Table Of Contents - Cisco ASR 5000 Series Administration Manual

C
ONTENTS
About this Guide ................................................................................................. v
Conventions Used .................................................................................................................................................... vi
Contacting Customer Support ............................................................................................................................... viii
Femto Network Gateway Overview ................................................................... 9
Product Description ................................................................................................................................................ 10
Summary of FNG Features and Functions ............................................................................................................. 11
Product Specifications ............................................................................................................................................ 12
Licenses ............................................................................................................................................................. 12
Hardware Requirements .................................................................................................................................... 12
Platforms ....................................................................................................................................................... 12
Components .................................................................................................................................................. 12
Operating System Requirements ....................................................................................................................... 13
Network Deployment(s) and Interfaces .................................................................................................................. 14
Network Elements ............................................................................................................................................. 14
Femtocell Access Point ................................................................................................................................. 14
Femtocell Management System .................................................................................................................... 15
Femto Network Gateway .............................................................................................................................. 15
Femtocell AAA Server ................................................................................................................................. 15
IMS Core Network Elements ........................................................................................................................ 15
PDSN/HA ..................................................................................................................................................... 16
Basic Operation ................................................................................................................................................. 16
Network Interfaces ............................................................................................................................................ 16
Features and Functionality ..................................................................................................................................... 18
FNG Service ...................................................................................................................................................... 18
IKEv2 and IP Security (IPSec) Encryption ....................................................................................................... 19
X.509 Certificate-based Peer Authentication .................................................................................................... 19
A12 Aggregation ............................................................................................................................................... 20
RADIUS Support ............................................................................................................................................... 20
AAA Server Group Selection ............................................................................................................................ 21
FAP ID-based Duplicate Session Detection ...................................................................................................... 21
Tunnel Cleanup on FAP Reboot ................................................................................................................... 21
Child SA Rekey Support ................................................................................................................................... 21
Multiple Child SAs ............................................................................................................................................ 22
DoS Protection Cookie Challenge ..................................................................................................................... 22
IKEv2 Keep-Alive Messages (Dead Peer Detection) ........................................................................................ 22
DSCP Marking .................................................................................................................................................. 23
Custom DNS Handling ...................................................................................................................................... 23
Session Recovery Support ................................................................................................................................. 23
Congestion Control ............................................................................................................................................ 24
Bulk Statistics .................................................................................................................................................... 24
Threshold Crossing Alerts ................................................................................................................................. 25
How the FNG Works .............................................................................................................................................. 27
IPSec Tunnel Establishment .............................................................................................................................. 27
IPSec Tunnel Establishment with EAP-AKA Authentication ........................................................................... 28
X.509 Certificate-based Peer Authentication .................................................................................................... 30
Supported Standards ............................................................................................................................................... 33
OL-24872-01
Cisco ASR 5000 Series Femto Network Gateway Administration Guide ▄
iii