Cisco Cisco Packet Data Gateway (PDG)
ePDG Fast Re-Auth Support
The UEs accessing through ePDG can perform multiple reattach due to movement across/within WLAN
Network and can also access multiple PDN at the same time. In these cases, the UE authentication is performed
frequently with AAA-server involving HSS node interaction for EAP-AKA algorithm.
Network and can also access multiple PDN at the same time. In these cases, the UE authentication is performed
frequently with AAA-server involving HSS node interaction for EAP-AKA algorithm.
The operator providing the untrusted WLAN access solution through ePDG can enable fast-reauthentication
in AAA-server and UE in order to perform faster authentication and reduce the load in HSS. This is because
the fast-reauthentication uses the keys derived in the previous full-authentication. Also fast-reauthentication
helps the operator to enable local-policy in UE node to authenticate itself to AAA server periodically for
enhanced security.
in AAA-server and UE in order to perform faster authentication and reduce the load in HSS. This is because
the fast-reauthentication uses the keys derived in the previous full-authentication. Also fast-reauthentication
helps the operator to enable local-policy in UE node to authenticate itself to AAA server periodically for
enhanced security.
ePDG Administration Guide, StarOS Release 19
56
Evolved Packet Data Gateway Overview
ePDG Fast Re-Auth Support