Proxy Mobile IPv6 Support for MAG Functionality

Transcription

1 Proxy Mobile IPv6 Support for MAG Functionality First Published: July 22, 2011 Last Updated: July 22, 2011 The Proxy Mobile IPv6 Support for MAG Functionality feature provides network-based IP Mobility management to a mobile node without requiring the participation of the mobile node in any IP mobility-related signaling. The Mobile Access Gateway tracks the movements of the mobile node to and from the access link, and sends signals to the local mobility anchor of the mobile node. Finding Feature Information Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the Feature Information for Proxy Mobile IPv6 Support for MAG Functionality section on page 20. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to An account on Cisco.com is not required. Contents Prerequisites for Proxy Mobile IPv6 Support for MAG Functionality, page 2 Information About Proxy Mobile IPv6 Support for MAG Functionality, page 2 How to Configure Proxy Mobile IPv6 Support for MAG Functionality, page 3 Configuration Examples for Proxy Mobile IPv6 Support for MAG Functionality, page 16 Where to Go Next, page 18 Additional References, page 18 Feature Information for Proxy Mobile IPv6 Support for MAG Functionality, page 20 Americas Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA USA

2 Prerequisites for Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Prerequisites for Proxy Mobile IPv6 Support for MAG Functionality The Dynamic Host Configuration Protocol server should be configured. Information About Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Overview, page 2 Mobile Access Gateways, page 2 Local Mobility Anchors, page 2 Mobile Nodes, page 3 AAA Server Attributes for Proxy Mobile IPv6, page 3 Proxy Mobile IPv6 Overview Proxy Mobile IPv6 (PMIP) provides network-based IP Mobility management to an MN, without requiring the participation of the MN in any IP mobility-related signaling. The mobility entities in the network track the movements of the MN, initiate the mobility signaling, and set up the required routing state. The major functional entities of PMIPv6 are the Mobile Access Gateways (MAG), the Local Mobility Anchors (LMA), and the MNs. Mobile Access Gateways The MAG is the entity that performs mobility-related signaling on behalf of the MNs attached to its access links. The MAG is the access router for the MN; that is, the first-hop router in the Localized Mobility Management infrastructure. The major functions of the MAG are as follows: Obtain the IP address from the LMA and assign the address to the MN. Retain the IP address of the MN when the MN roams across the MAGs. Tunnel the traffic for the MN to the LMA. Local Mobility Anchors The LMA is the home agent for the MN in a PMIPv6 domain. It is the topological anchor point for the MN home network prefixes and is the entity that manages the MN's binding state. The LMA has the functional capabilities of a home agent as defined in Mobile IPv6 base specification (RFC 3775) along with the capabilities required for supporting PMIPv6 protocol. 2

3 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality Mobile Nodes A mobile node is an IP host whose mobility is managed by the network. An MN can be an IPv4-only node, IPv6-only node, or a dual-stack node. The MN is not required to participate in any IP mobility-related signaling for achieving mobility for an IP address or for a prefix that is obtained in the PMIP domain. AAA Server Attributes for Proxy Mobile IPv6 If the authentication, authorization, and accounting (AAA) server is available, the Mobile Access Gateway (MAG) obtains profile information for the PMIP domain and the MN from the server during configuration and call-flow time, respectively. The list of AAA attributes required for the PMIP domain and the MN follows: PMIP domain-specific AAA attributes: pmip6-timestamp-window lma-identifier mag-identifier pmip6-replay-protection pmip6-fixed-ll-address pmip6-fixed-l2-address pmip6-domain-identifier Mobile node-specific AAA attributes: home-lma mn-nai multihomed home-lma-ipv6-address mn-service How to Configure Proxy Mobile IPv6 Support for MAG Functionality Configuring a PMIPv6 Domain Using the Configuration from AAA Server, page 4 Configuring a Minimum Configuration for the MAG to Function, page 4 (required) Configuring a Detailed Configuration When a AAA Server Is Not Available, page 6 (optional) Configuring a Minimum Configuration for a Mobile Access Gateway, page 10 (required) Configuring a Detailed Configuration for a Mobile Access Gateway, page 11 (optional) Book Title 3

4 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Configuring a PMIPv6 Domain Using the Configuration from AAA Server SUMMARY STEPS 1. enable 2. configure terminal 3. ipv6 mobile pmipv6-domain domain-name load-aaa 4. end DETAILED STEPS Step 1 Step 2 enable Router> enable configure terminal Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Step 3 Step 4 Router# configure terminal ipv6 mobile pmipv6-domain domain-name load-aaa Router(config)# ipv6 mobile pmipv6-domain D1 load-aaa end Router(config)# end Creates the PMIPv6 domain and configures the PMIPv6 domain by using the configuration from AAA. Exits global configuration mode and returns to privileged EXEC mode. Configuring a Minimum Configuration for the MAG to Function SUMMARY STEPS 1. enable 2. configure terminal 3. ipv6 mobile pmipv6-domain domain-name 4. fixed link-layer-address hardware-address 5. lma lma-id 6. ipv4-address ipv4-address 7. ipv6-address ipv6-address 8. exit 9. Repeat Steps 5 to 8 to configure the second LMA. 4

5 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality 10. nai 11. lma lma-id 12. exit 13. Repeat Steps 10 to 12 to configure the second MN. 14. end DETAILED STEPS Step 1 Step 2 enable Router> enable configure terminal Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Router# configure terminal ipv6 mobile pmipv6-domain domain-name Router(config)# ipv6 mobile pmipv6-domain dn1 fixed-link-layer-address hardware-address Router(config-ipv6-pmipv6-domain)# fixed-link-layer-address aaaa.bbbb.cccc lma lma-id Router(config-ipv6-pmipv6-domain)# lma lma1 ipv4-address ipv4-address Router(config-ipv6-pmipv6-domain-lma)# ipv4-address ipv6-address ipv6-address Router(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1 exit Router(config-ipv6-pmipv6-domain-lma)# exit Step 9 Repeat Steps 5 to 8 to configure the second LMA. Creates the PMIP domain and enters PMIP domain configuration mode. Configures the fixed link-layer address (Layer2 address) for the MAG-enabled interface toward the MN. Configures the LMA within the PMIP domain and enters PMIP domain LMA configuration mode. Configures the IPv4 address for the LMA within the PMIP domain. Configures the IPv6 address for the LMA within the PMIP domain. Exits PMIP domain LMA configuration mode and returns to PMIP domain configuration mode. Book Title 5

6 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Step 10 Step 11 nai Router(config-ipv6-pmipv6-domain)# nai lma lma-id Configures the network access identifier for the MN within the PMIP domain and enters mobile node configuration mode. Configures the LMA for the MN. Step 12 Router(config-ipv6-pmipv6-domain-mn)# lma lma1 exit Router(config-ipv6-pmipv6-domain-mn)# exit Step 13 Repeat Steps 10 to 12 to configure the second MN. Step 14 end Router(config-ipv6-pmipv6-domain)# end Exits PMIP domain MN configuration mode and returns to PMIP configuration mode. Exits PMIP domain configuration mode and returns to privileged EXEC mode. Configuring a Detailed Configuration When a AAA Server Is Not Available SUMMARY STEPS 1. enable 2. configure terminal 3. ipv6 mobile pmipv6-domain domain-name 4. fixed-link-local-address ipv6-address 5. fixed link-layer-address hardware-address 6. replay-protection timestamp [window seconds] 7. auth-option spi {spi-hex-value decimal spi-decimal-value} key {ascii ascii-string hex hex-string} 8. encap {gre-ipv4 ipv6-in-ipv6} 9. local-routing-mag 10. lma lma-id 11. ipv4-address ipv4-address 12. ipv6-address ipv6-address 13. exit 14. Repeat Steps 10 to 13 to configure an LMA each time. 15. mag mag-id 16. ipv4-address ipv4-address 6

7 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality 17. ipv6-address ipv6-address 18. exit 19. mn-profile-load-aaa 20. nai 21. lma lma-id 22. int att interface-access-type l2-addr mac-address 23. gre-encap-key [down up ] key-value 24. service ipv4 25. apn apn-name 26. exit 27. Repeat Steps 20 to 26 to configure an MN each time. 28. end DETAILED STEPS Step 1 Step 2 enable Router> enable configure terminal Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Step 3 Step 4 Step 5 Step 6 Router# configure terminal ipv6 mobile pmipv6-domain domain-name Router(config)# ipv6 mobile pmipv6-domain dn1 fixed-link-local-address ipv6-address Router(config-ipv6-pmipv6-domain)# fixed-link-local-address FE80:0DB8:3333:4::5 fixed-link-layer-address hardware-address Router(config-ipv6-pmipv6-domain)# fixed-link-layer-address aaaa.bbbb.cccc replay-protection timestamp [window seconds] Router(config-ipv6-pmipv6-domain)# replay-protection timestamp window 200 Creates the PMIP domain and enters PMIP domain configuration mode. Configures the fixed link-local address for the MAG-enabled interface toward the MN. Configures the fixed link layer address (L2 address) for the MAG-enabled interface toward the MN. Configures the replay protection mechanism within the PMIP domain. Book Title 7

8 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Step 7 auth-option spi {spi-hex-value decimal spi-decimal-value} key {ascii ascii-string hex hex-string} Configures authentication for the PMIP domain. Step 8 Step 9 Router(config-ipv6-pmipv6-domain)# auth-option spi 67 key ascii key1 encap {gre-ipv4 ipv6-in-ipv6} Router(config-ipv6-pmipv6-domain)# encap gre-ipv4 local-routing-mag Configures the tunnel encapsulation mode type between the MAG and the LMA. Enables local routing for the MAG. Step 10 Step 11 Step 12 Step 13 Router(config-ipv6-pmipv6-domain)# local-routing-mag lma lma-id Router(config-ipv6-pmipv6-domain)# lma lma1 ipv4-address ipv4-address Router(config-ipv6-pmipv6-domain-lma)# ipv4-address ipv6-address ipv6-address Router(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1 exit Router(config-ipv6-pmipv6-domain-lma)# exit Step 14 Repeat Steps 10 to 13 to configure an LMA each time. Step 15 Step 16 mag mag-id Router(config-ipv6-pmipv6-domain)# mag mag1 ipv4-address ipv4-address Router(config-ipv6-pmipv6-domain-mag)# ipv4-address Configures the LMA within the PMIP domain and enters PMIP domain LMA configuration mode. Configures the IPv4 address for the LMA within the PMIP domain. Configures the IPv6 address for the LMA within the PMIP domain. Exits PMIP domain LMA configuration mode and returns to PMIP configuration mode. Configures the MAG within the PMIP domain and enters PMIP domain MAG configuration mode. Configures the IPv4 address for the MAG within the PMIP domain. 8

9 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality Step 17 Step 18 Step 19 Step 20 Step 21 ipv6-address ipv6-address Router(config-ipv6-pmipv6-domain-mag)# ipv6-address 2001:0DB8:2:4::1 exit Router(config-ipv6-pmipv6-domain-mag)# exit mn-profile-load-aaa Router(config-ipv6-pmipv6-domain)# mn-profile-load-aaa nai Router(config-ipv6-pmipv6-domain)# nai lma lma-id Configures the IPv6 address for the MAG within the PMIP domain. Exits PMIP domain MAG configuration mode and returns to PMIP domain configuration mode. (Optional) Loads the profile configuration from AAA to the MN within the PMIP domain. Note The steps 20 to 27 need not be executed if the MN is configured using the configuration from AAA. You can use the specific command to override the configuration for the specific MN parameter. Configures the network access identifier for the MN within the PMIP domain and enters mobile node configuration mode. Configures the LMA for the MN. Step 22 Router(config-ipv6-pmipv6-domain-mn)# lma lma1 int att interface-access-type l2-addr mac-address Configures the access technology type, interface, and the MAC address of the MN interface within the PMIP domain. Step 23 Step 24 Step 25 Router(config-ipv6-pmipv6-domain-mn)# int att GigabitETHERNET l2-addr 02c7.f gre-encap-key [down up]key-value Router(config-ipv6-pmipv6-domain-mn)# gre-encap-key down 45 service ipv4 Router(config-ipv6-pmipv6-domain-mn)# service ipv4 apn apn-name Router(config-ipv6-pmipv6-domain-mn)# apn apn1 Configures generic routing encapsulation key for the MN within the PMIP domain. Configures the service provided to the MN within the PMIP domain. Specifies an access point name to the subscriber of the MN within the PMIP domain. Book Title 9

10 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Step 26 exit Exits PMIP domain MN configuration mode and returns to PMIP domain configuration mode. Router(config-ipv6-pmipv6-domain-mn)# end Step 27 Repeat Steps 20 to 26 to configure an MN each time. Step 28 end Exits PMIP domain configuration mode and returns to privileged EXEC mode. Router(config-ipv6-pmipv6-domain)# end Configuring a Minimum Configuration for a Mobile Access Gateway SUMMARY STEPS 1. enable 2. configure terminal 3. ipv6 mobile pmipv6-mag mag-id domain domain-name 4. address ipv6 ipv6-address 5. interface type number 6. role {3gpp wlan} 7. apn apn-name 8. exit DETAILED STEPS Step 1 Step 2 enable Router> enable configure terminal Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Step 3 Router# configure terminal ipv6 mobile pmipv6-mag mag-id domain domain-name Router(config)# ipv6 mobile pmipv6-mag mag1 domain dn1 Enables the MAG service on the router, configures the PMIP domain for the MAG, and enters MAG configuration mode. 10

11 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality Step 4 address ipv6 ipv6-address Configures the IPv6 address for the MAG. Step 5 Router(config-ipv6-pmipv6-mag)# address 2001:0DB8:2:4::1 interface type number Enables the interface for the MAG. Step 6 Router(config-ipv6-pmipv6-mag)# interface gigabitethernet0/0/0 role {3gpp wlan} Configures the role of the MAG. Step 7 Step 8 Router(config-ipv6-pmipv6-mag)# role lte apn apn-name Router(config-ipv6-pmipv6-mag)# apn apn2 exit Router(config-ipv6-pmipv6-mag)# exit Specifies an access point name to the subscriber of the MAG. Note Specifying an access point name is mandatory if the role of the MAG is 3GPP. Exits MAG configuration mode and returns to privileged EXEC mode. Configuring a Detailed Configuration for a Mobile Access Gateway SUMMARY STEPS 1. enable 2. configure terminal 3. ipv6 mobile pmipv6-mag mag-id domain domain-name 4. role {3gpp wlan} 5. apn apn-name 6. local-routing-mag 7. discover-mn-detach seconds timeout-seconds 8. address ipv4 ipv4-address 9. address ipv6 ipv6-address 10. interface type number 11. binding maximum number 12. binding lifetime seconds 13. binding refresh-time seconds 14. binding init-retx-time milliseconds Book Title 11

12 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality 15. binding max-retx-time milliseconds 16. replay-protection timestamp [window seconds] 17. fixed-link-local-address ipv6-address 18. fixed-link-layer-address hardware-address 19. bri delay min milliseconds 20. bri delay max milliseconds 21. bri retry number 22. lma lma-id domain-name 23. auth-option spi {spi-hex-value decimal spi-decimal-value} key {ascii hex} hex-string 24. ipv4-address ipv4-address 25. ipv6-address ipv6-address 26. encap {gre-ipv4 ipv6-in-ipv6} 27. end 28. show ipv6 pmipv6 mag globals DETAILED STEPS Step 1 Step 2 enable Router> enable configure terminal Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Step 3 Step 4 Router# configure terminal ipv6 mobile pmipv6-mag mag-id domain domain-name Router(config)# ipv6 mobile pmipv6-mag mag1 domain dn1 role {3gpp wlan} Enables the MAG service on the router, configures the PMIP domain for the MAG, and enters MAG configuration mode. Configures the role of the MAG. Step 5 Router(config-ipv6-pmipv6-mag)# role 3gpp apn apn-name Router(config-ipv6-pmipv6-mag)# apn apn2 Specifies an access point name to the subscriber of the MAG. 12

13 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality Step 6 local-routing-mag Enables local routing for the MAG. Step 7 Step 8 Step 9 Router(config-ipv6-pmipv6-mag)# local-routing-mag discover-mn-detach seconds timeout-seconds Router(config-ipv6-pmipv6-mag)# discover-mn-detach 45 5 address ipv4 ipv4-address Router(config-ipv6-pmipv6-mag)# address ipv address ipv6 ipv6-address Enables periodic verification of the MN attachment with the MAG-enabled interface. Configures the IPv4 address for the MAG. Note Configuring the IPv4 address for the MAG will enable the encapsulation type as GRE-IPv4, which does not work on the Cisco ASR 5000 LMA. For Cisco IOS XE Release 3.4S, the only supported option is IPv6-in-IPv6. Configures the IPv6 address for the MAG. Step 10 Router(config-ipv6-pmipv6-mag)# address ipv6 2001:0DB8:2:4::1 interface type number Enables the interface for the MAG. Step 11 Step 12 Step 13 Router(config-ipv6-pmipv6-mag)# interface gigabitethernet0/0/0 binding maximum number Router(config-ipv6-pmipv6-mag)# binding maximum 200 binding lifetime seconds Router(config-ipv6-pmipv6-mag)# binding lifetime 5000 binding refresh-time seconds Specifies the maximum number of Proxy Binding Update (PBU) entries allowed for the MAG. Specifies the maximum lifetime permitted for the PBU entry. Specifies the PBU entry refresh time. Step 14 Router(config-ipv6-pmipv6-mag)# binding refresh-time 2000 binding init-retx-time milliseconds Router(config-ipv6-pmipv6-mag)# binding init-retx-time 110 Specifies the initial timeout between the PBU and the Proxy Binding Acknowledgment (PBA), until the PBA is received. Book Title 13

14 How to Configure Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Step 15 Step 16 Step 17 Step 18 Step 19 Step 20 Step 21 Step 22 Step 23 binding max-retx-time milliseconds Router(config-ipv6-pmipv6-mag)# binding max-retx-time 4000 replay-protection timestamp [window seconds] Router(config-ipv6-pmipv6-mag)# replay-protection timestamp window 200 fixed-link-local-address ipv6-address Router(config-ipv6-pmipv6-mag)# fixed-link-local-address FE80:0DB8:3333:5::1 fixed-link-layer-address hardware-address Router(config-ipv6-pmipv6-mag)# fixed-link-layer-address aabb.bbbb.ccca bri delay min milliseconds Router(config-ipv6-pmipv6-mag)# bri delay min 500 bri delay max milliseconds Router(config-ipv6-pmipv6-mag)# bri delay max 4500 bri retry number Router(config-ipv6-pmipv6-mag)# bri retry 6 lma lma-id domain-name Router(config-ipv6-pmipv6-mag)# lma lma3 dn1 auth-option spi {spi-hex-value decimal spi-decimal-value} key {ascii hex} hex-string Specifies the maximum timeout between the PBU and the PBA until the PBA is received. Configures the replay protection mechanism within the MAG. Configures the fixed link-local address for the MAG-enabled interface. Configures the fixed link-layer address (L2 address) for the MAG. Specifies the minimum time the LMA should wait before transmitting the Binding Revocation Indication (BRI) message. Specifies the maximum time the LMA should wait for the Binding Revocation Acknowledgment (BRA) before retransmitting the BRI message. Specifies the maximum number of times the LMA should retransmit the BRI message, until BRA is received. Configures the LMA for the MAG and enters MAG-LMA configuration mode. Configures authentication for the LMA within the MAG. Router(config-ipv6-pmipv6mag-lma)# auth-option spi decimal 258 key hex BDF 14

15 Proxy Mobile IPv6 Support for MAG Functionality How to Configure Proxy Mobile IPv6 Support for MAG Functionality Step 24 ipv4-address ipv4-address Configures the IPv4 address for the LMA within the MAG. Step 25 Router(config-ipv6-pmipv6mag-lma)# ipv4-address ipv6-address ipv6-address Configures the IPv6 address for the LMA within the MAG. Step 26 Step 27 Step 28 Router(config-ipv6-pmipv6mag-lma)# ipv6-address 2001:0DB8:2:5::1 encap {gre-ipv4 ipv6-in-ipv6} Router(config-ipv6-pmipv6mag-lma)# encap gre-ipv4 end Router(config-ipv6-pmipv6mag-lma)# end show ipv6 pmipv6 mag globals Configures the tunnel encapsulation mode type between the MAG and the LMA. Exits MAG-LMA configuration mode and returns to privileged EXEC mode. (Optional) Displays MAG global configuration details. Router# show ipv6 pmipv6 mag globals Example The following example shows MAG global configuration: Router# show ipv6 mobile pmipv6 mag globals Domain : D1 Mag Identifier : M1 MN's detach discover : disabled Local routing : disabled Mag is enabled on interface : Ethernet0/0 Mag is enabled on interface : Ethernet0/1 Max Bindings : 3 AuthOption : disabled RegistrationLifeTime : 3600 (sec) BRI InitDelayTime : 1000 (msec) BRI MaxDelayTime : (msec) BRI MaxRetries : 6 BRI EncapType : IPV6_IN_IPV6 Fixed Link address is : enabled Fixed Link address : aaaa.aaaa.aaaa Fixed Link Local address is : enabled Fixed Link local address : 0xFE x0 0x0 0x2 RefreshTime : 300 (sec) Refresh RetxInit time : (msec) Refresh RetxMax time : (msec) Timestamp option : enabled Validity Window : 7 Book Title 15

16 Configuration Examples for Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Peer : LMA1 Max Bindings : 3 AuthOption : disabled RegistrationLifeTime : 3600 (sec) BRI InitDelayTime : 1000 (msec) BRI MaxDelayTime : (msec) BRI MaxRetries : 6 BRI EncapType : IPV6_IN_IPV6 Fixed Link address is : enabled Fixed Link address : aaaa.aaaa.aaaa Fixed Link Local address is : enabled Fixed Link local address : 0xFE x0 0x0 0x2 RefreshTime : 300 (sec) Refresh RetxInit time : (msec) Refresh RetxMax time : (msec) Timestamp option : enabled Validity Window : 7 Peer : LMA2 Max Bindings : 3 AuthOption : disabled Troubleshooting Tips The following commands can help troubleshoot MAG configuration: debug ipv6 mobile mag event debug ipv6 mobile mag info show ipv6 pmipv6 mag bindings show ipv6 pmipv6 mag globals Configuration Examples for Proxy Mobile IPv6 Support for MAG Functionality Configuring a Proxy Mobile IPv6 Domain Using the Configuration from a AAA Server, page 16 Configuring a Proxy Mobile IPv6 Domain When the Configuration from a AAA Server Is Not Available, page 17 Configuring a Mobile Access Group, page 17 Configuring a Proxy Mobile IPv6 Domain Using the Configuration from a AAA Server The following example shows how to configure the PMIP domain using a AAA configuration: Router# configure terminal Router(config)# ipv6 mobile pmipv6-domain D1 load-aaa The following example shows how to configure the PMIP domain using the configuration from a AAA server, and to override configuration for specific PMIP domain parameters: 16

17 Proxy Mobile IPv6 Support for MAG Functionality Configuration Examples for Proxy Mobile IPv6 Support for MAG Functionality Router# configure terminal Router(config)# ipv6 mobile pmipv6-domain D11 load-aaa Router(config)# ipv6 mobile pmipv6-domain D11 Router(config-ipv6-pmipv6-domain)# gre-ipv4 Router(config-ipv6-pmipv6-domain)# auth-option spi 67 key ascii key1 Configuring a Proxy Mobile IPv6 Domain When the Configuration from a AAA Server Is Not Available The following example shows how to configure the PMIP domain when a AAA configuration is not available: Router# configure terminal Router(config)# ipv6 mobile pmipv6-domain D2 Router(config-ipv6-pmipv6-domain)# fixed-link-local-address FE80:0DB8:3333:4::5 Router(config-ipv6-pmipv6-domain)# fixed-link-layer-address aaaa.bbbb.cccc Router(config-ipv6-pmipv6-domain)# replay-protection timestamp window 200 Router(config-ipv6-pmipv6-domain)# auth-option spi hex 100 key ascii hi Router(config-ipv6-pmipv6-domain)# encap ipv6-in-ipv6! Router(config-ipv6-pmipv6-domain)# lma lma1 Router(config-ipv6-pmipv6-domain-lma)# ipv4-address Router(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1 Router(config-ipv6-pmipv6-domain-lma)# exit! Router(config-ipv6-pmipv6-domain)# mag mag1 Router(config-ipv6-pmipv6-domain-mag)# ipv4-address Router(config-ipv6-pmipv6-domain-mag)# ipv6-address 2001:0DB8:2:5::1 Router(config-ipv6-pmipv6-domain)# exit! Router(config-ipv6-pmipv6-domain)# nai abc@example.com Router(config-ipv6-pmipv6-domain-mn)# lma lma1 Router(config-ipv6-pmipv6-domain-mn)# int att GigabitETHERNET l2-addr 02c7.f Router(config-ipv6-pmipv6-domain-mn)# gre-encap-key upstream 1234 Router(config-ipv6-pmipv6-domain-mn)# gre-encap-key downstream 5678 Router(config-ipv6-pmipv6-domain-mn)# service ipv4 Router(config-ipv6-pmipv6-domain)# end Configuring a Mobile Access Group The following example shows the minimum configuration required for the MAG to be functional: Router# configure terminal Router(config)# ipv6 mobile pmipv6-domain D2 Router(config-ipv6-pmipv6-domain)# fixed-link-layer-address aaaa.bbbb.cccc! Router(config-ipv6-pmipv6-domain)# lma lma1 Router(config-ipv6-pmipv6-domain-lma)# ipv4-address Router(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1 Router(config-ipv6-pmipv6-domain-lma)# exit! Router(config-ipv6-pmipv6-domain)# lma lma2 Router(config-ipv6-pmipv6-domain-lma)# ipv4-address Router(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:4::1 Router(config-ipv6-pmipv6-domain-lma)# exit! Router(config-ipv6-pmipv6-domain)# nai abc1@example.com Router(config-ipv6-pmipv6-domain-mn)# lma lma1 Router(config-ipv6-pmipv6-domain-mn)# exit Book Title 17

18 Where to Go Next Proxy Mobile IPv6 Support for MAG Functionality! Router(config-ipv6-pmipv6-domain)# nai Router(config-ipv6-pmipv6-domain-mn)# lma lma2 Router(config-ipv6-pmipv6-domain-mn)# exit! Router(config)# ipv6 mobile pmipv6-mag mag1 domain D2 Router(ipv6-mag-config)# address ipv6 5020::1 Router(ipv6-mag-config)# address ipv Router(ipv6-mag-config)# interface gigabitethernet0/0/0 Router(ipv6-mag-config)# role 3gpp Router(ipv6-mag-config)# apn a Router(ipv6-mag-config)# exit Where to Go Next The MAG entity functions along with the LMA provided by ASR To configure the LMA in the Cisco ASR 5000, see the PDN Gateway Configuration chapter in the Cisco ASR 5000 Series Packet Data Network Gateway Administration Guide. Additional References Related Documents Related Topic Cisco IOS commands IP Mobility Commands PDN Gateway Configuration. Document Title Cisco IOS Master Commands List, All Releases Cisco IOS IP Mobility Command Reference Cisco ASR 5000 Series Packet Data Network Gateway Administration Guide Standards Standard Title None MIBs MIB None MIBs Link To locate and download MIBs for selected platforms, Cisco software releases, and feature sets, use Cisco MIB Locator found at the following URL: 18

19 Proxy Mobile IPv6 Support for MAG Functionality Additional References RFCs RFC RFC 3775 RFC 5213 RFC 5844 RFC 5845 RFC 5846 Title Mobility Support in IPv6 Proxy Mobile IPv6 IPv4 Support for Proxy Mobile IPv6 Generic Routing Encapsulation (GRE) Key Option for Proxy Mobile IPv6 Binding Revocation for IPv6 Mobility Technical Assistance Description The Cisco Support and Documentation website provides online resources to download documentation, software, and tools. Use these resources to install and configure the software and to troubleshoot and resolve technical issues with Cisco products and technologies. Access to most tools on the Cisco Support and Documentation website requires a Cisco.com user ID and password. Link Book Title 19

20 Feature Information for Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Feature Information for Proxy Mobile IPv6 Support for MAG Functionality Table 1 lists the release history for this feature. Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to An account on Cisco.com is not required. Note Table 1 lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature. 20

21 Proxy Mobile IPv6 Support for MAG Functionality Feature Information for Proxy Mobile IPv6 Support for MAG Functionality Table 1 Feature Information for Proxy Mobile IPv6 MAG Functionality Support Feature Name Releases Feature Information Proxy Mobile IPv6 MAG Functionality Support Cisco IOS XE Release 3.4S The Proxy Mobile IPv6 Support for MAG Functionality feature provides network-based IP Mobility management to a mobile node without requiring the participation of the mobile node in any IP mobility-related signaling. The Mobile Access Gateway tracks the movements of the mobile node to and from the access link, and sends signals to the local mobility anchor of the mobile node. In Cisco IOS XE Release 3.4S, this feature was introduced on the Cisco ASR 1000 series routers. The following sections provide information about this feature: Information About Proxy Mobile IPv6 Support for MAG Functionality, page 2 Configuring a PMIPv6 Domain Using the Configuration from AAA Server, page 4 Configuring a Minimum Configuration for the MAG to Function, page 4 Configuring a Detailed Configuration When a AAA Server Is Not Available, page 6 Configuring a Minimum Configuration for a Mobile Access Gateway, page 10 Configuring a Proxy Mobile IPv6 Domain Using the Configuration from a AAA Server, page 16 Configuring a Proxy Mobile IPv6 Domain When the Configuration from a AAA Server Is Not Available, page 17 Configuring a Mobile Access Group, page 17 The following commands were introduced: address, apn, auth-option, binding, bri, clear ipv6 mobile pmipv6 mag, debug ipv6 mobile mag, debug ipv6 mobile packets, discover-mn-detach, encap, fixed-link-layer-address, fixed-link-local-address, gre-encap-key, int att, interface, ipv4-address, ipv6 mobile pmipv6-domain, ipv6 mobile pmipv6-mag, ipv6-address, lma, local-routing-mag, mag, mn-profile-load-aaa, multi-homed, nai, replay-protection, role, service, show ipv6 mobile pmipv6 mag binding, show ipv6 mobile pmipv6 mag globals, show ipv6 mobile pmipv6 mag stats. Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R) Book Title 21

22 Feature Information for Proxy Mobile IPv6 Support for MAG Functionality Proxy Mobile IPv6 Support for MAG Functionality Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental Cisco Systems, Inc. All rights reserved. 22