Cisco ASR 5000 Series Administration Manual page 17

Femto Network Gateway Overview
Interface Description
FAP Interface The secure interface to the FAPs in the network is an IPSec tunnel. The FNG uses IKEv2 for establishing the
IPSec tunnel.
Note that the FNG does not have a direct interface to the UEs in the network. The FNG receives all voice and
data traffic from the UEs via secure IPSec tunnels between the FNG and the FAPs and sends the traffic to the
operator's IMS core or PDSN/HA.
RADIUS The interface to the RADIUS server is used for FAP device authentication. The FAP can use one of the
Interface following authentication methods:
•
•
•
Interface with the The FNG sends all SIP signaling and bearer traffic from the FAPs to the IMS core to access voice services.
IMS Core
Interface with the The FNG sends all signaling and bearer traffic from the FAPs to the PDSN/HA to access packet data services.
PDSN/HA
OL-24872-01
EAP-AKA (Extensible Authentication Protocol - Authentication and Key Agreement) authentication
PSK (Pre-Shared Key) authentication
X.509 certificate-based peer (client) authentication
Cisco ASR 5000 Series Femto Network Gateway Administration Guide ▄
Network Deployment(s) and Interfaces ▀
17