Cisco Intelligent Wireless Access Gateway User Manual

Activating and Deactivating the Flow-Based Redirect Feature
Through Vendor-Specific Attributes
You can provision or activate a traffic class service with the Flow-Based Redirect feature by adding the
following vendor-specific attribute (VSA) in the user profile of the RADIUS server:
vsa cisco 250 ACF_SERVICE
You can activate a traffic class service with the Flow-Based Redirect feature for an established session through
the RADIUS Change of Authorization (CoA) feature, using the following VSAs:
vsa cisco 250 S<sessionID>
vsa cisco generic 1 string "subscriber:command=activate-service"
vsa cisco generic 1 string "subscriber:service-name=ACF_SERVICE”
You can deactivate a traffic class service with the Flow-Based Redirect feature for an established session
through the RADIUS CoA feature, using the following VSAs:
vsa cisco 250 S<sessionID>
vsa cisco generic 1 string "subscriber:command=deactivate-service"
vsa cisco generic 1 string "subscriber:service-name=ACF_SERVICE”
Configuring Flow-Based Redirect for a Traffic Class Service
The following steps show how to configure the Flow-Based Redirect feature for a traffic class service.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
ip access-list extended traffic class
4.
permit tcp source_IP destination_IP eq port
5.
class-map type traffic match-any traffic class map
6.
match access-group input name traffic class
7.
policy-map type service policy-map name
8.
class type traffic traffic class map
9.
reroute to next-hop ip IP address
10.
policy-map type control policy-map name
11.
class type control always event account-logon
12.
20 service-policy type service name service-policy name
13.
class type control always event service-stop
14.
1 service-policy type service unapply identifier service-name
15.
class type control always event service-start
16.
10 service-policy type service identifier service-name
17.
class type control always event account-logoff
18.
10 service disconnect delay 5
Intelligent Wireless Access Gateway Configuration Guide
82 OL-30226-03
Flow-Based Redirect
Activating and Deactivating the Flow-Based Redirect Feature Through Vendor-Specific Attributes

Cisco Intelligent Wireless Access Gateway Specifications

General

Product Name	Intelligent Wireless Access Gateway
Category	Gateway
Manufacturer	Cisco
Function	Wireless access
Product Type	Network Gateway

Summary

Overview of the Intelligent Wireless Access Gateway

Prerequisites for the iWAG

Lists essential configurations like MCSA and ipv6 unicast-routing needed before setting up the iWAG.

Restrictions for the iWAG

How to Configure the iWAG

Provides guidance on configuring the iWAG for simple IP users and 3G mobile IP users, including AAA.

IP Sessions Over Gigabit EtherChannel

Restrictions for IPoGEC

Configuring IP Sessions over Gigabit EtherChannel

Details the configuration steps for enabling LACP functionality for IP sessions.

Configuring Member Links for IP Sessions over Gigabit EtherChannel

Explains how to configure individual member links within a port channel for IPoGEC.

Configuration Examples for IP Sessions Over Gigabit EtherChannel

Provides practical examples of configuring IPoGEC, including basic setup and member links.

Service Provider WiFi: Support for Integrated Ethernet Over GRE

Restrictions for Configuring Ethernet Over GRE

Prerequisites for Configuring Ethernet Over GRE

How to Configure the EoGRE Feature

Details the configuration steps for setting up an EoGRE tunnel interface for PMIPv6, GTP, or simple IP.

Example: Configuring the EoGRE Feature

Provides a comprehensive configuration example for the EoGRE feature, including AAA and interface settings.

GTPv2 Support in the iWAG

Restrictions for GTPv2 of the iWAG

GTPv2 Configuration

States that all GTPv1 configurations are also required for GTPv2 support.

Configuration for the GTPv1 and GTPv2 Roaming Scenario

Details the configuration for subscriber roaming, emphasizing the use of unclassified mac-address.

iWAG SSO Support for GTP

Enabling SSO Support for the GTP

Provides steps to enable SSO support for GTP on Cisco ASR 1000 Series Aggregation Services Routers.

Configuring ISG Policy Templates

Restrictions for Configuring ISG Policy Templates

How to Configure ISG Policy Templates

Details how to enable ISG policy templates using the 'platform subscriber template' command.

Dual Stack Support for PMIPv6 and GTP

AAA Attributes for Dual Stack

Configuration Examples for Dual-Stack PMIPv6

Provides detailed examples for configuring access lists, class maps, policy maps, and control policies.

Configuration Examples for Dual-Stack GTP

Offers configuration examples for dual-stack sessions, interfaces to PGW/GGSN, and control policies.

Flow-Based Redirect

Flow-Based Redirect for Adult Content Filtering

Explains how FBR redirects web traffic to an ACF appliance for content filtering after authentication.

Flow-Based Redirect for Selective IP Traffic Offload

Activating and Deactivating the Flow-Based Redirect Feature Through Vendor-Specific Attributes

Configuring Flow-Based Redirect for a Traffic Class Service

Provides step-by-step instructions to configure FBR for traffic class services using ACLs and policy maps.

Examples

Illustrates FBR configuration for traffic class services and provides commands to view session information.

Best Practices for Configuring the NAT on the Cisco ASR 1000 Series Routers

Call Flows for Simple IP Users

Simple IP Unclassified MAC Authentication (MAC TAL and Web Login) Call Flows

Call Flows for 3G and 4G Mobile IP Users

3G DHCP Discover Call Flow

Details the DHCP Discover call flow for 3G users, including EAP authentication and IP address assignment.

4G DHCP Discover Call Flow

Provides an overview of the 4G DHCP Discover call flow, focusing on PMIP signaling and tunnel establishment.

4G Roaming Call Flow

Describes the call flow for 4G roaming, including session creation, PMIP signaling, and IP address maintenance.

Call Flows for Dual-Stack PMIPv6 and GTP

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for GTP Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for GTP Call Flow

iWAG Scalability and Performance

iWAG Scaling

Details iWAG scaling numbers and maximum IP sessions supported on ASR 1000 hardware.

Restrictions for iWAG Scalability

Layer 4 Redirect Scaling

Configuring Call Admission Control

Walk-by User Support for PWLAN in iWAG