Cisco ASR 5000 Instruction Manual

Cisco ASR 5000 IP Services Gateway
Administration Guide
Version 14.0
Last updated May 31, 2013
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-27210-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY
OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED
WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED
WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain
version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL
FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE
PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR
ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display
output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in
illustrative content is unintentional and coincidental.
Cisco ASR 5000 IP Services Gateway Administration Guide
© 2013 Cisco Systems, Inc. All rights reserved.

Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
iii
CONTENTS
About this Guide ............................................................................................... vii
Conventions Used ..................................................................................................................................viii
Contacting Customer Support..................................................................................................................ix
Additional Information............................................................................................................................... x
IP Services Gateway Overview........................................................................ 11
Introduction.............................................................................................................................................12
Platform Requirements.......................................................................................................................12
License Requirements........................................................................................................................12
How it Works ..........................................................................................................................................13
RADIUS Server Mode........................................................................................................................13
RADIUS Proxy ...............................................................................................................................13
RADIUS Snoop Mode ........................................................................................................................14
In-line Services.......................................................................................................................................15
Application Detection and Control......................................................................................................15
Content Filtering.................................................................................................................................15
Enhanced Charging Service ..............................................................................................................15
Enhanced Feature Support ....................................................................................................................16
Dynamic RADIUS Extensions (Change of Authorization)..................................................................16
Gx Interface Support..........................................................................................................................16
Gy Interface Support..........................................................................................................................17
Content Service Steering ...................................................................................................................17
Multiple IPSG Services.......................................................................................................................18
Session Recovery ..............................................................................................................................18
IP Services Gateway Configuration ................................................................ 19
Configuration Requirements for the IPSG..............................................................................................20
Required Configuration File Components..........................................................................................20
Required Component Information..................................................................................................21
Configuring the IPSG..............................................................................................................................23
IPSG Context and Service Configuration...........................................................................................24
Option 1: RADIUS Server Mode Configuration..............................................................................24
Option 2: RADIUS Server with Proxy Mode Configuration............................................................24
Option 3: RADIUS Snoop Mode Configuration..............................................................................26
ISP Context Configuration..................................................................................................................26
Creating the ISP Context...............................................................................................................26
Enhanced and Optional Configurations .............................................................................................27
Virtual APN Support Configuration ................................................................................................27
Gx Interface Configuration.............................................................................................................28
Gy Interface Configuration.............................................................................................................28
IP Services Gateway AAA AVP Support......................................................... 29
CoA, RADIUS DM, and Session Redirection (Hotlining)............................... 33
RADIUS Change of Authorization and Disconnect Message.................................................................34
CoA Overview ....................................................................................................................................34
DM Overview......................................................................................................................................34

▀Contents
▄Cisco ASR 5000 IP Services Gateway Administration Guide
iv
OL-27210-02
License Requirements........................................................................................................................34
Enabling CoA and DM........................................................................................................................34
Enabling CoA and DM....................................................................................................................35
CoA and DM Attributes ..................................................................................................................35
CoA and DM Error-Cause Attribute ...............................................................................................36
Viewing CoA and DM Statistics .....................................................................................................37
Session Redirection (Hotlining) ..............................................................................................................40
Overview.............................................................................................................................................40
License Requirements ...................................................................................................................40
Operation............................................................................................................................................40
ACL Rule........................................................................................................................................40
Redirecting Subscriber Sessions...................................................................................................40
Session Limits On Redirection.......................................................................................................41
Stopping Redirection......................................................................................................................41
Handling IP Fragments ..................................................................................................................41
Recovery........................................................................................................................................41
AAA Accounting .............................................................................................................................41
Viewing the Redirected Session Entries for a Subscriber..................................................................41
Gx Interface Support ........................................................................................ 47
Rel. 6 Gx Interface..................................................................................................................................48
Introduction.........................................................................................................................................48
Supported Networks and Platforms ...............................................................................................48
License Requirements ...................................................................................................................49
Supported Standards .....................................................................................................................49
How it Works ......................................................................................................................................49
Configuring Rel. 6 Gx Interface..........................................................................................................51
Configuring IMS Authorization Service at Context Level...............................................................52
Verifying IMS Authorization Service Configuration........................................................................53
Applying IMS Authorization Service to an APN .............................................................................53
Verifying Subscriber Configuration ................................................................................................54
Rel. 7 Gx Interface..................................................................................................................................55
Introduction.........................................................................................................................................55
Supported Networks and Platforms ...............................................................................................57
License Requirements ...................................................................................................................57
Supported Standards .....................................................................................................................57
Terminology and Definitions...............................................................................................................58
Policy Control.................................................................................................................................58
Charging Control............................................................................................................................61
Policy and Charging Control (PCC) Rules.....................................................................................62
PCC Procedures over Gx Reference Point....................................................................................63
Volume Reporting Over Gx............................................................................................................65
How Rel. 7 Gx Works.........................................................................................................................69
Configuring Rel. 7 Gx Interface..........................................................................................................72
Configuring IMS Authorization Service at Context Level...............................................................72
Applying IMS Authorization Service to an APN .............................................................................75
Configuring Volume Reporting over Gx .........................................................................................76
Gathering Statistics ............................................................................................................................76
Rel. 8 Gx Interface..................................................................................................................................78
HA/PDSN Rel. 8 Gx Interface Support...............................................................................................78
Introduction.....................................................................................................................................78
Terminology and Definitions...........................................................................................................80
How it Works..................................................................................................................................86
Configuring HA/PDSN Rel. 8 Gx Interface Support.......................................................................88
Gathering Statistics........................................................................................................................91

Contents ▀
Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
v
P-GW Rel. 8 Gx Interface Support.....................................................................................................92
Introduction ....................................................................................................................................92
Terminology and Definitions ..........................................................................................................93
Rel. 9 Gx Interface..................................................................................................................................97
P-GW Rel. 9 Gx Interface Support.....................................................................................................97
Introduction ....................................................................................................................................97
Terminology and Definitions ..........................................................................................................97
Time Reporting Over Gx.......................................................................................................................102
License Requirements......................................................................................................................102
Feature Overview.............................................................................................................................102
Limitations....................................................................................................................................103
Usage Monitoring.............................................................................................................................103
Usage Monitoring at Session Level .............................................................................................103
Usage Monitoring at Flow Level ..................................................................................................103
Usage Reporting ..............................................................................................................................104
Configuring Time Reporting over Gx................................................................................................104
Gy Interface Support ...................................................................................... 107
Introduction...........................................................................................................................................108
License Requirements......................................................................................................................109
Supported Standards .......................................................................................................................109
Features and Terminology....................................................................................................................110
Charging Scenarios..........................................................................................................................110
Session Charging with Reservation.............................................................................................110
Basic Operations..........................................................................................................................110
Re-authorization...........................................................................................................................111
Threshold based Re-authorization Triggers ................................................................................111
Termination Action.......................................................................................................................111
Diameter Base Protocol ...................................................................................................................111
Diameter Credit Control Application.................................................................................................112
Quota Behavior............................................................................................................................113
Supported AVPs ..........................................................................................................................124
Unsupported AVPs ......................................................................................................................127
Configuring Gy Interface Support.........................................................................................................134
Configuring GGSN / P-GW / IPSG Gy Interface Support ................................................................134
Configuring HA / PDSN Gy Interface Support .................................................................................135
Gathering Statistics..........................................................................................................................137
ICAP Interface Support................................................................................... 139
ICAP Interface Support Overview ........................................................................................................140
Failure Action on Retransmitted Packets.........................................................................................141
Supported Networks and Platforms .................................................................................................142
License Requirements......................................................................................................................142
Configuring ICAP Interface Support.....................................................................................................143
Creating ICAP Server Group and Address Binding .........................................................................143
Configuring ICAP Server and Other Parameters.............................................................................144
Configuring ECS Rulebase for ICAP Server Group.........................................................................144
Configuring Charging Action for ICAP Server Group.......................................................................145
Verifying the ICAP Server Group Configuration...............................................................................145
Pre-paid Billing................................................................................................ 147
Overview...............................................................................................................................................148
3GPP2 Standard Pre-paid Billing Overview.....................................................................................148
Custom Pre-paid Billing Overview....................................................................................................148
License Requirements......................................................................................................................149

▀Contents
▄Cisco ASR 5000 IP Services Gateway Administration Guide
vi
OL-27210-02
Configuring Standard 3GPP2 Pre-paid Billing......................................................................................150
Configuring Pre-paid Billing With Custom Behavior.............................................................................152
3GPP2 Pre-paid Attributes ...................................................................................................................154
Pre-paid Attributes................................................................................................................................156
IP Services Gateway Engineering Rules...................................................... 157
IPSG Context and Service Rules .........................................................................................................158
IPSG RADIUS Messaging Rules..........................................................................................................159

Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
vii
About this Guide
This document pertains to the features and functionality that run on and/or that are related to the Cisco® ASR 5000
Chassis.

About this Guide
▀Conventions Used
▄Cisco ASR 5000 IP Services Gateway Administration Guide
viii
OL-27210-02
Conventions Used
The following tables describe the conventions used throughout this documentation.
Icon
Notice Type
Description
Information Note
Provides information about important features or instructions.
Caution
Alerts you of potential damage to a program, device, or system.
Warning
Alerts you of potential personal injury or fatality. May also alert you of potential electrical hazards.
Typeface Conventions
Description
Text represented as a screen
display
This typeface represents displays that appear on your terminal screen, for example:
Login:
Text represented as commands
This typeface represents commands that you enter, for example:
show ip access-list
This document always gives the full form of a command in lowercase letters. Commands
are not case sensitive.
Text represented as a command
variable
This typeface represents a variable that is part of a command, for example:
show card slot_number
slot_number is a variable representing the desired chassis slot number.
Text represented as menu or sub-
menu names
This typeface represents menus and sub-menus that you access within a software
application, for example:
Click the File menu, then click New

About this Guide
Contacting Customer Support ▀
Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
ix
Contacting Customer Support
Use the information in this section to contact customer support.
Refer to the support area of http://www.cisco.com for up-to-date product documentation or to submit a service request.
A valid username and password are required to access this site. Please contact your Cisco sales or service representative
for additional information.

About this Guide
▀Additional Information
▄Cisco ASR 5000 IP Services Gateway Administration Guide
x
OL-27210-02
Additional Information
Refer to the following guides for supplemental information about the system:
Cisco ASR 5000 Installation Guide
Cisco ASR 5000 System Administration Guide
Cisco ASR 5x00 Command Line Interface Reference
Cisco ASR 5x00 Thresholding Configuration Guide
Cisco ASR 5x00 SNMP MIB Reference
Web Element Manager Installation and Administration Guide
Cisco ASR 5x00 AAA Interface Administration and Reference
Cisco ASR 5x00 GTPP Interface Administration and Reference
Cisco ASR 5x00 Release Change Reference
Cisco ASR 5x00 Statistics and Counters Reference
Cisco ASR 5x00 Gateway GPRS Support Node Administration Guide
Cisco ASR 5x00 HRPD Serving Gateway Administration Guide
Cisco ASR 5000 IP Services Gateway Administration Guide
Cisco ASR 5x00 Mobility Management Entity Administration Guide
Cisco ASR 5x00 Packet Data Network Gateway Administration Guide
Cisco ASR 5x00 Packet Data Serving Node Administration Guide
Cisco ASR 5x00 System Architecture Evolution Gateway Administration Guide
Cisco ASR 5x00 Serving GPRS Support Node Administration Guide
Cisco ASR 5x00 Serving Gateway Administration Guide
Cisco ASR 5000 Session Control Manager Administration Guide
Cisco ASR 5000 Packet Data Gateway/Tunnel Termination Gateway Administration Guide
Release notes that accompany updates and upgrades to the StarOS for your service and platform

Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
11
Chapter 1
IP Services Gateway Overview
This chapter provides an overview of the IP Services Gateway (IPSG) product.
This chapter covers the following topics:
Introduction
How it Works
In-line Services
Enhanced Feature Support

IP Services Gateway Overview
▀Introduction
▄Cisco ASR 5000 IP Services Gateway Administration Guide
12
OL-27210-02
Introduction
The IP Services Gateway (IPSG) is a stand-alone device capable of providing managed services to IP flows. The IPSG
is situated on the network side of legacy, non-service capable GGSNs, PDSNs, HAs, and other subscriber management
devices. The IPSG can provide per-subscriber services such as Enhanced Charging Service, Application Detection and
Control, and others.
The IPSG allows the carrier to roll out advanced services without requiring a replacement of the HA, PDSN, GGSN, or
other access gateways and eliminates the need to add multiple servers to support additional services.
IPSG only requires a RADIUS request (access and accounting messages) with all the required mandatory attributes to
create a session. Currently, IPSG supports GGSN (2G, 3G), PDSN, HA, Broadband Remote Access Server (B-RAS),
and limited support on P-GW (4G). For the list of AAA attributes supported by IPSG, refer to the IP Services Gateway
AAA AVP Support appendix.
Platform Requirements
The IPSG runs on Cisco ASR 5x00 chassis running StarOS. The chassis can be configured with a variety of components
to meet specific network deployment requirements. For additional information, refer to the Installation Guide for the
chassis and/or contact your Cisco account representative.
License Requirements
The IPSG is a licensed Cisco product. Separate session and feature licenses may be required. Contact your Cisco
account representative for detailed information on licensing requirements.
For information on installing and verifying licenses, refer to the Managing License Keys section of the Software
Management Operations chapter in the System Administration Guide.

IP Services Gateway Overview
How it Works ▀
Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
13
How it Works
The IPSG supports the following service modes:
RADIUS Server Mode
RADIUS Snoop Mode
RADIUS Server Mode
When configured in RADIUS server mode, the IPSG inspects identical RADIUS accounting request packets sent to the
RADIUS accounting server and the IPSG simultaneously.
As shown in the following figure, the IPSG inspects the RADIUS accounting request, extracts the required user
information, then sends a RADIUS accounting response message back to the access gateway. The IPSG has three
reference points: sn, si, and sr. The sn interface transmits/receives data packets to/from the access gateway (GGSN, HA,
PDSN, etc.). The si interface transmits/receives data packets to/from the Internet or a packet data network. The sr
interface receives RADIUS accounting requests from the access gateway. The system inspects the accounting request
packets and extracts information to be used to determine the appropriate service(s) to apply to the flow.
Figure 1. IPSG Message/Data Flow (RADIUS Server Mode)
RADIUS Proxy
In the event that the Access Gateway is incapable of sending two separate RADIUS Start message, the IPSG can be
configured as a RADIUS Proxy. As shown in the following figure, the IPSG receives an IPSG RADIUS proxy Access
request, then generates the Authentication and Accounting requests to the AAA Server.

IP Services Gateway Overview
▀How it Works
▄Cisco ASR 5000 IP Services Gateway Administration Guide
14
OL-27210-02
Figure 2. IPSG Message/Data Flow (RADIUS Server Mode - RADIUS Proxy)
RADIUS Snoop Mode
When configured in RADIUS snoop mode, the IPSG simply inspects RADIUS accounting request packets sent to a
RADIUS server through the IPSG.
As shown in the following figure, the IPSG has three reference points: sn, si, and sr. The sn interface transmits/receives
data packets to/from the access gateway (GGSN, HA, PDSN, etc.). The si interface transmits/receives data packets
to/from the Internet or a packet data network. The sr interface receives RADIUS accounting requests from the access
gateway. The system inspects the accounting request packets and extracts information to be used to determine the
appropriate service(s) to apply to the flow. Information is not extracted from the RADIUS accounting responses so they
are sent directly to the access gateway by the RADIUS Server, but can also be sent back through the IPSG.
Figure 3. IPSG Message/Data Flow (RADIUS Snoop Mode)

IP Services Gateway Overview
In-line Services ▀
Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
15
In-line Services
As described previously, the IPSG provides a method of inspecting RADIUS packets to discover user identity for the
purpose of applying enhanced services to the subsequent data flow. Internal applications such as the Enhanced Charging
Service, Content Filtering, and Application Detection and Control are primary features that take advantage of the IPSG
service.
Application Detection and Control
Application Detection and Control (ADC) is an in-line service feature that detects peer-to-peer protocols in real time
and applies actions such as permitting, blocking, charging, bandwidth control, and TOS marking.
For more information, refer to the Application Detection and Control Administration Guide.
Content Filtering
Content Filtering is an in-line service feature that filters HTTP and WAP requests from mobile subscribers based on the
URLs in the requests. This enables operators to filter and control the content that an individual subscriber can access, so
that subscribers are inadvertently not exposed to universally unacceptable content and/or content inappropriate as per
the subscribers’ preferences.
For more information, refer to the Content Filtering Services Administration Guide.
Enhanced Charging Service
Enhanced Charging Service (ECS)/Active Charging Service (ACS) is the primary vehicle performing packet inspection
and applying rules to the session which includes the delivery of enhanced services.
For more information, refer to the Enhanced Charging Service Administration Guide.

IP Services Gateway Overview
▀Enhanced Feature Support
▄Cisco ASR 5000 IP Services Gateway Administration Guide
16
OL-27210-02
Enhanced Feature Support
This section describes the enhanced features supported by IPSG.
Dynamic RADIUS Extensions (Change of Authorization)
Dynamic RADIUS extension support provide operators with greater control over subscriber PDP contexts by providing
the ability to dynamically redirect data traffic, and or disconnect the PDP context.
This functionality is based on the RFC 3576, Dynamic Authorization Extensions to Remote Authentication Dial In User
Service (RADIUS), July 2003 standard.
The system supports the configuration and use of the following dynamic RADIUS extensions:
Change of Authorization: The system supports CoA messages from the AAA server to change data filters
associated with a subscriber session. The CoA request message from the AAA server must contain attributes to
identify NAS and the subscriber session and a data filter ID for the data filter to apply to the subscriber session.
Disconnect Message: The DM message is used to disconnect subscriber sessions in the system from a RADIUS
server. The DM request message should contain necessary attributes to identify the subscriber session.
The above extensions can be used to dynamically re-direct subscriber PDP contexts to an alternate address for
performing functions such as provisioning and/or account set up. This functionality is referred to as Session Redirection,
or Hotlining.
Session redirection provides a means to redirect subscriber traffic to an external server by applying ACL rules to the
traffic of an existing or a new subscriber session. The destination address and optionally the destination port of TCP/IP
or UDP/IP packets from the subscriber are rewritten so the packet is forwarded to the designated redirected address.
Return traffic to the subscriber has the source address and port rewritten to the original values. The redirect ACL may be
applied dynamically by means of the RADIUS Change of Authorization (CoA) extension.
Important: For more information on dynamic RADIUS extensions support, refer the CoA, RADIUS,
and Session Redirection (Hotlining) appendix in the IP Services Gateway Administration Guide.
Gx Interface Support
To support roaming IMS subscribers in a GPRS/UMTS network, the IPSG must be able to charge only for the amount
of resources consumed by the particular IMS application and bandwidth used. The IPSG must also allow for the
provisioning and control of the resources used by the IMS subscriber. To facilitate this, the IPSG supports the R7 Gx
interface to a Policy Control and Charging Rule Function (PCRF).
For detailed information on Gx Interface support, refer to the Gx Interface Support appendix in the IP Services Gateway
Administration Guide.
Note the following for IPSG:
Only single bearer/session concept is supported. Multiple bearer concept is not applicable.
Only PCRF binding is applicable. PCEF binding is not applicable.
The following figure shows the interface and basic message flow of the Gx interface.

IP Services Gateway Overview
Enhanced Feature Support ▀
Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
17
Figure 4. IPSG Message/Data Flow (RADIUS Server Mode - IMS Auth Service)
IPSG also supports IMS Authorization Service Session Recovery with the following limitations:
Active calls only
The number of rules recovered is limited to the following:
3 flow-descriptions per charging-rule-definition
3 Charging-rule-definitions per PDP context
The above are combined limits for opened/closed gates and for uplink and downlink rules. IMSA sessions with
rules more than the above are not recoverable.
Gy Interface Support
This is a Diameter protocol-based interface over which the IPSG communicates with a Charging Trigger Function
(CTF) server that provides online charging data. Gy interface support provides an online charging interface that works
with the ECS deep packet inspection feature. With Gy, customer traffic can be gated and billed in an “online” or
“prepaid” style. Both time- and volume-based charging models are supported. In all of these models, differentiated rates
can be applied to different services based on shallow or deep packet inspection.
For more information on Gy interface support, refer to the Gy Interface Support appendix in the IP Services Gateway
Administration Guide.
Content Service Steering
Content Service Steering (CSS), defines how traffic is handled by the system based on the content of the data presented
by a mobile subscriber. CSS can be used to direct traffic to in-line services that are internal to the system. CSS controls
how subscriber data is forwarded to a particular in-line service, but does not control the content.
IPSG supports steering subscriber sessions to Content Filtering Service based on their policy setting. If a subscriber
does not have a policy setting (ACL name) requiring Content Filtering, their session will bypass the Content Filtering
Service and will be routed on to the destination address.
If subscriber policy entitlements indicate filtering is required for a subscriber, CSS will be used to steer subscriber
sessions to the Content Filtering in-line service.

IP Services Gateway Overview
▀Enhanced Feature Support
▄Cisco ASR 5000 IP Services Gateway Administration Guide
18
OL-27210-02
If a subscriber is using a mobile application with protocol type not supported, their session will bypass the Content
Filtering Service and will be efficiently routed on to destination address.
For more information regarding CSS, refer to the Content Service Steering chapter in the System Administration Guide.
Multiple IPSG Services
Multiple IPSG services, can be configured on the system in different contexts. Both source and destination contexts
should be different for the different IPSG services. Each such IPSG service functions independently as an IPSG.
Session Recovery
The Session Recovery feature provides seamless failover and reconstruction of subscriber session information in the
event of a hardware or software fault within the system preventing a fully connected user session from being
disconnected.
Session recovery is performed by mirroring key software processes (for example, Session Manager and AAA Manager)
within the system. These mirrored processes remain in an idle state (in standby-mode), wherein they perform no
processing, until they may be needed in the case of a software failure (for example, a Session Manager task aborts). The
system spawns new instances of “standby mode” session and AAA Managers for each active Control Processor (CP)
being used.
Additionally, other key system-level software tasks, such as VPN Manager, are performed on a physically separate
packet processing card to ensure that a double software fault (for example, Session Manager and VPN Manager fails at
same time on same card) cannot occur. The packet processing card used to host the VPN Manager process is in active
mode and is reserved by the operating system for this sole use when session recovery is enabled.
For more information on Session Recovery, refer to the Session Recovery chapter in the System Administration Guide.
Note that the Inter-Chassis Session Recovery feature is not supported in this release.

Cisco ASR 5000 IP Services Gateway Administration Guide ▄
OL-27210-02
19
Chapter 2
IP Services Gateway Configuration
This chapter describes how to configure the IPSG.
This chapter covers the following topics:
Configuration Requirements for the IPSG
Configuring the IPSG

IP Services Gateway Configuration
▀Configuration Requirements for the IPSG
▄Cisco ASR 5000 IP Services Gateway Administration Guide
20
OL-27210-02
Configuration Requirements for the IPSG
This section provides a high-level description of the configuration requirements of the IPSG.
The Snoop and Server methods use the same configuration components and differ only in how the IPSG service is
configured.
The IPSG can be configured in various ways such as by creating a single context with interfaces for the RADIUS
messages and both inbound and outbound data traffic. The following figure presents another method in which the IPSG
context manages communication with the access gateway for both RADIUS messaging and inbound data traffic. The
ISP context is responsible for all outbound data traffic.
The following figure also shows other important components such as IP access control lists (ACLs) in both contexts as
well as an Enhanced Charging Service (ECS) configuration.
Figure 5. IPSG Support
Required Configuration File Components
The following configuration components are required to complete an IPSG configuration file:
IPSG License
Card Activations
Local Context Modifications
Network Management Interface
Remote Management