Profile Management - Cisco ASR 5000 series Product Overview

Hide thumbs Also See for ASR 5000 series:

Table of Contents

ASN Gateway Overview

EAP User Authentication

The ASN Gateway serves as the Extensible Authentication Protocol (EAP) authenticator and mobility key holder for

subscriber connections and RADIUS clients to attached Authorization, Authentication, and Accounting (AAA) servers.

ASN Gateway and AAA

ASN control is handled by the ASN Gateway and the base station. The ASN Gateway control plane handles the feature

set, including AAA functions, context management, profile management, service flow authorization, paging, radio

resource management, and handover. The data plane feature set includes mapping radio bearer to the IP network, packet

inspection, tunneling, admission control, policing, QoS, and data forwarding.

The ASN Gateway acts as an authenticator. It operates in pass-through mode for EAP authentication between the EAP

client (the mobile station) and the EAP (AAA) server. After successful EAP authentication, the AAA server sends the

master session key (MSK) to the ASN Gateway. The ASN Gateway, as authenticator, performs authorization key (AK)

context management. It derives the AK from the MSK and sends it to the base station. As part of the AK context, other

information, such as the AkID and CMAC are sent to the base station to secure the R1 interface.

An AAA module in the ASN Gateway provides flow information for accounting. Every detail about a flow, such as the

transferred or received number of bits, the duration of the connection, and the applied policy, is retrievable from the data

Profile Management

The ASN Gateway provides profile management and a policy function that resides in the connectivity network. Profile

management identifies a subscriber's feature set, such as the allowed QoS rate, number of flows, and type of flows.

In addition, the ASN Gateway maintains a context for the mobile subscriber and the base station. Each subscriber's

context contains the subscriber's profile and security context, and the characteristics of the subscriber's mobile device.

Basic ASN Gateway Mobile IP Network

Acess Service Network (ASN)

ASN Gateway / FA

Connectivity Service Network (CSN)

Cisco ASR 5000 Series Product Overview ▄

ASN Mobility Management ▀