Cisco Cisco Packet Data Gateway (PDG) 전단
Subscriber Configuration Mode Commands
mobile-ip ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
8305
reverse-tunnel
Default: enabled.
All the mobile IP user to use reverse IP tunnels. The
All the mobile IP user to use reverse IP tunnels. The
no
keyword disables this option.
security-level { ipsec | none }
Default: none
Configures the security level needed for the subscriber's traffic.
Configures the security level needed for the subscriber's traffic.
ipsec
: secures both MIP control and data traffic with IPSec.
none
: none of the traffic is secured
Important:
This keyword corresponds to the 3GPP2-Security-Level RADIUS attribute. This attribute indicates
the type of security that the home network mandates on the visited network.
Important:
For this attribute, the integer value “3” enables IPSec for tunnels and registration messages, “4“
Disables IPSec
send {access-technology | accounting-correlation-info bsid | dns-address | host-
config | imsi | terminal-verification }
config | imsi | terminal-verification }
access-technology
: Configures FA to sends the access-technology type extension in the RRQ, by default
it is disabled.
accounting-correlation-info
: Configures whether the FA sends the correlation info to the NVSE in
the RRQ. Default is disabled.
dns-address
: Enables the HA to send the DNS address NVSE in the RRP. Default is disabled. This should
only be enabled on the HA side.
host-config
: Configures by sending the Host Config NVSE in RRQ. By default it is disabled.
imsi
: Configures sending the IMSI NVSE in the RRQ. Default is sending IMSI in custom-1 format.
terminal-verification
: Enables the FA to send the terminal verification NVSE in the RRQ. Default is
disabled. This should only be enabled on the FA side.
Important:
send dns-address
is a proprietary feature developed for a specific purpose and requires the MN
to be able to renegotiate IPCP for DNS addresses and reregister MIP if necessary. Since this feature needs the MN to
support certain PPP/MIP behavior, and not all MNs support that particular behavior,
support certain PPP/MIP behavior, and not all MNs support that particular behavior,
send dns-address
should be
enabled only after careful consideration.
Usage
Use as subscriber service contracts change.
Example
mobile-ip home-agent 10.2.3.4
no mobile-ip reverse-tunnel