWIC-4G-LTE SKUs, faceplate, and LED descriptions, see the Cisco 4G LTE Hardware Installation Guide at:
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module and to see a list of the releases in which each feature is supported, see the "Feature Information for Cisco 4G LTE EHWIC" section.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Contents
•
Prerequisites for Configuring Cisco 4G LTE Wireless WAN EHWICs
•
Restrictions for Configuring Cisco 4G LTE WAN EHWICs
•
Information About Cisco 4G LTE Wireless WAN EHWICs
•
How to Configure Cisco 4G LTE Wireless WAN EHWICs
•
Configuration Examples for 4G LTE EHWICs
•
Feature Information for Cisco 4G LTE EHWIC
Prerequisites for Configuring Cisco 4G LTE Wireless WAN EHWICs
•
You must have 4G LTE network coverage where your router will be physically placed. For a complete list of supported carriers, see the product data sheet.
•
You must subscribe to a service plan with a wireless service provider and obtain a SIM card.
•
You must install the SIM card before configuring the 4G LTE Wireless WAN EHWIC. For instructions on how to install the SIM card, see the "Installing the SIM card on the Cisco EHWIC-4G-LTE" section in Cisco 4G LTE Wireless WAN EHWIC.
Restrictions for Configuring Cisco 4G LTE WAN EHWICs
•
Currently, cellular networks support only outgoing calls.
•
Throughput—Due to the shared nature of wireless communications, the experienced throughput varies depending on the number of active users or congestion in a given network.
•
Cellular networks have higher latency compared to wired networks. Latency rates depend on the technology and carrier. Latency may be higher because of network congestion.
•
Any restrictions that are part of the terms of service from your carrier.
•
3G/4G Simple Network Management Protocol (SNMP) MIB is not yet supported in this release.
•
Public Land Mobile Network (PLMN) CLIs exist but the feature is not supported in this release.
•
GPS is not yet supported in this release.
Information About Cisco 4G LTE Wireless WAN EHWICs
This section contains the following subsections:
Overview of 4G LTE
Cisco 4G LTE WWAN EHWICs (EHWIC-4G-LTE-V, EHWIC-4G-LTE-A, and EHWIC-4G-LTE-G) support 4G LTE cellular and 3G cellular networks.
The EHWIC-4G-LTE comes with Sierra Wireless multimode modem that supports the following modes:
•
3G Evolution-Data Optimized (EVDO or DOrA) Mode—EVDO is a 3G telecommunications standard for the wireless transmission of data through radio signals, typically for broadband Internet access. DOrA refers to EVDO Rev-A. EVDO uses multiplexing techniques including Code Division Multiple Access (CDMA), as well as Time Division Multiple Access (TDMA), to maximize both individual users' throughput and the overall system throughput.
•
3G Evolution High-Speed Packet Access (HSPA/HSPA+)—HSPA is a UMTS-based 3G network. It supports High-Speed Downlink Packet Access (HSDPA) and High-Speed Uplink Packet Access (HSUPA) data for improved download and upload speeds. Evolution High-Speed Packet Access (HSPA+) supports Multiple Input/Multiple Output (MIMO) antenna capability.
•
4G LTE—4G LTE mobile specification provides multi-megabit bandwidth, more efficient radio network, latency reduction, and improved mobility. LTE solutions target new cellular networks. These networks initially support up to 100 Mb/s peak rates in the downlink and up to 50 Mb/s peak rates in the uplink. The throughput of these networks is higher than the existing 3G networks.
Figure 1 shows a 4G LTE packet core network and the network elements it contains.
Figure 1 4G LTE Packet Core Network Architecture
Cisco EHWIC-4G-LTE Features
Cisco 4G LTE WWAN EHWICs support the following major functionality:
•
IPv4 bearer
•
MIPv4, NEMOv4, RFC 3025
•
IPv4 subnet behind LTE UE interface
•
Evolved High-Rate Packet Data (EHRPD), which allows seamless handoff between LTE and 3G services (EHWIC-4G-LTE-V only)
•
Seamless handoff between LTE and EHRPD network (EHWIC-4G-LTE-V only)
•
Support for UMTS service as a fallback option from LTE service (EHWIC-4G-LTE-A and EHWIC-4G-LTE-G only)
•
Seamless handoff between LTE and UMTS service (EHWIC-4G-LTE-A and EHWIC-4G-LTE-G only)
•
Remote access to Qualcomm Diagnostic Monitor (DM) port
•
OTA-DM including wireless configuration FOTA (EHWIC-4G-LTE-V only)
•
Mini USB type 2 connector for modem provisioning
•
Single UICC (USIM)
SIM Lock Feature
Cisco 4G LTE EHWICs need an active Subscriber Identity Module (SIM) provided by your service provider. The SIM cards are generally given out as unlocked (can be used without a PIN) versus locked (requires PIN configuration). Cisco IOS has a SIM Lock feature that allows you to lock and unlock a SIM and to set or change the PIN code. This feature ensures that the SIM is only used in an authorized device (in this case, a Cisco ISR G2). The SIM lock and unlock procedures are carried out using Cisco IOS CLI via console or Telnet/SSH to the ISR.
For instructions on SIM configuration, see the "How to Configure Cisco 4G LTE Wireless WAN EHWICs" section.
How to Configure Cisco 4G LTE Wireless WAN EHWICs
Note
For 4G-LTE EHWICs, the numbering for slot 0, wic 0, and port 0 is 0/0/0 for all commands. Please refer to platform-specific documentation for details on slot numbering.
Note
For Cisco 819 4G LTE fixed platforms, use slot "0" for all commands.
To configure the 4G-LTE features, follow these procedures:
Data Account Provisioning
Note
To provision your modem, you must have an active wireless account with a service provider and a SIM card installed. Your Modem Data Profile should be pre-configured.
To provision your data account, follow these procedures:
•
Verifying Signal Strength and Service Availability
•
Configuring a Modem Data Profile
Verifying Signal Strength and Service Availability
To verify the signal strength and service availability on your modem, use the following commands in privileged EXEC mode.
SUMMARY STEPS
1.
show cellular slot/wic/port network
2.
show cellular slot/wic/port radio
3.
show cellular slot/wic/port profile
4.
show cellular slot/wic/port security
5.
show cellular slot/wic/port all
DETAILED STEPS
Configuring a Modem Data Profile
To configure or create a new modem data profile, enter the following command in privileged EXEC mode.
Note
Currently, only profile 1 works.
SUMMARY STEPS
1.
cellular slot/wic/port lte profile create profile-number apn authentication username password protocol
DETAILED STEPS
Command or Action PurposeStep 1
cellular slot/wic/port lte profile create
profile-number apn authentication username password protocolExample:Router# cellular 0/0/0 lte profile create 2 apn.com chap username1 password1 ipv4
Configures or creates a new modem data profile. Table 1 describes the command parameters.
SIM Configuration
The SIM can be in two states—locked or unlocked. If the SIM is unlocked, it can be inserted into an EHWIC and used without an authorization code.
The SIM can be initially locked with a four- to eight-digit PIN code defined by the ISR administrator. The SIM Lock feature can be used to lock the SIM using the PIN code. Once it is locked, it cannot initiate a call unless authentication is done using the same PIN. Authentication is done automatically by Cisco IOS via configuration of the PIN. This required configuration for automatic SIM authentication is done using Cisco IOS CLI as part of the router start-up configuration.
Once the Cisco IOS configuration is in place, the ISR can initiate an LTE connection. The ISR uses the configured PIN to authenticate prior to LTE connection. If the Cisco IOS PIN configuration is missing or if the PIN is wrong, the SIM authentication will fail and the connection will not be initiated.
If the locked SIM is moved to a different ISR or to another device, or if the EHWIC in which the locked SIM resides is moved to a different EHWIC slot in the same ISR, the ISR configuration needs to be changed. The configuration is associated with the cellular controller that is specific to an ISR EHWIC slot number. This will ensure that the SIM card will not be used in any unauthorized device or, if there are multiple LTE EHWICs in a single ISR, that the appropriate PIN is applied to each LTE EHWIC/SIM. An authentication command (with the same PIN used to lock the SIM) must be defined on the new device or on the new cellular controller slot to successfully initiate the LTE connection.
To configure the SIM, follow these procedures:
•
Locking and Unlocking the SIM Card Using a PIN Code
•
Automatic SIM Authentication To Set Up Data Call With a Locked SIM
CautionIt is very important to use the correct PIN once it is configured. The SIM card will get blocked if the wrong PIN is entered three consecutive times on a locked SIM during authentication or when trying to unlock a locked SIM.
Blocked SIM cards cannot be unblocked. For Cisco 4G LTE EHWICs, contact your service provider to replace your SIM card if it gets blocked due to wrong PIN attempts during locking/unlocking or authentication.
Locking and Unlocking the SIM Card Using a PIN Code
To lock or unlock the SIM card provided by your service provider, enter the following commands in privileged EXEC mode.
CautionThe SIM card will get blocked if the wrong PIN is entered three consecutive times. Make sure you enter the correct PIN that the SIM is configured with. If your SIM card gets blocked, contact your service provider for a SIM card replacement.
SUMMARY STEPS1.
cellular slot/wic/port lte sim {lock | unlock} pin
2.
cellular slot/wic/port lte sim change-pin pin new-pin
3.
show cellular slot/wic/port security
DETAILED STEPS
Automatic SIM Authentication To Set Up Data Call With a Locked SIM
To allow automatic SIM authentication everytime the modem is getting ready to place a call, you need to configure the SIM Card Holder Verification (CHV1) code for the locked SIM card using the correct PIN code.
To configure the SIM CHV1 code for verification, enter the following commands starting in EXEC mode.
CautionThe SIM card will get blocked if the wrong PIN is entered three consecutive times. Make sure you enter the correct PIN that the SIM is configured with. If your SIM card gets blocked, contact your service provider for a SIM card replacement.
Note
Follow these procedures when using an unencrypted level 0 PIN to configure CHV1. For instructions on how to configure CHV1 using an encrypted level 7 PIN, see the "Configuring an Encrypted PIN" section.
Note
The SIM needs to be locked for SIM authentication to work. To verify the SIM status, use the show cellular slot/wic/port security command.
SUMMARY STEPS
1.
configure terminal
2.
controller cellular slot/wic
3.
lte sim authenticate 0 pin
DETAILED STEPS
Command or Action PurposeStep 1
configure terminal
Example:Router# configure terminal
Enters global configuration mode.
Step 2
controller cellular slot/wic
Example:Router(config)# controller cellular 0/0
Enters the cellular controller configuration mode.
Step 3
lte sim authenticate 0 pin
Example:Router(config-controller)# lte sim authenticate 0 1111
Configures CHV1 using the PIN code. This PIN is sent to the modem for authentication with each subsequent LTE connection. If authentication passes based on the configured PIN, the data call will be allowed. If authentication fails, the modem will not initiate the data call.
This command is valid only when an unencrypted (clear text) level 0 PIN is used to configure CHV1. To set a level 7 PIN, a valid encrypted string representing a PIN of four to eight digits must be used. To configure CHV1 using an encrypted PIN, see the "Configuring an Encrypted PIN" section.
Configuring an Encrypted PIN
To configure an encrypted PIN, the scrambled value for the PIN must be obtained. To get the scrambled level 7 PIN and to configure the SIM CHV1 code for verification using this encrypted PIN, enter the following commands starting in EXEC mode.
Note
The method shown here is one way of obtaining the encrypted PIN. In this method, a username and password is created by configuring password encryption, defining the username and associated password, copying the resulting scrambled password, and using this scrambled password in the SIM authentication command. After the scrambled PIN has been obtained and used in SIM authentication, the username created may be deleted from the Cisco IOS configuration.
Note
The SIM needs to be locked for SIM authentication to work. To verify the SIM status, use the show cellular slot/wic/port security command.
SUMMARY STEPS
1.
configure terminal
2.
service password-encryption
3.
username name privilege 0 password pin
4.
do show run | i name
5.
controller cellular slot/wic
6.
lte sim authenticate 7 pin
7.
exit
8.
no username name
9.
no service password-encryption
DETAILED STEPS
Command or Action PurposeStep 1
configure terminal
Example:Router# configure terminal
Enters global configuration mode.
Step 2
service password-encryption
Example:Router(config)# service password-encryption
Enables password encryption.
Step 3
username name privilege 0 password pin
Example:Router(config)# username SIM privilege 0 password 1111
Creates username and password.
•
name—Specifies the username.
•
pin—Specifies the four- to eight-digit PIN code.
Step 4
do show run | i name
Example:Router(config)# do show run | i SIM
Shows the username configuration line with the encrypted level 7 PIN for the username created in Step 3 (user "SIM" in the example shown).
Copy the scrambled password for use in Step 6 (as the PIN).
Step 5
controller cellular slot/wic
Example:Router(config)# controller cellular 0/0
Enters the cellular controller configuration mode.
Step 6
lte sim authenticate 7 pin
Example:Router(config-controller)# lte sim authenticate 7 055A575E70
Configures CHV1 using the scrambled PIN from Step 4. This PIN is sent to the modem for authentication with each subsequent LTE connection. If authentication passes based on the configured PIN, the data call will be allowed. If authentication fails, the modem will not initiate the data call.
This command is valid only when an encrypted (hidden) level 7 password is used to configure CHV1.
Step 7
exit
Example:Router(config-controller)# exit
(Optional) Exits the cellular controller configuration mode.
Step 8
no username name
Example:Router(config)# no username SIM
(Optional) Removes the username and password created in Step 3.
Step 9
no service password-encryption
Example:Router(config)# no service password-encryption
(Optional) Disables password encryption.
Data Call Setup
To set up a data call, use the following procedures:
•
Configuring the Cellular Interface
Figure 2 shows a typical data call setup.
Figure 2 Data Call Setup with EHWIC-4G-LTE
Configuring the Cellular Interface
To configure the cellular interface, enter the following commands starting in EXEC mode.
SUMMARY STEPS
1.
configure terminal
2.
interface cellular slot/wic/port
3.
ip address negotiated
or
ip address ip-address mask
4.
encapsulation slip
5.
dialer in-band
6.
dialer string string
7.
dialer-group group-number
8.
exit
9.
chat-script script-name "" "AT!CALLprofile-number" TIMEOUT timeout-value "OK"
10.
ip route network-number network-mask {ip-address | interface} [administrative distance] [name name]
11.
dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number | access-group}
12.
line slot/wic/port
13.
script dialer regular-expression
DETAILED STEPS
Note
When a static IP address is required for the cellular interface, the address may be configured as ip address negotiated. The network ensures that the correct static IP address is allocated to the device. If a tunnel interface is configured with ip unnumbered cellular 0/0/0, it is necessary to configure the actual static IP address under the cellular interface, in place of ip address negotiated. For a sample cellular interface configuration, see the "Basic Cellular Interface Configuration" section.
Configuring DDR
To configure DDR for the cellular interface, enter the following commands starting in EXEC mode.
SUMMARY STEPS
1.
configure terminal
2.
interface cellular slot/wic/port
3.
ip address negotiated
or
ip address ip-address mask
4.
encapsulation slip
5.
dialer in-band
6.
dialer pool-member number
7.
interface dialer number
8.
ip address negotiated
9.
encapsulation slip
10.
dialer pool number
11.
dialer idle-timeout seconds
12.
dialer string string
13.
dialer-group group-number
14.
exit
15.
dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number | access-group}
16.
access-list access-list-number permit ip-source-address
17.
line slot/wic/port
18.
script dialer regular-expression
19.
exit
20.
chat-script script-name "" "AT!CALLprofile-number" TIMEOUT timeout-value "OK"
DETAILED STEPS
Configuring DDR Backup
To monitor the primary connection and initiate the backup connection when needed, the router can use one of the following methods:
•
Backup Interface—The backup interface that stays in standby mode until the primary interface line protocol is detected as down and then is brought up.
•
Floating Static Route—The route through the backup interface has an administrative distance that is greater than the administrative distance of the primary connection route and therefore would not be in the routing table until the primary interface goes down.
•
Dialer Watch—Dialer watch is a backup feature that integrates dial backup with routing capabilities.
Configuring Interfaces to Use a Backup Interface
Note
You cannot configure a backup interface for the cellular interface and any other asynchronous serial interface.
To configure one or more interfaces to use a backup interface, use the following commands, beginning in global configuration mode.
SUMMARY STEPS
1.
interface type number
2.
backup interface cellular number
3.
backup delay enable-delay-period disable-delay-period
DETAILED STEPS
Configuration Examples for 4G LTE EHWICs
This section provides the following configuration examples:
•
Basic Cellular Interface Configuration
•
Cellular Interface Configuration for Always-On Connection
•
GRE Tunnel over Cellular Interface Configuration
•
4G-LTE Wireless Modem as Backup with NAT and IPSec
Basic Cellular Interface Configuration
The following example shows how to configure the cellular interface to be used as a primary and is configured as the default route:
Router# show running-configchat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"interface Cellular0/0/0ip address negotiatedencapsulation slipdialer in-banddialer string ltedialer-group 1async mode interactiveip route 172.22.1.10 255.255.255.255 Cellular0/0/0dialer-list 1 protocol ip permitline 0/0/0script dialer ltemodem InOutCellular Interface Configuration for Always-On Connection
This section provides the following configuration examples:
•
Dialer-Watch Configuration without External Dialer Interface
•
Dialer-Persistent Configuration with External Dialer Interface
Dialer-Watch Configuration without External Dialer Interface
The following example shows how to configure dialer-watch without external dialer interface. The bold text is used to indicate important commands that are specific to dialer-watch.
chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"interface Cellular0/0/0ip address negotiatedencapsulation slipdialer in-banddialer string LTEdialer watch-group 1async mode interactive!dialer watch-list 1 ip 5.6.7.8 0.0.0.0dialer watch-list 1 delay route-check initial 60dialer watch-list 1 delay connect 1!ip route 0.0.0.0 0.0.0.0 cellular 0/0/0line 0/0/0script dialer LTEmodem InOutno exectransport input alltransport output allDialer-Persistent Configuration with External Dialer Interface
The following example shows how to configure dialer-persistent with external dialer interface. The bold text is used to indicate important commands that are specific to dialer-persistent.
chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"interface Cellular0/0/0ip address negotiatedencapsulation slipdialer in-banddialer pool-member 1async mode interactiverouting dynamicinterface Dialer1ip address negotiatedencapsulation slipdialer pool 1dialer idle-timeout 0dialer string ltedialer persistentdialer-group 1!dialer-list 1 protocol ip permitip route 0.0.0.0 0.0.0.0 dialer 1line 0/0/0script dialer ltemodem InOutno exectransport input alltransport output allGRE Tunnel over Cellular Interface Configuration
The following example shows how to configure the static IP address when a GRE tunnel interface is configured with ip address unnumbered cellular interface:
Note
GRE tunnel configuration is supported only if the SP provides a public IP address on the LTE interface.
interface Tunnel2ip unnumbered <internal LAN interface GE0/0 etc.>tunnel source Cellular0/3/0tunnel destination a.b.c.dinterface Cellular0/0/0ip address negotiatedencapsulation slipno ip mroute-cachedialer in-banddialer string ltedialer-group 1async mode interactive! traffic of interest through the tunnel/cellular interfaceip route x.x.x.x 255.0.0.0 Tunnel2! route for the tunnel destination via cellularip route a.b.c.d 255.255.255.255 cellular 0/0/0
Note
For service providers using a private IP address, point-to-point static GRE tunnel cannot be set up with a private IP address at one end and a public IP address on the other end.
4G-LTE Wireless Modem as Backup with NAT and IPSec
The following example shows how to configure the 4G-LTE wireless modem on the router as backup with NAT and IPSec:
Note
The receive and transmit speeds cannot be configured. The actual throughput depends on the cellular network service.
ip dhcp excluded-address 10.4.0.254!ip dhcp pool lan-poolnetwork 10.4.0.0 255.255.0.0dns-server 10.4.0.254default-router 10.4.0.254!!chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"crypto isakmp policy 1encr 3desauthentication pre-sharecrypto isakmp key address a.b.c.d!!crypto ipsec transform-set ah-sha-hmac esp-3des!crypto map gsm1 10 ipsec-isakmpset peer a.b.c.dset transform-setmatch address 103!!interface ATM0/0/0no ip addressip virtual-reassemblyload-interval 30no atm ilmi-keepalivedsl operating-mode auto!interface ATM0/0/0.1 point-to-pointbackup interface Cellular0/3/0ip nat outsideip virtual-reassemblyno snmp trap link-statuspvc 0/35pppoe-client dial-pool-number 2!!interface Cellular0/3/0ip address negotiatedip nat outsideip virtual-reassemblyencapsulation slipno ip mroute-cachedialer in-banddialer idle-timeout 0dialer stringdialer-group 1async mode interactivecrypto map gsm1!interface Vlan104description used as default gateway address for DHCP clientsip address 10.4.0.254 255.255.0.0ip nat insideip virtual-reassembly!interface Dialer2ip address negotiatedip mtu 1492ip nat outsideip virtual-reassemblyencapsulation pppload-interval 30dialer pool 2dialer-group 2ppp authentication chap callinppp chap hostname cisco@dsl.comppp chap password 0 ciscoppp ipcp dns requestcrypto map gsm1!ip local policy route-map track-primary-ifip route 0.0.0.0 0.0.0.0 Dialer2 track 234ip route 0.0.0.0 0.0.0.0 Cellular0/3/0 254!!ip nat inside source route-map nat2cell interface Cellular0/3/0 overloadip nat inside source route-map nat2dsl interface Dialer2 overload!ip sla 1icmp-echo 2.2.2.2 source-interface Dialer2timeout 1000frequency 2ip sla schedule 1 life forever start-time nowaccess-list 1 permit anyaccess-list 101 deny ip 10.4.0.0 0.0.255.255 10.0.0.0 0.255.255.255access-list 101 permit ip 10.4.0.0 0.0.255.255 anyaccess-list 102 permit icmp any host 2.2.2.2access-list 103 permit ip 10.4.0.0 0.0.255.255 10.0.0.0 0.255.255.255dialer-list 1 protocol ip list 1dialer-list 2 protocol ip permit!!route-map track-primary-if permit 10match ip address 102set interface Dialer2!route-map nat2dsl permit 10match ip address 101match interface Dialer2!route-map nat2cell permit 10match ip address 101match interface Cellular0/3/0!line 0/3/0exec-timeout 0 0script dialer dialloginmodem InOut
Note
For service providers using a private IP address, use the crypto ipsec transform-set esp command (that is, esp-aes esp-sha256-hmac...).
SIM Configuration
The section provides the following SIM configuration examples:
Locking the SIM Card
The following example shows how to lock the SIM. The italicized text throughout this configuration example is used to indicate comments and will not be seen when a normal console output is viewed.
Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! SIM is in unlocked state.!Router# cellular 0/0/0 lte sim lock 1111!!!WARNING: SIM will be locked with pin=1111(4).Do not enter new PIN to lock SIM. Enter PIN that the SIM is configured with.Call will be disconnected!!!Are you sure you want to proceed?[confirm]Router#Apr 26 19:35:28.339: %CELLWAN-2-MODEM_DOWN: Modem in HWIC slot 0/0 is DOWNApr 26 19:35:59.967: %CELLWAN-2-MODEM_UP: Modem in HWIC slot 0/0 is now UPRouter#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = LockedSIM User Operation Required = Enter CHV1Number of CHV1 Retries remaining = 3Router#!! SIM is in locked state.!Unlocking the SIM Card
The following example shows how to unlock the SIM. The italicized text throughout this configuration example is used to indicate comments and will not be seen when a normal console output is viewed.
Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = LockedSIM User Operation Required = Enter CHV1Number of CHV1 Retries remaining = 3Router#!! SIM is in locked state.!Router# cellular 0/0/0 lte sim unlock 1111!!!WARNING: SIM will be unlocked with pin=1111(4).Do not enter new PIN to unlock SIM. Enter PIN that the SIM is configured with.Call will be disconnected!!!Are you sure you want to proceed?[confirm]Router#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! SIM is in unlocked state.!Automatic SIM Authentication
The following example shows how to configure automatic SIM authentication. The italicized text throughout this configuration example is used to indicate comments and will not be seen when a normal console output is viewed.
Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! SIM is in unlocked state.!Router# cellular 0/0/0 lte sim lock 1111!!!WARNING: SIM will be locked with pin=1111(4).Do not enter new PIN to lock SIM. Enter PIN that the SIM is configured with.Call will be disconnected!!!Are you sure you want to proceed?[confirm]Router#Apr 26 21:22:34.555: %CELLWAN-2-MODEM_DOWN: Modem in HWIC slot 0/0 is DOWNApr 26 21:23:06.495: %CELLWAN-2-MODEM_UP: Modem in HWIC slot 0/0 is now UPRouter#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = LockedSIM User Operation Required = Enter CHV1Number of CHV1 Retries remaining = 3Router#!! SIM is in locked state. SIM needs to be in locked state for SIM authentication to! work.!Router#Router# conf termEnter configuration commands, one per line. End with CNTL/Z.Router(config)# controller cellular 0/0Router(config-controller)# lte sim authenticate 0 1111CHV1 configured and sent to modem for verificationRouter(config-controller)# endRouter#Apr 26 21:23:50.571: %SYS-5-CONFIG_I: Configured from console by consoleRouter#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! SIM is now in locked state but it can be used for connectivity since authentication is! good. Authentication can be saved in the router configuration so that when you boot up! the router with the same locked SIM, connection can be established with the correct! Cisco IOS configuration.!Changing the PIN Code
The following example shows how to change the assigned PIN code. The italicized text throughout this configuration example is used to indicate comments and will not be seen when a normal console output is viewed.
Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! SIM is in unlocked state.!Router#Router# cellular 0/0/0 lte sim lock 1111!!!WARNING: SIM will be locked with pin=1111(4).Do not enter new PIN to lock SIM. Enter PIN that the SIM is configured with.Call will be disconnected!!!Are you sure you want to proceed?[confirm]Router#Apr 26 21:58:11.903: %CELLWAN-2-MODEM_DOWN: Modem in HWIC slot 0/0 is DOWNApr 26 21:58:43.775: %CELLWAN-2-MODEM_UP: Modem in HWIC slot 0/0 is now UPRouter#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = LockedSIM User Operation Required = Enter CHV1Number of CHV1 Retries remaining = 3Router#!! SIM is in locked state. SIM needs to be in locked state to change its PIN.!Router#Router# cellular 0/0/0 lte sim change-pin 1111 0000!!!WARNING: SIM PIN will be changed from:1111(4) to:0000(4)Call will be disconnected. If old PIN is entered incorrectly in 3 attempt(s), SIM will be blocked!!!Are you sure you want to proceed?[confirm]Resetting modem, please wait...CHV1 code change has been completed. Please enter the new PIN in controller configuration for verficationRouter#Apr 26 21:59:16.735: %CELLWAN-2-MODEM_DOWN: Modem in HWIC slot 0/0 is DOWNApr 26 21:59:48.387: %CELLWAN-2-MODEM_UP: Modem in HWIC slot 0/0 is now UPRouter#Router#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = EnabledSIM Status = LockedSIM User Operation Required = Enter CHV1Number of CHV1 Retries remaining = 3Router#!! SIM stays in locked state, as expected, but with new PIN.!Router# cellular 0/0/0 lte sim unlock 0000!!!WARNING: SIM will be unlocked with pin=0000(4).Do not enter new PIN to unlock SIM. Enter PIN that the SIM is configured with.Call will be disconnected!!!Are you sure you want to proceed?[confirm]Router#Router# sh cellular 0/0/0 securityCard Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Router#!! Unlock with new PIN is successful. Hence, changing PIN was successful.!Configuring an Encrypted PIN
The following example shows how to configure automatic SIM authentication using an encrypted PIN. The italicized text throughout this configuration example is used to indicate comments and will not be seen when a normal console output is viewed.
Router# conf termEnter configuration commands, one per line. End with CNTL/Z.Router(config)# service password-encryptionRouter(config)# username SIM privilege 0 password 1111Router(config)# do sh run | i SIMusername SIM privilege 0 password 7 055A575E70.!! Copy the encrypted level 7 PIN. Use this scrambled PIN in the SIM authentication! command.!Router(config)#Router(config)# controller cellullar 0/0Router(config-controller)# lte sim authenticate 7 055A575E70CHV1 configured and sent to modem for verificationRouter(config-controller)# exitRouter(config)# no username SIMRouter(config)# endMay 14 20:20:52.603: %SYS-5-CONFIG_I: Configured from console by consoleModem Firmware Upgrade
The Cisco 4G-LTE EHWICs and Cisco WWAN 4G ISRs G2 have a 4G-LTE modem from Sierra Wireless. The firmware for the modem is upgradable using Cisco IOS commands. The firmware is a Crossword Express file (cwe) and can be downloaded from the wireless software download page on Cisco.com. Use the following procedure to upgrade the modem firmware:
CautionUse only Cisco certified firmware. Using a firmware version not certified by Cisco may impact the wireless service provider network adversely.
CautionDo not disconnect power or switch the router off during the firmware upgrade process. This may result in permanent modem failure.
Note
Firmware downgrade is not supported.
Note
You can also remotely download firmware over the air by following the same steps listed below.
The latest certified firmware version for your carrier and Cisco IOS compatibility is available at:
SUMMARY STEPS
Step 1
Go to the Cisco Wireless WAN software download website at:
Note
For remote download, you can transfer this using the 4G wireless link from Cisco.com onto flash. You must configure external dialer and dialer persistent to bring the interface and the dialer up again.
Step 2
Download the appropriate LTE firmware from the link in Step 1.
Step 3
Use the following command to initiate the firmware upgrade process:
microcode reload cellular pa-bay slot modem-provision flash:filename
Note
For remote downloads, if wireless is your primary link, you will lose connectivity. Connectivity is restored after the download. If you have opted for logging in Step 3, the firmware log file will be available on flash with the download status.
DETAILED STEPS
Command or Action PurposeStep 1
Go to the Cisco Wireless WAN software download website at:
Gives you access to Cisco Wireless WAN software downloads. Select firmware for Cisco 4G.
Note
This website is only available to registered Cisco.com users.
Step 2
Download the appropriate LTE firmware release from the link in Step 1.
Downloads the modem firmware file to the router's flash memory.
Step 3
microcode reload cellular pa-bay slot modem-provision flash:filename
Example:Router# microcode reload cellular 0 1 modem-provision flash:<filename>.cwe
Initiates the firmware upgrade process.
•
pa-bay—Use 0 for EHWIC.
•
slot—Slot number, 0 to 3, where the EHWIC is plugged in.
Note
For remote download, you can transfer this using the wireless link from Cisco.com onto flash. You must configure external dialer and dialer persistent to bring the interface and the dialer up again prior to the upgrade.
SNMP MIBs
This section provides a brief description of SNMP MIBs and contains the following topics:
Overview
Simple Management Network Protocol (SNMP) development and its use is centered around the MIB. An SNMP MIB is an abstract data base, which is a conceptual specification for information that a management application may read and modify in a certain form. This does not imply that the information is kept in the managed system in that same form. The SNMP agent translates between the internal data structures and formats of the managed system and the external data structures and formats defined for the MIB.
The SNMP MIB is conceptually a tree structure with conceptual tables. Cisco 4G MIB is discussed in more detail in the next section. Relative to this tree structure, the term MIB is used in two senses. In one sense, it is actually an MIB branch, usually containing information for a single aspect of technology, such as a transmission medium or a routing protocol. An MIB used in this sense is more accurately called an MIB module and is usually defined in a single document. In the other sense, an MIB is a collection of such branches. Such a collection might comprise, for example, all the MIB modules implemented by a given agent or the entire collection of MIB modules defined for SNMP.
An MIB is a tree where the leaves are individual items of data called objects. An object may be, for example, a counter or a protocol status. MIB objects are also sometimes called variables.
MIBs can be classified into three categories:
•
IF MIBs—describes interface statistics
•
ENTITY-MIBs—provides general hardware type for both the HWIC and the modem
•
3G/Wireless MIBs—cellular or wireless-specific MIBs
EHWIC-4G-LTE MIBs
The following MIBs are supported on the EHWIC-4G-LTE-V, EHWIC-4G-LTE-A, and EHWIC-4G-LTE-G:
•
IF-MIB
•
ENTITY-MIB
•
CISCO-WAN-3G-MIB
You can download the MIBs from the Cisco MIB Locator at http://www.cisco.com/go/mibs.
Restrictions
•
For the router that runs the SNMP agent, you must configure appropriate access control (for example, SNMP-server community) using the Cisco IOS CLI for the NMS and agent to work properly.
•
It is strongly recommended that you configure SNMP V3 with authentication/privacy when implementing SNMP SET operation.
Additional References
Related Documents
Related Topic Document TitleCisco IOS commands
•
Cisco IOS Master Commands List, All Releases
http://www.cisco.com/en/US/docs/ios/mcl/allreleasemcl/all_book.html
•
Configuring Cisco EHWIC and 880G for 3G (EV-DO Rev A)
http://www.cisco.com/en/US/docs/routers/access/1800/1861/software/feature/guide/mrwls_evdo.html
•
Configuring 3G Wireless WAN on Modular and Fixed ISRs (HWIC-3G-CDMA, HWIC-3G-CDMA-x, and PCEX-3G-CDMA-x)
http://www.cisco.com/en/US/docs/routers/access/1800/1861/software/feature/guide/mrwlcdma.html
Hardware Overview and Installation
•
Cisco 4G-LTE Wireless WAN EHWIC
Supported Cisco antennas and cables
•
Installing Cisco Interface Cards in Cisco Access Routers
•
Cisco 4G/3G Omnidirectional Dipole Antenna (4G-LTE-ANTM-D)
http://www.cisco.com/en/US/docs/routers/access/wireless/hardware/notes/4G3G_ant.html
•
Cisco 4G Indoor Ceiling-Mount Omnidirectional Antenna (4G-ANTM-OM-CM)
http://www.cisco.com/en/US/docs/routers/access/wireless/hardware/
notes/antcm4gin.html•
Cisco Outdoor Omnidirectional Antenna for 2G/3G/4G Cellular (ANT-4G-OMNI-OUT-N)
•
Cisco Integrated 4G Low-Profile Outdoor Saucer Antenna (ANT-4G-SR-OUT-TNC)
•
Cisco Single-Port Antenna Stand for Multiband TNC Male-Terminated Portable Antenna (Cisco 4G-AE015-R, Cisco 4G-AE010-R)
http://www.cisco.com/en/US/docs/routers/access/wireless/hardware/notes/4Gantex15-10r.html
•
Cisco 4G Lightning Arrestor (4G-ACC-OUT-LA)
http://www.cisco.com/en/US/docs/routers/access/wireless/hardware/notes/4Glar.html
•
Lightning Arrestor for the Cisco 1240 Connected Grid Router
MIBs
RFCs
Technical Assistance
Troubleshooting
This section provides the necessary background information and resources available for troubleshooting the Cisco 4G-LTE Wireless WAN EHWIC.
For LED descriptions, see Cisco 4G LTE Wireless WAN EHWIC.
•
Verifying Service Availability
•
Modem Troubleshooting Using the Remote Diagnostic Port
•
Modem Settings for North America and Carriers Operating on 700 MHz Band
Verifying Data Call Setup
To verify the data call setup, follow these steps:
Step 1
After you create a modem data profile using the cellular profile create command and configuring DDR on the cellular interface, send a ping from the router to a host across the wireless network.
Step 2
If the ping fails, debug the failure by using the following debug and show commands:
•
debug chat
•
debug modem
•
debug dialer
•
show cellular all
•
show interface cellular
•
show running-config
•
show ip route
Step 3
Save the output from these commands and contact your system administrator.
Checking Signal Strength
If the Received Signal Strength Indication (RSSI) level is very low (for example, if it is less than
-110 dBm), follow these steps:
Step 1
Check the antenna connection. Make sure the TNC connector is correctly threaded and tightened.
Step 2
If you are using a remote antenna, move the antenna cradle and check if the RSSI has improved.
Step 3
Contact your wireless service provider to verify if there is service availability in your area.
Verifying Service Availability
The following is a sample output for the show cellular all command for a scenario where the antenna is disconnected and a modem data profile has not been created. The errors in this case have been highlighted with >>>>>>>.
Router# show cellular 0/0/0 allHardware Information====================Modem Firmware Version = SWI9600M_01.00.09.03Modem Firmware built = 2011/07/01 19:31:09Hardware Version = 20460000International Mobile Subscriber Identity (IMSI) = <specific sim number>International Mobile Equipment Identity (IMEI) = <specific modem number>Electronic Serial Number (ESN) = <specific ESN in Hex> [specific ESN in Dec]Integrated Circuit Card ID (ICCID) = <specific ICCID number>Mobile Subscriber International SubscriberIDentity Number (MSISDN) = <specific phone number>Profile Information====================* - Default profile >>>>>>>> no profile here.Data Connection Information===========================Profile 1, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 2, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 3, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 4, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 5, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 6, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 7, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 8, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 9, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 10, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 11, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 12, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 13, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 14, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 15, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateProfile 16, Packet Session Status = INACTIVEInactivity Reason = Normal inactivate stateNetwork Information===================Current Service Status = No service, Service Error = None >>>>>>> no service means not connected to the network.Current Service = Packet SwitchedCurrent Roaming Status = HomeNetwork Selection Mode = AutomaticCountry = , Network =Mobile Country Code (MCC) = 0Mobile Network Code (MNC) = 0Radio Information=================Radio power mode = OnlineCurrent RSSI = -125 dBm >>>>>>> either no antenna, or bad antenna or out of network.Radio power mode = OnlineLTE Technology Selected = LTEModem Security Information==========================Card Holder Verification (CHV1) = DisabledSIM Status = OKSIM User Operation Required = NoneNumber of CHV1 Retries remaining = 3Successful Call Setup
The following is a sample output when a call is set up using a chat script. It shows a received IP address from the network. Call setup is successful and data path is open.
debugsdebug modemdebup chatRouter#Aug 25 18:46:59.604: CHAT0/0/0: Attempting async line dialer scriptAug 25 18:46:59.604: CHAT0/0/0: Dialing using Modem script: lte & System script: noneAug 25 18:46:59.604: CHAT0/0/0: process startedAug 25 18:46:59.604: CHAT0/0/0: Asserting DTRAug 25 18:46:59.604: CHAT0/0/0: Chat script lte startedAug 25 18:46:59.604: CHAT0/0/0: Sending string: AT!CALL1Aug 25 18:46:59.604: CHAT0/0/0: Expecting string: OKAug 25 18:47:00.641: CHAT0/0/0: Completed match for expect: OKAug 25 18:47:00.641: CHAT0/0/0: Chat script lte finished, status = SuccessAug 25 18:47:00.641: TTY0/0/0: no timer type 1 to destroyAug 25 18:47:00.641: TTY0/0/0: no timer type 0 to destroyAug 25 18:47:00.641: TTY0/0/0: no timer type 2 to destroyAug 25 18:47:02.642: %LINK-3-UPDOWN: Interface Cellular0/0/0, changed state to upAug 25 18:47:02.642: %DIALER-6-BIND: Interface Ce0/0/0 bound to profile Di1Aug 25 18:47:03.642: %LINEPROTO-5-UPDOWN: Line protocol on Interface Cellular0/0/0, changed state to up (69.78.96.14) [OK]Modem Troubleshooting Using the Remote Diagnostic Port
The RSVD port on the faceplate of the EHWIC-4G-LTE provides access to the debug port on the modem. Use an industry-standard diagnostic tool like Qualcomm QXDM to perform remote radio-level diagnostics and traffic monitoring on the modem.
Use the following test command to turn diagnostics on:
test cell-hwic slot/port/ehwic dm-port remote on
Note
To enable test commands, you must enter the service internal command in the global configuration mode.
Modem Settings for North America and Carriers Operating on 700 MHz Band
For HWIC-3G deployments in North America and for carriers operating in the 700 MHz band, the following changes to the modem settings are required to prevent long network attach times.
The output of show cellular x/x/x all command shows the following:
•
Current RSSI is -125 dBM
•
LTE Technology Preference = No preference specified (AUTO)
Changing Modem Settings
To change the modem settings to force the modem to scan different technologies, use the following Cisco IOS command:
Router# cellular 0/0/0 lte technology ?auto Automatic LTE Technology Selectioncdma-1xrtt CDMA 1xRTTcdma-evdo CDMA EVDO Rev Acdma-hybrid HYBRID CDMAgsm GSMlte LTEumts UMTSElectronic Serial Number (ESN)
The ESN number is located directly on the modem label in hexadecimal notation. It can also be retrieved using the Cisco IOS CLI using the show cellular slot/port/hwic hardware command.
The sample output below shows the ESN number:
Hardware Information====================Electronic Serial Number (ESN) = 0x603c9854 [09603971156]Electronic Serial Number (ESN) = <specific ESN in hexadecimal> [specific ESN in decimal]Feature Information for Cisco 4G LTE EHWIC
Table 2 lists the release history for this feature.
Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Note
Table 2 lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Table 2 Feature Information for Cisco 4G LTE EHWIC
Feature Name Releases Feature InformationDual-mode LTE Support for ISR G2
Cisco IOS Release 15.1(4)M2
Cisco 4G LTE WWAN EHWICs (EHWIC-4G-LTE-V for Verizon Wireless networks) support 4G-LTE cellular and 3G cellular networks. 4G-LTE mobile specification provides multi-megabit bandwidth, more efficient use of the radio network, latency reduction, and improved mobility.
This feature was introduced for the Cisco ISR G2 modular platform.
The following commands were introduced or modified:
•
cellular slot lte
•
Under controller cellular unit: default lte, lte event, lte radio, lte sim, no lte
Enhancements for Dual-mode LTE Support for ISR G2
Cisco IOS Release 15.1(4)M4, 15.2(4)M, or later releases
Bug Fixes. See Release Notes for Cisco 4G LTE Wireless WAN EHWIC 1.0 at:
http://www.cisco.com/en/US/docs/routers/access/interfaces/Release/Notes/RN_MM4G3GWAN.pdf
Multimode 4G LTE Support for ISR G2
Cisco IOS Release 15.2(4)M1
The following 4G LTE WWAN EHWICs were released:
•
EHWIC-4G-LTE-A—Dedicated multimode LTE for AT&T Wireless networks.
•
EHWIC-4G-LTE-G—Dedicated multimode LTE for global wireless networks.
Multimode LTE EHWIC is backwards compatible with HSPA+, HSPA, UMTS, EDGE, and GPRS. This feature was introduced for the Cisco ISR G2 modular platforms.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2013 Cisco Systems, Inc. All rights reserved.
Feedback


