Page 1
Cisco ASR 5000 IP Services Gateway Administration Guide Version 14.0 Last updated May 31, 2013 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-27210-02...
Page 2
ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks.
IP Services Gateway AAA AVP Support ............29 CoA, RADIUS DM, and Session Redirection (Hotlining) ....... 33 RADIUS Change of Authorization and Disconnect Message..............34 CoA Overview ............................ 34 DM Overview ............................34 Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 4
HA/PDSN Rel. 8 Gx Interface Support ....................78 Introduction............................. 78 Terminology and Definitions......................80 How it Works ..........................86 Configuring HA/PDSN Rel. 8 Gx Interface Support ............... 88 Gathering Statistics ........................91 ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 5
Verifying the ICAP Server Group Configuration ................145 Pre-paid Billing ....................147 Overview ............................... 148 3GPP2 Standard Pre-paid Billing Overview ..................148 Custom Pre-paid Billing Overview ....................148 License Requirements........................149 Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 6
Configuring Pre-paid Billing With Custom Behavior ................152 3GPP2 Pre-paid Attributes ........................154 Pre-paid Attributes ..........................156 IP Services Gateway Engineering Rules ............157 IPSG Context and Service Rules ......................158 IPSG RADIUS Messaging Rules ......................159 ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
About this Guide This document pertains to the features and functionality that run on and/or that are related to the Cisco® ASR 5000 Chassis. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Text represented as menu or sub- This typeface represents menus and sub-menus that you access within a software menu names application, for example: Click the File menu, then click New ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02 viii...
Use the information in this section to contact customer support. Refer to the support area of http://www.cisco.com for up-to-date product documentation or to submit a service request. A valid username and password are required to access this site. Please contact your Cisco sales or service representative for additional information.
Cisco ASR 5x00 Serving Gateway Administration Guide Cisco ASR 5000 Session Control Manager Administration Guide Cisco ASR 5000 Packet Data Gateway/Tunnel Termination Gateway Administration Guide Release notes that accompany updates and upgrades to the StarOS for your service and platform ▄...
This chapter provides an overview of the IP Services Gateway (IPSG) product. This chapter covers the following topics: Introduction How it Works In-line Services Enhanced Feature Support Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
AAA AVP Support appendix. Platform Requirements The IPSG runs on Cisco ASR 5x00 chassis running StarOS. The chassis can be configured with a variety of components to meet specific network deployment requirements. For additional information, refer to the Installation Guide for the chassis and/or contact your Cisco account representative.
RADIUS Proxy. As shown in the following figure, the IPSG receives an IPSG RADIUS proxy Access request, then generates the Authentication and Accounting requests to the AAA Server. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Information is not extracted from the RADIUS accounting responses so they are sent directly to the access gateway by the RADIUS Server, but can also be sent back through the IPSG. Figure 3. IPSG Message/Data Flow (RADIUS Snoop Mode) ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Enhanced Charging Service (ECS)/Active Charging Service (ACS) is the primary vehicle performing packet inspection and applying rules to the session which includes the delivery of enhanced services. For more information, refer to the Enhanced Charging Service Administration Guide. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Only single bearer/session concept is supported. Multiple bearer concept is not applicable. Only PCRF binding is applicable. PCEF binding is not applicable. The following figure shows the interface and basic message flow of the Gx interface. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Service and will be routed on to the destination address. If subscriber policy entitlements indicate filtering is required for a subscriber, CSS will be used to steer subscriber sessions to the Content Filtering in-line service. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
For more information on Session Recovery, refer to the Session Recovery chapter in the System Administration Guide. Note that the Inter-Chassis Session Recovery feature is not supported in this release. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Chapter 2 IP Services Gateway Configuration This chapter describes how to configure the IPSG. This chapter covers the following topics: Configuration Requirements for the IPSG Configuring the IPSG Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
For a complete understanding of the required information for all configuration mode commands, refer to the Command Line Interface Reference. IPSG RADIUS Dictionaries The following table provides information on the different IPSG RADIUS dictionaries and the corresponding usage: Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
In many cases, other optional commands and/or keyword options are available. Refer to the Command Line Interface Reference for complete information regarding all commands. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 25
If both RADIUS server and client dictionaries are configured, the client dictionary takes precedence over the server dictionary. For basic AAA configurations please refer to the AAA and GTP Interface Administration and Reference. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
To configure an ISP context, use the following configuration. Note that the following configuration also includes an IP route for data traffic through the IPSG context. configure context <isp_context_name> subscriber default exit ip access-list <access_list_name> redirect css service <css_service_name> any permit any exit aaa group default ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
APN selection is based on the APN supplied to the IPSG in conjunction with the following configurable parameters: access-gw-address (for IPSG this means the RADIUS client msisdn-range rat-type Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Only PCRF binding is applicable. PCEF binding is not applicable. Gy Interface Configuration For information on how to configure Gy interface support, refer to the Gy Interface Support appendix. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Address is not present Calling-Station- Optional for starent-vsa1. Even though the AVP is present, it will be set to NULL and processed by ipsgmgr. Mandatory for custom54. Called-Station- Optional for profile subscriber Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 30
Connect-Info Proxy-State 3GPP-IMSI Optional, otherwise IPSG configured value used in CPC Request. 3GPP-Charging Contains the charging Characteristics characteristics for this PDP context received in the Create PDP Context request message. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 31
Identifies a particular PDP context for the associated PDN and MSISDN/IMSI from creation to deletion. 3GPP-PDP- Not used in IPSG. PDP type Type determined based on IPv4 or IPv6 address. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 32
Accounting- Accounting- Access- Disconnect- Notes Request- Request- Request- Request Message Start Interim Stop Request (PoD message initiated by IPSG) 3GPP-MS- TimeZone Transparent- Data SN1- Transparent- Data SN-Assigned- VLAN-ID SN1-Assigned- VLAN-ID ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Important: Not all functions, commands, and keywords/variables are available or supported for all network function or services. This depends on the platform type and the installed license(s). Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
License Requirements The RADIUS Change of Authorization (CoA) and Disconnect Message (DM) are licensed Cisco features. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
If 3GPP service is configured the following attributes are used for different identifiers: 3GPP-IMSI: International Mobile Subscriber Identification (IMSI) number should be validated and matched with the specified IMSI for specific PDP context. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
The following error causes are sent in NAK messages when a CoA or DM request fails: 401 - Unsupported Attribute 402 - Missing Attribute 403 - NAS Identification Mismatch 404 - Invalid Request 405 - Unsupported Service ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
0 Current pseudo auth requests 0 Total null-username auth requests (rejected) 0 Total aaa acct completed 0 Total aaa acct purged 0 Total acct keepalive success 0 Total acct keepalive timeout Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 38
357 Total gtpp charg success 0 Total gtpp charg failure 0 Total gtpp charg cancel 0 Total gtpp charg purg 0 Total prepaid online requests 0 Current prepaid online requests ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 39
0 Total aaamgr purged requests 0 SGSN: Total db records 0 SGSN: Total sub db records 0 SGSN: Total mm records 0 SGSN: Total pdp records 0 SGSN: Total auth records Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
License Requirements The Session Redirection (Hotlining) is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
View the redirected session entries for a subscriber by entering the following command: show subscribers debug-info { callid <id> | msid <id> | username <name> } The following command displays debug information for a subscriber with the MSID 0000012345: Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 42
Total flush (svc change): 0 Total out-of-seq pkt drop: 0 Total out-of-seq arrived: 0 IPv4 Reassembly Statistics: Success: 0 In Progress: 0 Failure (timeout): 0 Failure (no buffers): 0 Failure (other reasons): 0 ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
The following topics are covered in this chapter: Rel. 6 Gx Interface Rel. 7 Gx Interface Rel. 8 Gx Interface Rel. 9 Gx Interface Time Reporting Over Gx Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Gx Interface Support ▀ Rel. 6 Gx Interface Rel. 6 Gx Interface Rel. 6 Gx interface support is available on the Cisco ASR chassis running StarOS 8.0 and later releases for the following products: GGSN IPSG Important: In 14.0 and later releases, Rel. 6 Gx interface functionality is not supported on the chassis.
Rel. 6 Gx Interface ▀ License Requirements The Rel. 6 Gx interface support is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
Page 50
Rel. 6 Gx IMS Authorization Call Flow Table 4. Rel. 6 Gx IMS Authorization Call flow Description Step Description IMS subscriber (MN) sends request for primary PDP context activation/creation. Session manager allocates IP address to MN. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
In many cases, other optional commands and/or keyword options are available. Refer to the Command Line Interface Reference for complete information regarding all commands. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Diameter dictionary to use, contact your Cisco account representative. Optional: To configure the quality of service (QoS) update timeout for a subscriber, in the IMS Authorization Service Configuration Mode, enter the following command: qos-update-timeout <timeout_duration> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Configuring IMS Authorization Service at Context Level section. configure context <context_name> apn <apn_name> ims-auth-service <imsa_service_name> Notes: must be the name of the context in which the IMS Authorization service was configured. <context_name> Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Verify the IMS Authorization Service configuration for subscriber(s) by entering the following command: show subscribers ims-auth-service <imsa_service_name> must be the name of the IMS Authorization Service configured for IMS authentication. <imsa_service_name> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Gx Interface Support Rel. 7 Gx Interface ▀ Rel. 7 Gx Interface Rel. 7 Gx interface support is available on the Cisco ASR chassis running StarOS 8.1 or StarOS 9.0 and later releases for the following products: GGSN IPSG This section describes the following topics: ...
Page 56
ECS. The Gy protocol related functions are handled within the DCCA module (at the ECS). The following figure shows the interaction between components within the Gateway. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
License Requirements The Rel. 7 Gx interface support is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
SUCCESSFUL_RESOURCE_ALLOCATION ( 22 ) event trigger will be sent under the following conditions: When a rule is installed successfully (and the event trigger is armed by PCRF and resource- allocation-notification is enabled). ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 59
QoS is in-line with the “Authorized QoS” per IP CAN Bearer. Policy Provisioning for Authorized QoS Per SDF: The provisioning of authorized QoS per SDF is a part of PCC rule provisioning procedure. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 60
PCC Rule Error Handling: If the installation/activation of one or more PCC rules fails, the PCEF includes one or more Charging-Rule-Report AVP(s) in either a CCR or an RAA command for the affected PCC rules. Within each Charging-Rule-Report AVP, the PCEF identifies the failed PCC ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Provisioning of Default Charging Method: In this release, the default charging method is sent in CCR-I message. For this, new AVPs Online/Offline are sent in CCR-I message based on the configuration. Charging Correlation Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Service Identifier: The service identifier is used to identify the service or the service component the SDF relates Service Data Flow Filter(s): The service flow filter(s) is used to select the traffic for which the rule applies. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
PCEF. For example, in response to information provided to the PCRF via the Rx reference point, or in response to an internal trigger within the PCRF. To provision PCC rules without a request from the PCEF, the Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 64
Uplink IP packets which do not match any PCC rule of the corresponding IP CAN bearer are discarded. Selecting a PCC Rule and IP CAN Bearer for Downlink IP Packets ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Rel. 7 Gx interface. License Requirements The Volume Reporting over Gx is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
Page 66
In 12.0 and later releases, enabling and disabling session usage in a single message from PCRF is supported. This is supported only if the monitoring key is associated at session level. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 67
IMSA and continues monitoring. IMSA then triggers the CCR-U if “USAGE_REPORT” trigger is enabled by the PCRF. The Usage-Monitoring-Information AVP is sent in this CCR with the “Used- Service-Unit” set to the amount of data usage by subscriber. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 68
PCRF. If a new usage threshold is not provided by the PCRF in the acknowledgement of an IP-CAN Session modification where its usage was reported, then ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Important: In 14.0 and later releases, the DPCA and the IMSA will be acting as one module within the Policy Server interface application. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 70
IMSA allocates resources for the IP CAN session and the bearer, and selects the PCRF to contact based on the user's selection key (for example, msisdn). IMSA requests the DPCA module to issue an auth request to the PCRF. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 71
Based on the PCEF bearer binding for the PCC rules at Step 18, the outcome could be one or more network-initiated PDP context procedures with the UE (Network Requested Update PDP Context (NRUPC) / Network Requested Secondary PDP Context Activation (NRSPCA)). Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 73
To enable Rel. 7 Gx interface support, pertinent Diameter dictionary must be configured. For information on the specific Diameter dictionary to use, contact your Cisco account representative. When configuring the MSISDN prefix range based PCRF selection mechanism:...
Change to the context where you enabled IMS Authorization service by entering the following command: context <context_name> Step 2 Verify the IMS Authorization service’s configurations by entering the following command: show ims-authorization service name <imsa_service_name> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Verify the IMS Authorization service configuration for subscriber(s) by entering the following command: show subscribers ims-auth-service <imsa_service_name> must be the name of the IMS Authorization service configured for IMS authentication. <imsa_service_name> Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Information and statistics specific to policy control in IMS show ims-authorization policy-control statistics Authorization service. Information and statistics specific to the authorization servers used for show ims-authorization servers ims-auth- service IMS Authorization service. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 77
Information on all group of ruledefs configured in the system. Information on policy gate counters and status. show ims-authorization policy-gate { counters | status } This command is no longer an option in StarOS release 11.0 and beyond. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Gx Interface Support ▀ Rel. 8 Gx Interface Rel. 8 Gx Interface Rel. 8 Gx interface support is available on the Cisco ASR chassis running StarOS 10.0 or StarOS 11.0 and later releases. This section describes the following topics: ...
Page 79
ECS. The Gy protocol related functions are handled within the DCCA module (at the ECS). The following figure shows the interaction between components within the Gateway. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
HA/PDSN Rel. 8 Gx PCC Architecture within PCEF License Requirements The HA/PDSN Rel. 8 Gx interface support is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
The PCEF combines the different sets of authorized QoS information, that is the information received from the PCRF and the information corresponding to the predefined PCC rules. The PCRF knows the authorized QoS Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
PCEF triggers a REVALIDATION_TIMEOUT event. When installed, the PCC rule is inactive. If Rule-Activation-Time / Rule-Deactivation-Time is specified, then the PCEF sets the rule active / inactive after that time. Charging Control ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 83
Dynamic PCC Rules: Rules dynamically provisioned by the PCRF to the PCEF via the Gx interface. These PCC rules may be either predefined or dynamically generated in the PCRF. Dynamic PCC rules can be activated, modified, and deactivated at any time. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 84
Provisioning of PCC Rules The PCRF indicates, via the Rel. 8 Gx reference point, the PCC rules to be applied at the PCEF. This may be using one of the following procedures: ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 85
If PCC is enabled, the PCEF selects a PCC rule for each received downlink IP packet within an IP-CAN session by evaluating the packet against downlink SDF filters of PCRF-provided or predefined active PCC rules of the IP-CAN session in the order of precedence of the PCC rules. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Important: In 14.0 and later releases, the DPCA and the IMSA will be acting as one module within the Policy Server interface application. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 87
IMSA allocates resources for the IP-CAN session, and selects the PCRF to contact based on the user's selection key (for example, round-robin). IMSA requests the DPCA module to issue an auth request to the PCRF. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
To configure HA/PDSN Rel. 8 Gx Interface functionality: 1. At the context level, configure IMSA service for IMS subscribers as described in the Configuring IMS Authorization Service at Context Level section. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 90
To enable Rel. 8 Gx interface support, pertinent Diameter dictionary must be configured. For information on the specific Diameter dictionary to use, contact your Cisco account representative. The Round Robin algorithm for PCRF selection is effective only over a large number of PCRF selections, and not at a granular level.
Information and statistics specific to the authorization servers used for show ims-authorization servers ims-auth- service IMS Authorization service. show ims-authorization service all Information of all IMS Authorization service. show ims-authorization service statistics Statistics of IMS Authorization service. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
In case the SDF is tunnelled at the BBERF, the PCEF shall inform the PCRF about the mobility protocol tunnelling header of the service data flows at IP-CAN session establishment. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
This section describes the 3GPP Rel. 9 Volume Reporting over Gx feature. License Requirements The Volume Reporting over Gx is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
Page 94
After DPCA parses the AVPs IMSA updates the information to ECS. Once ECS is ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 95
In 14.0 and later releases, on receiving message from PCRF, the rule that is meant for removal is marked and then after the access side procedure is complete the rule is removed. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 96
PCEF for that IP CAN session and and the usage accumulated between the CCR-CCA will be discarded. For information on how to configure the Volume Reporting over Gx feature, see the Configuring Volume Reporting over Gx section. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
This section describes the 3GPP Rel. 9 Volume Reporting over Gx feature. License Requirements The Volume Reporting over Gx is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
Page 98
PCRF. If a new usage threshold is not provided by the PCRF in the acknowledgement of an IP-CAN Session modification where its usage was reported, then usage monitoring does not continue in the PCEF for that IP CAN session. Usage Monitoring ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 99
Usage Threshold Reached: PCEF records the subscriber data usage and checks if the usage threshold provided by PCRF is reached. This is done for both session and rule level reporting. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 100
IP-CAN session level (if enabled) and at service data flow level (if enabled) This is the default behavior. In the case of standard implementation, this must be enabled by CLI configuration. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 101
PCEF for that IP CAN session and and the usage accumulated between the CCR-CCA will be discarded. For information on how to configure the Volume Reporting over Gx feature, see the Configuring Volume Reporting over Gx section. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
No separate license is required for Time Reporting over Gx feature. This feature can be enabled as part of "Policy Interface" license. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
This results in the usage monitoring being done for all the rules associated with that monitoring key. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Configuring Time Reporting over Gx This section describes the configuration required to enable Time Reporting over Gx. To enable Time Reporting over Gx, use the following configuration: configure active-charging service <ecs_service_name> rulebase <rulebase_name> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 105
PCEF. If this option is not usage configured, the behavior is to send the time usage information as part of event update but not reset at PCEF. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Gy Interface Support This chapter provides an overview of the Gy interface and describes how to configure the Gy interface. Gy interface support is available on the Cisco system running StarOS 9.0 or later releases for the following products: GGSN ...
The following figure shows the Gy interface between CTF/Gateway/PCEF/Client running ECS and OCS (CDF/Server). Within the PCEF/GW, the Gy protocol functionality is handled in the DCCA module (at the ECS). ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Gy Architecture License Requirements The Gy interface support is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
Debit Units Request to the OCS. The CTF may either specify a service identifier (centralised unit determination) or the number of units requested (decentralised unit determination). For refund purpose, the CTF sends a Debit Units Request to the OCS as well. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
The Diameter Base Protocol maintains the underlying connection between the Diameter Client and the Diameter Server. The connection between the client and server is TCP based. There are a series of message exchanges to check the status of the connection and the capabilities. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
The Diameter Credit Control Application (DCCA) is a part of the ECS subsystem. For every prepaid customer with Diameter Credit Control enabled, whenever a session comes up, the Diameter server is contacted and quota for the subscriber is fetched. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
The envelope for CTP includes the last base time interval which contains no traffic. The size of the envelope is not constant as it was in Parking meter. The end of the envelope can only be determined retrospectively. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 114
The default quota is applicable only to the initial request and is not regranted during the course of the session. If subscriber disconnects and reconnects, the default quota will be applied again for the initial request. Requesting Quota ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 115
Rating Group or Rating Group and Service ID combination. Default Quota Handling If default quota is set to 0, no data is passed/reported. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 116
Rating condition change: Cellid change: Applicable only to GGSN and P-GW implementations. LAC change: Applicable only to GGSN and P-GW implementations. QoS change RAT change ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 117
Quota-Consumption-Time expiry where there was traffic. The server may request envelope reports for just time or time and volume. Reporting the quota back to the server, is controlled by Envelope AVP with Envelope-Start-Time and Envelope-End-Time along with usage information. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 118
If the MSCC AVP is missing in CCA-Update it is treated as invalid CCA and the session is terminated. Credit Control Answer - Terminate (CCA-T) The following figure depicts the call flow for a simple call request in the GGSN/P-GW/IPSG Gy implementation. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 119
Features and Terminology ▀ Figure 16. Gy Call Flow for Simple Call Request for GGSN/P-GW/IPSG The following figure depicts the call flow for a simple call request in the HA Gy implementation. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 120
RSU or Rating-Group AVP so that the server does not give any more quotas. If the Final-Action AVP is RESTRICT_ACCESS, then according to the settings in Restriction-Filter-Rule AVP or Filter-Id AVP. GY sends CCR-Update to the server with used quota. Triggers ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 121
The Final-Unit-Indication AVP can be present in the CCA from the server to indicate that the given quota is the final quota from the server and the corresponding action as specified in the AVP needs to be taken. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 122
Terminate: On any Tx expiry, the session is taken down. Continue: On any Tx expiry, the session is still established, but without quota management. Retry and Terminate: On any Tx expiry, the session is taken down. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 123
If there is an invalid answer from the server, Gy action is dependent on the CCFH setting: In case of continue, the MIP session context is continued without further control from Gy. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
CC-Total-Octets (AVP Code: 421): Gy does not support this AVP in RSU. Credit-Control-Failure-Handling (AVP Code: 427) Final-Unit-Action (AVP Code: 449): Supported at Multiple-Services-Credit-Control grouped AVP level and not at command level. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 131
The PCEF/GW ignores this AVP if no PS free format data is stored for the online charging session. PS-Free-Format-Data (AVP Code: 866) PS-Furnish-Charging-Information (AVP Code: 865) RAI (AVP Code: 909) Read-Reply-Report-Requested Received-Talk-Burst-Time Received-Talk-Burst-Volume Recipient-Address Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Command Line Interface Reference. Configuring HA / PDSN Gy Interface Support To configure HA / PDSN Gy interface support, use the following configuration: configure context <context_name> diameter endpoint <endpoint_name> Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Statistics of the Credit Control application, DCCA. States of the Credit Control application's show active-charging credit-control session-states [ rulebase <rulebase_name> ] [ content-id <content_id> ] sessions, DCCA. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 138
Gy Interface Support ▀ Configuring Gy Interface Support ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Administration Guide, before using the procedures in this chapter. The following products currently support ICAP interface functionality: GGSN P-GW Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
This guarantees the appropriate interworking between the external application and content-based billing. In particular, this guarantees that charging will be applied to the appropriate request in case of redirection, and ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
GET request. It is possible that the HTTP server sends the response for the permitted GET request. Hence there is a race condition and the subscriber may be able to view the web page even thought the rating was redirect or content insert. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
RTSP client and the server regarding this flow termination. Supported Networks and Platforms This feature supports ST16 and Cisco Chassis for the core network services configured on the system. License Requirements External Content Filtering Server support through Internet Content Adaptation Protocol (ICAP) interface is a licensed Cisco feature.
Use the following example to create the ICAP server group and bind the IP addresses: configure context <icap_ctxt_name> [ -noconfirm ] content-filtering server-group <icap_svr_grp_name> [ -noconfirm ] origin address <ip_address> Notes: is local IP address of the CFSG endpoint. <ip_address> Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Use the following example to configure the content filtering mode to ICAP server mode in the ECS rulebase for content filtering: configure require active-charging [ optimized-mode ] active-charging service <acs_svc_name> [ -noconfirm ] rulebase <rulebase_name> [ -noconfirm ] content-filtering mode server-group <cf_server_group> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
The following is a sample output. In this example, an ICAP Content Filtering server group named was configured. icap_cfsg1 Content Filtering Group: icap_cfsg1 Context: icap1 Origin Address: 1.2.3.4 ICAP Address(Port): 1.2.3.4(1344) Max Outstanding: Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
Page 146
Content Filtering Group Connections: NONE Total content filtering groups matching specified criteria: Step 2 Verify any configuration error in your configuration by entering the following command in Exec Mode: show configuration errors ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
This chapter includes the following topics: Overview Configuring Standard 3GPP2 Pre-paid Billing Configuring Pre-paid Billing With Custom Behavior 3GPP2 Pre-paid Attributes Pre-paid Attributes Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
The system continues to service the subscriber session while the RADIUS request for re-authorization is in process. If the counter reaches zero before the response the subscriber session is terminated immediately. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
License Requirements The Pre-paid Billing is a licensed Cisco feature. A separate feature license may be required. Contact your Cisco account representative for detailed information on specific licensing requirements. For information on installing and verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the System Administration Guide.
3gpp2 duration-quota final-duration-algorithm [ current-time | last- airlink-activity-time | last-user-layer3-activity-time ] Note that this command alone does not enable pre-paid support. The prepaid 3gpp2 accounting command must be executed as shown to enable pre-paid support. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 151
Save the configuration to flash memory, an external memory device, and/or a network location using the Exec mode command . For additional information on how to verify and save configuration save configuration files, refer to the System Administration Guide and the Command Line Interface Reference. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
When the low-watermark is reached a new RADIUS access-request is sent to the RADIUS server to retrieve more credits. To set the low watermark percentage, enter the following command: prepaid custom low-watermark percent <percentage> ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 153
Save the configuration to flash memory, an external memory device, and/or a network location using the Exec mode command . For additional information on how to verify and save configuration save configuration files, refer to the System Administration Guide and the Command Line Interface Reference. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
PrePaid server. In on-line RADIUS Access-Accept message (PPC to PPS direction), it indicates the total Duration (in seconds) since the start of the accounting session related to the Quota-ID. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
Page 155
These attributes can be found in the following dictionaries: 3gpp2 3gpp2-835 starent starent-835 starent-vsa1 starent-vsa1-835 For more information, refer to the AAA and GTP Interface Administration and Reference. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
These attributes can be found in the following dictionaries: starent starent-vsa1 starent-835 starent-vsa1-835 custom1 through custom9 Refer to the AAA and GTP Interface Administration and Reference for more details. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
General and network-specific rules are available in the appendix of the System Administration Guide for the specific network type. The following rules are covered in this appendix: IPSG Context and Service Rules IPSG RADIUS Messaging Rules Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...
In single context configurations, if data packets are received before a session is initiated, the packets could be routed to their destination without being processed. Use separate ingress and egress contexts to prevent this issue. ▄ Cisco ASR 5000 IP Services Gateway Administration Guide OL-27210-02...
IPSG RADIUS Messaging Rules ▀ IPSG RADIUS Messaging Rules The sending of RADIUS accounting start messages to the RADIUS server is delayed by the IPSG until a session is successfully started. Cisco ASR 5000 IP Services Gateway Administration Guide ▄ OL-27210-02...