Prerequisites for Proxy Mobile IPv6 Support for MAG Functionality
The DHCP server must be configured.
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Proxy Mobile IPv6 Support for MAG Functionality feature provides network-based IP Mobility management to a mobile node (MN) without requiring the participation of the mobile node in any IP Mobility-related signaling. The Mobile Access Gateway (MAG) tracks the movements of the MN to and from an access link and sends signals to the local mobility anchor of the MN.
The DHCP server must be configured.
Proxy Mobile IPv6 (PMIPv6) provides network-based IP Mobility management to a mobile node (MN), without requiring the participation of the MN in any IP mobility-related signaling. The mobility entities in the network track the movements of the MN, initiate the mobility signaling, and set up the required routing state.
The major functional entities of PMIPv6 are Mobile Access Gateways (MAGs), Local Mobility Anchors (LMAs), and MNs.
Mobile Access Gateway (MAG) performs mobility-related signaling on behalf of the mobile nodes (MN) attached to its access links. MAG is the access router for the MN; that is, MAG is the first-hop router in the localized mobility management infrastructure.
MAG performs the following functions:
Obtains an IP address from Local Mobility Anchor (LMA) and assigns it to MN.
Retains the IP address of an MN when the MN roams across MAGs.
Tunnels traffic from MN to LMA.
Local Mobility Anchor (LMA) is the home agent for a mobile node (MN) in a Proxy Mobile IPv6 (PMIPv6) domain. It is the topological anchor point for MN home network prefixes and manages the binding state of an MN. An LMA has the functional capabilities of a home agent as defined in the Mobile IPv6 base specification (RFC 3775) along with the capabilities required for supporting the PMIPv6 protocol.
Note |
Use the dynamic mag learning command to enable LMA to accept Proxy Mobile IPv6 (PMIPv6) signaling messages from any Mobile Access Gateway (MAG) that is not configured locally. |
Mobile node (MN) is an IP host and the mobility of the MN is managed by a network. MN can be an IPv4-only node, an IPv6-only node, or a dual-stack node, which is a node with IPv4 and IPv6 protocol stacks. MN is not required to participate in any IP mobility-related signaling for achieving mobility for an IP address or a prefix that is obtained in the Proxy Mobile IPv6 (PMIPv6) domain.
If an authentication, authorization, and accounting (AAA) server is available, a Mobile Access Gateway (MAG) obtains the profile information of the Proxy Mobile IPv6 (PMIPv6) domain and the mobile node (MN) from the server during the configuration and call-flow time, respectively.
The following are the AAA attributes required for configuring the PMIPv6 domain and the MN are:
Command or Action | Purpose | |
---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
Step 3 |
ipv6 mobile pmipv6-domain domain-name load-aaa Example:
|
Creates a PMIPv6 domain and configures it by using the configuration from the AAA server. |
Step 4 |
end Example:
|
Exits global configuration mode and returns to privileged EXEC mode. |
Command or Action | Purpose | |
---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
Step 3 |
ipv6 mobile pmipv6-domain domain-name Example:
|
Creates the Proxy Mobile IPv6 (PMIPv6) domain and enters PMIPv6 domain configuration mode. |
Step 4 |
lma lma-id Example:
|
Configures an Local Mobility Anchor (LMA) within the PMIPv6 domain and enters PMIPv6 domain LMA configuration mode. |
Step 5 |
ipv6-address ipv6-address Example:
|
Configures an IPv6 address for the LMA within the PMIPv6 domain. |
Step 6 |
exit Example:
|
Exits PMIPv6 domain LMA configuration mode and returns to PMIPv6 domain configuration mode. |
Step 7 |
Repeat Steps 5 to 8 to configure the second LMA. |
— |
Step 8 |
nai [user ]@ realm Example:
|
Configures a network access identifier for the mobile node (MN) within the PMIPv6 domain and enters PMIPv6 domain mobile node configuration mode. |
Step 9 |
lma lma-id Example:
|
Configures an LMA for the MN. |
Step 10 |
service {dual | ipv4 | ipv6 } Example:
|
Configures the service provided to the MN within the PMIPv6 domain. The type of services provided to the MN are as follows:
|
Step 11 |
exit Example:
|
Exits PMIPv6 domain mobile node configuration mode and returns to PMIPv6 domain configuration mode. |
Step 12 |
Repeat Steps 10 to 11 to configure the second MN. |
— |
Step 13 |
end Example:
|
Exits PMIPv6 domain configuration mode and returns to privileged EXEC mode. |
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
||
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 3 |
ipv6 mobile pmipv6-domain domain-name Example:
|
Creates a Proxy Mobile IPv6 (PMIPv6) domain and enters PMIPv6 domain configuration mode. |
||
Step 4 |
service password-encryption Example:
|
Converts unencrypted passwords to encrypted passwords automatically. |
||
Step 5 |
replay-protection timestamp [window seconds ] Example:
|
Configures the replay protection mechanism within the PMIPv6 domain. |
||
Step 6 |
auth-option spi {spi-hex-value | decimal spi-decimal-value } key {ascii ascii-string | hex hex-string } Example:
|
Configures authentication for the PMIPv6 domain. |
||
Step 7 |
encap {gre-ipv4 | ipv6-in-ipv6 } Example:
|
Configures the tunnel encapsulation mode type between the Mobile Access Gateway (MAG) and the Local Mobility Anchor (LMA). |
||
Step 8 |
local-routing-mag Example:
|
Enables local routing for the MAG. |
||
Step 9 |
lma lma-id Example:
|
Configures LMA within the PMIPv6 domain and enters PMIPv6 domain LMA configuration mode. |
||
Step 10 |
ipv6-address ipv6-address Example:
|
Configures an IPv6 address for the LMA within the PMIPv6 domain. |
||
Step 11 |
exit Example:
|
Exits PMIPv6 domain LMA configuration mode and returns to PMIPv6 domain configuration mode. |
||
Step 12 |
Repeat Steps 10 to 12 to configure each LMA. |
— |
||
Step 13 |
mag mag-id Example:
|
Configures a MAG within the PMIPv6 domain and enters PMIPv6 domain MAG configuration mode. |
||
Step 14 |
ipv6-address ipv6-address Example:
|
Configures an IPv6 address for the MAG within the PMIPv6 domain. |
||
Step 15 |
exit Example:
|
Exits PMIP domain MAG configuration mode and returns to PMIPv6 domain configuration mode. |
||
Step 16 |
mn-profile-load-aaa Example:
|
(Optional) Loads the profile configuration from AAA to the mobile node (MN) within the PMIPv6 domain.
|
||
Step 17 |
nai [user ]@realm Example:
|
Configures the network address identifier (NAI) for the MN within the PMIPv6 domain and enters PMIPv6 domain MN configuration mode. |
||
Step 18 |
lma lma-id Example:
|
Configures the LMA for the MN. |
||
Step 19 |
int att interface-access-type l2-addr mac-address Example:
|
Configures the access technology type, interface, and MAC address of the MN interface within the PMIPv6 domain. |
||
Step 20 |
gre-encap-key [down | up ] key-value Example:
|
Configures a generic routing encapsulation (GRE) key for the MN within the PMIPv6 domain. |
||
Step 21 |
service {dual | ipv4 | ipv6 } Example:
|
Configures the service provided to the MN within the PMIPv6 domain. The type of services provided to the MN are as follows:
|
||
Step 22 |
apn apn-name Example:
|
Specifies an access point name (APN) to the MN subscriber within the PMIPv6 domain. |
||
Step 23 |
exit Example:
|
Exits PMIP domain MN configuration mode and returns to PMIPv6 domain configuration mode. |
||
Step 24 |
Repeat Steps 20 to 24 to configure each MN. |
— |
||
Step 25 |
end Example:
|
Exits PMIPv6 domain configuration mode and returns to privileged EXEC mode. |
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
||
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 3 |
ipv6 mobile pmipv6-mag mag-id domain domain-name Example:
|
Enables the MAG service on a device, configures the PMIPv6 domain for the MAG, and enters MAG configuration mode. |
||
Step 4 |
address ipv6 ipv6-address Example:
|
Configures an IPv6 address for the MAG. |
||
Step 5 |
sessionmgr Example:
|
Enables the MAG to process the the notification it receives through the mobile client service abstraction (MCSA) from the Intelligent Services Gateway (ISG). |
||
Step 6 |
generate grekey Example:
|
Enables dynamic generation of upstream generic routing encapsulation keys for mobile nodes in an LMA. |
||
Step 7 |
interface type number Example:
|
Enables an interface for the MAG. |
||
Step 8 |
role {3gpp | lte | wimax | wlan } Example:
|
Configures a role for the MAG. The keywords are as follows:
|
||
Step 9 |
apn apn-name Example:
|
Specifies an access point name (APN) to the subscriber of the MAG.
|
||
Step 10 |
end Example:
|
Exits MAG configuration mode and returns to privileged EXEC mode. |
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
||
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 3 |
vrf definition vrf-name Example:
|
Configures a virtual routing and forwarding (VRF) routing table instance and enters VRF configuration mode. |
||
Step 4 |
exit Example:
|
Exits VRF configuration mode and returns to global configuration mode. |
||
Step 5 |
ipv6 mobile pmipv6-mag mag-id domain domain-name Example:
|
Enables the MAG service on a device, configures the PMIPv6 domain for the MAG, and enters MAG configuration mode. |
||
Step 6 |
role {3gpp | wlan } Example:
|
Configures a role for the MAG. The keywords are as follows:
|
||
Step 7 |
apn apn-name Example:
|
Specifies an access point name (APN) to the subscriber of the MAG. |
||
Step 8 |
local-routing-mag Example:
|
Enables local routing for the MAG. |
||
Step 9 |
discover-mn-detach poll interval seconds timeout seconds retries retry-count Example:
|
Enables periodic verification of the MN attachment with the MAG-enabled interface. |
||
Step 10 |
address ipv4 ipv4-address Example:
|
Configures an IPv4 address for the MAG. |
||
Step 11 |
address ipv6 ipv6-address Example:
|
Configures an IPv6 address for the MAG. |
||
Step 12 |
sessionmgr Example:
|
Configures an IPv6 address for the MAG. |
||
Step 13 |
interface type number Example:
|
Enables an interface for the MAG. |
||
Step 14 |
binding maximum number Example:
|
Specifies the maximum number of Proxy Binding Update (PBU) entries allowed for the MAG. |
||
Step 15 |
binding lifetime seconds Example:
|
Specifies the maximum lifetime permitted for the PBU entry. |
||
Step 16 |
binding refresh-time seconds Example:
|
Specifies the PBU entry refresh time. |
||
Step 17 |
binding init-retx-time milliseconds Example:
|
Specifies the initial timeout interval between the PBU and Proxy Binding Acknowledgment (PBA) until a PBA is received. |
||
Step 18 |
binding max-retx-time milliseconds Example:
|
Specifies the maximum timeout interval between the PBU and the PBA until a PBA is received. |
||
Step 19 |
replay-protection timestamp [window seconds ] Example:
|
Configures the replay protection mechanism within the PMIPv6 domain. |
||
Step 20 |
bri delay min milliseconds Example:
|
Specifies the minimum time for which an LMA should wait before transmitting the Binding Revocation Indication (BRI) message. |
||
Step 21 |
bri delay max milliseconds Example:
|
Specifies the maximum time for which an LMA should wait for the Binding Revocation Acknowledgment (BRA) message before retransmitting the BRI message. |
||
Step 22 |
bri retry number Example:
|
Specifies the maximum number of times an LMA should retransmit a BRI message, until a BRA is received. |
||
Step 23 |
lma lma-id domain-name Example:
|
Configures the LMA for the MAG and enters MAG-LMA configuration mode. |
||
Step 24 |
auth-option spi {spi-hex-value | decimal spi-decimal-value } key {ascii | hex } hex-string Example:
|
Configures authentication for the LMA within the MAG. |
||
Step 25 |
ipv4-address ipv4-address Example:
|
Configures an IPv4 address for the LMA within the MAG.
|
||
Step 26 |
vrfid vrf-name Example:
|
Specifies a VRF for an LMA peer. |
||
Step 27 |
encap {gre-ipv4 | ipv6-in-ipv6 } Example:
|
Configures a tunnel encapsulation mode type between the MAG and the LMA. |
||
Step 28 |
end Example:
|
Exits MAG-LMA configuration mode and returns to privileged EXEC mode. |
||
Step 29 |
show ipv6 mobile pmipv6 mag mag-id globals Example:
|
(Optional) Displays MAG global configuration details. |
The following example shows the MAG global configuration:
Router# show ipv6 mobile pmipv6 mag mag1 globals
---------------------------------------------------
Domain : D1
Mag Identifier : M1
MN's detach discover : disabled
Local routing : disabled
Mag is enabled on interface : GigabitEthernet0/0/0
Mag is enabled on interface : GigabitEthernet0/1/0
Max Bindings : 3
AuthOption : disabled
RegistrationLifeTime : 3600 (sec)
BRI InitDelayTime : 1000 (msec)
BRI MaxDelayTime : 40000 (msec)
BRI MaxRetries : 6
BRI EncapType : IPV6_IN_IPV6
Fixed Link address is : enabled
Fixed Link address : aaaa.aaaa.aaaa
Fixed Link Local address is : enabled
Fixed Link local address : 0xFE800000 0x0 0x0 0x2
RefreshTime : 300 (sec)
Refresh RetxInit time : 20000 (msec)
Refresh RetxMax time : 50000 (msec)
Timestamp option : enabled
Validity Window : 7
Peer : LMA1
Max Bindings : 3
AuthOption : disabled
RegistrationLifeTime : 3600 (sec)
BRI InitDelayTime : 1000 (msec)
BRI MaxDelayTime : 40000 (msec)
BRI MaxRetries : 6
BRI EncapType : IPV6_IN_IPV6
Fixed Link address is : enabled
Fixed Link address : aaaa.aaaa.aaaa
Fixed Link Local address is : enabled
Fixed Link local address : 0xFE800000 0x0 0x0 0x2
RefreshTime : 300 (sec)
Refresh RetxInit time : 20000 (msec)
Refresh RetxMax time : 50000 (msec)
Timestamp option : enabled
Validity Window : 7
Peer : LMA2
Max Bindings : 3
AuthOption : disabled
You can use the following commands to troubleshoot the MAG configuration:
debug ipv6 mobile mag event
debug ipv6 mobile mag info
show ipv6 mobile pmipv6 mag bindings
show ipv6 mobile pmipv6 mag globals
The following example shows how to configure the PMIPv6 domain by using the AAA server configuration:
Device# configure terminal
Device(config)# ipv6 mobile pmipv6-domain D1 load-aaa
The following example shows how to configure the PMIPv6 domain by using the configuration from the AAA server and how to override the configuration for specific PMIPv6 domain parameters:
Device# configure terminal
Device(config)# ipv6 mobile pmipv6-domain D11 load-aaa
Device(config)# ipv6 mobile pmipv6-domain D11
Device(config-ipv6-pmipv6-domain)# gre-ipv4
Device(config-ipv6-pmipv6-domain)# auth-option spi 67 key ascii key1
The following example shows how to configure the PMIPv6 domain when an AAA server configuration is not available:
Device# configure terminal
Device(config)# ipv6 mobile pmipv6-domain D2
Device(config-ipv6-pmipv6-domain)# replay-protection timestamp window 200
Device(config-ipv6-pmipv6-domain)# auth-option spi 100 key ascii hi
Device(config-ipv6-pmipv6-domain)# encap ipv6-in-ipv6
!
Device(config-ipv6-pmipv6-domain)# lma lma1
Device(config-ipv6-pmipv6-domain-lma)# ipv4-address 10.1.1.1
Device(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1
Device(config-ipv6-pmipv6-domain-lma)# exit
!
Device(config-ipv6-pmipv6-domain)# mag mag1
Device(config-ipv6-pmipv6-domain-mag)# ipv4-address 10.1.3.1
Device(config-ipv6-pmipv6-domain-mag)# ipv6-address 2001:0DB8:2:5::1
Device(config-ipv6-pmipv6-domain-mag)# exit
!
Device(config-ipv6-pmipv6-domain)# nai example1@example.com
Device(config-ipv6-pmipv6-domain-mn)# lma lma1
Device(config-ipv6-pmipv6-domain-mn)# int att gigabitethernet l2-addr 02c7.f800.0422
Device(config-ipv6-pmipv6-domain-mn)# gre-encap-key up 1234
Device(config-ipv6-pmipv6-domain-mn)# gre-encap-key down 5678
Device(config-ipv6-pmipv6-domain-mn)# service ipv4
Device(config-ipv6-pmipv6-domain-mn)# end
The following example shows the minimum configuration required to enable MAG:
Device# configure terminal
Device(config)# ipv6 mobile pmipv6-domain D2
Device(config-ipv6-pmipv6-domain)# lma lma1
Device(config-ipv6-pmipv6-domain-lma)# ipv4-address 10.1.1.1
Device(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:3::1
Device(config-ipv6-pmipv6-domain-lma)# exit
Device(config-ipv6-pmipv6-domain)# lma lma2
Device(config-ipv6-pmipv6-domain-lma)# ipv4-address 10.2.1.1
Device(config-ipv6-pmipv6-domain-lma)# ipv6-address 2001:0DB8:2:4::1
Device(config-ipv6-pmipv6-domain-lma)# exit
Device(config-ipv6-pmipv6-domain)# nai example1@example.com
Device(config-ipv6-pmipv6-domain-mn)# lma lma1
Device(config-ipv6-pmipv6-domain-mn)# exit
Device(config-ipv6-pmipv6-domain)# nai example2@example.com
Device(config-ipv6-pmipv6-domain-mn)# lma lma2
Device(config-ipv6-pmipv6-domain-mn)# exit
Device(config)# ipv6 mobile pmipv6-mag mag1 domain D2
Device(config-ipv6-pmipv6-mag)# address ipv6 2001:DB8:0:0:E000::F
Device(config-ipv6-pmipv6-mag)# address ipv4 10.2.1.1
Device(ipv6-mag-config)# interface gigabitethernet 0/0/0
Device(ipv6-mag-config)# role 3gpp
Device(ipv6-mag-config)# apn a
Device(ipv6-mag-config)# exit
The MAG entity works with the LMA provided by the ASR 5000 devices. To configure the LMA in the Cisco ASR 5000, see the “PDN Gateway Configuration” module in the Cisco ASR 5000 Series Packet Data Network Gateway Administration Guide .
Related Topic |
Document Title |
---|---|
Cisco IOS commands |
Cisco IOS Master Command List, All Releases |
IP mobility commands |
Cisco IOS IP Mobility Command Reference |
Standard/RFC |
Title |
---|---|
RFC 3775 |
Mobility Support in IPv6 |
RFC 5213 |
Proxy Mobile IPv6 |
RFC 5844 |
IPv4 Support for Proxy Mobile IPv6 |
RFC 5845 |
Generic Routing Encapsulation (GRE) Key Option for Proxy Mobile IPv6 |
RFC 5846 |
Binding Revocation for IPv6 Mobility |
MIB |
MIBs Link |
---|---|
None |
To locate and download MIBs for selected platforms, Cisco software releases, and feature sets, use Cisco MIB Locator found at the following URL: http://www.cisco.com/go/mibs |
Description |
Link |
---|---|
The Cisco Support and Documentation website provides online resources to download documentation, software, and tools. Use these resources to install and configure the software and to troubleshoot and resolve technical issues with Cisco products and technologies. Access to most tools on the Cisco Support and Documentation website requires a Cisco.com user ID and password. |
http://www.cisco.com/cisco/web/support/index.html |
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Feature Name |
Releases |
Feature Information |
---|---|---|
Proxy Mobile IPv6 MAG Functionality Support |
Cisco IOS XE Release 3.4S |
The Proxy Mobile IPv6 Support for MAG Functionality feature provides network-based IP Mobility management to a mobile node without requiring the participation of the mobile node in any IP mobility-related signaling. The Mobile Access Gateway tracks the movements of the mobile node to and from the access link, and sends signals to the local mobility anchor of the mobile node. In Cisco IOS XE Release 3.4S, this feature was introduced on the Cisco ASR Series Aggregation Services 1000 routers. The following commands were introduced: address , apn , auth-option , binding , bri , clear ipv6 mobile pmipv6 mag , debug ipv6 mobile mag , debug ipv6 mobile packets , discover-mn-detach , encap , fixed-link-layer-address , fixed-link-local-address , gre-encap-key , int att , interface , ipv4-address , ipv6 mobile pmipv6-domain , ipv6 mobile pmipv6-mag , ipv6-address , lma , local-routing-mag , mag , mn-profile-load-aaa , multi-homed , nai , replay-protection , role , service , show ipv6 mobile pmipv6 mag binding , show ipv6 mobile pmipv6 mag globals , show ipv6 mobile pmipv6 mag stats . |
IPv6 Client Support on Proxy Mobile IPv6 Mobile Access Gateway |
Cisco IOS XE Release 3.5S |
Prior to the introduction of the IPv6 Client Support on Proxy Mobile IPv6 Mobile Access Gateway feature, only IPv4 service could be provided to an MN within the PMIP domain. The IPv6 client support on Proxy Mobile IPv6 MAG feature is an enhancement to provide IPv4, IPv6, and dual service to the MN within the PMIP domain. The following command was modified: service . |