Cisco Prime Nerk 43 User Guide

							  
27-167
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
Figure 27-20 SaMOG Gateway Topology
The SaMOG Gateway enhances the network services in the following ways:
Provides seamless mobility between the 3GPP EPC network and WLANs for EPS (Evolved Packet 
System) services via the GTPv2-based S2a interface.
Functions as a 3GPP Trusted WLAN Access Gateway (TWAG) as the Convergence Gateway (CGW) 
service. The CGW service terminates the S2a interface to the P-GW and acts as the default router 
for the WLAN UEs on its access link, and as a DHCP server for the UE. When the TWAN provides 
access to EPC for an UE, it forwards packets between the UE-TWAG point-to-point link and the S2a 
tunnel for that UE. The association in the TWAN between UE-TWAG point-to-point link and S2a 
tunnel is based on the UE MAC address.
Functions as a 3GPP Trusted WLAN AAA Proxy (TWAP) as the Multi Radio Management Entity 
(MRME) service. The MRME service terminates the STa interface to the 3GPP AAA server and 
relays the AAA information between the WLAN IP access network and the AAA server, or AAA 
proxy in the case of roaming. It establishes the binding of UE subscription data (including IMSI) 
with UE MAC address on the WLAN Access Network. The function provides the TWAG with UE 
subscription data during initial attach or at UE subscription data modification.
The services supported on the SaMOG gateway are:
SaMOG service
CGW service
MRME service
Trusted non-3GPP
IP AccessSignaling Interface
Operator’s
IP ServicesE-UTRAN
eNodeBS1-US11 S1-MME
S5
S2aGx Gxc HSS
SWx S6a
STaAAA
SGi
ASR 5000
SaMOG GW
S-GW
MME
P-GW
PCRF
Bearer Interface
364038 
						

							  
27-168
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
SaMOG Service
The SaMOG Gateway acts as the termination point of the WLAN access network. The SaMOG service 
enables the WLAN UEs in the trusted non-3GPP IP access network to connect to the EPC network via 
Wireless LAN Controllers (WLCs). During configuration, the SaMOG service gets associated with two 
services: the Convergence Gateway (CGW) service and the Multi Radio Mobility Entity (MRME) 
service. These collocated services combine to enable the SaMOG Gateway functionality.
CGW Service
The Convergence Gateway (CGW) service functions as a 3GPP Trusted WLAN Access Gateway 
(TWAG), terminating the S2a interface to the P-GW and acts as the default router for the WLAN UEs 
on its access link.
The CGW service has the following key features and functions:
Functions as a Local Mobility Anchor (LMA) towards the WLCs, which functions as a Mobile 
Access Gateway (MAG) with Proxy MIP capabilities per RFC 5213 and 3GPP TS 29.275 V11.5.
Enables the S2a interface towards the P-GW for session establishment per 3GPP TS 29.274 V11.5.
Routing of packets between the P-GW and the WLAN UEs via the Wireless LAN Controllers 
(WLCs).
Support for PDN type IPv4.
Interacts with the MRME service to provide user profile information to establish the GTP-variant 
S2a interface towards the P-GW per 3GPP TS 29.274.
Provides a Generic Routing Encapsulation (GRE) data path towards the WLCs per RFCs 1701 and 
1702 for tunneling of data towards the WLCs. Also follows RFC 5845 for exchanging GRE keys 
with WLC-based PMIP signaling.
Receives and sends GTPU data packets towards the P-GW per 3GPP TS 29.281 V11.5.
MRME Service
The Multi Radio Mobility Entity (MRME) service functions as a 3GPP Trusted WLAN AAA Proxy 
(TWAP), terminating the STa interface to the 3GPP AAA server. The service relays the AAA 
information between the WLAN IP access network and the AAA server, or AAA proxy in the case of 
roaming.
The MRME service has the following key features and functions:
Relays the AAA information between the Wireless LAN Controllers (WLCs) and the 3GPP AAA 
server.
Supports EAP-over-RADIUS between the SaMOG Gateway and the WLCs to authenticate the 
WLAN UEs per RFC 3579.
Supports the Diameter-based STa interface between the 3GPP AAA server/proxy and the SaMOG 
Gateway per 3GPP TS 29.273 V11.
Supports the exchange of EAP messages over the STa interface per RFC 4072.
Functions as a RADIUS accounting proxy for WLC-initiated accounting messages.
Supports RADIUS Dynamic Authorization Extensions per RFC 3576 to handle HSS/AAA-initiated 
detach and Diameter re-authorization procedures.
Supports authentication between the WLAN UEs and the 3GPP AAA server using EAP-AKA, 
EAP-AKA, and EAP-SIM. 
						

							  
27-169
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
Supports static and dynamic P-GW selection after the authentication procedures.
Supports PDN type IPv4.
Maintains a username database to reuse existing resources when the CGW service receives PMIPv6 
procedures initiated by the WLCs.
Interacts with the CGW service to provide user profile information to establish the GTP-variant S2a 
interface towards the P-GW per 3GPP TS 29.274.
Viewing the SaMOG Configuration Details
To view the SaMOG configuration details:
Step 1Right-click the required device in the Vision client and choose Inventory.
Step 2In the Logical Inventory window, choose Logical Inventory > context > Mobile > SaMOG. The 
SaMOG configuration details are displayed in the content pane.
Table 27-111 describes the SaMOG configuration details.
Table 27-111 SaMOG Configuration Details 
Field Description
Name The name of the SaMOG service configured on the device.
Status The status of the service, which can be any one of the following:
Initiated
Started
Running
Not Started
Down
CGW Service The name of the CGW service configured on the device.
DHCP Service The name of the service configured for DHCP interface support in SaMOG 
service.
DHCPv6 Service The name of the service configured for DHCPv6 interface support in 
SaMOG service.
MRME Service The name of the MRME service configured on the device.
Subscriber Map The subscriber map name associated with the SaMOG service.
Max Sessions The maximum number of sessions the SaMOG service can support.
Setup Timeout The maximum amount of time (in seconds) allowed for session setup. 
Default is 60 seconds.
Absolute Timeout The maximum duration of the session before the system automatically 
terminates the session. Default is 0.
Idle Timeout The maximum duration a session can remain idle before the system 
automatically terminates the session. Default is 0.
Serving PLMN MCC The mobile country code portion of the Serving PLMN. 
						

							  
27-170
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
SaMOG Configuration Commands
The following SaMOG commands can be launched from the logical inventory by choosing the Context 
> Commands > Configuration > Small Cell or Context > Commands > Show. Your permissions 
determine whether you can run these commands (see Permissions Required to Perform Tasks Using the 
Prime Network Clients, page B-1). To find out if a device supports these commands, see the Cisco Prime 
Network 4.3.2 Supported Cisco VNEs.
Viewing the CGW Service Configuration Details
To view the CGW service configuration details:
Step 1Right-click the required device in the Vision client and choose Inventory. 
Step 2In the Logical Inventory window, choose Logical Inventory > context > Mobile > CGW Service. The 
CGW Service configuration details are displayed in the content pane.
Table 27-113 describes the CGW service configuration details. Serving PLMN MNC The mobile network code portion of the Serving PLMN.
New Call Policy The new call policy that the SaMOG service can support. When a new call 
policy is enabled, the policy redirects or rejects new calls in anticipation of 
the chassis reload that completes the upgrade process.
Table 27-111 SaMOG Configuration Details 
Field Description
Table 27-112 SaMOG Configuration Commands
Command Navigation Description
Modify SaMOG
Delete SaMOGExpand SaMOG node> Right-click 
SaMOG service> Commands> 
Configuration Use this command to modify/delete 
the configuration details of a SaMOG 
service.
Show SaMOGExpand SaMOG node> Right-click 
SaMOG service> Commands> Show Use this command to view and confirm 
the configuration details of a SaMOG 
service. 
						

							  
27-171
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
Table 27-113 CGW Service Configuration Details 
Field Description
Name The name of the service configured on the device.
Status The status of the service, which can be any one of the following:
Initiated
Started
Running
Not Started
Down
IPv4 Bind Address (IP 
Address)The Bind IP address for Local Mobility Anchor (LMA) driver. Designates 
address of the LMA service.
IPv6 Bind Address (IP 
Address)The Bind IP address for the LMA driver. Designates address of the LMA 
service.
Egress EGTP Service The associated (Evolved GPRS Tunneling Protocol) EGTP Service.
PGW Service The name of the context in which the PGW service is configured.
GGSN Service The name of the context in which the GGSN service is configured.
SGTP Service The associated (SGSN GPRS Tunneling Protocol) SGTP Service.
Subscriber Map The subscriber map name associated with the CGW service.
qci-qos-mapping The associated QoS Class Index (QCI) QOS Mapping Table.
Registration Lifetime The mobile IPV6 session registration lifetime ranging from 1 to 262140. 
Default is 600 seconds.
Binding Revocation Shows whether binding revocation support for a specific CGW service is 
Enabled or Disabled.
Bind-Revocation 
Max-RetriesThe maximum number of retransmissions of bind revocation.
Bind Revocation 
TimeoutThe retransmission timeout for bind revocation.
Session Delete Delay 
TimerConfigures CGW to retain the session on receiving a termination request till 
configured delay time for session continuity in case of break-before-make 
scenario. Timer is Disabled by default.
Session Delete Delay 
TimeoutConfigures CGW to retain the session until the configured time when the 
timer is enabled. Default timeout when enabled is 10000 milliseconds.
Timestamp Option 
ValidationThe validation of timestamp option in binding update messages. By default 
timestamp is I10:I31.
Timestamp Replay 
ProtectionThe timestamp replay protection scheme as per RFC 4285.
Timestamp Tolerance The acceptable difference in timing (between timestamps) before rejecting 
packet. Ranges from 0 to 65535. Default is 7 seconds.
MAG Service The MAG service associated with the CGW service.
GGSN Service The GGSN service associated with the CGW service. 
						

							  
27-172
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
CGW Configuration Commands
The following CGW commands can be launched from the logical inventory by choosing the Context > 
Commands > Configuration or Context > Commands > Show. Your permissions determine whether 
you can run these commands (see Permissions Required to Perform Tasks Using the Prime Network 
Clients, page B-1). To find out if a device supports these commands, see the Cisco Prime Network 4.3.2 
Supported Cisco VNEs.
Viewing the MRME Service Configuration Details
To view the MRME service configuration details:
Step 1Right-click the required device in the Vision client and choose Inventory.
Step 2In the Logical Inventory window, choose Logical Inventory > context > Mobile > MRME Service. 
The MRME Service configuration details are displayed in the content pane. 
Table 27-115 describes the MRME service configuration details. GRE Sequence 
NumbersIndicates whether the option to insert or remove GRE sequence numbers in 
GRE packets is enabled.
GGSN Context The GGSN context associated with the CGW service.
Egress EGTP Service 
ContextThe associated EGTP service context for CGW service.
Table 27-113 CGW Service Configuration Details  (continued)
Field Description
Ta b l e 2 7 - 1 1 4 C G W  C o m m a n d s
Command Navigation Description
Modify CGW
Delete CGWExpand CGW node> Right-click CGW 
service> Commands> Configuration Use this command to modify/delete 
the configuration details of a CGW 
service.
Show CGWExpand CGW node> Right-click CGW 
service> Commands> Show Use this command to view and confirm 
the configuration details of a CGW 
service. 
						

							  
27-173
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  LTE Networks
Table 27-115 MRME Service Configuration Details
Field Description
Name The name of the service configured on the device.
Status The status of the service, which can be any one of the following:
Initiated
Started
Running
Not Started
Down
IPv4 Bind Address (IP 
Address)The designated address of the MRME service in the RADIUS server mode. 
Must be followed by IPv4 address, using dotted-decimal notation.
Authentication Port The authentication port number.
Accounting Port The accounting port number.
Disconnection Delay 
TimeThe maximum time allowed to retain the session on receiving an accounting 
stop and session continuity further on receiving an accounting start for 
roaming scenarios. Default is 10 seconds.
Disconnection Wait 
TimeThe maximum time allowed to wait for accounting stop before clearing the 
call and after sending disconnect message to WLC. Default is 30 seconds.
DNS-PGW Context The name of the context where the Domain Name System (DNS) client is 
configured for the Packet Data Network Gateway (PGW) selection.
DNS PGW Selection The PGW DNS selection criteria.
FQDN The designated MRME Fully Qualified Domain Name (FQDN), which is 
used for longest suffix match during dynamic allocation.
Associated SaMOG 
serviceThe associated SaMOG service.
Sta Attribute ANID The STa interface attribute. Format for Access Network ID (ANID). This 
attribute contains the access network identifier used for key derivation at the 
Home Subscriber Server (HSS).
MRME operation mode The MRME operation mode.
Sta Attribute Calling 
Station IdThe STa interface attribute that carries the Layer-2 address of the UE in the 
format of calling station identifier. 
Preferred PGW 
Selection MechanismIndicates that the local PGW selection as the preferred mechanism. This is 
applicable for initial attach.
NoteBy default, DNS based selection is displayed.
PGW-ID Selection 
FallbackAllows you to PGW- selection Fallback when AAA provided PGW-ID 
selection fails.
ANID for AAR 
(Non-EAP Session)Allows you to include ANID in AAR message for non-eap session. 
						

							  
27-174
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  Scheduling 3GPP Inventory Retrieval Requests
MRME Configuration Commands
The following MRME commands can be launched from the logical inventory by choosing the Context > 
Commands > Configuration or Context > Commands > Show. (see Permissions Required to Perform 
Tasks Using the Prime Network Clients, page B-1). To find out if a device supports these commands, see 
the Cisco Prime Network 4.3.2 Supported Cisco VNEs. 
Scheduling 3GPP Inventory Retrieval Requests
The 3GPP Inventory Management Web Services for Prime Network Integration Layer (PN-IL) retrieves 
the physical and logical inventory data from the Prime Network managed devices. For details on 
supported network elements, see Cisco Prime Network 4.3.2 Supported Cisco VNEs. For more details on 
the 3GPP inventory management and the web services, refer to the Cisco Prime OSS Integration Guide, 
2.0.
Prime Network allows you to schedule a web service operations for Prime Network Integration Layer to 
run immediately or at a later point in time. Using Prime Network - Web Service Scheduler option, you 
can do the following:
Select the inventory request type based on which the inventory data will be retrieved from either all 
the supported devices or from the specified devices under Prime Network.
Schedule the 3GPP inventory management web service operations to initiate the inventory request 
and executes it according to the specified schedule.
To schedule web services:
Step 1In the Vision client, Events client, or Administration client, choose Tools > Web Service Scheduler. 
Step 2In the Web Service Scheduler window, select General tab and select the inventory request type.
Table 27-117 describes the details of the Web Service Scheduler - General tab. AAA Send 
Framed-MTU SizeThe size of Framed MTU Attribute Value Pairs to be sent in authentication 
request.
Bind IPv6 Address Specifies the IPv6 address of the MRME service in the RADIUS server 
mode.
Table 27-115 MRME Service Configuration Details (continued)
Field Description
Table 27-116 MRME Configuration Commands
Command Navigation Description
Modify MRME
Delete MRMEExpand MRME node> Right-click 
MRME service> Commands> 
Configuration Use this command to modify/delete 
the configuration details of a MRME 
service.
Show MRMEExpand MRME node> Right-click 
MRME service> Commands> Show Use this command to view and confirm 
the configuration details of a MRME 
service. 
						

							  
27-175
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  Scheduling 3GPP Inventory Retrieval Requests
Step 3Click Execute to initiate the inventory request and check the output files as specified in the Response 
message. 
Step 4Click the Scheduling tab to schedule the web services to run later or click on Run Now option to run 
web services immediately.
Step 5To schedule the web services for a later date/time:
a.Select the Schedule Job radio button. The scheduling options Once and Recurring are enabled.
b.To execute the webservice operation once, select the Once radio button and specify the date and 
time.
c.To schedule the web services operation execution on a recurring basis, select the Recurring radio 
button and specify the following:
–The date and time range for the recurrence.
–How often you want to initiate the inventory request within that time range - every X minutes, 
daily, weekly, or monthly.
Step 6Specify comments, if required and click Schedule. Prime Network initiates the inventory request and 
executes it according to your scheduling specifications. Go to the Scheduled Jobs page (To o l s> 
Scheduled Jobs), to check that your inventory request job has been created. You can use the Scheduled 
Jobs page to monitor the job status and to reschedule a job if necessary. You can also clone a scheduled 
job and edit the criteria, if required.
Table 27-117 General Tab in Web Service Scheduler
Field Description
Operation Select from the following inventory request:
getAllInventory - This inventory request is used to retrieve Inventory 
data for all supported devices under Prime Network. One notification 
will be issued by Prime Network Integration Layer upon completion of 
file creation for all supported network elements
getManagedElement - This inventory request is used to retrieve the 
inventory data for a specific managed element. One notification will be 
sent by the Prime Network Integration Layer for the specific managed 
element.
NoteFor information on how to subscribe to a notification, see the Cisco 
Prime OSS Integration Guide, 2.0.
NoteThe API getManagedElement reports the network functions of the 
mobility devices.
Managed Element This options appears only if the inventory request type selected is of 
getManagedElement type. This option allows you to select a specific 
managed element, i.e, ASR5000, Security GW, or ASR5500 for which 
inventory data will be retrieved. 
						

							  
27-176
Cisco Prime Network 4.3.2 User Guide
EDCS-1524415
Chapter 27      Managing Mobile Networks
  MTOSI Inventory Support for Small Cell Integration using Network Function APIs
MTOSI Inventory Support for Small Cell Integration using 
Network Function APIs
To retrieve a specific network function supported by the device, the APIs used are
getNetworkFunctionNamesByType
getNetworkFunction
getNetworkFunctionNamesByType
This API is used to return all the network functions names for a particular network function type like 
mobility function supported by the device.
Following are the supported mobility network function service types, 
GGSN Services
SGSN Services
MME Services
HeNB Gateway Services
–HeNB Gateway Access services
–HeNB Gateway Network Services
HNB Services
Sec Gateway Services
getNetworkFunction
This API is used to return details of mobility network function supported by 
getNetworkFunctionNamesByType API.
NoteAny addition, deletion, or change in the attributes supported by PNIL for the H(e)NB GW,MME,PGW, 
GSN, or Security GW services should be informed to the client subscribed for MTOSI notifications.
Viewing Operator Policies, APN Remaps, and APN Profiles
Operator policy provides mechanisms to fine tune the behavior of subsets of subscribers above and 
beyond the behaviors described in the user profile. It can also be used to control the behavior of visiting 
subscribers in roaming scenarios, enforcing roaming agreements, and providing a measure of local 
protection against foreign subscribers.
An operator policy associates APNs, APN profiles, an APN remap table, and a call-control profile to 
ranges of International Mobile Subscriber Identities (IMSIs). These profiles and tables are created and 
defined within their own configuration modes to generate sets of rules and instructions that can be reused 
and assigned to multiple policies. In this manner, an operator policy manages the application of rules