Cisco Intelligent Wireless Access Gateway User Manual

match access-group input name IPV6_ACL_INTERNET2
class-map type traffic match-any TC_OPENGARDEN_IPV6
match access-group output name IPV6_ACL_OPENGARDEN
match access-group input name IPV6_ACL_OPENGARDEN
Example: Configuring a Policymap for Dual-Stack PMIPv6
policy-map type service DRL_V4 #provides service definition for services applied
during session start and restart
20 class type traffic TC_INTERNET
police input 512000 512000 10000
police output 1280000 560000 20000
!
policy-map type service ACC_V4
20 class type traffic TC_INTERNET2
accounting aaa list default
!
policy-map type service TO_V4
20 class type traffic TC_OPENGARDEN
timeout idle 60
!
policy-map type service DRL_V6
20 class type traffic TC_INTERNET_IPV6
police input 512000 512000 10000
police output 1280000 560000 20000
!
policy-map type service ACC_V6
20 class type traffic TC_INTERNET_IPV6_2
accounting aaa list default
!
policy-map type service TO_V6
20 class type traffic TC_OPENGARDEN_IPV6
timeout idle 60
!
Example: Configuring a Control Policy for Dual-Stack PMIPv6
policy-map type control PMIP_DUAL_STACK
class type control always event session-start
10 service-policy type service name DRL_V4 #applying services during dual stack
11 service-policy type service name DRL_V6 #applying services during dual stack
15 service-policy type service name ACC_V4 #applying services during dual stack
16 service-policy type service name ACC_V6 #applying services during dual stack
20 service-policy type service name TO_V4 #applying services during dual stack
21 service-policy type service name TO_V6 #applying services during dual stack
25 service-policy type service name SESSION_TIMEOUT_SERVICE #applying services during
dual stack
30 authorize aaa list default identifier mac-address #performs MAC TAL authorization
class type control always event session-restart
10 service-policy type service name DRL_V4 #applying services during dual
stack
11 service-policy type service name DRL_V6 #applying services during dual
Intelligent Wireless Access Gateway Configuration Guide
72 OL-30226-03
Dual Stack Support for PMIPv6 and GTP
Example: Configuring a Policymap for Dual-Stack PMIPv6

Cisco Intelligent Wireless Access Gateway Specifications

General

Product Name	Intelligent Wireless Access Gateway
Category	Gateway
Manufacturer	Cisco
Function	Wireless access
Product Type	Network Gateway

Summary

Overview of the Intelligent Wireless Access Gateway

Prerequisites for the iWAG

Lists essential configurations like MCSA and ipv6 unicast-routing needed before setting up the iWAG.

Restrictions for the iWAG

How to Configure the iWAG

Provides guidance on configuring the iWAG for simple IP users and 3G mobile IP users, including AAA.

IP Sessions Over Gigabit EtherChannel

Restrictions for IPoGEC

Configuring IP Sessions over Gigabit EtherChannel

Details the configuration steps for enabling LACP functionality for IP sessions.

Configuring Member Links for IP Sessions over Gigabit EtherChannel

Explains how to configure individual member links within a port channel for IPoGEC.

Configuration Examples for IP Sessions Over Gigabit EtherChannel

Provides practical examples of configuring IPoGEC, including basic setup and member links.

Service Provider WiFi: Support for Integrated Ethernet Over GRE

Restrictions for Configuring Ethernet Over GRE

Prerequisites for Configuring Ethernet Over GRE

How to Configure the EoGRE Feature

Details the configuration steps for setting up an EoGRE tunnel interface for PMIPv6, GTP, or simple IP.

Example: Configuring the EoGRE Feature

Provides a comprehensive configuration example for the EoGRE feature, including AAA and interface settings.

GTPv2 Support in the iWAG

Restrictions for GTPv2 of the iWAG

GTPv2 Configuration

States that all GTPv1 configurations are also required for GTPv2 support.

Configuration for the GTPv1 and GTPv2 Roaming Scenario

Details the configuration for subscriber roaming, emphasizing the use of unclassified mac-address.

iWAG SSO Support for GTP

Enabling SSO Support for the GTP

Provides steps to enable SSO support for GTP on Cisco ASR 1000 Series Aggregation Services Routers.

Configuring ISG Policy Templates

Restrictions for Configuring ISG Policy Templates

How to Configure ISG Policy Templates

Details how to enable ISG policy templates using the 'platform subscriber template' command.

Dual Stack Support for PMIPv6 and GTP

AAA Attributes for Dual Stack

Configuration Examples for Dual-Stack PMIPv6

Provides detailed examples for configuring access lists, class maps, policy maps, and control policies.

Configuration Examples for Dual-Stack GTP

Offers configuration examples for dual-stack sessions, interfaces to PGW/GGSN, and control policies.

Flow-Based Redirect

Flow-Based Redirect for Adult Content Filtering

Explains how FBR redirects web traffic to an ACF appliance for content filtering after authentication.

Flow-Based Redirect for Selective IP Traffic Offload

Activating and Deactivating the Flow-Based Redirect Feature Through Vendor-Specific Attributes

Configuring Flow-Based Redirect for a Traffic Class Service

Provides step-by-step instructions to configure FBR for traffic class services using ACLs and policy maps.

Examples

Illustrates FBR configuration for traffic class services and provides commands to view session information.

Best Practices for Configuring the NAT on the Cisco ASR 1000 Series Routers

Call Flows for Simple IP Users

Simple IP Unclassified MAC Authentication (MAC TAL and Web Login) Call Flows

Call Flows for 3G and 4G Mobile IP Users

3G DHCP Discover Call Flow

Details the DHCP Discover call flow for 3G users, including EAP authentication and IP address assignment.

4G DHCP Discover Call Flow

Provides an overview of the 4G DHCP Discover call flow, focusing on PMIP signaling and tunnel establishment.

4G Roaming Call Flow

Describes the call flow for 4G roaming, including session creation, PMIP signaling, and IP address maintenance.

Call Flows for Dual-Stack PMIPv6 and GTP

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for GTP Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for GTP Call Flow

iWAG Scalability and Performance

iWAG Scaling

Details iWAG scaling numbers and maximum IP sessions supported on ASR 1000 hardware.

Restrictions for iWAG Scalability

Layer 4 Redirect Scaling

Configuring Call Admission Control

Walk-by User Support for PWLAN in iWAG