Cisco ASR 5000 Series - Chapter 28 Personal Stateful Firewall Overview

To Next Page

To Previous Page

Cisco ASR 5000 Series Product Overview ▄

OL-22938-02

Chapter 28

Personal Stateful Firewall Overview

This chapter provides an overview of the Personal Stateful Firewall In-line Service.

This chapter covers the following topics:

Supported Platforms and Products

Licenses

Overview

Supported Features

How Personal Stateful Firewall Works

Understanding Firewall Rules with Stateful Inspection

Main Page

Default Chapter4
- Table of Contents4
- About this Guide27
- Conventions Used28
- Contacting Customer Support30
- Common Features32
- License Keys33
- Features and Benefits54
ASR 5000 Hardware Platform Overview69
- Chassis Configurations70
  - Slot Numbering73
    - Rear Slot Numbering for Half-Height Line Cards74
  - Mounting Options75
- Power Filter Units80
- ASR 5000 Application Cards85
- ASR 5000 Line Cards96
- General Application and Line Card Information120
Software Architecture121
- Understanding the Distributed Software Architecture123
  - Subsystems124
Redundancy and Availability Features127
- Service Availability Features128
- Mean Time between Failure and System Availability135
  - System Availability136
- Spare Component Recommendations137
- Management System Overview139
Management System Overview141
- Out-Of-Band Management141
- Command Line Interface142
  - Cli Overview142
- Web Element Manager Application144
ASN Gateway Overview147
- ASN Mobility Management148
- ASN Gateway in a Wimax Network163
- Wimax Network Deployment Configurations169
- ASN Call Procedure Flows171
- CSN Procedure Flows206
  - PMIP4 Session Release208
- Wimax Deployment with Legacy Core Networks210
- Data Tunnel Endpoint Support214
  - Inter-ASNGW Handoff215
    - Supported Standards216
    - Object Management Group (OMG) Standards217
ASN Paging Controller and Location Registry Overview219
- Introduction220
- Description of PC/LR Support222
- Paging Agent (PA)223
- Location Update with Paging Controller Relocation225
- Paging Operation227
- MS Initiated Idle Mode Entry229
- MS Initiated Idle Mode Exit232
- Supported Platforms and Software235
CDMA2000 Wireless Data Services237
- Product Description238
- Product Specifications239
- Features and Functionality—Base Software241
- RADIUS Support242
- Features and Functionality - Optional Enhanced Software Features252
- CDMA2000 Data Network Deployment Configurations260
  - Co-Located Deployments261
- Understanding Simple IP and Mobile IP263
GGSN Support in GPRS/UMTS Wireless Data Services283
- Product Description284
- Product Specification285
- Operating System Requirements286
- Network Deployment and Interfaces287
- Supported Interfaces288
- Features and Functionality - Base Software291
- SGSN Support292
  - ANSI T1.276 Compliance293
  - Bulk Statistics Support294
- Direct Tunnel Support295
- Dhcp Support296
- DSCP Marking297
- Host Route Advertisement298
  - IP Policy Forwarding299
  - Ipv6 Support300
  - Management System Overview301
  - Overlapping IP Address Pool Support303
- Per APN Configuration to Swap out Gn to Gi APN in Cdrs304
- Quality of Service Support305
- RADIUS VLAN Support306
- Routing Protocol Support307
- Support of Charging Characteristics Provided by AAA Server308
- Support of All GGSN Generated Causes for Partial G-CDR Closure309
- Features and Functionality - Optional Enhanced Feature Software311
- Converged DSL Support on the GGSN312
- GRE Protocol Interface Support313
  - Gx Interface Support314
  - Inter-Chassis Session Recovery315
  - IP Security (Ipsec)317
    - Ipv6 Support318
    - L2TP LAC Support319
  - L2TP LNS Support320
  - Mobile IP Home and Foreign Agents321
  - Mobile IP NAT Traversal322
  - Multimedia Broadcast Multicast Services Support323
  - Session Persistence324
  - Session Recovery Support325
  - Traffic Policing and Rate Limiting326
  - Web Element Management System327
- How GGSN Works329
  - Dynamic IP Address Assignment330
  - Subscriber Session Call Flows331
HA Overview357
- Product Specifications358
- Operating System Requirements359
- Supported Standards360
- Network Deployment Configurations364
- Understanding Mobile IP373
HRPD Serving Gateway Overview375
- Ehrpd Network Summary376
- Ehrpd Network Components377
- E-UTRAN EPC Network Components378
- Serving Gateway (S-GW)379
- Product Description381
- Basic Features382
- Call/Session Procedure Flows411
IP Services Gateway Overview423
- Introduction424
- Service Modes425
  - RADIUS Proxy426
- In-Line Services428
- Enhanced Feature Support429
  - Content Service Steering430
Packet Data Interworking Function Overview431
- Product Description432
- Product Specifications433
- Licenses434
- Interfaces435
- Sample Deployments437
PDG/TTG Overview473
- Product Description474
- Product Specifications475
- Operating System Requirements476
- Network Deployment(S) and Interfaces477
- PDG/TTG Logical Network Interfaces (Reference Points)478
- Features and Functionality479
- Features Not Supported in this Release489
- How the PDG/TTG Works490
  - Supported Standards494
  - IETF References495
PDN Gateway Overview497
- Ehrpd Network Summary498
- Ehrpd Network Components499
- Evolved Packet Control Function (Epcf)500
- SAE Network Summary501
- E-UTRAN EPC Network Components502
- Enodeb503
- Serving Gateway (S-GW)504
- Product Description505
- Product Specifications508
- Operating System Requirements509
- Network Deployment(S)510
  - Supported Logical Network Interfaces (Reference Points)511
  - PDN Gateway in the E-UTRAN/EPC Network517
    - Supported Logical Network Interfaces (Reference Points)518
- Features and Functionality - Base Software523
- Features and Functionality - Inline Service Support547
- How the PDN Gateway Works556
Session Control Manager Overview573
- Product Description574
- IMS Architecture575
- Features and Functionality - Licensed Enhanced Feature Support596
- How the SCM Works603
Serving Gateway Overview611
- Ehrpd Network Summary612
  - Ehrpd Network Components613
    - Evolved Packet Control Function (Epcf)614
- SAE Network Summary615
  - E-UTRAN EPC Network Components616
  - Operating System Requirements623
- Network Deployment(S)624
  - Supported Logical Network Interfaces (Reference Points)625
  - Network Access and Charging Management Features633
- Features and Functionality - External Application Support642
- Features and Functionality - Optional Enhanced Feature Software644
  - Layer 2 Traffic Management (Vlans)645
- How the Serving Gateway Works646
  - Subscriber-Initiated Detach649
- Supported Standards651
  - GPP2 References652
  - Object Management Group (OMG) Standards653
Serving GPRS Support Node (SGSN) Overview655
- Product Description656
- Product Specifications657
  - Operating System Requirements658
    - Benefits of Co-Located Gsns659
- Network Deployments and Interfaces660
  - SGSN/GGSN Deployments661
  - SGSN Logical Network Interfaces662
- Features and Functionality - Basic666
  - SS7 Support667
Mobility Management668
- Paging669
- Features and Functionality - Enhanced and Licensed683
- How the SGSN Works690
- Supported Standards697
  - ITU Standards699
    - Content Filtering Support Overview701
    - Introduction702
- Supported Platforms and Products703
- Licenses704
- URL Blacklisting Support705
  - URL Blacklisting Solution Components706
  - Web Element Manager (WEM)707
    - URL Blacklisting Action708
- Category-Based Content Filtering Support709
- How URL Blacklisting and Category-Based Content Filtering Work Concurrently720
- Content Filtering Server Group Support721
- External Storage System723
- Minimum System Requirements and Recommendations724
  - Additional Requirements on Chassis725
Enhanced Charging Service Overview727
- Introduction728
  - Supported Accounting and Charging Interfaces730
- Licensing732
- ECS Architecture733
- How ECS Works734
- Enhanced Services in ECS742
- ECS Deployment751
  - Accounting Interfaces752
  - Diameter Accounting and Credit Control753
- Charging Record Generation760
- Charging Methods and Interfaces762
- Prepaid Billing in ECS764
- Credit Control Application (CCA) in ECS765
- Postpaid Billing in ECS767
  - Postpaid Billing in CDMA-2000 Networks769
  - External Storage System771
- System Resource Allocation772
- Redundancy Support in ECS773
  - Inter-Chassis Session Recovery Interoperability774
  - Impact on Xdr File Content775
External Storage System Overview777
- Overview778
- Local, Short-Term External Storage System779
- System Requirements781
  - Minimum System Recommendations for Cluster Deployment of L-ESS782
GTPP Storage Server Overview785
- Product Description786
- System Requirements and Recommendations787
  - Default Ports for GSS788
  - GSS Hardware Sizing and Provisioning Guidelines789
- IP Multipathing (IPMP) on GSS Server (Optional)790
- Features of the GSS791
- How the GSS Works802
MUR Overview803
- Introduction804
- Exporting Reports to Other File Formats807
- MUR Architecture808
- Distributed Architecture of MUR811
  - How RDP Works with MUR812
- MUR Deployment814
- System Requirements815
Network Address Translation Overview817
- Supported Platforms and Products818
- Licenses819
- Supported Standards820
- NAT Feature Overview821
- How Nat Works836
- Product Specification853
- Operating System Requirements854
- Network Deployment and Interfaces855
- Features and Functionality - Licensed Enhanced Feature Software873
- How MME Works880
Peer-To-Peer Overview891
- Supported Platforms and Products892
- Licenses893
- P2P Overview894
  - P2P Voice Call Duration898
    - P2P Protocol Detection Software Versions899
    - Loading and Unloading P2P Signature File900
- How P2P Works901
  - P2P Session Recovery902
    - Skype903
    - Jabber904
Personal Stateful Firewall Overview907
- Supported Platforms and Products908
- Licenses909
- Overview910
- Supported Features911
- How Personal Stateful Firewall Works917
  - MID-Session Firewall Policy Update918
- Understanding Rules with Stateful Inspection922
  - Transport and Network Protocols and States923
  - Application-Level Traffic and States924
Web Element Manager Overview927
- Supported Features928
- Accounting Management929
- Performance Management930
- Additional Features932
- Web Element Manager System Requirements933
  - Client Access934
- WEM Architecture935
Technical Specifications943
- Physical Dimensions944
- Power Specifications947
- Mounting Requirements948
- Interface Specifications950
Safety, Electrical, and Environmental Certifications967
- Federal Communications Commission Warning968
- Safety Certifications969
- Electrical Certifications970
- Environmental Certifications971
Environmental Specifications973
- Environmental Information974
  - Chassis Air Flow975
Glossary977

Cisco ASR 5000 Series - Chapter 28 Personal Stateful Firewall Overview

Table of Contents

Other manuals for Cisco ASR 5000 Series

Related product manuals