Cisco Cisco IOS Software Release 12.4(22)XR

the debugs for other sessions. If IMSI-based debugging is enabled, the IMSI is added in the debug 
message; similarly for username condition also. If both the username and IMSI-based conditional 
debugs are enabled for a session, priority is given to the IMSI to display with L2TP and VPDN call event 
debug messages.

The following command shows the condition as part of L2TP and VPDN call event debugs, which is set 
through the conditional debug CLI command, when the username or IMSI conditional debugging is 
enabled for VPDN session.

lac(config)# vpdn debug ?

  show-conditions  Show Conditions (IMSI/Username) with debug messages

lac(config)# vpdn debug show-conditions ?

Cisco PDSN Release 5.1 meets the CDMA standard 3GPP2 X.S0011-003-D. As per the CDMA standard 
(3GPP2 X.S0011-003-D), Cisco PDSN sends previously negotiated GRE encapsulation and GRE key in 
the revocation message and MN-NAI extension in all the revocation messages. 

The following are the conditions for sending GRE CVSE and MN NAI extension in the revocation 
message:

If GRE CVSE is negotiated between FA and HA, the GRE CVSE with FA assigned key must be 
included in the revocation message. 

If FA has received the revocation message with GRE CVSE and with HA assigned key, the FA must 
send the revocation acknowledgement message with GRE CVSE as FA assigned key to HA.

The GRE CVSE must be included before the FA-HA authentication extension, if present in 
revocation and revocation acknowledgement message.

With the CLI command ip mobile foreign-service revocation exclude-nai disabled, the MN NAI 
extension must be included in revocation message.

If FA has received the revocation message with the MN NAI extension from HA, then FA must 
include the MN NAI extension in the revocation acknowledgment message while sending to HA.

The MN NAI extension must be included before the FA-HA authentication extension if present in 
revocation and revocation acknowledgment message.