Cisco Cisco Packet Data Gateway (PDG)

 

  The StarOS ICSR configuration must be identical on the primary and backup VPC-VSM instances. If 

each instance has a different SRP configuration, the session recovery feature does not function and sessions cannot be 
recovered when the active instance goes out of service. 

This section describes how to configure basic ICSR on each VPC-VSM instance. For information on commands that 
configure additional parameters and options, refer to the Command Line Interface Reference. 

The procedures described below assume the following: 



 

VPC-VSM has been installed and configured as a StarOS VM with core network services on each VSM CPU. 

For more configuration information and instructions on configuring services, refer to the Reverse Route 
Injection (RRI) chapter of the Security Gateway Administration Guide. 



 

In addition, the IP address pools must be srp activated. 



 

AAA server is installed, configured and accessible by both VSMs. 

For more information on configuring the AAA server, refer to the AAA Interface Administration and 
Reference. 



 

HSRP is configured via the ASR 9000 RP using IOS-XR commands. See the Reverse Route Injection (RRI) 

chapter of the Security Gateway Administration Guide for more information on configuring HSRP and SecGW 
high availability. 

To configure the ICSR on a primary and/or backup VPC-VSM instance: 

Configure the SRP context by applying the example configuration in 

  

Configure ICSR and OneP/ConnectedApps interfaces by applying the examples in 

  

Configure the subscriber to default mode by applying the example in 

  

Optional: Disable bulk statistics collection on the standby instance by applying the example configuration in 

Verify your primary and backup instance configuration by following the steps in 

  

Configure the periodic audit process by following the procedure in 

  

Save your configuration as described in the Verifying and Saving Your Configuration chapter. 

To configure the system to work with ICSR: 

Create the SRP context and bind it to the IP address of the primary VPC-VSM instance by applying the example 
configuration in