For instructions on how to create RADIUS servers, see the Configuring RADIUS chapter under Security Solutions.

• Domain Name—Name of the PMIPv6 domain. The domain name can be up to 127 case-sensitive, alphanumeric characters.

• MAG Name—Name of the MAG.

• Interface—Interface on the the Cisco Wireless Controller (WLC) used as a source for PMIPv6 tunneling.

• MAG APN—Access Point Name (APN) if you have subscribed to a MAG.

  MAG can be configured for one of the following roles:

  • 3gpp—Specifies the role as 3GPP (Third Generation Partnership Project standard)
  • lte—Specifies the role as Long Term Evolution (LTE) standard
  • wimax—Specifies the role as WiMax
  • wlan—Specifies the role as WLAN

  By default, the MAG role is WLAN. However, for lightweight access points, the MAG role should be configured as 3GPP. If the MAG role is 3GPP, it is mandatory to specify an APN for the MAG.

• Maximum Bindings Allowed—Maximum number of binding updates that the Cisco WLC can send to the MAG. The valid range is between 0 and 40000.

• Binding Lifetime—Lifetime, in seconds, of the binding entries in the Cisco WLC. The valid range is between 10 and 65535. The default value is 3600. The binding lifetime should be a multiple of 4.

• Binding Refresh Time—Refresh time, in seconds, of the binding entries in the Cisco WLC. The valid range is between 4 and 65535 seconds. The default value is 300 seconds. The binding refresh time should be a multiple of 4.

• Binding Initial Retry Timeout—Initial timeout, in milliseconds, between the Proxy Binding Updates (PBUs) when the Cisco WLC does not receive the Proxy Binding Acknowledgments (PBAs). The valid range is between 100 and 65535. The default value is 1000.

• Binding Maximum Retry Timeout—Maximum timeout between the PBUs when the Cisco WLC does not receive the PBAs. The valid range is between 100 and 65535. The default value is 32000.

• Replay Protection Timestamp—Maximum amount of time, in milliseconds, difference between the timestamp in the received PBA and the current time of the day. The valid range is between 1 and 255. The default value is 7.

• Minimum BRI Retransmit Timeout—Minimum amount of time, in milliseconds, that the Cisco WLC waits for before retransmitting the BRI message. The valid range is between 500 and 65535. The default value is 1000.

• Maximum BRI Retransmit Timeout—Maximum amount of time, in milliseconds, that the Cisco WLC waits for before retransmitting the Binding Revocation Indication (BRI) message. The valid range is between 500 and 65535. The default value is 2000.

• BRI Retries—Maximum number of times that the Cisco WLC retransmits the BRI message before receiving the Binding Revocation Acknowledgment (BRA) message. The valid range is between 1 to 10. The default value is 1.

config pmipv6 domain domain-name

• Configure the maximum binding update entries that are allowed by entering this command:

  config pmipv6 mag binding maximum units

• Configure the binding entry lifetime by entering this command:

  config pmipv6 mag lifetime units

• Configure the binding refresh interval by entering this command:

  config pmipv6 mag refresh-time units

• Configure the initial timeout between PBUs if PBA does not arrive by entering this command:

  config pmipv6 mag init-retx-time units

• Configure the maximum initial timeout between PBUs if PBA does not arrive by entering this command:

  config pmipv6 mag max-retx-time units

• Configure the replay protection mechanism by entering this command:

  config pmipv6 mag replay-protection {timestamp window units | sequence-no | mobile-node-timestamp}

• Configure the minimum or maximum amount of time, in seconds, that the MAG should wait for before it retransmits the binding revocation indication (BRI) message by entering this command:

  config pmipv6 mag bri delay {min | max} units

• Configure the maximum number of times the MAG should retransmit the BRI message before it receives the binding revocation acknowledgment (BRA) message by entering this command:

  config pmipv6 mag bri retries units

• Configure the list of LMAs for the MAG by entering this command:

  config pmipv6 mag lma lma-name ipv4-address ip-address

• Add an APN for a MAG by entering this command:

  config pmipv6 mag apn apn-name

  A MAG can be configured for one of the different roles:

  • 3gpp—Specifies the role as 3GPP (Third Generation Partnership Project standard)
  • lte—Specifies the role as Long Term Evolution (LTE) standard
  • wimax—Specifies the role as WiMax
  • wlan—Specifies the role as WLAN

  Note	By default, the MAG role is WLAN. However, for the lightweight access points, the MAG role should be configured as 3GPP. If the MAG role is 3GPP, it is mandatory to specify an APN for the MAG.

• Delete an APN by entering this command:

  config pmipv6 delete mag apn apn-name

config pmipv6 add profile profile-name nai {user@realm | @realm | *} lma lma-name apn apn-name

config pmipv6 delete {domain domain-name | lma lma-name | profile profile-name nai {user@realm | @realm | *}}

• Configure the default realm for the WLAN by entering this command:

  config wlan pmipv6 default-realm {realm-name | none} wlan-id

• Configure the mobility type for a WLAN or for all WLANs by entering this command:

  config wlan pmipv6 mobility-type {enable | disable} {wlan-id | all}

• Configure the profile name for a PMIPv6 WLAN by entering this command:

  config wlan pmipv6 profile-name {none | name} wlan-id

• See the details of a profile of a PMIPv6 domain by entering this command:

  show pmipv6 domain domain-name profile profile-name

• See a summary of all the PMIPv6 profiles by entering this command:

  show pmipv6 profile summary

• See global information about the PMIPv6 for a MAG by entering this command:

  show pmipv6 mag globals

• See information about MAG bindings for LMA or NAI by entering this command:

  show pmipv6 mag bindings {lma lma-name | nai nai-name}

• See statistical information about MAG by entering this command:

  show pmipv6 mag stats domain domain-name peer peer-name

• See information about PMIPv6 for all clients by entering this command:

  show client summary

• See information about PMIPv6 for a client by entering this command:

  show client details client-mac-address

• See information about PMIPv6 for a WLAN by entering this command:

  show wlan wlan-id