FlexiNetworkGateway,Rel.2.15.0,OperatingDocumentation,v1

UserGuideDN0810915Issue2-18

NokiaNetworks

The information in this document applies solely to the hardware/software product (Product) specifiedherein,andonlyasspecifiedherein.

ThisdocumentisintendedforusebyNokiaSolutionsandNetworks'customers(You)only,anditmaynotbeusedexceptforthepurposesdefinedintheagreementbetweenYouandNokiaSolutionsandNetworks(Agreement)underwhich thisdocument isdistributed.Nopartof thisdocumentmaybeused,copied,reproduced,modified or transmitted in any form ormeanswithout the priorwritten permission ofNokiaSolutionsandNetworks. If youhavenotentered intoanAgreementapplicable to theProduct,or if thatAgreementhasexpiredorhasbeenterminated,Youmaynotusethisdocument inanymannerandYouareobligedtoreturnittoNokiaSolutionsandNetworksanddestroyordeleteanycopiesthereof.

The document has been prepared to be used by professional and properly trained personnel, andYouassumefullresponsibilitywhenusingit.NokiaSolutionsandNetworkswelcomeYourcommentsaspartoftheprocessofcontinuousdevelopmentandimprovementofthedocumentation.

This document and its contents are provided as a convenience to You. Any information or statementsconcerningthesuitability,capacity, fitnessforpurposeorperformanceof theProductaregivensolelyonanasisandasavailablebasisinthisdocument,andNokiaSolutionsandNetworksreservestherightto change any such information and statementswithout notice.NokiaSolutionsNetworks hasmade allreasonableeffortstoensurethatthecontentofthisdocumentisadequateandfreeofmaterialerrorsandomissions,andNokiaSolutionsandNetworkswill correcterrors thatYou identify in thisdocument.But,NokiaSolutionsandNetworks'totalliabilityforanyerrorsinthedocumentisstrictlylimitedtothecorrectionofsucherror(s).NokiaSolutionsandNetworksdoesnotwarrantthattheuseofthesoftwareintheProductwillbeuninterruptedorerror-free.

NOWARRANTYOFANYKIND,EITHEREXPRESSORIMPLIED, INCLUDINGBUTNOTLIMITEDTOANY WARRANTY OF AVAILABILITY, ACCURACY, RELIABILITY, TITLE, NON-INFRINGEMENT,MERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE, ISMADE INRELATIONTOTHECONTENT OF THIS DOCUMENT. IN NO EVENT WILL NOKIA SOLUTIONS AND NETWORKS BELIABLE FOR ANY DAMAGES, INCLUDING BUT NOT LIMITED TO SPECIAL, DIRECT, INDIRECT,INCIDENTALOR CONSEQUENTIAL OR ANY LOSSES, SUCH AS BUT NOT LIMITED TO LOSSOFPROFIT, REVENUE, BUSINESS INTERRUPTION, BUSINESS OPPORTUNITY OR DATA THAT MAYARISEFROMTHEUSEOFTHISDOCUMENTORTHEINFORMATIONINIT,EVENINTHECASEOFERRORSINOROMISSIONSFROMTHISDOCUMENTORITSCONTENT.

ThisdocumentisNokiaSolutionsandNetworksproprietaryandconfidentialinformation,whichmaynotbedistributed or disclosed to any third parties without the prior written consent of Nokia Solutions andNetworks.

Nokia isa registered trademarkofNokiaCorporation.Otherproductnamesmentioned in thisdocumentmaybetrademarksoftheirrespectiveowners,andtheyarementionedforidentificationpurposesonly.

Copyright2014NokiaSolutionsandNetworks.Allrightsreserved.

f ImportantNoticeonProductSafety Thisproductmaypresentsafetyrisksduetolaser,electricity,heat,andothersourcesofdanger.

Only trained and qualified personnel may install, operate, maintain or otherwise handle thisproductandonlyafterhavingcarefullyreadthesafetyinformationapplicabletothisproduct.

The safety information is provided in the Safety Information section in the Legal, Safety andEnvironmentalInformationpartofthisdocumentordocumentationset.

Nokia Solutions and Networks is continually striving to reduce the adverse environmental effects of itsproductsandservices.Wewouldliketoencourageyouasourcustomersanduserstojoinusinworkingtowardsacleaner,saferenvironment.Pleaserecycleproductpackagingandfollowtherecommendationsforpoweruseandproperdisposalofourproductsandtheircomponents.

IfyoushouldhavequestionsregardingourEnvironmentalPolicyoranyoftheenvironmentalservicesweoffer,pleasecontactusatNokiaSolutionsandNetworksforanyadditionalinformation.

UserGuide

2 DN0810915 Issue:2-18

TableofContentsThisdocumenthas1287pages

1 ChangesinFlexiNGUserGuide.................................................421.1 Changesbetweenrelease2.14.0andrelease2.15.0................421.2 Changesbetweenrelease2.13.0andrelease2.14.0................431.3 Changesbetweenrelease2.12.2andrelease2.13.0................46 2 Aboutthisdocument.................................................................... 482.1 Scope........................................................................................... 482.2 Audience...................................................................................... 48 3 Introduction.................................................................................. 493.1 Overview..................................................................................... 493.1.1 Nodes...........................................................................................493.2 FlexiNGfunctionalityareas......................................................... 493.2.1 O&M............................................................................................. 493.2.2 Interfaces,routing,IPaddressing,andtunneling.........................503.2.3 Sessionmanagement.................................................................. 513.2.4 Charging,QoS,AAA,andpolicycontrol...................................... 523.2.5 Serviceawareness.......................................................................533.2.6 Systemmonitoring....................................................................... 553.2.7 Lawfulinterception....................................................................... 553.2.8 Licensemanagementandbladeinstallation................................ 553.2.9 Bladeroles................................................................................... 55 4 Introductiontothestructuredcommandlineinterface(SCLI)......584.1 SCLIoverview.............................................................................. 584.1.1 SCLIusagemodes.......................................................................584.1.2 Userroles.....................................................................................594.1.3 Basicusage..................................................................................594.1.3.1 Commandnotation.......................................................................604.1.4 Top-levelSCLIcommands........................................................... 614.1.5 Outputsettings............................................................................. 634.1.5.1 Outputformat............................................................................... 634.1.5.2 Outputprinting..............................................................................644.1.6 ErrormessagesreturnedbySCLI................................................654.1.7 WarningmessagesreturnedbySCLI.......................................... 654.2 OperatingtheSCLI...................................................................... 664.3 ConfiguringtheSCLIenvironment............................................... 724.4 ConfiguringSCLIoutputdestination............................................ 77 5 Configurationmanagement..........................................................795.1 Configurationmanagementoverview...........................................795.1.1 Configurationmanagementfeatures............................................795.1.2 Configurationmanagementarchitecture...................................... 79

UserGuide

Issue:2-18 DN0810915 3

5.1.3 Configurationdirectorystructure.................................................. 805.1.4 Dynamicconfiguration..................................................................815.1.5 Configurationlockingfeature....................................................... 815.1.6 Configurationtransaction............................................................. 825.1.7 Configurationsnapshot................................................................ 845.2 Takingaconfigurationsnapshot...................................................855.3 Listingconfigurationsnapshots....................................................865.4 Overwritingthecurrentconfigurationwithasnapshot................. 885.5 Defininganewstartupconfiguration............................................895.6 Deletingaconfigurationsnapshot................................................905.7 Displayingcurrentconfigurations................................................. 915.8 FlexiNGusergroups................................................................... 93 6 Networkarchitecture.................................................................... 956.1 Networkarchitectureoverview..................................................... 956.1.1 Internalnetworkarchitecture........................................................956.1.2 Externalnetworkarchitecture.......................................................966.1.2.1 Externalinterfaces....................................................................... 976.1.2.2 Routing.........................................................................................98 7 Interfaceconfiguration..................................................................997.1 Physicalandlogicalinterfaces..................................................... 997.1.1 Networkinterfacetypes................................................................997.1.2 ConfiguringVLANinterfaces......................................................1007.1.3 DeletingtheVLANinterfaces..................................................... 1027.1.4 Configuringthefrontpanelinterfaces........................................ 1037.1.5 Modifyingthephysicalinterfacesettings....................................1057.1.6 ExampleofconfiguringaVLANwithvirtualrouting................... 1077.2 FlexiNGinterfaces.....................................................................1097.2.1 Configuringinterfacegroups...................................................... 1097.2.2 ConfiguringGninterface.............................................................1137.2.3 ConfiguringGn-Uinterface........................................................1157.2.4 ConfiguringGzinterface............................................................1187.2.5 ConfiguringS11interface..........................................................1207.2.6 ConfiguringS1-Uinterface........................................................1247.2.7 ConfiguringS2IPv4interface................................................... 1267.2.8 ConfiguringS2IPv6interface................................................... 1297.2.9 ConfiguringS5IPv4interface................................................... 1317.2.10 ConfiguringS5IPv6interface................................................... 1337.2.11 ConfiguringS4interface............................................................1367.2.12 ConfiguringS4-Uinterface........................................................1397.2.13 ConfiguringX1-1interface........................................................ 1427.2.14 ConfiguringX2interface............................................................1447.3 Loadbalancing..........................................................................1467.3.1 Loadbalancingoverview............................................................1467.3.1.1 GGSN/P-GWloadbalancing......................................................147

UserGuide

4 DN0810915 Issue:2-18

7.3.1.2 LoadbalancinginS-GW............................................................ 1477.3.1.3 LoadbalancingincombinedS-GWandP-GW..........................1487.3.1.4 OptimizedloadbalancinginS-GWandP-GW.......................... 1497.3.1.5 LoadbalancinginPMIP-basedS5/S8interface.........................1517.3.1.6 Servicegroupsandrecoverygroups......................................... 1517.3.2 ConfiguringloadbalancingGninterface.................................... 1537.3.3 ConfiguringloadbalancingS11interface...................................1557.3.4 ConfiguringloadbalancingS4interface.................................... 1587.3.5 Configuringservicegroups........................................................ 1607.4 Displayingtheinterfaceconfiguration........................................ 1657.5 Displayingtheruntimeinformationfortheinterface...................1677.6 Linkstatedetector......................................................................1697.6.1 Linkstatedetectoroverview.......................................................1697.6.2 Addingtheinterfacemonitoredbylinkstatedetector................ 1717.6.3 Modifyingtheinterfacemonitoredbylinkstatedetector............ 1727.6.4 Removinglinkstatedetectorfromarecoverygroup..................1737.7 Accesscontrollists(ACLs)........................................................ 1747.7.1 Introductiontoaccesscontrollists(ACLs)................................. 1747.7.1.1 Usingaccesscontrollistsforsecurity........................................ 1767.7.1.2 Trafficfilteringnotes................................................................... 1777.7.2 ConfiguringACLsettings........................................................... 1787.8 Configuringqueuesets.............................................................. 1837.9 ConfiguringVLANprioritymappings.......................................... 186 8 IPconfiguration.......................................................................... 1888.1 IPaddressconfiguration............................................................ 1888.1.1 ExternalIPaddresses................................................................ 1888.1.2 ListingthecurrentIPconfiguration.............................................1898.1.3 AddingexternalIPaddresses.................................................... 1928.1.4 DeletingexternalIPaddresses.................................................. 1968.1.5 AddingloopbackIPaddresses...................................................1978.1.6 DeletingloopbackIPaddresses.................................................2008.1.7 DisplayingtheIPconnectivitystatus..........................................2018.2 IPservices..................................................................................2048.2.1 Domainnamesystem................................................................ 2048.2.2 ConfiguringDNS........................................................................ 2048.2.3 NetworkTimeProtocol............................................................... 2068.2.4 ConfiguringNTP.........................................................................207 9 Routing.......................................................................................2099.1 Routingoverview........................................................................2099.1.1 Virtuallocalareanetwork(VLAN).............................................. 2119.1.2 RoutingofUEtoUEtraffic......................................................... 2129.1.3 ForcedIPv4andIPv6uplinkdestinationaddresses.................. 2129.1.4 BFDprotocol.............................................................................. 2129.2 Routingprotocols....................................................................... 214

UserGuide

Issue:2-18 DN0810915 5

9.3 Generalconfigurationoftheroutingdaemon.............................2159.3.1 SettingrouterID......................................................................... 2159.3.2 Settingmaximumnumberofequal-costpaths...........................2169.3.3 Settingtracingforrouting........................................................... 2169.4 Configuringvirtualrouting.......................................................... 2189.5 Configuringroutingprotocols.................................................... 2199.5.1 ConfiguringOSPFv2.................................................................. 2199.5.2 ConfiguringOSPFv3.................................................................. 2359.5.3 ConfiguringstaticroutesforIPv4............................................... 2489.5.4 ConfiguringstaticroutesforIPv6............................................... 2539.6 ConfiguringpolicyroutingforIPv4............................................. 2589.6.1 Definingaggregateroutes..........................................................2589.6.2 Disablingaggregateroutes........................................................ 2619.6.3 Redistributingroutesbetweenprotocols.................................... 2629.6.4 Configuringtheinboundfilters................................................... 2649.6.5 Definingtheprotocolranks........................................................ 2679.7 ConfiguringpolicyroutingforIPv6............................................. 2689.7.1 Definingtheaggregateroutes....................................................2689.7.2 Disablingtheaggregateroutes.................................................. 2709.7.3 Redistributingroutesbetweenprotocols.................................... 2729.7.4 Configuringtheinboundfilters................................................... 2749.7.5 Definingtheprotocolranks........................................................ 2769.8 EnablinganddisablingUEtoUEtrafficwithinonenode........... 2779.9 ConfiguringtheforceduplinkdestinationIPv4andIPv6address....

2799.10 Enablinganddisablinghost-basedrouting................................ 2809.11 Monitoringroutes....................................................................... 2819.12 DisplayingtheIPpacketsrouting...............................................2849.13 DisplayingtheruntimeinformationforthesinglehopBFDsessions

................................................................................................... 2859.14 OSPFroutingexamples............................................................. 2879.14.1 Example:OSPFconfiguration....................................................2879.14.2 Example:OSPFconfigurationforasinglearea......................... 2889.14.3 Example:OSPFconfigurationformultipleareas....................... 290 10 UEIPaddressallocation............................................................29310.1 UEIPaddressallocationoverview.............................................29310.2 UEIPaddressallocationmethod...............................................29410.2.1 StaticIPaddress........................................................................ 29510.2.2 DynamicIPaddressfromFlexiNGlocalpool............................29710.2.3 DynamicIPaddressfromaRADIUSAAAserver...................... 29710.2.4 AddressallocationusingDHCPv4............................................. 30010.2.5 AddressallocationusingL2TP...................................................30110.3 BasiccombinationsofallowedIPpooltype,allocationrule,and

allocationmethod....................................................................... 30110.4 IPpools...................................................................................... 30210.4.1 IPpooloverview.........................................................................302

UserGuide

6 DN0810915 Issue:2-18

10.4.2 ConfiguringIPpools...................................................................30410.5 IPv6statelessaddressautoconfiguration.................................. 32010.5.1 CombinedS-GWandP-GWstatelessaddressautoconfiguration

forstaticaddresses.................................................................... 32110.5.2 S-GWPMIP-S5basedstatelessaddressautoconfigurationfor

staticaddresses......................................................................... 32110.5.3 GGSNstatelessaddressautoconfigurationforstaticaddresses.....

322 11 Tunneling....................................................................................32311.1 Tunnelingoverview.................................................................... 32311.1.1 GenericRoutingEncapsulation(GRE),version0......................32311.1.1.1 GREfunctionalityonGi/SGiinterface........................................ 32511.1.2 Layer2TunnelingProtocol(L2TP),version2............................32511.1.3 Mobilerouter.............................................................................. 32611.1.4 IPsec.......................................................................................... 32611.2 Configuringatunnelingprofile................................................... 32611.3 ConfiguringGREfortunnelingRADIUS.....................................33711.4 UsingoverlappingIPaddresseswithGRE................................ 34111.4.1 Overviewoftheconfigurationmodel..........................................34111.4.2 Configurationsteps.................................................................... 34211.4.3 Restrictions................................................................................ 34311.5 Networksecurityconfiguration................................................... 34311.5.1 IPsecdeployments.....................................................................34311.5.2 IPsecstructuredcommandlineinterface................................... 34411.5.3 IPsecVPNtunnels..................................................................... 34911.5.3.1 VRFswitchingwithIPsec...........................................................35011.5.3.2 PacketflowtothelocalIPsectunnelendpoint...........................35011.5.3.3 PacketflowfromthelocalIPsectunnelendpoint.......................35011.5.3.4 IPsectunneling...........................................................................35111.5.3.5 VPNtunnelmanagement........................................................... 35111.5.3.6 SessionprofileawarenessofIPsectunnelstate........................35811.5.3.7 QueryingthestateofanIPsecVPNtunnel................................35811.5.3.8 Start-upbehavior........................................................................35911.5.3.9 Switchoverbehavior...................................................................35911.5.3.10 Packetdropbehavior................................................................. 35911.5.3.11 IPsecVPNrestrictions............................................................... 35911.5.3.12 CautionarynotesaboutVRFswitching...................................... 36011.6 ConfiguringIPsec.......................................................................36011.6.1 IPsecconfigurationoverview..................................................... 36011.6.1.1 Endpointaddressconfiguration..................................................36011.6.1.1.1 Endpointaddressconfigurationexample(coldactive/standby). 36111.6.1.2 IPsecconfigurationsteps........................................................... 36111.6.1.3 Example:ConfiguringatunnelfromGatewayService-7-10-0toan

externalVPN.............................................................................. 36111.6.2 ListingtheexistingIPsecconfiguration...................................... 36111.6.3 CreatingtheIPsecglobalconfiguration..................................... 364

UserGuide

Issue:2-18 DN0810915 7

11.6.4 DeletingtheIPsecglobalconfiguration......................................36511.6.5 CreatingagenericIPsectemplate............................................. 36611.6.6 DeletingagenericIPsectemplate............................................. 36811.6.7 Creatingavirtualprivatenetwork...............................................36811.6.8 Deletingavirtualprivatenetwork............................................... 37011.6.9 Creatingatrafficselectorrule.................................................... 37111.6.10 Deletingatrafficselectorrule.....................................................37311.6.11 ExampleofconfiguringanIPsectunnelusingPSKauthentication..

37411.6.12 ExampleofconfiguringanIPsectunnelusingRSAsignature... 37511.6.13 ExampleofconfiguringanACLruleforanIPsectunnel............37611.7 ConfiguringaVPNprofile...........................................................37811.8 ExampleofconfiguringIPsecVPNtunnels................................38011.9 ViewingthestatusoftheVPNtunnels....................................... 391 12 Managementinterfaces.............................................................39512.1 Managementinterfacesoverview.............................................. 39512.2 NE3SSNMPinterface................................................................39612.2.1 SNMPfaultandperformancemanagement...............................39612.2.2 ManagementInformationBase(MIB)........................................ 39912.3 SNMPmediator..........................................................................40012.4 SNMPagentspecificconfigurationatNMS............................... 40112.5 ConfiguringNE3SSNMPinterface............................................ 40412.6 SettingnetworkelementinformationforSNMPtraps................ 40712.7 SettingcommunitystringsforIPaddresses...............................40912.8 SettingSNMPtrapinformation...................................................41112.9 AddinganewSNMPmanager...................................................41612.10 ModifyinganexistingSNMPmanager....................................... 41712.11 CheckingSNMPmanagerconfiguration.................................... 41712.12 DeletinganSNMPmanager...................................................... 418 13 Generalconfiguration.................................................................41913.1 Gracefulshutdown..................................................................... 41913.2 DisablingandenablingFlexiNGfunctionality............................41913.3 ConfiguringFlexiNGmode........................................................42013.4 AddingPLMNprofiles................................................................ 42213.5 AddingaPLMNID.................................................................... 42413.6 ConfiguringdefaulthomePLMNID........................................... 42613.7 ConfiguringPMIPprotocoloverS5interface............................. 42713.8 ConfiguringtheAPNencoding/decodingmethod...................... 42813.9 ConfiguringGTPprotocoloverS5interface.............................. 42913.10 EnablinganddisablingPDNswitching.......................................43013.11 Enablinganddisablingdedicatedbearers/secondaryPDP

contexts......................................................................................43013.12 ControllingallocationofIPpooladdresstotheenduser...........43113.13 DisplayingfastpathCPUload.................................................... 43213.14 IMSI-basedAPNselection......................................................... 433

UserGuide

8 DN0810915 Issue:2-18

13.15 ConfiguringIMSIanalysis.......................................................... 43413.16 ConfiguringIMSIprofiles............................................................43613.17 ConfiguringtheactivationofIMSI-basedAPNselection............43913.18 Configuringreleaselevels..........................................................44013.19 ChangingtheFlexiNGtimezoneaftercommissioning............. 44113.20 Configuringcallflowinsessioncreation.................................... 445 14 Overloadcontrol.........................................................................44714.1 Overloadcontroloverview..........................................................44714.1.1 Systemleveloverloadprevention.............................................. 44714.1.2 Controlplaneoverloadcontrolonserviceblades...................... 44714.1.2.1 Performedactions...................................................................... 44814.1.2.2 Alarms........................................................................................ 44914.1.3 Userplaneoverloadcontrolonserviceblades.......................... 44914.1.4 CLAoverloaddetection..............................................................45014.2 Configuringoverloadlevelsonserviceblades...........................45014.3 ConfiguringCLACPUoverloadlevels....................................... 452 15 Runtimeadministration.............................................................. 45515.1 Overview.................................................................................... 45515.2 CheckingthestateofaFlexiNGnode...................................... 45515.3 ChangingthestateofaFlexiNGnode...................................... 45715.4 Performingacontrolledswitchover............................................ 45915.5 Enablinganddisablingfiletransferservices.............................. 460 16 Sessionmanagement................................................................ 46216.1 Sessionmanagementoverview................................................. 46216.1.1 Sessionprofileconcept.............................................................. 46216.1.2 Sessionprofilesinsessionmanagement...................................46316.1.3 S-GWprofileconcept................................................................. 46516.2 Configuringsessionprofiles....................................................... 46616.3 Configuringthesessioncreationtimeout................................... 49316.4 EnablinganddisablingtheGxfunctionality............................... 49416.5 EnablinganddisablingtheGyfunctionality............................... 49616.6 EnablinganddisablingtheS6bfunctionality..............................49816.7 Triggeringindividualsessiondisconnections............................. 50016.8 ConfiguringS-GWprofiles......................................................... 50316.9 ConfiguringadefaultS-GWprofile............................................ 50816.10 Addingchargingprofilestoasessionprofile..............................50916.11 EnablinganddisablingS-GWprofilestatistics...........................51116.12 Enablinganddisablingsessionprofilestatistics........................ 51316.13 EnablinganddisablingPLMNstatistics..................................... 51516.14 Configuringaccesspointnames(APNs)................................... 51716.15 ConfiguringachargingcharacteristicsAPNoverrideprofile......52516.16 Pathmanagement......................................................................52916.16.1 Pathmanagementoverview.......................................................52916.16.2 ConfiguringGTPpathmanagement......................................... 530

UserGuide

Issue:2-18 DN0810915 9

16.16.3 ConfiguringPMIPpathmanagement......................................... 53516.17 ConfiguringPMIPbaseline.........................................................53616.18 Configuringnetwork-initiatedsignaling...................................... 53816.19 Configuringdedicatedbearers/secondaryPDPcontexts.........54116.20 ConfiguringIDFTresponseencoding........................................ 542 17 Dynamichostconfigurationprotocol.......................................... 54417.1 DHCPoverview.........................................................................54417.2 ConfiguringDHCPprofiles......................................................... 544 18 Authentication,authorization,andaccounting........................... 54818.1 AAAoverview.............................................................................54818.1.1 RADIUSconfiguration................................................................ 54818.1.2 Authenticationandaccountingbackupmode............................ 54918.1.3 Accountingredundancymode....................................................55218.2 QuickreferencetoAAAusageandconfiguration...................... 55218.3 AAAserverprofileconfiguration.................................................55418.3.1 ConfiguringnewRADIUSserverproperties...............................55418.3.2 Configuringnewdisconnectserverproperties........................... 55718.3.3 ChangingthepropertiesofanexistingRADIUSserver............. 55918.3.4 Changingthepropertiesofanexistingdisconnectserver......... 56618.4 Authentication,accountinganddisconnectprofileconfiguration....

57118.4.1 Configuringaccountingprofiles..................................................57118.4.2 Configuringauthenticationprofiles.............................................58418.4.3 Usernameandpasswordrelatedparameters............................ 59218.4.4 Configuringdisconnectprofiles.................................................. 59418.5 Assigningauthentication,accountinganddisconnectprofilesto

thesessionprofile...................................................................... 59718.6 DeletingaRADIUSserver......................................................... 60118.7 Deletingadisconnectserver......................................................60618.8 ConductingaforcefulrecoveryofaRADIUSprimaryserver.....61018.9 ConfiguringAAAattributefilteringprofile................................... 61318.10 ConfiguringRADIUSclassparameterusage.............................61918.11 ConfiguringchargingcharacteristicsvalueforRADIUSserver..620 19 Qualityofservice........................................................................62219.1 Qualityofservice(QoS)overview..............................................62219.1.1 QoSnegotiation......................................................................... 62419.2 Configuringadmissioncontrol....................................................62519.3 TrafficclassifyingandQoSclass............................................... 62819.3.1 ConfiguringQoSclassforGGSN...............................................62819.3.2 ConfiguringQoSclassforS-GW/P-GW...................................63019.3.3 ConfiguringVLANprioritymappings.......................................... 63519.4 Configuringqueuesets.............................................................. 63619.5 ConfiguringDSCPmarkingforsignalingpackets...................... 63919.6 ConfiguringaQoSprofile...........................................................640

UserGuide

10 DN0810915 Issue:2-18

19.7 ControllingQoSnegotiationwithQoSupgrade......................... 64819.8 ConfiguringGxxforcedtriggers................................................. 64919.8.1 ConfiguringdefaultEPSbearerQoSchange............................ 64919.8.2 ConfiguringQoSchange............................................................650 20 Serviceawareness.....................................................................65220.1 Serviceawarenessoverview......................................................65220.2 Configuringdeeppacketinspection........................................... 65420.3 PCCrule.....................................................................................65520.3.1 ConfiguringaPCCrule.............................................................. 65520.3.2 AddingfilterstoaPCCrule........................................................66320.3.3 CommittingaPCCrule.............................................................. 67320.3.4 ConfiguringPCCrulestatistics.................................................. 67420.4 PCCrulebase............................................................................67520.4.1 ConfiguringaPCCrulebase..................................................... 67520.4.2 CommittingaPCCrulebase......................................................68020.4.3 SettingthedefaultPCCrulebasenametosessionprofile........68220.5 Configuringthemaximumnumberofflowspernode.................68420.6 ConfiguringTCPmaximumsegmentsize..................................685 21 Diametermanagement...............................................................68821.1 Diameteroverview..................................................................... 68821.1.1 ConfigurationoverviewofDiameterbasedinterfaces................68821.2 ConfiguringDiameterserverprofiles..........................................69021.3 ConfiguringDiameterprofiles.....................................................69721.3.1 Diameterprofileconfigurationoverview..................................... 69721.3.2 ManagingDiameterprofiles....................................................... 69721.3.3 ConfiguringadefinedDiameterprofileforIMSIprefix............... 70121.3.4 ConfiguringadefinedDiameterprofileforMSISDNpattern...... 70221.3.5 Usingwildcards.......................................................................... 70321.3.5.1 Precedenceofpatterns.............................................................. 70421.3.5.2 Overlappingpatterns..................................................................70521.4 ConfiguringtheactionfornewcontextswhenPCRFconnection

fails.............................................................................................70621.5 ConfiguringtheactionforexistingcontextswhenPCRF

connectionfails.......................................................................... 70721.6 Configuringtheactionappliedtousersessionsbasedonthe

receivedPCRFresultcodesand/orresultcodecategories....... 70821.7 ConfiguringDiameteroverloadprotection..................................71521.8 ConfiguringtheDiameterAAAprofiles...................................... 71621.9 DiameterAAAoverS6badministration......................................719 22 Policycontrol..............................................................................72522.1 Configuringaccessrestrictionprofiles....................................... 725 23 Charging.....................................................................................72923.1 Chargingoverview..................................................................... 72923.2 Metering..................................................................................... 731

UserGuide

Issue:2-18 DN0810915 11

23.2.1 Offlineusagereporting...............................................................73123.2.2 Bearertimeusageandcontextvolume......................................73223.2.3 Serviceawarevolumeandtime................................................. 73223.3 Offlinecharging.......................................................................... 73323.3.1 CDRgeneration......................................................................... 73323.3.1.1 TimeandvolumethresholdsforCDRgeneration...................... 73323.3.1.2 CDRcreationduetomaximumnumberofchangeconditions...73423.3.1.3 Bearer/PDPcontextupdateimpactoneG-andPGW-CDRs.....73523.3.1.4 Ratinggroupzero(RG0)............................................................73623.3.1.5 OCSresultcodereportinginCDRs........................................... 73723.3.1.6 FailurehandlinginCDRs........................................................... 73723.3.1.7 Furnishcharginginformationforofflinecharging....................... 73823.3.2 ConfiguringCDRformats........................................................... 73823.3.3 CDRtransfer.............................................................................. 74023.3.3.1 Internalcharginggatewayfunctionality...................................... 74023.3.3.1.1 CDRfileclosureconditions........................................................ 74023.3.3.1.2 CDRrouting............................................................................... 74023.3.3.1.3 CDRstorage.............................................................................. 74123.3.3.1.4 CDRfilestoragelocation........................................................... 74123.3.3.1.5 CDRcollectorcompressionsettings.......................................... 74123.3.3.2 Externalcharginggatewayfunctionality.....................................74223.3.3.2.1 CGFselectionforCDRtransfer................................................. 74223.3.3.2.2 FlowofCDRsending................................................................. 74323.3.3.2.3 CGFstatusmonitoring............................................................... 74323.3.3.2.4 Errorhandling.............................................................................74423.3.4 ConfiguringuseraccountsfortransferringCDRfiles.................74423.3.5 Configuringofflinechargingfunctionality................................... 74523.3.6 ConfiguringCDRfileparameters............................................... 74623.3.7 Configuringcharginggateways..................................................75023.3.8 Configuringtariffprofiles............................................................ 75623.3.9 ConfiguringharddiskbackupduringGzfailure......................... 75923.4 Onlinecharging.......................................................................... 76023.4.1 Onlinechargingoverview...........................................................76023.4.1.1 Onlinechargingconfiguration.................................................... 76123.4.2 Configuringonlinecharging....................................................... 76323.4.3 Configuringeventprofiles.......................................................... 76323.4.4 Configuringquotaholdingtime.................................................. 76623.4.5 ConfiguringaservicecontextID................................................ 76823.4.6 Configuringthevolumereportmode..........................................76923.4.7 Configuringadefaultquota........................................................ 77023.4.8 ConfiguringmultipleMSCCinstances........................................77123.4.9 ConfiguringtheDCCAmode......................................................77223.4.10 Configuringthealways-onmode................................................77323.4.11 ConfiguringdefaultquotareportinginCDRs............................. 77923.4.12 Configuringreportingreasonfortrafficredirection.....................78023.4.13 Configuringfurnishcharginginformationhandling.....................781

UserGuide

12 DN0810915 Issue:2-18

23.5 Configuringchargingprofiles..................................................... 78323.6 ConfiguringchargingoptionsforS-GW..................................... 79623.6.1 ConfiguringSGW-CDRs.............................................................79623.6.2 S-GWtariffprofileselection.......................................................79823.7 ConfiguringNokiasessionchargingtypemapping.................... 79923.8 Configuringstaticredirectserver............................................... 80223.9 Configuringsubscriberpolicywhenthemaximumnumberof

allowedratingentriesisreached................................................80323.10 Roamingawarenessandbillshockprevention(BSP)............... 80423.10.1 Chargingprofileselectionbasedonroamingstatus.................. 80423.10.2 Attributessenttoexternalinterfaces..........................................80523.11 Configuringroamingawareness................................................ 80623.12 Chargingprofileselectionmethod..............................................807 24 Lawfulinterception.................................................................... 80924.1 Lawfulinterceptionoverview...................................................... 80924.2 ConfiguringLIEfunctionality..................................................... 80924.3 ConfiguringLIElistenport.........................................................81024.4 ConfiguringLICpeer................................................................. 81224.5 ConfiguringLIEoverGn/GpinterfaceforP-GW........................ 81324.6 ConfiguringLIEoverS2ainterfaceforP-GW............................ 814 25 Personalfirewall.........................................................................81625.1 Personalfirewalloverview..........................................................81625.2 Configuringpersonalfirewall......................................................816 26 DPIreporting.............................................................................. 82426.1 DPIreportingoverview...............................................................82426.2 ConfiguringDPIreporting...........................................................825 27 Trafficareporting........................................................................ 84427.1 Trafficareportingoverview......................................................... 84427.2 ConfiguringTrafficareporting.....................................................845 28 GTPInformationEnrichment......................................................85828.1 GTPInformationEnrichmentoverview...................................... 85828.2 ConfiguringGTPInformationEnrichment.................................. 858 29 GTP-Uheaderextension........................................................... 86429.1 GTP-Uheaderextensionoverview............................................ 86429.2 ConfiguringtheGTP-Uheaderextensionprofile....................... 86429.3 ConfiguringGTP-Uheaderextension........................................ 868 30 L3/L4redirection........................................................................ 87230.1 L3/L4trafficredirection...............................................................87230.1.1 Restrictions................................................................................ 87230.2 ConfiguringL3redirection.......................................................... 87330.3 ConfiguringL4redirection.......................................................... 882

UserGuide

Issue:2-18 DN0810915 13

30.4 ConfiguringL3+L4redirection....................................................890 31 L3/L4DNSsniffing..................................................................... 90031.1 L3/L4DNSsniffingoverview...................................................... 900 32 HTTPheaderenrichment...........................................................90232.1 HTTPheaderenrichmentoverview............................................90232.2 Configuringanenrichmentprofile............................................. 90232.3 ConfiguringHTTPheaderenrichment...................................... 909 33 HTTPredirection........................................................................ 92133.1 HTTPredirectionoverview.........................................................92133.2 ConfiguringHTTPredirectionwithoutonlinecharging...............92133.3 ConfiguringHTTPredirectionwithonlinecharging....................933 34 URLenrichment......................................................................... 94834.1 URLenrichmentoverview.......................................................... 94834.2 ConfiguringtheenrichmentprofilefortheURLenrichment....... 94834.3 ConfiguringURLenrichmentwithoutonlinecharging................ 95434.4 ConfiguringURLenrichmentwithonlinecharging..................... 972 35 Networkfiltering......................................................................... 99335.1 Networkfilteringoverview.......................................................... 99335.1.1 Networkfilteringactionsandrules............................................. 99335.1.2 Networkfilteringlimitations........................................................ 99535.1.3 Networkfilteringflowsandhighavailability................................99735.1.3.1 Flows..........................................................................................99735.1.3.2 ICMPprocessing........................................................................99735.1.3.3 Highavailabilitythroughredundancy......................................... 99835.1.4 Packetprocessingduringnetworkfiltering.................................99835.1.4.1 Flowlookup................................................................................ 99835.1.4.2 Inputandoutputtuples...............................................................99835.1.4.3 Ruleactionverdicts....................................................................99935.1.4.4 Black-holes.................................................................................99935.1.5 Deletionofnetworkfilteringflows.............................................100035.1.6 Configurationofinterfacebladeroutingfornetworkfiltering....100035.2 Generalconfigurationofnetworkfiltering.................................100135.2.1 Enablingthenetworkfilteringfeature.......................................100135.2.2 ConfiguringaVRF...................................................................100235.2.3 Configuringadefaultaction..................................................... 100335.2.4 Configuringafallbackaction.................................................... 100435.2.5 Configuringaflowidletimeout................................................. 100535.2.6 Configuringasessionpersistencetimeout.............................. 100635.2.7 Configuringtracing................................................................... 100735.3 Configuringrulematchingparameters..................................... 100935.4 Configuringastatictranslationaction.......................................101135.5 Configuringgatewaysandgatewayactions.............................1014

UserGuide

14 DN0810915 Issue:2-18

35.5.1 Configuringagatewayaction...................................................101435.5.2 Gatewayloadbalancingandsessionpersistence................... 101835.5.2.1 Weightedconnectionsloadbalancingmode............................101935.5.2.2 Weightedroundrobinloadbalancingmode.............................102035.5.2.3 Hashloadbalancingmode.......................................................102035.5.2.4 Persistenthashloadbalancingmode...................................... 102035.5.2.5 Sessionpersistence................................................................. 102035.6 Configuringasessiontrackeraction........................................ 102135.7 ConfiguringaSNATaction.......................................................102235.8 ConfiguringaclientSNATaction..............................................1027 36 Systemmonitoring................................................................... 102936.1 Systemmonitoringoverview.................................................... 102936.1.1 Logs......................................................................................... 102936.1.2 Performancemanagement.......................................................102936.1.3 Statistics...................................................................................102936.1.4 Faultmanagement................................................................... 102936.1.4.1 Alarms...................................................................................... 103036.2 Logs......................................................................................... 103036.2.1 Logfilelist................................................................................ 103036.2.2 Syslogfiles............................................................................... 103336.2.3 Logrotation.............................................................................. 103436.2.4 Configuringloglevels...............................................................103536.2.5 Logleveldescriptions...............................................................103736.3 Operatorlog............................................................................. 103836.3.1 Operatorlogfilelist.................................................................. 103836.3.2 Operatorlogfile........................................................................103836.3.3 Operatorlogrotation................................................................ 104136.3.4 Configuringoperatorloglevels................................................ 104136.3.5 Operatorlogleveldescriptions.................................................104236.4 Subscribertrace....................................................................... 104236.4.1 Subscribertraceoverview........................................................104236.4.2 Subscribertracelogs............................................................... 104336.4.2.1 Eventlogs................................................................................ 104436.4.2.2 Internallogs..............................................................................105036.4.3 Subscribertracetrafficcapture................................................ 105136.4.3.1 Capturepoints..........................................................................105336.4.3.2 Userplanetraffic...................................................................... 105436.4.3.3 Signalingdata.......................................................................... 105936.4.4 Enablinganddisablingsubscribertracefunctionality.............. 106836.4.5 Generatingsubscribertracelogsandtrafficcapturefiles........ 106936.4.6 Monitoringsubscribertracediskusage....................................107236.4.7 Configuringsubscribertracediskusage.................................. 107236.5 Displayingsubscriberinformation............................................ 107336.6 MonitoringGTPv0traffic...........................................................107836.6.1 GatheringlogsonGTPv0traffic...............................................1078

UserGuide

Issue:2-18 DN0810915 15

36.6.2 ConfiguringGTPv0loggathering.............................................1079 37 Usermanagement....................................................................108137.1 Managementofuseraccounts.................................................108137.2 Useraccountstorages............................................................. 108337.3 Permissionsformanagementinterfaces..................................108437.4 Remoteuserinformationmanagement(RUIM)....................... 109337.4.1 Remoteuserinformationmanagementoverview.....................109337.4.2 RUIMstructuredcommandlineinterfacetools........................ 109437.4.3 ConfiguringRUIM-relatedinternalConfigurationDirectory

attributes.................................................................................. 109737.4.4 EnablingRUIM......................................................................... 110137.4.5 DisablingRUIM.........................................................................110237.4.6 PermissiondefinitioninremoteNetActLDAP.......................... 110437.4.7 RUIMrelatedinternalConfigurationDirectoryattributes..........110737.4.8 NumericuserIDs...................................................................... 111237.4.9 Externaluservalidation............................................................ 111337.4.10 RUIMconfiguration................................................................... 111337.4.10.1 ExternalLDAPconfiguration.....................................................111337.4.10.2 Authorizationdatapublicationmappingtemplates................... 111637.4.10.3 RuimReplicatorconfiguration....................................................111637.4.10.4 PAPconfiguration..................................................................... 111637.4.10.5 PAMconfiguration.....................................................................111637.4.10.6 NSSconfiguration.....................................................................111637.4.11 RUIMconfigurationupdates..................................................... 111637.4.12 AbnormalRUIMsituations........................................................ 111737.5 Creatinguseraccounts.............................................................111837.6 Deletinguseraccounts.............................................................112137.7 Modifyinguseraccounts...........................................................112137.8 FlexiNGusergroups................................................................112437.9 Creatingusergroups................................................................112537.10 Deletingusergroups................................................................ 112737.11 Administeringuser-groupmappings.........................................112737.12 Administeringgroup-permissionmappings.............................. 112837.13 Dumpingserviceaccountdata................................................. 113237.14 Openingalockeduseraccount................................................113437.15 Passwordmanagement............................................................113537.15.1 Passwordsandpasswordverification...................................... 113537.15.2 GeneratingarandompasswordwithSCLI...............................113837.15.3 Changingpasswordsforuseraccounts................................... 113837.15.4 Changingpasswordsforserviceaccounts...............................1139 38 Performancemanagement......................................................114338.1 Performancemanagementoverview........................................114338.2 PerformancemanagementSCLI..............................................114438.3 Performancemanagementconfiguration................................. 114538.3.1 Performancemanagementconfigurationfile............................1145

UserGuide

16 DN0810915 Issue:2-18

38.3.2 Valuesintheperformancemanagementconfigurationfile.......114538.3.3 Measurementtypedefinitionfile...............................................115138.3.4 Contentsofameasurementtypedefinition..............................115238.3.5 Versioningofmeasurementtypes............................................ 115438.4 Objectlists................................................................................115538.4.1 Measurementobjects............................................................... 115538.4.2 Creatinganobjectlist...............................................................115638.4.3 Deletinganobjectlist............................................................... 115838.5 Scheduledmeasurementjobs..................................................115838.5.1 Measurementjobconcepts...................................................... 115838.5.2 Creatingameasurementjob.................................................... 115938.5.3 Deletingameasurementjob.....................................................116238.6 Scheduledthresholdjobs......................................................... 116338.6.1 Thresholdjobconcepts............................................................ 116338.6.2 Creatingathresholdjob........................................................... 116538.6.3 Deletingathresholdjob............................................................116738.7 Performancemanagementresults........................................... 116838.7.1 Measurementresulttransfer.....................................................116838.7.2 Measurementresultfiles.......................................................... 116838.7.3 Performancemanagementfilesystem.....................................117238.7.4 Viewingresultsofperformancemeasurements....................... 1172 39 Licensemanagement............................................................... 117939.1 Licensemanagementoverview................................................117939.2 Importingalicensefile..............................................................118139.3 Exportinglicensefile.................................................................118239.4 Deletinglicensefiles.................................................................118339.5 Configuringwarninglimitsforlicensevalidity...........................118539.6 Listinglicenses......................................................................... 118639.7 Queryinglicenseinformation....................................................118839.8 Showinglicensedfeatures........................................................118939.9 DisplayingthenetworkelementID...........................................1189 40 Bladeinstallationandremoval..................................................119140.1 Bladeinstallationandremovaloverview.................................. 119140.1.1 Bladeinstallation...................................................................... 119140.1.2 Bladeremoval...........................................................................119140.2 InstallingabladeandthecorrespondingRTM......................... 119140.3 Removingablade.....................................................................119440.4 Servicebladeconfiguration..................................................... 119840.4.1 ConfiguringservicebladeVLANs.............................................119840.4.2 ConfiguringservicebladeexternalIPaddresses.....................120240.4.3 Configuringservicebladeinterfacegroups..............................120740.4.4 Configuringservicebladerouting.............................................120940.4.5 ConfiguringservicebladeIPpools...........................................121240.4.6 ConfiguringdummyIPpoolsinthecaseofsharedIPpoolsor

host-basedrouting................................................................... 1215

UserGuide

Issue:2-18 DN0810915 17

40.4.7 Verifyingtheinstallationoftheserviceblade........................... 121640.4.8 RemovingservicebladeIPpoolconfiguration......................... 121940.4.9 Removingservicebladerecoverygroupsfrominterfacegroups.....

121940.4.10 Removingservicebladeroutingconfiguration......................... 122040.4.11 RemovingservicebladeexternalIPaddressconfiguration..... 122140.4.12 RemovingservicebladeVLANconfiguration...........................122340.5 Serviceawarebladeconfiguration........................................... 122440.5.1 ConfiguringserviceawarebladeVLANs..................................122440.5.2 ConfiguringserviceawarebladeexternalIPaddresses.......... 122540.5.3 Configuringserviceawarebladeinterfacegroups................... 122840.5.4 Configuringserviceawarebladerouting..................................123040.5.5 Verifyingtheinstallationoftheserviceawareblade................ 123140.5.6 Removingserviceawarebladerecoverygroupsfrominterface

groups...................................................................................... 123340.5.7 Removingserviceawarebladeroutingconfiguration.............. 123440.5.8 RemovingserviceawarebladeexternalIPaddressconfiguration..

123540.5.9 RemovingserviceawarebladeVLANconfiguration................ 123640.6 Interfacebladeconfiguration....................................................123740.6.1 ConfiguringinterfacebladeVLANs.......................................... 123740.6.2 ConfiguringinterfacebladeexternalIPaddresses.................. 123940.6.3 Configuringinterfacebladerouting.......................................... 124140.6.4 Verifyingtheinstallationoftheinterfaceblade.........................124240.6.5 Removinginterfacebladeroutingconfiguration.......................124540.6.6 RemovinginterfacebladeexternalIPaddressconfiguration...124640.6.7 RemovinginterfacebladeVLANconfiguration........................ 1247 41 Appendix1:Systemlimits........................................................ 1248 42 Appendix2:Recoverygroups.................................................. 125142.1 FlexiNGrecoverygrouprolesandnaming..............................125142.1.1 Recoverygrouproles............................................................... 125142.1.2 N+and2Nrecoverygroupnames........................................... 125542.2 Platformrecoverygroups......................................................... 1261 43 Appendix3:Exceptionaluserplanetrafficrelayingandcharging....

126543.1 CombinedS-GWandP-GW(PMIPvariant)............................ 126543.1.1 IPv6addresses........................................................................ 126543.1.2 IPv4andIPv4/IPv6addresses................................................. 126643.2 CombinedS-GWandP-GW(GTPvariant)..............................126843.2.1 IPv6addresses........................................................................ 126843.2.2 IPv4andIPv4/IPv6addresses................................................. 126943.3 S-GW(PMIPvariant)............................................................... 127143.3.1 IPv6addresses........................................................................ 127143.3.2 IPv4andIPv4/IPv6addresses................................................. 127243.4 S-GW(GTPvariant).................................................................1273

UserGuide

18 DN0810915 Issue:2-18

43.4.1 IPv6addresses........................................................................ 127343.4.2 IPv4andIPv4/IPv6addresses................................................. 127443.5 P-GW(PMIPvariant)............................................................... 127543.5.1 IPv6addresses........................................................................ 127543.5.2 IPv4andIPv4/IPv6addresses................................................. 127643.6 P-GW(GTPvariant).................................................................127843.6.1 IPv6addresses........................................................................ 127843.6.2 IPv4andIPv4/IPv6addresses................................................. 127943.7 GGSN.......................................................................................128043.7.1 IPv6addresses........................................................................ 128043.7.2 IPv4andIPv4/IPv6addresses................................................. 1282 44 Appendix4:Configurationstructureandinterdependencies... 1284 45 Glossary................................................................................... 1285

UserGuide

Issue:2-18 DN0810915 19

ListofFiguresFigure1 BladepositionsinaFlexiNGshelf(minimumconfigurationwith

serviceawarebladesandinterfaceblades)....................................... 56Figure2 BaseInterface.................................................................................... 95Figure3 FabricInterface...................................................................................96Figure4 Bladeandnodeexternalinterfaceconnectivity.................................. 97Figure5 Exampleofinterfacetypes................................................................. 99Figure6 LoadbalancinginGGSN/P-GW....................................................... 147Figure7 LoadbalancinginS-GW...................................................................148Figure8 LoadbalancingincombinedS-GWandP-GW................................ 149Figure9 OptimizedloadbalancingincombinedS-GWandP-GW................ 150Figure10 LoadbalancinginPMIP-basedS5/S8interface............................... 151Figure11 Accesspointsandservicegroups.................................................... 152Figure12 ACLchains(hooks).......................................................................... 175Figure13 Exampleconfigurationforasinglearea........................................... 287Figure14 Exampleconfigurationformultipleareas......................................... 288Figure15 InternalIPpoolsandrecoverygroup-subnetpairswithinasession

profile................................................................................................294Figure16 RADIUSmessageflow,successfulIPallocation..............................298Figure17 RADIUSmessageflow,IPallocationfails........................................ 298Figure18 FlexiNGinterfaceswhichsupportGRE,andconfigurationmethodfor

eachinterface................................................................................... 324Figure19 ConfiguringGREfortunnelingRADIUS........................................... 339Figure20 FlexiNGwithmultipleinternalandasingleexternalVRF................341Figure21 ConfiguringIPsec:packetflowtothelocalIPsectunnelendpoint... 350Figure22 ConfiguringIPsec:packetflowfromthelocalIPsectunnelendpoint.....

351Figure23 Managementinterfaces.................................................................... 395Figure24 TheNE3SSNMPInterface...............................................................396Figure25 ThedistributedSNMPAgent............................................................ 397Figure26 SNMPmediator................................................................................ 400Figure27 IMSI-basedAPNselection................................................................434Figure28 Performedactionsafteroverloadisdetected................................... 449Figure29 Sessionprofileroleinsessioncreation............................................ 464Figure30 RADIUSserverconfigurationsteps..................................................549Figure31 Theeffectoffailback-timeandfailoverthresholdtotheserverstates...

551Figure32 LogicaldivisionbetweenSPIandDPIinFlexiNG........................... 652Figure33 PCCruleconfigurationonhighlevel................................................ 653Figure34 Gx,Gxc,GyandS6bconfigurationsteps........................................ 689Figure35 DPIreporting.................................................................................... 825

UserGuide

20 DN0810915 Issue:2-18

Figure36 Trafficareporting...............................................................................844Figure37 ResultHTTPpoolintheweightedconnectionsloadbalancingmode....

1019Figure38 Sessionpersistenceingatewaypools............................................1021Figure39 Subscribertracetrafficcapturepoints............................................ 1053Figure40 DecodedsubscribertracetrafficUDPpacketcapturefile,asdisplayed

inWireshark....................................................................................1055Figure41 DecodedsubscribertracetrafficGTP-Ucapturefile,asdisplayedin

Wireshark....................................................................................... 1056Figure42 DecodedsubscribertracetrafficGREcapturefile,asdisplayedin

Wireshark....................................................................................... 1056Figure43 DecodedsubscribertracetrafficL2TPcapturefile,asdisplayedin

Wireshark....................................................................................... 1057Figure44 Decodedsubscribertracetrafficforingresspacketcapturefile,as

displayedinWireshark................................................................... 1057Figure45 Decodedsubscribertracetrafficforegresspacketcapturefile,as

displayedinWireshark................................................................... 1057Figure46 Signalingmessagesinsubscribertracetrafficcapturefile,as

displayedinWireshark................................................................... 1061Figure47 SignalingmessagesinsubscribertracetrafficcaptureforGTP,as

displayedinWireshark................................................................... 1062Figure48 SignalingmessagesinsubscribertracetrafficcaptureforDHCP,as

displayedinWireshark................................................................... 1063Figure49 SignalingmessagesinsubscribertracetrafficcaptureforL2TP,as

displayedinWireshark................................................................... 1065Figure50 AuthorizationmappingbetweenNetActRUIMandFlexiNG......... 1105Figure51 Measurementtypeobjects..............................................................1151Figure52 Samplingandreporting...................................................................1152Figure53 Anexampleofprocessingreceivedthresholdmonitoringdata...... 1164Figure54 Networkelementdeliveredwithoptionalfeatures.......................... 1180Figure55 Upgradingfeaturecapacity.............................................................1180Figure56 Takingnewfeaturesintouse.......................................................... 1181Figure57 Installingablade.............................................................................1192Figure58 Removingablade...........................................................................1197Figure59 Configurationstructureandinterdependencies,highlevel.............1284

UserGuide

Issue:2-18 DN0810915 21

ListofTablesTable1 Servicebladenodenaming................................................................ 56Table2 Mandatoryandoptionalcommandnotation....................................... 60Table3 Wildcards............................................................................................60Table4 Listoftop-levelSCLIcommands........................................................61Table5 fsclishoptionsinnon-interactivemode...............................................67Table6 Commandandparameterpermissionsymbols.................................. 69Table7 Commandhistoryoptions...................................................................70Table8 Parametersofthesetclibuilt-incommand........................................ 72Table9 Parametersofthesaveclienvcommand.......................................... 74Table10 Commandfileloadingoptions............................................................ 76Table11 Parametersofthesetclierrorstreamcommand................................ 77Table12 Parametersofthesetclioutstreamcommand................................... 78Table13 Parametersofthesetclitracestreamcommand................................ 78Table14 Parametersforthesavesnapshotcommand.....................................84Table15 Parametersofsave snapshotcommand....................................... 85Table16 Parametersofshow snapshot familyofcommands......................87Table17 Parametersofrestore snapshotcommand.................................88Table18 Parametersofrestore snapshotcommand.................................90Table19 Parametersofdelete snapshotcommand...................................90Table20 ParametersofVLANinterfaces........................................................ 100Table21 Parametersforphysicalinterfaces................................................... 106Table22 Parametersoftheaddnginterfaceinterface-groupcommand........ 109Table23 Parametersofthesetnginterfaceinterface-groupcommand..........111Table24 Parametersofthesetnginterfacegeneralgncommand.................114Table25 Parametersofthesetnginterfacegeneralgncommand.................115Table26 Parametersofthesetnginterfacegeneralgnucommand...............116Table27 Parametersofthesetnginterfacegeneralgzcommand................. 118Table28 ParametersofthesetnginterfacegeneralGzcommand................ 120Table29 Parametersofthesetnginterfacegenerals11command............... 121Table30 Parametersofthecommand............................................................ 122Table31 Parametersofthecommand............................................................ 123Table32 Parametersofthesetnginterfacegenerals1ucommand...............125Table33 Parametersofthesetnginterfacegenerals2-ipv4command......... 127Table34 Parametersofthesetnginterfacegenerals2-ipv6command......... 129Table35 Parametersofthesetnginterfacegenerals5-ipv4command......... 132Table36 Parametersofthesetnginterfacegenerals5-ipv6command......... 134Table37 Parametersofthesetnginterfacegenerals4command.................136Table38 Parametersofthesetnggeneralcombined-mode-load-balancing-

optimizationcommand......................................................................137

UserGuide

22 DN0810915 Issue:2-18

Table39 Parametersofthesetnggeneralcombined-mode-load-balancing-optimizationcommand......................................................................139

Table40 Parametersofthesetnginterfacegenerals4ucommand...............140Table41 Parametersofthesetnginterfacegeneralx1-1command..............143Table42 Parametersofthesetnginterfacegeneralx2command.................145Table43 Parametersofthesetnginterfacegeneralload-balancing-gn

command..........................................................................................154Table44 Parametersofthesetnginterfacegeneralload-balancing-s11

command..........................................................................................156Table45 Parametersofthesetnginterfacegeneralload-balancing-s4

command..........................................................................................159Table46 Parametersofaddngservice-groupcommand............................... 161Table47 Parametersofsetngservice-groupcommand.................................162Table48 Parametersofsetaccesspointcommand....................................... 162Table49 Parameterofthecommandsetngfeatureservice-group-functionality..

163Table50 Parametersofunsetngaccess-pointcommand.............................. 163Table51 Parametersofunsetngservice-groupcommand.............................164Table52 Parametersfortheshow networking interface command...165Table53 Parametersfortheshow networking interface command...167Table54 Mandatoryandoptionalparametersfortheaddnetworkinginstance

command..........................................................................................171Table55 Parametersofthesetnetworkinginstancelink-state-detector

command..........................................................................................172Table56 Parametersofthedeletenetworkinglink-state-detectorcommand. 174Table57 MandatoryandoptionalparametersfortheACLcommands........... 180Table58 QueuesetwithDefaultvalues..........................................................184Table59 Parametersfortheset networking qset command................185Table60 Parametersfortheadd networking vlanmappingcommand..187Table61 ExternalservicessupportedbyFlexiNG......................................... 188Table62 ServicesprovidedbyFlexiNG......................................................... 189Table63 Parametersforshow networking address............................... 190Table64 Parametersforadd networking address................................. 193Table65 Parametersfordelete networking address...........................196Table66 Parametersforadd networking address................................. 198Table67 Parametersfordelete networking address...........................200Table68 Parametersofthehost-pingcommand............................................ 202Table69 ParametersforDNSconfiguration....................................................205Table70 ParametersforNTPconfiguration.................................................... 207Table71 FlexiNGinterfaceswithVRFsupport.............................................. 209Table72 FlexiNGroutingfeatures..................................................................210Table73 Additionalroutingfeatures................................................................ 211

UserGuide

Issue:2-18 DN0810915 23

Table74 Traceoptionsandvaluesforroutingconfiguration...........................217Table75 CommandsforconfiguringOSPFareas...........................................220Table76 CommandsforconfiguringOSPFinterfaces.................................... 224Table77 ThecommandsforconfiguringglobalOSPFparameters................ 229Table78 ParametersformonitoringOSPFprotocol....................................... 231Table79 TheOSPFv2configurationparameters............................................ 234Table80 CommandsforconfiguringOSPFv3areas.......................................236Table81 CommandsforconfiguringOSPFv3interfaces................................ 239Table82 ThecommandsforconfiguringglobalOSPFv3parameters.............242Table83 ParametersformonitoringOSPFv3protocol....................................244Table84 TheOSPFv3configurationparameters............................................ 248Table85 Parametersforconfiguringstaticroutes...........................................251Table86 ParametersforconfiguringstaticroutesforIPv6............................. 255Table87 Parametersfordefiningaggregateroute..........................................259Table88 Parametersfordisablingaggregateroute........................................ 261Table89 Parametersforredistributingroutesbetweenprotocols................... 264Table90 Parametersforredistributingroutesbetweenprotocols................... 265Table91 Parametersfordefiningprotocolranks.............................................268Table92 Parametersofaggregationroute......................................................269Table93 Parametersfordisablingaggregateroute........................................ 271Table94 Parametersforredistributingroutesbetweenprotocols................... 273Table95 Parametersforredistributingroutesbetweenprotocols................... 275Table96 Parametersfordefiningprotocolranks.............................................277Table97 Parametersofthesetngsession-profileue-to-ue-trafficcommand.278Table98 Parametersofthesetngsession-profileforced-ipv4-destination

command..........................................................................................279Table99 Parametersofthesetngsession-profileforced-ipv6-destination

command..........................................................................................280Table100 Parametersofthesetngsession-profilehost-based-routingcommand

..........................................................................................................281Table101 Parametersfortheshow routing routecommand................... 282Table102 Parametersofthehost-traceroutecommand................................... 284Table103 Parametersfortheshow routing node bfd command............286Table104 MaximumvaluesofIPaddressallocationconfigurationobjects...... 294Table105 IPv4specialaddressranges............................................................ 296Table106 IPv6specialprefixvalues................................................................. 296Table107 BasiccombinationsofallowedIPpooltype,allocationrule,and

allocationmethod............................................................................. 301Table108 AllowedallocationmethodsofcertainIPv4addresses.................... 302Table109 Parametersoftheaddngip-poolcommand.................................... 307Table110 Parametersofthesetngip-poolcommand......................................312

UserGuide

24 DN0810915 Issue:2-18

Table111 Parametersofthesetngip-poolcommand......................................314Table112 Parametersoftheunsetngip-poolcommand..................................318Table113 Parametersoftheunsetngip-poolcommand..................................319Table114 Parametersoftheaddngtunneling-profilecommand......................327Table115 Parametersofthesetngsession-profilecommand......................... 330Table116 Parametersofthesetngsession-profilecommand......................... 330Table117 Parametersofthesetngsession-profilecommand........................ 331Table118 Parametersofthesetngtunneling-profilecommand.......................332Table119 Parametersofthesetngsession-profilecommand........................ 335Table120 Parametersoftheunsetngsession-profilecommand.................... 336Table121 Parametersofthedeletengtunneling-profilecommand..................336Table122 ParametersforGREtunnelingcommands.......................................340Table123 Parametersoftheshow ipseccommand......................................362Table124 Parametersoftheshow ipsec template ikev1 config

command..........................................................................................362Table125 Parametersoftheshow ipsec vpn configcommand..............363Table126 Parametersoftheshow ipsec rule configcommand............364Table127 ParametersfortheIPsecglobalconfiguration..................................364Table128 ParametersforanIKEtemplate....................................................... 367Table129 Parametersforavirtualprivatenetwork...........................................369Table130 Parametersforatrafficselectorrule................................................ 372Table131 Parametersoftheaddngvpn-profilecommand.............................. 379Table132 Parametersoftheshowng-adminvpn-profilecommand................. 391Table133 EntitiesdetailsdeterminingtheresultfilesadditioninMRTable.......397Table134 ExampleforcheckingPMresultfileeligibilityforadditiontothe

MRTable........................................................................................... 398Table135 ParametersforSNMPmanager....................................................... 405Table136 MandatoryparametersforsettingSNMPv3authenticationandprivacy

information.......................................................................................405Table137 OptionalparametersforsettingSNMPv3authenticationandprivacy

information........................................................................................406Table138 Mandatoryparametersforsettingnetworkelementinformationfor

SNMPtraps...................................................................................... 408Table139 Optionalparametersforsettingnetworkelementinformationfor

SNMPtraps...................................................................................... 408Table140 ParameterstomodifyexistingNEobjectsusingset config

attribute command................................................................... 409Table141 ParametersforaddingnewSNMPagenthostsusingadd config

objectcommand............................................................................410Table142 ParametersformodifyingthecommunitystringsofSNMPagenthosts

usingset config attributecommand.................................... 411Table143 MandatoryparameterforaddingnewSNMPv2ctrapusingadd

config object command............................................................412

UserGuide

Issue:2-18 DN0810915 25

Table144 OptionalparametersforaddingnewSNMPv2ctrapusingaddconfig object command............................................................412

Table145 MandatoryparameterforaddingnewNE3Strapusingadd configobject command...........................................................................413

Table146 OptionalparametersforaddingnewNE3Strapusingadd configobject command...........................................................................413

Table147 MandatoryparameterformodifyingSNMPv2ctrapusingsetconfig attribute command..................................................... 414

Table148 OptionalparametersformodifyingSNMPv2ctrapusingset configattribute command.................................................................... 414

Table149 MandatoryparameterformodifyingNE3Strapusingset configattribute command.................................................................... 415

Table150 OptionalparametersformodifyingNE3Strapusingset configattribute command.................................................................... 415

Table151 Parametersofadd snmp trap-sinkcommand.......................... 416Table152 Parametersofset snmp trap-sinkcommand.......................... 417Table153 Parametersofdelete snmp trap-sinkcommand....................418Table154 Parametersofthesetnggeneralmodecommand.......................... 421Table155 Parametersoftheaddngplmn-profilecommand............................ 422Table156 Parametersoftheaddngplmn-analysiscommand......................... 424Table157 Parametersofthesetnggeneraldefault-home-plmn-idcommand. 426Table158 Parametersofthesetngfeatures5-protocol-pmipcommand......... 427Table159 Parametersofthesetngprotocolpmipservice-selection-mobility-

option-formatcommand....................................................................428Table160 Parametersofthesetngfeatures5-protocol-gtpcommand............ 429Table161 Parametersoftheshowfastpath-cpu-loadcommand...................... 433Table162 Parametersoftheaddngimsi-analysiscommand...........................435Table163 Parametersoftheaddngimsi-profilecommand..............................437Table164 Parametersofthesetngfeatureimsi-based-apn-selectioncommand..

439Table165 Parametersofthesetnggeneralgxx-modecommand....................440Table166 Bladeslotsandaddresses............................................................... 444Table167 Parametersofthesetngfeaturegx-framed-ip-always-present

command..........................................................................................445Table168 Performedactionsafteroverloadisdetected................................... 448Table169 Parametersofthesetngoverloadoverload-levelscommand......... 450Table170 Parameterofthesetngfeatureoverload-functionalitycommand.... 451Table171 Parameterofthesetngfeatureuserplane-overload-detection

command..........................................................................................452Table172 Parametersofthesetngcpu-monitorcommand............................. 453Table173 Parametersoftheshowng-adminnodecommand..........................456Table174 Parametersofthesetng-adminlocknodecommand...................... 457Table175 Parametersofthesetng-adminunlocknodecommand.................. 458

UserGuide

26 DN0810915 Issue:2-18

Table176 Parametersofthesetng-adminservicecommand.......................... 461Table177 Separateconfigurationprofiles........................................................464Table178 Parametersoftheaddn