Cisco Cisco Packet Data Gateway (PDG)
Call Control Profile Configuration Mode
▀ authenticate on-first-vector
▄ Command Line Interface Reference, StarOS Release 18
1940
authenticate on-first-vector
Allows the operator to enable the SGSN to begin MS authentication immediately after receiving the first vector from the
HLR.
HLR.
Product
SGSN
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Call Control Profile Configuration
configure > call-control-profile profile_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-call-control-profile-profile_name)#
Syntax
authenticate on-first-vector
remove authenticate on-first-vector
remove
Removes the authenticate on-first-vector definition from the configuration file and resets the default behavior
so that the SGSN waits to receive all vectors before beginning authentication towards the MS.
so that the SGSN waits to receive all vectors before beginning authentication towards the MS.
Usage
After an initial attach request, some end devices restart themselves after waiting for the PDP to be
established. In such cases, the SGSN restarts and a large number of end devices repeat their attempts to
attach. The attach requests flood the radio network, and if the devices timeout before the PDP is established
then they continue to retry, thus even more traffic is generated.
To avoid the high traffic levels during PDP establishment, the SGSN has been modified to reduce the attach
time, as much as possible, so that the devices can attach and discontinue sending requests. The current
enhancement is intended to reduce the time needed to retrieve vectors over the GR interface by allowing the
operator to configure the SGSN to start authentication towards the MS as soon as it receives the first vector
from the AuC/HLR. With the new command included in the configuration, the SGSN begins the MS
authentication process immediately after receiving the first vector from the HLR while the SAI continues in
parallel.
established. In such cases, the SGSN restarts and a large number of end devices repeat their attempts to
attach. The attach requests flood the radio network, and if the devices timeout before the PDP is established
then they continue to retry, thus even more traffic is generated.
To avoid the high traffic levels during PDP establishment, the SGSN has been modified to reduce the attach
time, as much as possible, so that the devices can attach and discontinue sending requests. The current
enhancement is intended to reduce the time needed to retrieve vectors over the GR interface by allowing the
operator to configure the SGSN to start authentication towards the MS as soon as it receives the first vector
from the AuC/HLR. With the new command included in the configuration, the SGSN begins the MS
authentication process immediately after receiving the first vector from the HLR while the SAI continues in
parallel.
Example
Use the following command to configure the SGSN to begin MS authentication immediately after receiving
the first vector from the AuC/HLR:
the first vector from the AuC/HLR:
authenticate on-first-vector
Use the following command to reset the default behavior, so that the SGSN waits to receive all vectors
requested in the SAI from the AuC/HLR before begining authentication towards the MS:
requested in the SAI from the AuC/HLR before begining authentication towards the MS:
remove authenticate on-first-vector