# HSGW Service Configuration Mode Commands

The HSGW Service Configuration Mode is used to create and manage a configuration allowing the HRPD Serving Gateway (HSGW) to communicate, send and receive call data, and session flows to/from a evolved Access Network/evolved Packet Control Function (eAN/ePCF) in an eHRPD network.

IMPORTANT:

The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
a11-signalling-packets

Enables the DSCP marking feature for IP headers carrying outgoing A11-signalling A11 packets (such as RRP, RU, SU).
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    a11-signalling-packets
    ip-header-dscp value[ default | no ] a11-signalling-packets
    ip-header-dscp

default

Restores the specified parameter to its default setting of 0x0.
no

Disables the specified functionality.
ip-header-dscp value

Configures the QoS Differentiated Services Code Point (DSCP) marking for IP header encapsulation.

value: Represents the DSCP setting as the first six most-significant bits of the ToS field. It can be configured to any hex value from 0x0 through 0x3F. Default is 0x0.
Usage:

Use this command to enable or disable the DSCP marking feature for IP headers carrying outgoing A11-signalling A11 packets. DSCP marking is disabled by default.
Example:
The following command configures the HSGW service to support DSCP marking for IP headers on A11 packets in outgoing A11-signalling traffic:

    a11-signalling-packets
    ip-header-dscp 0x21

associate

Associates accounting policies and QCI-QoS mapping parameters with this HSGW service.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    associate { accounting-policy name | qci-qos-mapping name }no associate { accounting-policy [ name ] | qci-qos-mapping }

no

Removes the specified associated policy or mapping from the service.
accounting-policy name

Specifies an existing accounting policy to associate with the HSGW service as an alphanumeric string of 1 through 63 characters.
qci-qos-mapping name

Specifies an existing QCI-QoS mapping configuration as an alphanumeric string of 1 through 63 characters.

QCI-QoS mapping is configured through the qci-qos-mapping command in the Global Configuration Mode.
Usage:

Use this command to associate an accounting policy with the HSGW service.
Example:
The following command associates an accounting policy named acct2 to the HSGW service:

    associate accounting-policy acct2

bind address

Binds the service to a logical IP interface serving as the A10 interface and specifies the maximum number of subscribers that can access this service over the configured interface.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    bind address ip_address [ max-subscribers num ]no bind address

no

Removes the interface binding from this service.
address ip_address

Specifies the IP address of the A10/A11 interface in IPv4 dotted-decimal notation.
max-subscribers num

Specifies the maximum number of subscribers that can access this service on this interface as an integer from 0 through 2500000. Default: 2500000

IMPORTANT:

The maximum number of subscribers supported is dependant on the license key installed and the number of active PSCs in the system. A fully loaded system with 13 active PSCs can support 3,000,000 total subscribers. Refer to the license key command and the Usage section (below) for additional information.
Usage:

Associate the HSGW service to a specific logical IP address. The logical IP address or interface takes on the characteristics of an A10/A11 interface that provides the session connectivity to/from an eAN/PCF. Only one interface can be bound to a service. The interface should be configured prior to issuing this command.

This command also sets a limit as to the number of simultaneous subscribers sessions that can be facilitated by the service/interface at any given time.
When configuring the max-subscribers option, be sure to consider the following:

- The total number of A10/A11 interfaces you will configure
- The total number of subscriber sessions that all of the configured interfaces may handle during peak busy hours
- An average bandwidth per session multiplied by the total number of sessions
- The type of physical port (10/100Base-T or 1000Base-Tx) that these interfaces will be bound to

Taking these factors into account and distributing your subscriber session across all available interfaces will allow you to configure your interfaces to optimally handle sessions without degraded performance.
Example:
The following command would bind the logical IP interface with the address of 112.334.556.778 to the HSGW service and specifies that a maximum of 200,000 simultaneous subscriber sessions can be facilitated by the interface/service at any given time:

    bind address 112.334.556.778
    max-subscribers 200000

context-retention-timer

Configures the maximum number of consecutive seconds that a UE session context (which includes the LCP, authentication and A10 session context for a given UE) is maintained by the HSGW before it is torn down.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    context-retention-timer
    timeout [ sec ][ default | no ] context-retention-timer timeout

default

Disables the timer.
no

Disables the timer.
timeout [ sec ]

Specifies the amount of time (in seconds) that the session context is maintained before it is disassembled as an integer from 1 through 3600. Default: 60
Usage:

Use this command to configure a timer to retain session contexts for a specified amount of time before disassembling it.
Example:
The following command allows the HSGW to maintain session contexts for 120 seconds before tearing them down:

    context-retention-timer
    timeout 120

data-available-indicator

Enables sending the Data Available Indicator extension in A10/A11 Registration Reply messages.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    data-available-indicator

Usage:

Use this command to enable the sending of the Data Available Indicator extension in A10/A11 Registration Reply messages.
data-over-signaling

Enables the data-over-signaling marking feature for A10 packets.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    [ default | no ] data-over-signaling

default

Enables the data-over signaling feature for A10 packets.
no

Disables the data-over signaling feature for A10 packets.
Usage:

Use this command to enable or disable the data-over signaling feature for A10 packets.
dns-pgw

Identifies the location of the DNS client to the HSGW service. The DNS client is used to identify an FQDN for the peer P-GW. This command defaults to the same context as the HSGW service.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    dns-pgw context name[ default | no ] dns-pgw context

default

Returns the command to its default setting of the current context.
no

Removes the configured DNS client context name from this service.
context name

Specifies an existing context in which the DNS client is configured as an alphanumeric string of 1 through 79 characters.
Usage:

Use this command to identify to the HSGW service the context where the DNS client is configured.
Example:
The following command identifies the context where the DNS client is configured as isp3:

    dns-pgw context isp3

end

Exits the current configuration mode and returns to the Exec mode.
Product:

All
Privilege:

Security Administrator, Administrator
Syntax

    end

Usage:

Use this command to return to the Exec mode.
exit

Exits the current mode and returns to the parent configuration mode.
Product:

All
Privilege:

Security Administrator, Administrator
Syntax

    exit

Usage:

Use this command to return to the parent configuration mode.
fqdn

Configures the Fully Qualified Domain Name (FQDN) for this HSGW service.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    fqdn domain_name

    [ default | no ] fqdn

default

Returns the command to the default setting of “null”.
no

Removes the configured FQDN name from this service.
domain_name

Specifies an FQDN for the HSGW service as an alphanumeric string of 1 through 256 characters.

IMPORTANT:

In order to properly interact with other nodes in the network, the FQDN should be 96 alpha and/or numeric characters or less.
Usage:

Use this command to configure an FQDN for this HSGW service. The FQDN is used when matching a P-GW with an HSGW.

Topology Matching

You may specify which P-GW you wish an HSGW interface to connect with by enabling topology matching within the FQDNs for both the HSGW service and P-GW service. Topology matching selects geographically closer nodes and reduces backhaul traffic for a specified interface.
The following optional keywords enable or disable topology matching when added to the beginning of an FQDN:

- topon.<interface_name>.Beginning an FQDN with topon initiates topology matching with available P-GWs in the network. Once this feature is enabled, the rest of the FQDN is processed from right to left until a matching regional designator is found on a corresponding P-GW FQDN.
- topoff.<interface_name>. By default, topology matching is disabled. If you enable topology matching for any interfaces within a node, however, all interfaces not using this feature should be designated with topoff.

Example:
The following command configures this HSGW service with an FQDN of abc123.com:

    fqdn abc123.com

The following command configures this HSGW service with an FQDN that enables topology matching:

    fqdn topon.<interface_name>.hsgw01.bos.ma.node.epc.mnc<value>. mcc<value>.3gppnetwork.org

IMPORTANT:

The associated P-GW service must have a corresponding FQDN similar to the following:

    topon.<interface_name>.pgw01.bos.ma.node.epc.mnc<value>.mcc<value>.3gppnetwork.org

fragment

Enables or disables Point-to-Point Protocol (PPP) payload fragmentation.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    [ default | no ] fragment
    ppp-data

default

Returns the command to its default setting of enabled.
no

Disables PPP payload fragmentation.
Usage:

Use this command to enable or disable PPP payload fragmentation.
gre

Configures Generic Routing Encapsulation (GRE) parameters for the A10 protocol within the HSGW service.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    gre { checksum | checksum-verify | flow
    control [ action { disconnect-session | resume-session } ] [ timeout msecs ] + | ip-header-dscp value { all-control-packets | setup-packets-only } | reorder-timeout msecs | segmentation | sequence-mode { none | reorder } | sequence-numbers | threegppp2-ext-headers
    qos-marking }default gre { checksum | checksum-verify | flow-control | ip-header-dscp | reorder-timeout | sequence-mode | sequence-numbers | threegppp2-ext-headers
    qos-marking }no gre { checksum | checksum-verify | flow-control | ip-header-dscp | segmentation | sequence-numbers | threegppp2-ext-headers
    qos-marking }

default

Restores the specified parameter to its default setting.
no

Disables the specified functionality.
checksum

Enables the introduction of the checksum field in outgoing GRE packets. Default: disabled
checksum-verify

Enables verification of the GRE checksum (if present) in incoming GRE packets. Default: disabled
flow-control [ action { disconnect-session | resume-session } ] [ timeout msecs ] +

Default: no GRE flow-control

Enables 3GPP2 GRE flow control which causes the HSGW to send flow control enabled Normal Vendor Specific Extensions (NVSE) in A11 RRPs.

action { disconnect-session | resume-session }:

Default: disconnect-session
Specifies the action to be taken when timeout is reached:

- disconnect-session: Ends the session and releases the call.
- resume-session: Switches flow control to XON and resumes delivery of packets to the RAN.

timeout msecs

Specifies the amount of time (in milliseconds) to wait for an XON indicator from the RAN (after receiving an XOFF). Also sets the action to be taken if the timeout limit is reached.

msecs is an integer from 1 through 1000000. Default: 1000
ip-header-dscp value { all-control-packets | setup-packets-only }

Default: Disabled
Configures QoS Differentiated Services Code Point (DSCP) marking for GRE packets.

- value: Represents the DSCP setting as the first six most-significant bits of the ToS field. It can be configured to any hexadecimal value from 0x0 through 0x3F.
- all-control-packets: Dictates that the DSCP marking is to be provided in all GRE control packets.
- setup-packets-only: Dictates that the DSCP marking is to be provided only in GRE setup packets.

reorder-timeout msecs

Configures the maximum number of milliseconds to wait before processing reordered out-of-sequence GRE packets as an integer from 0 through 5000. Default: 100
segmentation

Enables GRE Segmentation for the HSGW service. Default: disabled
sequence-mode { none | reorder }

Default: none

Configures handling of incoming out-of-sequence GRE packets.

none: Specifies that sequence numbers in packets are ignored and all arriving packets are processed in the order they arrive.
reorder: Specifies that out of sequence packets are stored in a sequencing queue until one of the conditions is met:

- The reorder timeout occurs: All queued packets are sent for processing and the accepted sequence number is updated to the highest number in the queue.
- The queue is full (five packets): All packets in the queue are sent for processing, the reorder timer is stopped and the accepted sequence number is updated to the highest number in the queue.
- An arriving packet has a sequence number such that the difference between this and the packet at the head of the queue is greater than five. All the packets in the queue are sent for processing, the reorder timer is stopped and the accepted sequence number is updated to the highest number that arrived.
- A packet arrives that fills a gap in the sequenced numbers stored in the queue and creates a subset of packets whose sequence numbers are continuous with the current accepted sequence number. This subset of packets in the queue is sent for processing. The reorder timer continues to run and the accepted sequence number is updated to the highest number in the subset delivered.

sequence-numbers

Enables insertion of GRE sequence numbers in data that is about to be transmitted over the A10 interface. Data coming into the system containing sequence numbers but that is out of sequence is not re-sequenced.
threegppp2-ext-headers qos-marking

When threegppp2-ext-headers qos-marking is enabled and the PCF negotiates capability in the A11 RRQ, the HSGW will include the QoS optional data attribute in the GRE 3gpp2 extension header.

The no keyword, enables qos-marking in the GRE header based on the tos value in the header.
Usage:

Use this command to set GRE parameters for the A10 protocol within the HSGW service.
Example:
The following command configures the HSGW service to support the inclusion of GRE sequence numbers in outgoing traffic:

    gre sequence-numbers

ip

Enables the use of Robust Header Compression (RoHC) and enters the HSGW Service ROHC Configuration Mode where RoHC parameters are configured for the service.

Configures the local User Datagram Protocol (UDP) port for the A10/A11 interface IP socket.

Sets the parameters for IP source validation. Source validation is useful if packet spoofing is suspected or for verifying packet routing and labeling within the network. Source validation requires the source address of received packets to match the IP address assigned to the subscriber (either statically or dynamically) during the session.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    ip { header-compression
    rohc | local-port number | source-violation { clear-on-valid-packet | drop-limit num | period secs | reneg-limit num } }default ip { header-compression
    rohc | local-port | source-violation { drop-limit | period | reneg-limit } }no ip { header-compression
    rohc | source-violation clear-on-valid-packet }

default

Resets the keyword to its default value.
no

header-compression rohc: Removes the RoHC configuration from this service.

ip source-violation clear-on-valid-packet: Disables the ability of the service to reset the reneg-limit and drop-limit counters after receipt of a properly addressed packet.
header-compression rohc

Specifies that Robust Header Compression will be applied to sessions using this service and enters the HSGW Service RoHC Configuration Mode where RoHC parameters are configured.
local-port number

Specifies the UDP port number as an integer from 1 through 65535. Default: 699
source-violation { clear-on-valid-packet | drop-limit num | period secs | reneg-limit num }

clear-on-valid-packet

Configures the service to reset the reneg-limit and drop-limit counters after receipt of a properly addressed packet. Default: disabled

drop-limit num

Specifies the number of allowed source violations within a detection period before forcing a call disconnect as an integer from 1 through 1000000. If num is not specified, the value is set to the default. Default: 10

period secs

Specifies the length of time (in seconds) for a source violation detection period to last; drop-limit and reneg-limit counters are decremented each time this value is reached.

The counters are decremented in this manner: reneg-limit counter is reduced by one (1) each time the period value is reached until the counter is zero (0); drop-limit counter is halved each time the period value is reached until the counter is zero (0). If secs is not specified, the value is set to the default.

secs is an integer from 1 through1000000. Default: 120

reneg-limit num

Sets the number of allowed source violations within a detection period before forcing a PPP renegotiation. If num is not specified, the value is set to the default.

num is an integer from 1 through 1000000. Default: 5
Usage:

Header Compression RoHC: Use this command to specify that sessions using this service will have Robust Header Compression applied and configure parameters supporting RoHC.
Entering this command results in the following prompt:

    [context_name]hostname(config-ip-header-compression-rohc)#

HSGW Service RoHC Configuration Mode commands are defined in the HSGW Service RoHC Configuration Mode Commands chapter.

Local Port: Specify the UDP port that should be used for communications between the Packet Control Function (PCF) and the HSGW.

IMPORTANT:

The UDP port setting on the PCF must match the local-port setting for the HSGW service on the system in order for the two devices to communicate.

Source Violation: This function is intended to allow the operator to configure a network to prevent problems such as when a user gets handed back and forth between two HSGWs a number of times during a handoff scenario.

This function operates in the following manner:

When a subscriber packet is received with a source address violation, the system increments both the IP source-violation reneg-limit and drop-limit counters and starts the timer for the IP-source violation period. Every subsequent packet received with a bad source address during the IP-source violation period causes the reneg-limit and drop-limit counters to increment.

For example, if reneg-limit is set to 5, then the system allows 5 packets with a bad source address (source violations), but on the 5th packet, it re-negotiates PPP.

If the drop-limit is set to 10, the above process of receiving 5 source violations and renegotiating PPP occurs only once. After the second 5 source violations, the call is dropped. The period timer continues to count throughout this process.

If the configured source-violation period is exceeded at any time before the call is dropped, the reneg-limit counter is checked. If the reneg-limit counter is greater than zero (0), the reneg-limit is decremented by 1. If the reneg-limit counter equals zero, the drop-limit is decremented by half.
Example:
The following command specifies a UDP port of 3950 for the HSGW service to use to communicate with the PCF on the A10/A11 interface:

    ip local-port 3950

The following command sets the drop limit to 15 and leaves the other values at their defaults:

    ip source-violation
    drop-limit 15

lifetime

Specifies how long an A10 connection can exist before its registration is considered expired.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    lifetime time[ default | no ] lifetime

default

Resets the lifetime value to the default setting of 1800 seconds.
no

Specifies that an A10 connection can exist for an infinite amount of time.
time

Specifies the time (in seconds) that an A10 connection can exist before its registration is considered expired as an integer from 1 through 65534. Default: 1800
Usage:

Use this command to set a limit to the amount of time that a subscriber session can remain up whether or not the session is active or dormant. If the lifetime timer expires before the subscriber terminates the session, the connection is terminated automatically.
Example:
The following command specifies a time of 3600 seconds (1 hour) for subscriber sessions on this HSGW service:

    lifetime 3600

max-retransmissions

Configures the maximum number of times the HSGW service will attempt to communicate with an eAN/PCF before it marks it as unreachable.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    max-retransmissions count

    default max-retransmissions

default

Resets the maximum number of allowed retransmissions to the default value of 5.
count

Specifies the maximum number of times the HSGW service will attempt to communicate with an eAN/PCF before it marks it as unreachable.

count is an integer from 1 through 1000000. Default: 5
Usage:

Use this command to limit the number of retransmissions to an eAN/PCF before marking it as unreachable. If the value configured is reached, the call is dropped.
Example:
The following command configures the maximum number of retransmissions for the HSGW service to 3:

    max-retransmissions 3

mobile-access-gateway

Identifies the mobile access gateway (MAG) context through which MIPv6 calls are to be routed.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    mobile-access-gateway
    context context_name [ mag-service service_name ]no mobile-access-gateway context

no

Removes the configured MAG context route from this service.
context context_name [ mag-service service_name ]

Specifies the name of the context and, optionally, the service through which MIPv6 sessions are to be routed.

context_name is an existing context expressed as an alphanumeric string of 1 through 79 characters.

service_name is an existing MAG service expressed as an alphanumeric string of 1 through 63 characters.
Usage:

Use this command to specify where MIPv6 sessions are routed through this service.
Example:
The following command identifies the MAG context MAG1 as the context through which MIPv6 sessions are to be routed and further narrows the route by specifying the service name (mag_serv3):

    mobile-access-gateway
    context MAG1 mag-service mag_serv3

plmn id

Configures Public Land Mobile Network identifiers used to determine if a mobile station is visiting, roaming or belongs to this network.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    plmn id mcc number mnc number

mcc number mnc number

mcc number: Specifies the mobile country code (MCC) portion of the PLMN identifier as an integer fromn 100 through 999.

mnc number: Specifies the mobile network code (MNC) portion of the PLMN identifier as a 2- or 3-digit integer from 00 through 999.
Usage:

The PLMN identifier is used to aid the HSGW service in the determination of whether or not a mobile station is visiting, roaming, or home. Multiple P-GW services can be configured with the same PLMN identifier. Up to five PLMN IDs can be configured for each P-GW Service. The configured IDs are used in Diameter-EAP-Request messages (as a Visited-Network-Identifier AVP).
Example:
The following command configures the PLMN identifier with an MCC of 462 and MNC of 2:

    plmn id mcc 462 mnc 02

policy overload

Specifies how an HSGW service should handle overload conditions.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    policy overload { redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ] | reject [ use
    reject-code { admin-prohibite | insufficient-resources } ] }default policy overloadno policy overload [ redirect address [ address2 ] ...  [ address16 ]

default

Returns the command to it default setting of “reject” with the “admin-prohibited” code.
no

Removes a specified “redirect address” from this service.
redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ]

This option enables a redirect policy for overloading conditions. When a redirect policy is invoked, the HSGW service rejects new sessions with an A11 Registration Reply Code of 88H (unknown HSGW address) and provides the IP address of an alternate HSGW. This command can be issued multiple times.

address: The IP address of an alternate HSGW expressed in IPv4 dotted decimal notation. Up to 16 IP addresses can be specified either in one command or by issuing the redirect command multiple times. If you try to add more than 16 IP addresses to the redirect policy the CLI issues an error message. If you specify an IP address and weight that already exists in the redirect policy the new values override the existing values.

weight weight_num: When multiple addresses are specified, they are selected in a weighted round-robin scheme. Entries with higher weights are more likely to be chosen. If a weight is not specified, the entry is automatically assigned a weight of 1 (default). weight_num must be an integer value from 1 through 10.
reject [ use reject-code { admin-prohibite | insufficient-resources } ]

This option will cause any overload traffic to be rejected. The HSGW sends an A11 Registration Reply Code of 82H (insufficient resources).

use-reject-code admin-prohibited: When this keyword is specified and traffic is rejected, the error code admin prohibited is returned instead of the error code “insufficient resources”. This is the default behavior.

use-reject-code insufficient-resources: When this keyword is specified and traffic is rejected, the error code “insufficient resources” is returned instead of the error code admin prohibited.
Usage:

Policies can be implemented to dictate HSGW service behavior for overload conditions.

The system invokes the overload policy if the number of calls currently being processed exceeds the licensed limit for the maximum number of sessions supported by the system.

The system automatically invokes the overload policy when an on-line software upgrade is started.

Use the no policy overload command to delete a previously configured policy. If after deleting the policy setting you desire to return the policy parameter to its default setting, use the default policy command.

The chassis is shipped from the factory with the policy options overload disabled
Example:
The following command configures the HSGW service to redirect overload traffic to two IPv4 addresses, one priority weighted 1 and the other priority weighted 5:

    policy overload redirect
    10.2.3.4 weight 1 10.2.3.5 weight 5

profile-id-qci-mapping

Associates a configured mapping table for RP QoS Profile ID to LTE QoS Class Index (QCI) mapping with this service.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    profile-id-qci-mapping nameno profile-id-qci-mapping [ name ]

no

Removes all profile maps or a specific profile map from this service.
name

Specifies the name of an existing Profile ID - QCI Mapping table to be associated with this service as an alphanumeric string of 1 through 63 characters.
Usage:

Use this command to associate the HSGW service with a configured Profile ID - QCI Mapping table. The table is configured in the Global Configuration Mode using the profile-id-qci-mapping-table command.
Example:
The following command associates a Profile ID - QCI Mapping table named table3 with this service:

    profile-id-qci-mapping table3

registration-deny

Configures parameters related to registration rejection.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    registration-deny { handoff
    connection-setup-record-absent | newcall connection-setup-record-absent } [ use-deny-code { poorly-formed-request | reason-unspecified } ][ default | no ] registration-deny { handoff
    connection-setup-record-absent | newcall connection-setup-record-absent }

default | no

Returns the command to its default settings.
handoff connection-setup-record-absent

When enabled, the HSGW denies or discards handoff R-P sessions that do not have an Airlink Connection Setup record in the A11 Registration Request.

Default is disabled. Default HSGW behavior is to accept such requests.
newcall connection-setup-record-absent

When enabled, the HSGW denies or discards new R-P sessions that do not have the Airlink Connection Setup record in the A11 Registration Request.

Default is disabled. Default HSGW behavior is to accept such requests.
use-deny-code { poorly-formed-request | reason-unspecified }

Sets the specified Registration Deny Code when denying a new call or handoff because of a missing connection setup record.
Usage:

Use this command to configure parameters relating to the rejection of registration requests.
Example:
The following command denies registration for registration requests missing the connection setup record and replies with a use deny code of “poorly formed request”:

    registration-deny handoff
    connection-setup-record-absent use-deny-code poorly-formed-request

retransmission-timeout

Configures the maximum allowable time for the HSGW service to wait for a response from the eAN/PCF before it attempts to communicate with the eAN/PCF again (if the system is configured to retry the PCF), or marks the eAN/PCF as unreachable.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    retransmission-timeout time[ default | no ] retransmission-timeout

default

Resets the timeout setting to the default value of 3.
no

Deletes a previously configured timeout value.
time

Specifies the maximum allowable time (in seconds) for the HSGW service to wait for a response from the eAN/PCF before it: a) attempts to communicate with the eAN/PCF again (if the system is configured to retry the PCF), or b) marks the eAN/PCF as unreachable.

time is an integer from 1 through 1000000. Default: 3
Usage:

Use the retransmission timeout command in conjunction with the max-retransmissions command in order to configure the HSGW service’s behavior when it does not receive a response from a particular PCF.
Example:
The following command configures a retransmission timeout value of 5 seconds:

    retransmission-timeout 5

rsvp

Configures resource reservation protocol (RSVP) parameters for this HSGW service in support of the network initiated QoS feature.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    rsvp { max-retransmissions count | retransmission-timeout seconds }

    [ default | no ] rsvp { max-retransmissions | retransmission-timeout }

default

Resets the maximum number of allowed retransmissions to the default value of 5 or the timeout setting to the default value of 3.
no

Disables the feature.
max-retransmissions count

Specifies the maximum retransmission count of RP control packets as an integer from 1 through 1000000. Default: 5
retransmission-timeout seconds

Specifies the maximum amount of time (in seconds) to allow for retransmission of RP control packets as an integer from 1 through 1000000. Default: 3
Usage:

Use this command to set RSVP parameters for this HSGW service in support of the network initiated QoS feature.
Example:
The following command configures the maximum number of retransmissions to 3:

    rsvp max-retransmissions 3

setup-timeout

Specifies the maximum amount of time allowed for session setup.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    setup-timeout seconds[ default| no ] setup-timeout

default

Resets the command to the default value of enabled with a timeout of 60 seconds.
no

Disables the feature.
seconds

Specifies the maximum amount of time (in seconds) to allow for setup of a session in this service as an integer from 1 though 1000000. Default: 60
Usage:

Use this command to set the maximum amount of time allowed for setting up a session.
Example:
The following command sets the maximum time allowed for setting up a session to 5 minutes (300 seconds):

    setup-timeout 300

spi remote-address

Configures the security parameter index (SPI) between the HSGW service and the evolved Access Network/evolved Packet Control Function (eAN/ePCF). This command also configures the redirection of calls based on the PCF zone.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    spi remote-address { pcf_ip_address | ip_addr_mask_combo } spi-number number { encrypted
    secret enc_secret |  secret secret } [ description string ] [ hash-algorithm { md5 | rfc2002-md5 } ] [ replay-protection { nonce | timestamp } ] [ timestamp-tolerance tolerance ] [ zone zone_id ]no spi remote-address pcf_ip_address spi-number number

pcf_ip_address | ip_addr_mask_combo

pcf_ip_address: Specifies the IP address of the ePCF. pcf_ip_address is an IP address expressed in IPv4 dotted decimal notation or IPv6 colon separated notation.

ip_addr_mask_combo: Specifies the IP address and mask bits of the PCF. ip_addr_mask_combo must be specified using the form “IP Address/Mask Bits” where the IP address must in IPv4 dotted-decimal or IPv6 colon-separated notation, and the mask bits are a numeric value corresponding to the number of bits in the subnet mask.
spi-number number

Specifies the SPI which indicates a security context between the PCF and the HSGW as an integer from 256 through 4294967295.
encrypted secret enc_secret | secret secret

Configures the shared-secret between the HSGW service and the PCF. The secret can be either encrypted or non-encrypted.

encrypted secret enc_secret: Specifies the encrypted shared key (enc_secret) between the PCF and the HSGW service. enc_secret must be between 1 and 236 alpha and/or numeric characters and is case sensitive.

secret secret: Specifies the shared key (secret) between the PCF and the HSGW services. secret must be between 1 and 127 alpha and/or numeric characters and is case sensitive.

The encrypted keyword is intended only for use by the chassis while saving configuration scripts. The system displays the encrypted keyword in the configuration file as a flag that the variable following the secret keyword is the encrypted version of the plain text secret key. Only the encrypted secret key is saved as part of the configuration file.
description string

This is a description for the SPI expressed as an alphanumeric string of 1 through 31 characters.
hash-algorithm { md5 | rfc2002-md5 }

Specifies the hash-algorithm used between the HSGW service and the PCF. Default: md5

md5: Configures the hash-algorithm to implement MD5.

rfc2002-md5: Configures the hash-algorithm to implement keyed-MD5.
replay-protection { nonce | timestamp }

Specifies the replay-protection scheme that should be implemented by the HSGW service. Default: timestamp

nonce: Configures replay protection to be implemented using NONCE (Number ONCE).

timestamp: Configures replay protection to be implemented using timestamps.
timestamp-tolerance tolerance

Specifies the allowable difference (in seconds) between timestamps as an integer from 0 through 65535. If the difference is exceeded, the session will be rejected. If set to 0, timestamp tolerance checking is disabled at the receiving end. Default: 60
zone zone_id

Specifies the different PCF zones to configure in HSGW service. Mapping of a zone-number to a set of HSGWs can be done per HSGW service basis.

zone_id is an integer value from 1 through 32. A maximum of 32 PCF zones can be configured for a HSGW service.
Usage:

An SPI is a security mechanism configured and shared by the PCF and the HSGW service. Please refer to IETF RFC 2002: IP Mobility Support for additional information.

Multiple SPIs can be configured if the HSGW service is communicating with multiple eAN/ePCFs.

IMPORTANT:

The SPI configuration on the PCF must match the SPI configuration for the HSGW service on the system in order for the two devices to communicate properly.

This command used with the zone keyword redirects all calls on the basis of PCF zone to the specific HSGW on the basis of parameters configured using the policy pcf-zone-match command.
Example:
The following command configures the HSGW service to use an SPI of 256 when communicating with a PCF with the IP address 192.168.0.2. The key that would be shared between the PCF and the HSGW service is q397F65.

    spi remote-address 192.168.0.2
    spi-number 256 secret q397F65

The following command creates the configured SPI of 400 for an PCF with an IP address of 172.100.3.200 and zone id as 11:

    spi remote-address 172.100.3.200
    spi-number 400 zone 11

unauthorized-flows

Configures the service to wait a specified number of seconds before triggering a QoS update to downgrade an unauthorized flow.
Platform:

ASR 5000
Product:

HSGW
Privilege:

Administrator
Syntax

    unauthorized-flows
    qos-update wait-timeout seconds[ default | no ] unauthorized-flows
    qos-update wait-timeout

default

Returns the command to its default setting.
no

Removes the configure wait-timeout setting for this service.
qos-update wait-timeout seconds

Specifies the number of seconds to wait before triggering the QoS update to downgrade the unauthorized flow as an integer from 1 through 65534.
Usage:

Use this command to specific a wait timeout trigger for flows that are unauthorized by policy rules received via the Gxa interface from the PCRF. When the wit timer expires, the HSGW triggers a QoS update to downgrade the unauthorized flow.
Example:
The following command configures the HSGW service to apply the wait time of 30 seconds after receiving an flow unauthorized by the PCRF:

    unauthorized-flow qos-update
    wait-timeout 30