This command configures AAA parameters for ePDG service.

Product

ePDG

Privilege

Security Administrator, Administrator

Syntax

Syntax Description

aaa send framed-mtu value 
aaa send framed-mtu

no

Disables AAA parameters for ePDG service.

send

Configures AVP to be send to AAA server.

framed-mtu value

This is the framed-MTU AVP value to be sent in DER, which is an integer from 64 through 1500.

Usage Guidelines

Use this command to configure AAA parameters for ePDG service.

This command allows duplicate precedence in a TFT for a S2b ePDG session.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

[ no ] allow { custom-swm-swu-error-mapping | duplicate-prec-in-tft } 

no

Disables allowing exception.

custom-swm-swu-error-mapping

Customises mapping of SWm errors with SWu Notify Error Type.

duplicate-prec-in-tft

The duplicate precedence is allowed in a tft for a S2b ePDG session.

Usage Guidelines

Use this command to allow exception with Spec or RFC.

This command associates configuration of ePDG service to qci-qos mapping and EGTP service.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

associate { egtp-service egtp_service_name | gtpc-load-control-profile  gtpc_load_control_profile_name | gtpc-overload-control-profile  gtpc_overload_control_profile_name  | qci-qos-mapping qci_qos_mapping | subscriber-map  subscriber_map_name }
no associate { egtp-service | gtpc-load-control-profile  gtpc_load_control_profile_name | gtpc-overload-control-profile  gtpc_overload_control_profile_name | qci-qos-mapping | subscriber-map }

no

Disables association.

egtp-service egtp_service_name

The eGTP service should be configured before associating the same with ePDG service.

egtp_service_name is a string and the value must be between 1 and 63.

gtpc-load-control-profile gtpc_load_control_profile_name

Associates GTPC-load-control-profile for the epdg service.

1 and 64.

gtpc-overload-control-profile gtpc_overload_control_profile_name

Associates GTPC-overload-control-profile for the ePDG service.

1 and 64.

qci-qos-mapping qci_qos_mapping

The associated qci-qos mapping table should be configured prior to associating the same with ePDG service.

qci-qos_mappingis a string and the value must be between 1 and 63.

subscriber-map subscriber_map_name

Configures subscriber map association to get PGW address locally.

subscriber_map_name is a string and the size must be between 1 and 64.

Usage Guidelines

Use this command to associate the ePDG service to egtp service or QCI to QoS mapping.

This command binds the services.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

bind address bind_address crypto-template crypto_template_service_name
no bind address

no

Disables binding.

address bind_address

Specifies the address of the EPDG service. This must be followed by an IPv4 address, using dotted-decimal notation or an IPv6 address, using xx::yy::zz format.

crypto-template crypto_template_service_name

Specifyes the crypto template to use, this is a string of size between 0 and 127.

Usage Guidelines

Use this command to bind the ePDG service.

This command allows to downlink packets to be buffered, while session is in connecting state. By default it is enabled.

Product

ePDG

Privilege

Security Administrator, Administrator

Syntax

Syntax Description

[ no | default ] data-buffering 

no

Disables data buffering.

default

Sets / restores the data buffering to its default value. By default, the data buffering is enabled.

Usage Guidelines

Use this command to allow to downlink packets to be buffered, while session is in connecting state.

Configures context of dns-client.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

dns-pgw { context dns_client_context_name | selection { topology [ weight ] | weight } }
{ no | default } dns-pgw { context |  selection { topology [ weight ] | weight } }

default

Configures context of dns-client to its default value.

no

Disables dns-client's context.

context dns_client_context_name

Specifies the dns-client's context name, which is a string and should be between 1 and 79.

selection { topology [ weight ] | weight }

Specifies the pgw dns selection criteria.

topology: Enables topology selection.

topology weight: Enables topology with weight.

weight: Enables selection with weight-only, disables topology selection.

Usage Guidelines

Enable/disable PGW Selection based on topology and load-balancing of PGWs on weight's from DNS.

Use this command to configure the source in which dns-client is configured, dns-pgw selection toplogy/weight will be used to enable/disable PGW Selection based on topology and load-balancing of PGWs.

Exits the current configuration mode and returns to the Exec mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

Syntax Description

end

Usage Guidelines

Use this command to return to the Exec mode.

Exits the current mode and returns to the parent configuration mode.

Product

All

Privilege

Security Administrator, Administrator

Syntax

Syntax Description

exit

Usage Guidelines

Use this command to return to the parent configuration mode.

Designates ePDG fully qualified domain name.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > ePDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

fqdn epdg_fqdn
{ no | default } fqdn

default

Resets the ePDG fully qualified domain name to its default setting.

no

Disables ePDG FQDN.

fqdn epdg_fqdn

Designates ePDG with fully qualified domain name, name is a string between 1 and 256 alphanumeric characters.

Usage Guidelines

Use this command to configure ePDG FQDN under ePDG service which will be used for longest suffix match during dynamic allocation.

This command configures Internet Protocol (IP) parameters.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

ip fragment-chain { max-ooo-fragment fragments | timeout secs }
default ip fragment-chain { max-ooo-fragment | timeout }

default

Resets the ePDG Internet Protocol(IP) parameters to default values.

fragment-chain

This option configures ip fragment chain settings during TFT handling.

max-ooo-fragment fragments

This is the number of fragments to buffer per fragment chain for out-of-order reception before receiving first fragment(for L4 packet filtering).

fragments is an integer value from 0 through 300.

The default value is 45.

0 represents no buffering is done for out-of-order fragments, correct bearer will be selected with first fragment.

timeout secs

This is the time to hold an ip fragment chain.

secs is an integer value from 1 through 10.

The default value is 5.

Usage Guidelines

Use this command to configure ePDG Internet Protocol (IP) parameters.

This command configures the approximate maximum number of sessions ePDG service can support, ranging from 0 to 1000000. Default is 1000000.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

max-sessions value
default max-sessions 

default

Resets the approximate maximum number of sessions that ePDG service can support to default value (1000000).

value

This is the approximate maximum number of sessions that ePDG service can support, ranging from 0 to 1000000.

The default value is 1000000.

Usage Guidelines

Use this command to configure the approximate maximum number of sessions that ePDG service can support.

Configures MAG context within epdg service.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

mobile-access-gateway context context_name [ mag-service mag_service_name  ]
no mobile-access-gateway context

no

Disables MAG context.

mobile-access-gateway context context_name [ mag-service mag_service_name ]

context designates the name of the context in which the MAG service is configured. This must be followed by context_name of MAG service of size 1 to 79 characters.

mag-service designates the name of the MAG service. This must be followed by mag_service_name of size 1 to 63 characters.

Usage Guidelines

Use this command to specify where MIPv6 sessions are routed through this service.

Configures new call related behavior.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

[ no | default ] newcall duplicate-session notify-delete name

no

Disables new call related behavior.

default

Sets the default value for the new call related behavior. ‘notify-delete’ is enabled by default.

duplicate-session

Configures action regarding duplicate session.

notify-delete

Initiate delete session request to PGW during reattach if another PGW is selected. Enabled by default.

Usage Guidelines

Use this command to configure new call related behavior.

This command configures pdn-type related parameters for ePDG service.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

[ no ] pdn-type ipv6 path-mtu

no

Disables pdn-type related parameters for ePDG service.

Usage Guidelines

Use this command to configure pdn-type related parameters for ePDG service.

Configures pgw-selection related parameters for the EPDG service.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

[ no ] pgw-selection { agent-info  error-terminate  | local-configuration-preferred | prefer aaa-pgw-id }

no

Disables pgw-selection related parameters for the EPDG service.

pgw-selection agent-info error-terminate

agent-info specifies the action to be taken when MIP6-agent-info is expected but not received from AAA/HSS.

error-terminate terminates the pgw-selection and rejects the call.

local-configuration-preferred

Configures local PGW selection as the preferred mechanism. Applicable for initial attach. Default is AAA/DNS based selection.

prefer aaa-pgw-id

Configures AAA provided PGW ID(IP address/FQDN) selection as the preferred mechanism for initial attach.

Usage Guidelines

Use this command to terminate the pgw-selection and reject the call when MIP6-agent-info is expected but not received from AAA/HSS.

Configures PLMN related parameters for the EPDG service.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

plmn id mcc mcc_plmn_id mnc mnc_plmn_id
no plmn id

no

Disables PLMN related parameters for the EPDG service.

plmn id mcc mcc_plmn_id mnc mnc_plmn_id

plmn id mcc mcc_plmn_id configures MCC part of PLMN ID for the EPDG service and prompts as " Enter a number, ranging from 200...999 - string of size 3 to 3" . mcc_plmn_id is a string of three characters, entered as number between 200 and 999.

mnc mnc_plmn_id configures MNC part of PLMN ID for the EPDG service and prompts as " Enter a number, ranging from 00...999 - string of size 2 to 3" . mnc_plmn_id is a string of two to three characters, entered as number between 00 and 999.

Usage Guidelines

Use this command to configure PLMN identifier (MCC and MNC Values) for ePDG Service.

Configures reporting of events.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context Configuration > ePDG Service Configuration

configure > context context_name > epdg-service epdg_service_name

Entering the above command sequence results in the following prompt:

[local]host_name(config-epdg-service)#

Syntax

Syntax Description

[ no ] reporting-action event-record 

no

Disables RTT record generation for this ePDG service.

event-record

Configures event records.

Usage

Syntax Description

Use this command to configure the reporting of events for the EPDG service.

Maximum time allowed for session setup in seconds.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

setup-timeout time
default setup-timeout

default

Sets up the maximum time allowed for a session to default value (as 60 seconds).

setup-timeout time

time is an integer value between 2 and 300.

Usage Guidelines

Use this command to configure maximum time allowed for session setup in seconds.

Configures a subscriber with a given name.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

[ default ] subscriber name
no subscriber

default

Configures a subscriber with a given default name.

no

Cancels the subscriber configuration.

subscriber name

Configures a subscriber with a given name, which is a string of size between 1 and 127.

Usage Guidelines

Use this command to configure the subscriber with a given name.

This command is used to configure threshold values to set and clear the alarms for each monitoring parameters separately.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

threshold { epdg-ikev2-authentication-failures | epdg-ikev2-setup-attempts | epdg-ikev2-setup-failure | epdg-ikev2-setup-failure-rate | epdg-ikev2-setup-success } threshold_value [ clear clear_value ]
no threshold { epdg-ikev2-authentication-failures | epdg-ikev2-setup-attempts | epdg-ikev2-setup-failure | epdg-ikev2-setup-failure-rate | epdg-ikev2-setup-success } 

no

Disables the configuration of a specific threshold for ePDG service.

epdg-ikev2-authentication-failures threshold_value

Configures the threshold value for IKEv2 Authentication Failures.

threshold_value is the threshold value for IKEv2 Authentication Failures, which is an integer between 0 and 1000000.

epdg-ikev2-setup-attempts threshold_value

Configures the threshold value for IKEv2 Setup Attempts.

threshold_value is the threshold value for IKEv2 Setup Attempts, which is an integer between 0 and 10000000.

epdg-ikev2-setup-failure threshold_value

Configures the threshold value for IKEv2 Setup Failure.

threshold_value is the threshold value for IKEv2 Setup Failure, which is an integer between 0 and 1000000.

epdg-ikev2-setup-failure-rate threshold_value

Configures the threshold value for IKEv2 Setup Failure Rate.

threshold_value is the percentage of IKEv2 Setup Failure Rate, which is an integer between 0 and 100.

epdg-ikev2-setup-success threshold_value

Configures the threshold value for IKEv2 Setup Success.

threshold_value is the threshold value for IKEv2 Setup Success, which is an integer between 0 and 10000000.

clear clear_value

Usage Guidelines

Use this command to configure a specific threshold for ePDG service.

Configures the subscriber's time-to-live (TTL) settings for the EPDG service.

Product

ePDG

Privilege

System Administrator, Administrator

Mode

Exec > Global Configuration > Context Configuration > ePDG Service Configuration

configure > context context_name > epdg-service epdg_service_name

Entering the above command sequence results in the following prompt:

[local]host_name(config-epdg-service)#

Syntax

Syntax Description

timeout idle sec { micro-checkpoint-deemed-idle [ dur  ] | micro-checkpoint-periodicity dur  }

no timeout idle

default timeout idle

no

Disables idle timeout configuration along with the idle seconds micro-checkpoint duration or deemed idle duration configuration.

default

Configures the default value for subscriber’s time out settings. The idle timeout default value is 0. The default value of micro-checkpoint-deemed-idle would be 0 seconds and that for micro-checkpoint-periodicity is 10 seconds.

idlesec

Designates the maximum duration a session can remain idle, in seconds, before system automatically terminates the session. Must be followed by number of seconds between 0 and 2147483647. Zero indicates function is disabled.

micro-checkpoint-deemed-idledledur

Configures micro-checkpoint duration when UE is deemed idle for this Subscriber. Default is "0" (disabled). dur is an integer between 10 and 1000.

micro-checkpoint-periodicitydur

Configures the micro-checkpoint-periodicity for this Subscriber. Default is "10". dur is the an integer between 10 and 10000.

Usage

Syntax Description

Use this command to configure the subscriber's time-to-live (TTL) settings for the EPDG service.

Sets the options related to username received from mobile.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

username { check-mac-address [ failure-handling {  continue | terminate } ] | mac-address-delimiter { NAI-label | colon | colon-or-NAI-label } | mac-address-stripping } 
no username { check-mac-address | mac-address-stripping }

no

Cancels the options related to username received from mobile.

username { check-mac-address [ failure-handling { continue | terminate } ] | mac-address-delimiter { NAI-label | colon | colon-or-NAI-label } | mac-address-stripping }

check-mac-address validates Mac address. By default, Mac address is not validated.

failure-handling { continue | terminate } : MAC Address validation failure handling configuration.

continue ignores failure and continues.

terminate terminates session on request failure.

mac-address-delimiter is the second delimiter to be used to extract the MAC address from username when first delimiter is '@'.

NAI-label NAI-label(.nai) to be used to extract the MAC Address from username as a second delimiter when first delimiter is '@'.

colon Colon(:) to be used to extract the MAC Address from username as a second delimiter when first delimiter is '@' .

colon-or-NAI-la bel Either colon(:) or NAI-Label(.nai) to be used to extract the MAC address from username as a second delimiter when first delimiter is '@'. This is the default option.

mac-address-stripping strips Mac Address from the username. By default, it is disabled.

Usage Guidelines

Use this command to set the options (Validate Mac address / mac-address-delimiter / mac-address-stripping) related to username received from mobile.

Configures the vendor-specific-attributes values on PMIP based S2b interface.

Product

ePDG

Privilege

Security Administrator, Administrator

Mode

Exec > Global Configuration > Context > EPDG Service Configuration

configure > context context_name > epdg service service_name

Entering the above command sequence results in the following prompt:

[context_name]host_name(config-epdg-service)#

Syntax

Syntax Description

vendor-specific-attr { dns-server-req { apco |  pco } | pcscf-server-req { apco | private-extn } }
default vendor-specific-attr { dns-server-req | pcscf-server-req }

default

Configues vendor-specific-attributes to default the value. Default setting is to use APCO IE for DNS Server Address and PrivateExtension IE for PCSCF Server Address.

dns-server-req

Configures the DNS Server Address to be present in PCO/APCO IE.

apco

Configures to use APCO IE to carry information over PMIP based S2b.

pco

Configures to use PCO IE to carry information over PMIP based S2b.

pcscf-server-req

Configures the PCSCF Server Address to be present in APCO/PrivateExtn IE.

apco

Configures to use APCO IE to carry information over GTP based S2b.

private-extn

Configures to use PrivateExtension IE to carry information over GTP based S2b.

Usage Guidelines

Use this command to configure the vendor-specific-attributes values on PMIP based S2b interface.