Cisco ASR 5000 Series, Обзор продукта

Страница: 644 / 992

Serving Gateway Overview
▀ Features and Functionality - Optional Enhanced Feature Software
▄ Cisco ASR 5000 Series Product Overview
OL-22938-02
Features and Functionality - Optional Enhanced Feature
Software
This section describes the optional enhanced features and functions for the S-GW service.
Each of the following features require the purchase of an additional license to implement the functionality with the S-
GW service.
This section describes following features:
IP Security (IPSec) Encryption
Traffic Policing and Shaping
Layer 2 Traffic Management (VLANs)
IP Security (IPSec) Encryption
Enables network domain security for all IP packet switched LTE-EPC networks in order to provide confidentiality,
integrity, authentication, and anti-replay protection. These capabilities are insured through use of cryptographic
techniques.
The Cisco S-GW supports IKEv1 and IPSec encryption using IPv4 addressing. IPSec enables the following two use
cases:
Encryption of S8 sessions and EPS bearers in roaming applications where the P-GW is located in a separate
administrative domain from the S-GW
IPSec ESP security in accordance with 3GPP TS 33.210 is provided for S1 control plane, S1 bearer plane and S1
management plane traffic. Encryption of traffic over the S1 reference interface is desirable in cases where the
EPC core operator leases radio capacity from a roaming partner's network.
Important:
For more information on IPSec support, refer to the IP Security chapter in the System Enhanced
Feature Configuration Guide .
Traffic Policing and Shaping
Traffic policing and shaping allows you to manage bandwidth usage on the network and limit bandwidth allowances to
subscribers. Shaping allows you to buffer excesses to be delivered at a later time.
Traffic Policing
Traffic policing enables the configuring and enforcing of bandwidth limitations on individual subscribers and/or APNs
of a particular traffic class in 3GPP/3GPP2 service.