Cisco Cisco ASR 5700
APN Configuration Mode Commands
ikev2 tsr ▀
Command Line Interface Reference, StarOS Release 17 ▄
1353
ikev2 tsr
Configures the Traffic Selector responder (TSr) negotiation behavior during IKEv2 Security Association (SA)
establishment.
establishment.
Product
PDG/TTG
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Context Configuration > APN Configuration
configure > context context_name > apn apn_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-apn)#
Syntax
[ default ] ikev2 tsr { wildcard | user-specified }
default
Specifies the default behavior, which is wildcard TSr negotiation.
wildcard
Specifies that during TSr negotiation, the PDG/TTG always returns an any-to-any IP address range, an any-
to-any port range, and allows any protocol, irrespective of the traffic selector ranges received from the UE.
This is the default behavior.
to-any port range, and allows any protocol, irrespective of the traffic selector ranges received from the UE.
This is the default behavior.
user-specified
Specifies that during TSr negotiation, the PDG/TTG responds to each UE request with the UE-specified IP
address ranges. This enables split tunneling on the PDG/TTG, and enables the UE to tunnel only a specified
traffic range to the PDG/TTG and send other traffic directly out the WLAN.
address ranges. This enables split tunneling on the PDG/TTG, and enables the UE to tunnel only a specified
traffic range to the PDG/TTG and send other traffic directly out the WLAN.
Usage
Use this command to specify the TSr negotiation behavior on the PDG/TTG.
Example
The following command enables user-specified TSr negotiation on the PDG/TTG:
ikev2 tsr user-specified