Configuring Nat/Alg Support; Configuring Ecs Rulebase With Firewall-And-Nat Policy; Configuring Apn With Firewall-And-Nat Policy; Configuring Routing Rules And Nat Alg - Cisco ASR 5000 Administration Manual

RADIUS-based Enhanced Wireless Access Gateway Configuration

Configuring NAT/ALG Support

This section explains NAT/ALG related configurations.
For R-eWAG, the Firewall-and-NAT policy for a subscriber can be specified either in the APN template or in the ECS
rulebase. For selection, the policy specified in the APN configuration has higher priority than the one specified in the
ECS rulebase configuration.


Configuring ECS Rulebase with Firewall-and-NAT Policy



Configuring APN with Firewall-and-NAT Policy



Configuring Routing Rules and NAT ALG

Configuring ECS Rulebase with Firewall-and-NAT Policy
To specify the Firewall-and-NAT policy in an ECS rulebase use the following configuration:
configure
active-charging service <ecs_service_name>
rulebase <rulebase_name>
fw-and-nat default-policy <fw_nat_policy_name>
end
Configuring APN with Firewall-and-NAT Policy
To specify the Firewall-and-NAT policy to use in an APN use the following configuration:
configure
context <context_name>
apn <apn_name>
fw-and-nat policy <fw_nat_policy_name>
end
Configuring Routing Rules and NAT ALG
The routing rules must be configured in the ECS service and the routing rule priorities must be configured in the ECS
rulebase for routing packets to the respective analyzers for performing NAT ALG processing.
configure
active-charging service <ecs_service_name>
#To configure routing ruledefs:
#FTP ALG:
Cisco ASR 5000 Enhanced Wireless Access Gateway Administration Guide ▄
R-eWAG Configuration ▀
55