Cisco ASR 5000 Series 3G Home NodeB Instruction Manual

Cisco ASR 5000 Series 3G Home NodeB
Gateway Administration Guide
Version 12.1
Last Updated May 31, 2012
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-25069-03

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED
WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED
WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to
part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own
expense.
Modifications to this product not authorized by Cisco could void the FCC approval and negate your authority to operate the product.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain
version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL
FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE
PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR
ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phon e numbers. Any examples, command display
output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of ac tual IP addresses or phone numbers in
illustrative content is unintentional and coincidental.
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
© 2012 Cisco Systems, Inc. and/or its affiliated entities. All rights reserved.

Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
iii
CONTENTS
About this Guide ................................................................................................ ix
Conventions Used .................................................................................................................................... x
Contacting Customer Support.................................................................................................................xii
Additional Information.............................................................................................................................xiii
HNB Gateway in Wireless Network................................................................. 15
Product Description ................................................................................................................................16
HNB Access Network Elements.........................................................................................................17
Home NodeB .................................................................................................................................17
Security Gateway (SeGW).............................................................................................................18
HNB Gateway (HNB-GW)..............................................................................................................18
HNB Management System (HMS).................................................................................................18
Licenses .............................................................................................................................................18
Platform Requirements.......................................................................................................................19
Network Deployment and Interfaces ......................................................................................................20
HNB Gateway in 3G UMTS Network .................................................................................................20
Supported Logical Interfaces .............................................................................................................20
Features and Functionality - Base Software ..........................................................................................22
AAA Server Group Support................................................................................................................22
AAL2 Establish and Release Support................................................................................................23
Access Control List Support...............................................................................................................23
ANSI T1.276 Compliance...................................................................................................................24
ATM VC Management Support..........................................................................................................24
Congestion Control and Management Support..................................................................................24
Emergency Call Handling...................................................................................................................25
GTP-U Tunnels Management Support...............................................................................................26
HNB-UE Access Control ....................................................................................................................26
HNB Management Function...............................................................................................................26
Multiple MSC Selection without Iu-Flex..............................................................................................27
Intra-Domain Multiple CN Support Through Iu-Flex...........................................................................27
Iu Signalling Link Management Support ............................................................................................28
IuH User-Plane Transport Bearer Handling Support .........................................................................28
Network Access Control Functions through SeGW ...........................................................................28
Authentication and Key Agreement (AKA).....................................................................................29
3GPP AAA Server Support............................................................................................................29
X.509 Certificate-based Authentication Support............................................................................29
Open Access Mode Support ..............................................................................................................29
QoS Management with DSCP Marking..............................................................................................30
RADIUS Support................................................................................................................................31
UE Management Function for Pre-Rel-8 UEs....................................................................................31
System Management Features..........................................................................................................32
Management System Overview.....................................................................................................32
Bulk Statistics Support...................................................................................................................33
Threshold Crossing Alerts (TCA) Support.....................................................................................34
ANSI T1.276 Compliance ..............................................................................................................35
Features and Functionality - Optional Enhanced Feature Software ......................................................37

▀Contents
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
iv
OL-25069-03
Dynamic RADIUS Extensions (Change of Authorization)..................................................................37
IP Security (IPSec).............................................................................................................................38
Session Recovery...............................................................................................................................38
Web Element Management System...................................................................................................39
How HNB-GW Works .............................................................................................................................40
HNB Provisioning and Registration Procedure ..................................................................................40
UE Registration Procedure.................................................................................................................42
UE Registration Procedure of Non-CSG UEs or Non-CSG HNBs ................................................42
Iu Connection Procedures..................................................................................................................44
Iu Connection Establishment Procedure........................................................................................44
Network Initiated Iu Connection Release Procedure.....................................................................46
Paging and Serving RNS Relocation Procedures..............................................................................48
Paging Procedure ..........................................................................................................................48
SRNS Relocation Procedure..........................................................................................................48
RANAP Reset Procedures .................................................................................................................49
HNB Initiated RANAP Reset Procedure ........................................................................................49
CN Initiated RANAP Reset Procedure...........................................................................................49
HNB-GW Initiated RANAP Reset Procedure.................................................................................49
Supported Standards..............................................................................................................................51
3GPP References...............................................................................................................................51
IETF References ................................................................................................................................52
ITU-T Recommendations ...................................................................................................................54
Object Management Group (OMG) Standards ..................................................................................55
Understanding the Service Operation ............................................................ 57
Terminology............................................................................................................................................58
Contexts .............................................................................................................................................58
Logical Interfaces ...............................................................................................................................58
Bindings..............................................................................................................................................60
Services and Networks.......................................................................................................................60
HNB-GW Service Configuration Procedures ................................................. 63
Information Required to Configure the System as an HNB-GW ............................................................64
Required Local Context Configuration Information ............................................................................64
Required System-Level Configuration Information ............................................................................65
Required Source Context Configuration Information .........................................................................67
Required Destination Context Configuration Information...................................................................69
RTP Pool Configuration..........................................................................................................................71
IPv4 RTP Pool Creation Over IuCS ...................................................................................................71
IPv4 RTP Pool Creation Over Iuh ......................................................................................................72
RTP IP Pool Configuration Verification ..............................................................................................73
HNB-GW Service Configuration .............................................................................................................74
Hashing Algorithm Configuration........................................................................................................75
Iuh Interface Configuration.................................................................................................................76
SS7 Routing Domain Configuration ...................................................................................................76
Peer Server Id Configuration for PS Core Network............................................................................76
Peer Server Id Configuration for CS Core Network ...........................................................................77
SCCP Network Instance Configuration ..............................................................................................78
HNB-PS Network Configuration.........................................................................................................78
HNB-CS Network Configuration.........................................................................................................79
HNB-GW Service Configuration.........................................................................................................80
GTP-U Service Configuration.............................................................................................................81
x.509 Certificate Configuration...........................................................................................................82
Security Gateway and Crypto map Template Configuration..............................................................83
Multiple MSC Selection without Iu-Flex Configuration.......................................................................84

Contents ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
v
Open Access Mode Configuration .....................................................................................................84
Verifying HNB-GW Configuration.......................................................................................................85
IuCS over ATM Configuration ................................................................................................................86
Configuring the SONET Card.............................................................................................................86
Configuring Linkset Id and ATM Parameters.....................................................................................86
Configuring ALCAP Service and AAL2 Node ....................................................................................87
Configuring the ATM Port...................................................................................................................88
Associating ALCAP Service with HNB-CS Network Service .............................................................88
Iu-Flex Configuration..............................................................................................................................90
Iu-Flex over IuCS Interface Configuration..........................................................................................90
Iu-Flex over IuPS Interface Configuration..........................................................................................91
Logging Facility Configuration................................................................................................................92
Displaying Logging Facility.................................................................................................................92
Congestion Control Configuration ..........................................................................................................94
Configuring the Congestion Control Threshold..................................................................................94
Configuring Service Congestion Policies...........................................................................................94
Configuring New Call Policy...............................................................................................................95
Alarm and Alert Trap Configuration........................................................................................................96
SNMP-MIB Traps for HNB-GW Service.................................................................................................97
Event IDs for HNB-GW Service..............................................................................................................98
Monitoring the Service ..................................................................................... 99
Monitoring System Status and Performance........................................................................................100
Monitoring Logging Facility...................................................................................................................103
Clearing Statistics and Counters..........................................................................................................104
Troubleshooting the Service ......................................................................... 105
Test Commands...................................................................................................................................106
Using the GTPU Test Echo Command............................................................................................106
Using the GTPv0 Test Echo Command...........................................................................................106
Using the IPsec Tunnel Test Command ..........................................................................................107
Performance Improvement Commands ...............................................................................................108
Turning off IPC Message Aggregation To Reduce Latency Towards Core Network ......................108
Engineering Rules........................................................................................... 109
DHCP Service Engineering Rules........................................................................................................110
HNB-GW Engineering Rules................................................................................................................111
Interface and Port Engineering Rules ..................................................................................................112
IuCS Interface Rules........................................................................................................................112
IuPS Interface Rules ........................................................................................................................112
Service Engineering Rules...................................................................................................................113
CoA, RADIUS DM, and Session Redirection (Hotlining)............................. 115
RADIUS Change of Authorization and Disconnect Message...............................................................116
CoA Overview ..................................................................................................................................116
DM Overview....................................................................................................................................116
License Requirements......................................................................................................................116
Enabling CoA and DM......................................................................................................................116
Enabling CoA and DM .................................................................................................................117
CoA and DM Attributes................................................................................................................117
CoA and DM Error-Cause Attribute .............................................................................................118
Viewing CoA and DM Statistics ...................................................................................................119
Session Redirection (Hotlining)............................................................................................................122
Overview ..........................................................................................................................................122
License Requirements .................................................................................................................122
Operation..........................................................................................................................................122

▀Contents
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
vi
OL-25069-03
ACL Rule......................................................................................................................................122
Redirecting Subscriber Sessions.................................................................................................122
Session Limits On Redirection.....................................................................................................123
Stopping Redirection....................................................................................................................123
Handling IP Fragments ................................................................................................................123
Recovery......................................................................................................................................123
AAA Accounting ...........................................................................................................................123
Viewing the Redirected Session Entries for a Subscriber................................................................123
IP Security........................................................................................................ 129
Overview...............................................................................................................................................131
Applicable Products and Relevant Sections ....................................................................................132
IPSec Terminology ...............................................................................................................................135
Crypto Access Control List (ACL).....................................................................................................135
Transform Set...................................................................................................................................135
ISAKMP Policy .................................................................................................................................135
Crypto Map.......................................................................................................................................135
Manual Crypto Maps....................................................................................................................136
ISAKMP Crypto Maps..................................................................................................................136
Dynamic Crypto Maps..................................................................................................................136
Implementing IPSec for PDN Access Applications...............................................................................137
How the IPSec-based PDN Access Configuration Works................................................................137
Configuring IPSec Support for PDN Access ....................................................................................138
Implementing IPSec for Mobile IP Applications....................................................................................140
How the IPSec-based Mobile IP Configuration Works.....................................................................140
Configuring IPSec Support for Mobile IP..........................................................................................143
Implementing IPSec for L2TP Applications ..........................................................................................145
How IPSec is Used for Attribute-based L2TP Configurations..........................................................145
Configuring Support for L2TP Attribute-based Tunneling with IPSec..............................................147
How IPSec is Used for PDSN Compulsory L2TP Configurations....................................................148
Configuring Support for L2TP PDSN Compulsory Tunneling with IPSec ........................................149
How IPSec is Used for L2TP Configurations on the GGSN.............................................................150
Configuring GGSN Support for L2TP Tunneling with IPSec............................................................151
Transform Set Configuration.................................................................................................................152
Configuring Transform Set ...............................................................................................................152
Verifying the Crypto Transform Set Configuration ...........................................................................152
ISAKMP Policy Configuration...............................................................................................................154
Configuring ISAKMP Policy..............................................................................................................154
Verifying the ISAKMP Policy Configuration......................................................................................155
ISAKMP Crypto Map Configuration......................................................................................................156
Configuring ISAKMP Crypto Maps...................................................................................................156
Verifying the ISAKMP Crypto Map Configuration.............................................................................157
Dynamic Crypto Map Configuration......................................................................................................159
Configuring Dynamic Crypto Maps...................................................................................................159
Verifying the Dynamic Crypto Map Configuration ............................................................................159
Manual Crypto Map Configuration........................................................................................................161
Configuring Manual Crypto Maps.....................................................................................................161
Verifying the Manual Crypto Map Configuration ..............................................................................162
Crypto Map and Interface Association..................................................................................................164
Applying Crypto Map to an Interface................................................................................................164
Verifying the Interface Configuration with Crypto Map.....................................................................164
FA Services Configuration to Support IPSec........................................................................................166
Modifying FA service to Support IPSec............................................................................................166
Verifying the FA Service Configuration with IPSec ..........................................................................167
HA Service Configuration to Support IPSec.........................................................................................168

Contents ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
vii
Modifying HA service to Support IPSec ...........................................................................................168
Verifying the HA Service Configuration with IPSec..........................................................................169
RADIUS Attributes for IPSec-based Mobile IP Applications................................................................170
LAC Service Configuration to Support IPSec.......................................................................................171
Modifying LAC service to Support IPSec .........................................................................................171
Verifying the LAC Service Configuration with IPSec........................................................................172
Subscriber Attributes for L2TP Application IPSec Support ..................................................................173
PDSN Service Configuration for L2TP Support....................................................................................174
Modifying PDSN service to Support Attribute-based L2TP Tunneling.............................................174
Modifying PDSN service to Support Compulsory L2TP Tunneling..................................................175
Verifying the PDSN Service Configuration for L2TP........................................................................175
Redundant IPSec Tunnel Fail-Over .....................................................................................................176
Supported Standards .......................................................................................................................176
Redundant IPSec Tunnel Fail-over Configuration................................................................................177
Configuring Crypto Group ................................................................................................................177
Modify ISAKMP Crypto Map Configuration to Match Crypto Group ................................................178
Verifying the Crypto Group Configuration........................................................................................178
Dead Peer Detection (DPD) Configuration...........................................................................................180
Configuring Crypto Group ................................................................................................................180
Verifying the DPD Configuration......................................................................................................181
APN Template Configuration to Support L2TP ....................................................................................182
Modifying APN Template to Support L2TP......................................................................................182
Verifying the APN Configuration for L2TP........................................................................................183
IPSec for LTE/SAE Networks...............................................................................................................184
Encryption Algorithms ......................................................................................................................184
HMAC Functions..............................................................................................................................184
Diffie-Hellman Groups......................................................................................................................184
Dynamic Node-to-Node IPSec Tunnels...........................................................................................185
ACL-based Node-to-Node IPSec Tunnels.......................................................................................185
Traffic Selectors ...............................................................................................................................185
Authentication Methods....................................................................................................................186
X.509 Certificate-based Peer Authentication...................................................................................186
Certificate Revocation Lists..............................................................................................................188
Child SA Rekey Support ..................................................................................................................188
IKEv2 Keep-Alive Messages (Dead Peer Detection).......................................................................189
E-UTRAN/EPC Logical Network Interfaces Supporting IPSec Tunnels..........................................189
IPSec Tunnel Termination................................................................................................................190

Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
ix
About this Guide
This document pertains to the features and functionality that run on and/or that are related to the Cisco® ASR 5000
Chassis.
This preface includes the following sections:
Conventions Used
Contacting Customer Support
Additional Information

About this Guide
▀Conventions Used
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
x
OL-25069-03
Conventions Used
The following tables describe the conventions used throughout this documentation.
Icon
Notice Type
Description
Information Note
Provides information about important features or instructions.
Caution
Alerts you of potential damage to a program, device, or system.
Warning
Alerts you of potential personal injury or fatality. May also alert you of potential
electrical hazards.
Electrostatic Discharge
(ESD)
Warns you to take proper grounding precautions before handling ESD sensitive
components or devices.
Typeface Conventions
Description
Text represented as a screen
display
This typeface represents text that appears on your terminal screen, for example:
Login:
Text represented as commands
This typeface represents commands that you enter at the CLI, for example:
show ip access-list
This document always gives the full form of a command in lowercase letters. Commands
are not case sensitive.
Text represented as a command
variable
This typeface represents a variable that is part of a command, for example:
show card slot_number
slot_number is a variable representing the desired chassis slot number.
Text represented as menu or sub-
menu names
This typeface represents menus and sub-menus that you access within a software
application, for example:
Click the File menu, then click New.
Command Syntax
Conventions
Description
{ keyword or
variable }
Required keywords and variables are surrounded by braces. They must be entered as part of the
command syntax.
[ keyword or
variable ]
Optional keywords or variables that may or may not be used are surrounded by brackets.

About this Guide
Conventions Used ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
xi
Command Syntax
Conventions
Description
|
Some commands support alternative variables. These “options” are documented within braces or
brackets by separating each variable with a vertical bar.
These variables can be used in conjunction with required or optional keywords or variables. For
example:
{ nonce | timestamp }
OR
[ count number_of_packets | size number_of_bytes ]

About this Guide
▀Contacting Customer Support
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
xii
OL-25069-03
Contacting Customer Support
Go to http://www.cisco.com/cisco/web/support/ to submit a service request. A valid Cisco account (username and
password) is required to access this site. Please contact your Cisco account representative for additional information.

About this Guide
Additional Information ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
xiii
Additional Information
Refer to the following guides for supplemental information about the system:
Command Line Interface Reference
Statistics and Counters Reference
Thresholding Configuration Guide
SNMP MIB Reference
Web Element Manager Installation and Administration Guide
Product-specific and feature-specific administration guides
Release notes that accompany updates and upgrades to StarOS

Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
15
Chapter 1
HNB Gateway in Wireless Network
The Cisco® provides 3GPP wireless carriers with a flexible solution that functions as a Home NodeB Gateway (HNB-
GW) in HNB Access Network to connect UEs with existing UMTS networks.
The Home NodeB Gateway works as a gateway for Home NodeBs (HNBs) to access the core networks. The HNB-GW
concentrates connections from a large amount of HNBs through IuH interface and terminates the connection to existing
Core Networks (CS or PS) using standard Iu (IuCS or IuPS) interface.
This overview provides general information about the HNB Gateway including:
Product Description
Network Deployment and Interfaces
Features and Functionality - Base Software
Features and Functionality - Optional Enhanced Feature Software
How HNB-GW Works
Supported Standards

HNB Gateway in Wireless Network
▀Product Description
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
16
OL-25069-03
Product Description
The Home NodeB Gateway is the HNB network access concentrator used to connect the Home NodeBs (HNBs)/Femto
Access Point (FAP) to access the UMTS network through HNB Access Network. It aggregates Home Node-B or Femto
Access Points to a single network element and then integrates them into the Mobile Operators Voice, Data and
Multimedia networks.
Femtocell is an important technology and service offering that enables new Home and Enterprise service capabilities for
Mobile Operators and Converged Mobile Operators (xDSL/Cable/FFTH plus Wireless). The Femtocell network consists
of a plug-n-play customer premise device generically called a Home NodeB (HNB) with limited range radio access in
home or Enterprise. The HNB will auto-configure itself with the Operators network and the user can start making voice,
data and multimedia calls.
The figure given describes a high level view of UMTS network with Femtocell and HNB-GW.
Figure 1. HNB-GW Deployment in 3G UMTS Network
Once a secure tunnel has been established between the HNB and the SeGW and the HNB has been configured by the
HMS, the Operator has to connect the Femtocell network to their Core Network and services. There are several
interworking approaches to Circuit Switch (CS) and Packet Switch (PS) domains. One approach is to make the
Femtocell network appear as a standard Radio Access Network (RAN) to the Core Network. In addition to the HNB,
SeGW and HMS the RAN approach requires a network element generically called a Femto Gateway (FGW/HNB-GW).
The HNB-GW provides interworking and aggregation of large amount of Femtocell sessions toward standard CN
interfaces (IuPS/IuCS). In this approach services and mobility are completely transparent to CN elements (e.g. MSC,
xGSN).

HNB Gateway in Wireless Network
Product Description ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
17
The other approach is to connect the Femtocell to an IMS Network to provide CS services to subscribers when on the
Femtocell and deploy a new network element generically called a Convergence Server to provide service continuity and
mobility over standard interfaces at the MSC layer (e.g GSM-MAP, IS-41). These two approaches are clearly different
in how CS based services and mobility are achieved.
In accordance with 3GPP standard, the HNB-GW provides following functions and procedures in UMTS core network:
HNB Registration/De-registration Function
UE Registration/De-registration Function for HNB
IuH User-plane Management Functions
IuH User-plan Transport Bearer Handling
Iu Link Management Functions
Important: Some of the features may not be available in this release. Kindly contact your local Cisco
representative for more information on supported features.
HNB Access Network Elements
This section provides the brief description and functionality of various network elements involved in the UMTS Femto
access network. The HNB access network includes the following functional entities:
Home NodeB
Security Gateway (SeGW)
HNB Gateway (HNB-GW)
HNB Management System (HMS)
Home NodeB
A Home NodeB (HNB) is the a customer premise equipment that offers Uu interface to UE and IuH over IPSec tunnel
to HNB-GW for accessing UMTS Core Network (PS or CS) in Femtocell access network.
It also provides the support to HNB registration and UE registration over IuH with HNB-GW. Apart from these
functions HNB also supports some RNC like functions as given below:
RAB management functions
Radio Resource Management functions
Iu Signalling Link management
GTP-U Tunnels management
Buffer Management
Iu U-plane frame protocol initialization
Mobility management functions
Security Functions
Service and Network Access functions
Paging co-ordination functions
UE Registration for HNB

HNB Gateway in Wireless Network
▀Product Description
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
18
OL-25069-03
IuH user-plane Management functions
Security Gateway (SeGW)
Security Gateway is a logical entity in Cisco HNB-GW.
Basic function of this entity are:
Authentication of HNB
Providing access to HMS and HNB-GW
This entity terminates the secure tunnelling for IuH and TR-069 between HNB and HNB-GW and HMS respectively.
In this implementation it is an optional element which is situated on HNB-GW.
HNB Gateway (HNB-GW)
The HNB-GW provides the access to Femto user to UMTS core network. It acts as an access gateway to HNB and
concentrates connections from a large amount of HNBs. The IuH interface is used between HNB and HNB-GW and
HNB-GW connects with the Core Networks (CS or PS) using the generic Iu (IuCS or IuPS) or Gn interface.
It also terminates Gn and other interfaces from UMTS core networks to provide mobile data services to HNB and to
interact with HMS to perform HNB authentication and authorization.
HNB Management System (HMS)
It is a network element management system for HNB access. Management interface between HNB and HMS is based
on TR-069 family of standards.
It performs following functions while managing HNB access network:
Facilitates HNB-GW discovery for HNB
Provision of configuration data to the HNB
Performs location verification of HNB and assigns appropriate serving elements (HMS, Security Gateway and
HNB-GW)
The HNB Management System (HMS) comprises of the following functional entities:
File Server: used for file upload or download, as instructed by TR-069 manager
TR-069 Manager: Performs CM, FM and PM functionality to the HNB through Auto-configuration server
(HMS)
Licenses
The HNB-GW is a licensed Cisco product. Separate session and feature licenses may be required. Contact your Cisco
account representative for detailed information on specific licensing requirements. For information on installing and
verifying licenses, refer to the Managing License Keys section of the Software Management Operations chapter in the
System Administration Guide.

HNB Gateway in Wireless Network
Product Description ▀
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
OL-25069-03
19
Platform Requirements
The HNB-GW service runs on a Cisco® ASR 5x00 chassis running StarOS Rel. 10 or later. The chassis can be
configured with a variety of components to meet specific network deployment requirements. For additional information,
refer to the Installation Guide for the chassis and/or contact your Cisco account representative.

HNB Gateway in Wireless Network
▀Network Deployment and Interfaces
▄Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
20
OL-25069-03
Network Deployment and Interfaces
This section describes the supported interfaces and deployment scenario of HNB-GW in 3G Femto access network.
The following information is provided in this section:
HNB Gateway in 3G UMTS Network
Supported Logical Interfaces
HNB Gateway in 3G UMTS Network
The following figure displays simplified network views of the HNB-GW in an Femto access network accessing UMTS
PS or CS Core Network.
Figure 2. HNB-GW in UMTS Network and Interfaces
HNB-GW
IPsec
Gateway
CS Service
PS Service
HNB-GW AP
In-line Services
HPLMN/VPLMN
AAA
TR-069/196
SSL/ORBEM
Direct Tunnel
GGSN
SGSN
Iu-PS/Iu-Flex
Iu-CS/Iu-Flex
MSC HLR
Optional Services
Optional
Element
Iuh
IPsec IKEv2
RNS
Uu
RADIUS
HNB
EMS
HMS
Supported Logical Interfaces
This section provides the brief information on supported interfaces on HNB-GW node.
In support of both mobile and network originated subscriber UE contexts, the HNB-GW provides the following network
interface support:
IuH Interface: This interface is the reference point for the control plane protocol between Home NodeB and
HNB-GW. IuH uses SCTP over IPSec IKEv2 tunnel as the transport layer protocol for guaranteed delivery of
signaling messages between HNB-GW and Home NodeB.