Листовка для Cisco Cisco Packet Data Gateway (PDG)
APN Configuration Mode Commands
▀ authorize-with-hss
▄ Cisco ASR 5x00 Command Line Interface Reference
1252
authorize-with-hss
This command enables or disables subscriber session authorization per APN via a Home Subscriber Server (HSS) over
an S6b Diameter interface. This feature is required to support the interworking of GGSN with P-GW and HA.
an S6b Diameter interface. This feature is required to support the interworking of GGSN with P-GW and HA.
Product
P-GW
SAEGW
Privilege
Administrator
Mode
Exec > Global Configuration > Context Configuration > APN Configuration
configure > context context_name > apn apn_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-apn)#
Syntax
authorize-with-hss [ egtp | lma [ s6b-aaa-group aaa-group-name | report-ipv6-addr ] |
report-ipv6-addr ]
report-ipv6-addr ]
{ default | no } authorize-with-hss
default | no
Disables the default authorization of subscriber over S6b interface. Resets the command to the default setting
of “authorize locally” from an internal APN authorization configuration.
of “authorize locally” from an internal APN authorization configuration.
egtp
Enables S6b authorization for eGTP only.
lma [ s6b-aaa-group aaa-group-name ]
Enables S6b authorization for LMA only.
The keyword
The keyword
s6b-aaa-group aaa-group-name
is used to enable the configuration of AAA group used
for S6b authorization in PMIP P-GW.
Two AAA groups are defined within APN configuration, one for RADIUS and another one for Diameter. All
the parameters required for RADIUS authentication and accounting will go under
Two AAA groups are defined within APN configuration, one for RADIUS and another one for Diameter. All
the parameters required for RADIUS authentication and accounting will go under
radius_group
. Similarly,
Diameter authentication parameters will go under
s6b_group
.
Important:
If the S6b AAA group is configured under both APN and P-GW service, the APN level configuration
takes higher precedence.
report-ipv6-addr
Enables the IPv6 address reporting through Authorization-Authentication-Request (AAR) towards the S6b
interface.
interface.