Cisco Cisco Packet Data Gateway (PDG) Fehlerbehebungsanleitung
Subscriber Configuration Mode Commands
tunnel address-policy ▀
Cisco ASR 5000 Series Command Line Interface Reference ▄
OL-22947-02
tunnel address-policy
This command specifies the policy for address allocation and validation for all tunneled calls (IP-IP, IP-GRE) except
L2TP calls. This means that GGSN IP address validation could be disabled for specified incoming calls.
L2TP calls. This means that GGSN IP address validation could be disabled for specified incoming calls.
For GGSN systems, this command can also be specified in the APN Configuration mode (
) which would mean the system defers to the old
command for
calls coming through L2TP tunnels.
Product
PDSN, GGSN
Privilege
Security Administrator, Administrator
Syntax
IP addresses are allocated locally and no validation is done.
Default.
The VPN Manager allocates and validates all incoming IP addresses from a static pool of IP addresses.
The VPN Manager allocates and validates all incoming IP addresses from a static pool of IP addresses.
No IP address assignment or validation is done for calls coming in via L3 tunnels. Incoming static IP
addresses are passed. This allows for the greatest flexibility.
addresses are passed. This allows for the greatest flexibility.
Resets the tunnel address-policy to alloc-validate.
Usage
This command supports scalable solutions for Corporate APN deployment as many corporations handle their
own IP address assignment. In some cases this is done to relieve the customer or the mobile operators from
the necessity of reconfiguring the range of IP addresses for the IP pools at the GGSN.
own IP address assignment. In some cases this is done to relieve the customer or the mobile operators from
the necessity of reconfiguring the range of IP addresses for the IP pools at the GGSN.
Example
Use the following command to reset the IP address validation policy to validate against a static pool of address:
Use the following command to reset the IP address validation policy to validate against a static pool of address:
Use the following command to disable all IP address validation for calls coming through tunnels: