Cisco Intelligent Wireless Access Gateway User Manual

PurposeCommand or Action
Creates the INTERNET_SERVICE_RULE
policy map, which is used to define a control
policy.
policy-map type control policy-map name
Example:
Router (config)# policy-map type control
INTERNET_SERVICE_RULE
Step 10
Specifies a control class for an account-logon
event.
class type control always event account-logon
Example:
Router (config-control-policymap)# class type control
always event account-logon
Step 11
Applies the ACF_SERVICE policy.
20 service-policy type service name service-policy name
Example:
Router (config-control-policymap-class-control)# 20
service-policy type service name ACF_SERVICE
Step 12
Specifies a control class for a service-stop event.class type control always event service-stop
Example:
Router (config-control-policymap)# class type control
always event service-stop
Step 13
Specifies the service name that is currently
associated with the user.
1 service-policy type service unapply identifier service-name
Example:
Router (config-control-policymap-class-control)# 1
service-policy type service unapply identifier
service-name
Step 14
Specifies a control class for the service-start
event.
class type control always event service-start
Example:
Router (config-control-policymap)# class type control
always event service-start
Step 15
Applies the defined service upon a service-start
event.
10 service-policy type service identifier service-name
Example:
Router (config-control-policymap-class-control)# 10
service-policy type service identifier service-name
Step 16
Specifies a control class for an account-logoff
event.
class type control always event account-logoff
Example:
Router (config-control-policymap)# class type control
always event account-logoff
Step 17
Disconnects upon an account-logoff event, after
a 5 second delay.
10 service disconnect delay 5
Example:
Router (config-control-policymap-class-control)# 10
service disconnect delay 5
Step 18
Intelligent Wireless Access Gateway Configuration Guide
84 OL-30226-03
Flow-Based Redirect
Configuring Flow-Based Redirect for a Traffic Class Service

Cisco Intelligent Wireless Access Gateway Specifications

General

Product Name	Intelligent Wireless Access Gateway
Category	Gateway
Manufacturer	Cisco
Function	Wireless access
Product Type	Network Gateway

Summary

Overview of the Intelligent Wireless Access Gateway

Prerequisites for the iWAG

Lists essential configurations like MCSA and ipv6 unicast-routing needed before setting up the iWAG.

Restrictions for the iWAG

How to Configure the iWAG

Provides guidance on configuring the iWAG for simple IP users and 3G mobile IP users, including AAA.

IP Sessions Over Gigabit EtherChannel

Restrictions for IPoGEC

Configuring IP Sessions over Gigabit EtherChannel

Details the configuration steps for enabling LACP functionality for IP sessions.

Configuring Member Links for IP Sessions over Gigabit EtherChannel

Explains how to configure individual member links within a port channel for IPoGEC.

Configuration Examples for IP Sessions Over Gigabit EtherChannel

Provides practical examples of configuring IPoGEC, including basic setup and member links.

Service Provider WiFi: Support for Integrated Ethernet Over GRE

Restrictions for Configuring Ethernet Over GRE

Prerequisites for Configuring Ethernet Over GRE

How to Configure the EoGRE Feature

Details the configuration steps for setting up an EoGRE tunnel interface for PMIPv6, GTP, or simple IP.

Example: Configuring the EoGRE Feature

Provides a comprehensive configuration example for the EoGRE feature, including AAA and interface settings.

GTPv2 Support in the iWAG

Restrictions for GTPv2 of the iWAG

GTPv2 Configuration

States that all GTPv1 configurations are also required for GTPv2 support.

Configuration for the GTPv1 and GTPv2 Roaming Scenario

Details the configuration for subscriber roaming, emphasizing the use of unclassified mac-address.

iWAG SSO Support for GTP

Enabling SSO Support for the GTP

Provides steps to enable SSO support for GTP on Cisco ASR 1000 Series Aggregation Services Routers.

Configuring ISG Policy Templates

Restrictions for Configuring ISG Policy Templates

How to Configure ISG Policy Templates

Details how to enable ISG policy templates using the 'platform subscriber template' command.

Dual Stack Support for PMIPv6 and GTP

AAA Attributes for Dual Stack

Configuration Examples for Dual-Stack PMIPv6

Provides detailed examples for configuring access lists, class maps, policy maps, and control policies.

Configuration Examples for Dual-Stack GTP

Offers configuration examples for dual-stack sessions, interfaces to PGW/GGSN, and control policies.

Flow-Based Redirect

Flow-Based Redirect for Adult Content Filtering

Explains how FBR redirects web traffic to an ACF appliance for content filtering after authentication.

Flow-Based Redirect for Selective IP Traffic Offload

Activating and Deactivating the Flow-Based Redirect Feature Through Vendor-Specific Attributes

Configuring Flow-Based Redirect for a Traffic Class Service

Provides step-by-step instructions to configure FBR for traffic class services using ACLs and policy maps.

Examples

Illustrates FBR configuration for traffic class services and provides commands to view session information.

Best Practices for Configuring the NAT on the Cisco ASR 1000 Series Routers

Call Flows for Simple IP Users

Simple IP Unclassified MAC Authentication (MAC TAL and Web Login) Call Flows

Call Flows for 3G and 4G Mobile IP Users

3G DHCP Discover Call Flow

Details the DHCP Discover call flow for 3G users, including EAP authentication and IP address assignment.

4G DHCP Discover Call Flow

Provides an overview of the 4G DHCP Discover call flow, focusing on PMIP signaling and tunnel establishment.

4G Roaming Call Flow

Describes the call flow for 4G roaming, including session creation, PMIP signaling, and IP address maintenance.

Call Flows for Dual-Stack PMIPv6 and GTP

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for PMIPv6 Call Flow

Dual-Stack Mobile IPoE Session with DHCPv4 as FSOL for GTP Call Flow

Dual-Stack Mobile IPoE Session with IPv6 ND as FSOL for GTP Call Flow

iWAG Scalability and Performance

iWAG Scaling

Details iWAG scaling numbers and maximum IP sessions supported on ASR 1000 hardware.

Restrictions for iWAG Scalability

Layer 4 Redirect Scaling

Configuring Call Admission Control

Walk-by User Support for PWLAN in iWAG