ip-header-dscp value
value: Represents the DSCP setting as the first six most-significant bits of the ToS field. It can be configured to any hex value from 0x0 through 0x3F. Default is 0x0.
accounting-policy name
qci-qos-mapping name
QCI-QoS mapping is configured through the qci-qos-mapping command in the Global Configuration Mode.
The following command associates an accounting policy named acct2 to the HSGW service:
address ip_address
max-subscribers num
Important: The maximum number of subscribers supported is dependant on the license key installed and the number of active PSCs in the system. A fully loaded system with 13 active PSCs can support 3,000,000 total subscribers. Refer to the license key command and the Usage section (below) for additional information.When configuring the max-subscribers option, be sure to consider the following:
The following command would bind the logical IP interface with the address of 112.334.556.778 to the HSGW service and specifies that a maximum of 200,000 simultaneous subscriber sessions can be facilitated by the interface/service at any given time:
The following command allows the HSGW to maintain session contexts for 120 seconds before tearing them down:
dns-pgw context name
context name
fqdn domain_name
Important: In order to properly interact with other nodes in the network, the FQDN should be 96 alpha and/or numeric characters or less.|
•
|
topon.<interface_name>.
|
Beginning an FQDN with topon initiates topology matching with available P-GWs in the network. Once this feature is enabled, the rest of the FQDN is processed from right to left until a matching regional designator is found on a corresponding P-GW FQDN.
|
•
|
topoff.<interface_name>.
|
Important: The associated P-GW service must have a corresponding FQDN similar to the following: gre { checksum | checksum-verify | flow control [ action { disconnect-session | resume-session } ] [ timeout msecs ] + | ip-header-dscp value { all-control-packets | setup-packets-only } | reorder-timeout msecs | segmentation | sequence-mode { none | reorder } | sequence-numbers | threegppp2-ext-headers qos-marking }
|
•
|
disconnect-session: Ends the session and releases the call.
|
|
•
|
resume-session: Switches flow control to XON and resumes delivery of packets to the RAN.
|
timeout msecs
msecs is an integer from 1 through 1000000. Default: 1000
|
•
|
value: Represents the DSCP setting as the first six most-significant bits of the ToS field. It can be configured to any hexadecimal value from 0x0 through 0x3F.
|
|
•
|
all-control-packets: Dictates that the DSCP marking is to be provided in all GRE control packets.
|
|
•
|
setup-packets-only: Dictates that the DSCP marking is to be provided only in GRE setup packets.
|
reorder-timeout msecs
none: Specifies that sequence numbers in packets are ignored and all arriving packets are processed in the order they arrive.
reorder: Specifies that out of sequence packets are stored in a sequencing queue until one of the conditions is met:
The no keyword, enables qos-marking in the GRE header based on the tos value in the header.
ip { header-compression rohc | local-port number | source-violation { clear-on-valid-packet | drop-limit num | period secs | reneg-limit num } }
header-compression rohc: Removes the RoHC configuration from this service.
ip source-violation clear-on-valid-packet: Disables the ability of the service to reset the reneg-limit and drop-limit counters after receipt of a properly addressed packet.
local-port number
drop-limit num
Specifies the number of allowed source violations within a detection period before forcing a call disconnect as an integer from 1 through 1000000. If num is not specified, the value is set to the default. Default: 10
period secs
The counters are decremented in this manner: reneg-limit counter is reduced by one (1) each time the period value is reached until the counter is zero (0); drop-limit counter is halved each time the period value is reached until the counter is zero (0). If secs is not specified, the value is set to the default.
secs is an integer from 1 through1000000. Default: 120
reneg-limit num
Sets the number of allowed source violations within a detection period before forcing a PPP renegotiation. If num is not specified, the value is set to the default.
num is an integer from 1 through 1000000. Default: 5
Header Compression RoHC: Use this command to specify that sessions using this service will have Robust Header Compression applied and configure parameters supporting RoHC.
Local Port: Specify the UDP port that should be used for communications between the Packet Control Function (PCF) and the HSGW.
Important: The UDP port setting on the PCF must match the local-port setting for the HSGW service on the system in order for the two devices to communicate.Source Violation: This function is intended to allow the operator to configure a network to prevent problems such as when a user gets handed back and forth between two HSGWs a number of times during a handoff scenario.
The following command sets the drop limit to 15 and leaves the other values at their defaults:
lifetime time
The following command specifies a time of 3600 seconds (1 hour) for subscriber sessions on this HSGW service:
max-retransmissions count
count is an integer from 1 through 1000000. Default: 5
context_name is an existing context expressed as an alphanumeric string of 1 through 79 characters.
service_name is an existing MAG service expressed as an alphanumeric string of 1 through 63 characters.
The following command identifies the MAG context MAG1 as the context through which MIPv6 sessions are to be routed and further narrows the route by specifying the service name (mag_serv3):
mcc number: Specifies the mobile country code (MCC) portion of the PLMN identifier as an integer fromn 100 through 999.
mnc number: Specifies the mobile network code (MNC) portion of the PLMN identifier as a 2- or 3-digit integer from 00 through 999.
policy overload { redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ] | reject [ use reject-code { admin-prohibite | insufficient-resources } ] }
redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ]
address: The IP address of an alternate HSGW expressed in IPv4 dotted decimal notation. Up to 16 IP addresses can be specified either in one command or by issuing the redirect command multiple times. If you try to add more than 16 IP addresses to the redirect policy the CLI issues an error message. If you specify an IP address and weight that already exists in the redirect policy the new values override the existing values.
weight weight_num: When multiple addresses are specified, they are selected in a weighted round-robin scheme. Entries with higher weights are more likely to be chosen. If a weight is not specified, the entry is automatically assigned a weight of 1 (default). weight_num must be an integer value from 1 through 10.
use-reject-code admin-prohibited: When this keyword is specified and traffic is rejected, the error code admin prohibited is returned instead of the error code “insufficient resources”. This is the default behavior.
use-reject-code insufficient-resources: When this keyword is specified and traffic is rejected, the error code “insufficient resources” is returned instead of the error code admin prohibited.
Use the no policy overload command to delete a previously configured policy. If after deleting the policy setting you desire to return the policy parameter to its default setting, use the default policy command.
The following command configures the HSGW service to redirect overload traffic to two IPv4 addresses, one priority weighted 1 and the other priority weighted 5:
Use this command to associate the HSGW service with a configured Profile ID - QCI Mapping table. The table is configured in the Global Configuration Mode using the profile-id-qci-mapping-table command.
The following command associates a Profile ID - QCI Mapping table named table3 with this service:
time is an integer from 1 through 1000000. Default: 3
Use the retransmission timeout command in conjunction with the max-retransmissions command in order to configure the HSGW service’s behavior when it does not receive a response from a particular PCF.
max-retransmissions count
retransmission-timeout seconds
setup-timeout seconds
spi remote-address { pcf_ip_address | ip_addr_mask_combo } spi-number number { encrypted secret enc_secret | secret secret } [ description string ] [ hash-algorithm { md5 | rfc2002-md5 } ] [ replay-protection { nonce | timestamp } ] [ timestamp-tolerance tolerance ] [ zone zone_id ]
pcf_ip_address: Specifies the IP address of the ePCF. pcf_ip_address is an IP address expressed in IPv4 dotted decimal notation or IPv6 colon separated notation.
ip_addr_mask_combo: Specifies the IP address and mask bits of the PCF. ip_addr_mask_combo must be specified using the form “IP Address/Mask Bits” where the IP address must in IPv4 dotted-decimal or IPv6 colon-separated notation, and the mask bits are a numeric value corresponding to the number of bits in the subnet mask.
spi-number number
encrypted secret enc_secret: Specifies the encrypted shared key (enc_secret) between the PCF and the HSGW service. enc_secret must be between 1 and 236 alpha and/or numeric characters and is case sensitive.
secret secret: Specifies the shared key (secret) between the PCF and the HSGW services. secret must be between 1 and 127 alpha and/or numeric characters and is case sensitive.
The encrypted keyword is intended only for use by the chassis while saving configuration scripts. The system displays the encrypted keyword in the configuration file as a flag that the variable following the secret keyword is the encrypted version of the plain text secret key. Only the encrypted secret key is saved as part of the configuration file.
description string
md5: Configures the hash-algorithm to implement MD5.
rfc2002-md5: Configures the hash-algorithm to implement keyed-MD5.
nonce: Configures replay protection to be implemented using NONCE (Number ONCE).
timestamp: Configures replay protection to be implemented using timestamps.
timestamp-tolerance tolerance
zone zone_id
zone_id is an integer value from 1 through 32. A maximum of 32 PCF zones can be configured for a HSGW service.
An SPI is a security mechanism configured and shared by the PCF and the HSGW service. Please refer to IETF RFC 2002: IP Mobility Support for additional information.
Important: The SPI configuration on the PCF must match the SPI configuration for the HSGW service on the system in order for the two devices to communicate properly.This command used with the zone keyword redirects all calls on the basis of PCF zone to the specific HSGW on the basis of parameters configured using the policy pcf-zone-match command.
The following command configures the HSGW service to use an SPI of 256 when communicating with a PCF with the IP address 192.168.0.2. The key that would be shared between the PCF and the HSGW service is q397F65.
The following command creates the configured SPI of 400 for an PCF with an IP address of 172.100.3.200 and zone id as 11:
qos-update wait-timeout seconds
The following command configures the HSGW service to apply the wait time of 30 seconds after receiving an flow unauthorized by the PCRF:
