Table of Contents

About This Guide
Audience
Conventions
Obtaining Documentation
Documentation Feedback
Requesting Technical Support
Self-Help Online Tools and Resources
Opening a Case with JTAC
Related Documentation
3GPP Technical Specifications
Requests for Comments (RFCs)
Introduction
Licensing
3GPP WLAN Interworking Reference Model
Network Elements
WLAN UE
WLAN AN
3GPP AAA Server
WAG
PDG
SLF
HLR
HSS
Offline Charging System
Reference Points
Supported Protocols in the IMS AAA Server
System Setup
Before You Begin
System Recommendations
Installing IMS AAA Server and Administrator Software
Example Output of pkgadd Command for IMS AAA Server Package-New Installation
Validating the Server Installation Procedure
Example Output of pkgadd Command for IMS AAA Server Administrator Package
Starting and Stopping the IMS AAA Server
Automatic Restart
Manually Starting and Stopping the Server or SNMP Agent
Manually Starting and Stopping the IMS AAA Server
Manually Starting and Stopping the SNMP Agent
Starting the IMS AAA Server Administrator
First Configuration Steps
Upgrading from a Previous Revision of Software
Example Output of Upgrade After Removing Existing Installation
Example Output of Upgrade Without Removing Existing Installation
Uninstalling IMS AAA Server
Overview
IMS Background
3GPP WLAN Interworking
Overview of 3GPP WLAN Environment
Overview of 3GPP WLAN Access Services Supported by IMS AAA Server
WLAN Direct IP Access
WLAN 3GPP IP Access
Roaming Scenarios
Unlicensed Mobile Access (UMA)
Femtocell
Overview of IMS AAA Server AAA Functions
Authentication
Authorization
Accounting
Proxy Routing
Basic IMS AAA Server Configuration Concepts
Network Elements
Local Network Element
Remote Network Elements
Configuring the Local Network Element
Server Identification
RADIUS and Diameter Message Transport
RADIUS Message Transport Configuration
Diameter Message Transport Configuration
Configuring a Remote Network Element
Creating and Naming the Remote Network Element
Functions
Managing Communication to Remote Network Elements
Round Robin and Primary/Backup
Round Robin
Primary/Backup
Diameter Configuration Overview
Configuring Diameter Connections
Detecting Diameter Connection Failures
Assigning Functions to a Diameter Remote Network Element
Configuring Implicit Routing Rules for Diameter Functions
Example Diameter Configuration
RADIUS Configuration Overview
RADIUS Client and Target Communication
RADIUS Remote Network Element-Upstream Configuration
RADIUS Remote Network Element-Downstream Configuration
RADIUS Client and Target Configuration Parameters
Shared Secrets
RADIUS Change of Authorization/Disconnect Messages
How Disconnect Messages Work
How Change of Authorization Messages Work
RADIUS Dynamic Authorization Support in the IMS AAA Server
Assigning Functions to a RADIUS Remote Network Element
RADIUS Accounting
Example RADIUS Configuration
Local IMS Policy
Local Profiles
Local Profile Selection
Request Routing
Implicit Routing
Explicit Routing
Routing Rule Evaluation Process
RADIUS/Diameter Translation
IMS AAA Server Administrator
Local Network Element
Configuring the Server Identification
Deleting a Local Address
Deleting a Local Realm Name
Configuring Diameter and RADIUS Message Transport
Configuring the Diameter Message Transport
Editing the Diameter Message Transport Configuration
Deleting the Diameter Message Transport Configuration
Configuring RADIUS Message Transport
Editing the RADIUS Message Transport Configuration
Deleting the RADIUS Message Transport Configuration
Using the IMS AAA Server Administrator
Running the IMS AAA Server Administrator
Logging in to the IMS AAA Server
Navigating in IMS AAA Server Administrator
Administrator Panels
Administrator Menus
File Menu
Help Menu
Administrator Toolbar
Administrator Dialogs
Adding a new Entry
Editing an Entry
Resizing Columns
Administering License Keys
Adding a New License Key
Removing a License Key
Exiting the IMS AAA Server Administrator
Administering Remote Network Elements
Common Administrative Tasks
Creating and Naming a Diameter or RADIUS Remote Network Element
Editing a Diameter or RADIUS Remote Network Element Description
Deleting a Diameter or RADIUS Remote Network Element
Assigning Functions and Configuring Implicit Routing Rules
Functions Supported in the IMS AAA Server
Implicit Routing Rules
Implicit Routing Rule Priorities
Assigning Functions to a Remote Network Element
Configuring Implicit Routing Rules
Configuring IMSI Routing Rules
Configuring Realm Routing Rules
Configuring Origin-Host Routing Rules (WAG Function only)
Configuring Origin-Realm Routing Rules (WAG Function only)
Editing Functions and Implicit Routing Rules
Deleting a Function from a Diameter or RADIUS Remote Network Element
Administering Diameter Remote Network Elements
Configuring Diameter Connections
Round Robin and Primary/Backup
Editing Diameter Connections
Editing the Diameter Connection Configuration
Editing the Round Robin or Primary/Backup Configuration and Re-ordering the Diameter Connections
Deleting a Diameter Connection
Administering RADIUS Remote Network Elements
Configuring RADIUS Clients
Configuring RADIUS Targets
Configuring the Round Robin or Primary/Backup Features for RADIUS Targets
Configuring the Retry and Fast Fail Policies for the RADIUS Target
Editing RADIUS Clients
Editing RADIUS Targets
Editing the Round Robin or Primary/Backup Configuration and Re-ordering the RADIUS Targets
Editing the Retry Policy and the Fast Fail Policy for the Target
Deleting RADIUS Clients
Deleting RADIUS Targets
Policy
About Local Profiles
Attributes and I-WLAN Policies
Attribute Lists
Return List
Copy List
Periodic Reauthorization
Combining Attribute Lists
Using Attribute Lists
Example of Using the Attributes to Be Set in Response Feature
Example of Using the Attributes to Be Copied from Downstream Feature
Example of Using Both Features Together
Attribute Values
Single- and Multi-Valued Attributes
Orderable Attributes
I-WLAN Policy
I-WLAN Authorized W-APNs
I-WLAN Allowed Visited Networks
I-WLAN Global Access Dependence
I-WLAN Global Maximum Number of Accesses
I-WLAN Global Maximum Subscribed Bandwidth
Global Wireless LAN Access
Global WLAN 3GPP IP Access
Global WLAN Direct IP Access
Global Charging Data
Profile Selection
Authorization Process
3GPP WLAN Service Scenario Type
Roaming/Non-roaming Scenario
Profile Retrieval
Profile Completion
Authorized Visited Networks
Authorized W-APN List
Access Dependence
Charging Characteristics (all W-APN)
Charging Nodes (all W-APN)
Per W-APN Authorization
IP Address Assignment
Administering Profiles
Creating a Local Profile
Configuring the Authorization Attributes for the Local Profile
Adding the Periodic Reauthorization Attribute
Adding a Return or Copy List to the Local Profile
Configuring an I-WLAN Policy for the Local Profile
I-WLAN Authorized W-APNs
I-WLAN Allowed Visited Networks
I-WLAN Global Access Dependence
I-WLAN Global Maximum Number of Accesses
I-WLAN Global Maximum Subscribed Bandwidth
Global Wireless LAN Access
Global WLAN 3GPP IP Access
Global WLAN Direct IP Access
Global Charging Data
Editing a Local Profile
Deleting a Local Profile
Refreshing the List of Profiles
Configuring Local Profile Selection
Creating a Profile Selection Rule Set
Configuring User Defined Attribute Matching Rules
Configuring I-WLAN Policy Matching Rules
Configuring What to Do When There Are No Ruleset Matches
Configuring What to Do When the HSS Is Unavailable
Editing Profile Selection
Editing Profile Selection Rule Sets
Resetting the Changes Made to the Profile Selection Rule Sets
Refreshing the List of Profile Matching Rules
Request Routing Rules
Introduction
Implicit Routing Rules
Explicit Routing Rules
Explicit Routing Rule Conditions
Standard Application Identifier
Customized Application Identifier
User Identity
Realm Name
Service Scenario
Dictionary Attribute
Routing Rule Evaluation and Rule Priorities
Administering Explicit Routing
Adding Explicit Routing Rules
Configuring Standard Application Identifier Conditions
Configuring Customized Application Identifier Conditions
Configuring User Identity Conditions
Configuring Realm Name Conditions
Configuring Service Scenario Conditions
Configuring Dictionary Attribute Conditions
Editing Explicit Routing Rules
Removing Explicit Routing Rules
Statistics
Introduction
Refresh Options
Diameter Statistics
Local Diameter Host Statistics
Diameter Peer Statistics
RADIUS Statistics
Local RADIUS Host Statistics
RADIUS Client Statistics
RADIUS Target Statistics
Routing Rule Statistics
Server Management
Access Control
Event Logging
Events
Log Groups
Using Event Logging
Configuring a New Log Stream
Editing an Existing Log Stream
Deleting a Log Stream
SNMP Alerts
About SNMP
About the SNMP Package
SNMP Network Management Architecture
SNMP Versions
MIBs
SNMP Messages
Dilution
SNMP Communities
Configuring the SNMP Alerts
Making Changes to the SNMP Configuration
Enabling Dynamic Authorization for Routers
Introduction
Before You Begin
Solution
Rendering
Enabling IMS AAA Dynamic Authorization
How the Process Works
Overview
Initial Authorization
Accounting
Service Activation and Deactivation
Abort Session Requests
XML Structure
controlledDeviceModel
Syntax
capability
Syntax
serviceTemplate
Modes
Attributes
Variables
Overriding the Service Correlation ID
serviceTemplates (Global)
Some Provided Services
Tagged Attributes
Caveat (Cisco Only)
Juniper Networks Routers Template
Cisco Routers Template
Glossary
Index