Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Use this parameter to configure NASS-IMS-Bundled-Authentication (NBA) for providing access to the IMS (IP Multimedia Subsystem) network for legacy equipment that cannot support IMS access security (IMS AKA).

 

Info

To support NASS IMS Auth, you must configure the accessClass as tispan-NASS. See SIP TG - Signaling - NASS IMS Auth - CLI for details.

 

Example:

admin@BIMOTA1% set addressContext default zone ACCESS sipTrunkGroup S1372_ACCESS_TG signaling accessClass 
Possible completions:
ac-3GPP none tispan-NASS
admin@BIMOTA1% set addressContext default zone ACCESS sipTrunkGroup S1372_ACCESS_TG signaling accessClass tispan-NASS

Info

To support NBA, you must configure a diameter Peer (pointing to the CLF node)/realmRoute and select the application ID (appId) as e2. See Diameter Node - CLI for details.

 

Example:

admin@BIMOTA1% show addressContext default diamNode DIAM_NODE realmRoute 
realmRoute route1 {
peer PEER_CLF;
realm e2.clf.com;
appId e2;
state enabled;
}

Info

For additional NASS-IMS-Bundled-Authentication feature details, refer to  P-CSCF Security Mechanisms.

Info

All tispan-NASS configurations should be made at the sipTrunkGroup pointing towards the UE (Access side).

 

Command Syntax

Code Block
% set addressContext <addressContext name> zone <zone name> sipTrunkGroup <sipTrunkGroup name> signaling nassImsAuth
	accessType <ethernet | fiber | none | xdsl>
	clfRealm
	ueDefaultLocation
Code Block
% set addressContext <addressContext name> zone <zone name> sipTrunkGroup <sipTrunkGroup name> signaling nassImsAuth accessType
 
	ethernet ethernet  <ieee-802-3 | ieee-802-3a | ieee-802-3ab | ieee-802-3ae | ieee-802-3ak | ieee-802-3an | ieee-802-3aq | ieee-802-3e | ieee-802-3i | ieee-802-3j | ieee-802-3u | ieee-802-3y | ieee-802-3z>
	fiber fiber <g-pon | ieee-802-3ah | xgpon1>
	none 
	xdsl xDSL <adsl | adsl2 | adsl2Plus | g-hdsl | hdsl | hdsl2 | idsl | radsl | sdsl | vdsl>
Code Block
% set addressContext <addressContext name> zone <zone name> sipTrunkGroup <sipTrunkGroup name> signaling nassImsAuth clfRealm  <1-128 chars>
Code Block
% set addressContext <addressContext name> zone <zone name> sipTrunkGroup <sipTrunkGroup name> signaling nassImsAuth ueDefaultLocation <1-64 chars>

Command Parameters

ParameterLength/RangeDescription
nassImsAuthN/A

The NASS-IMS-Bundled-Authentication (NBA) configuration object for providing access to the IMS (IP Multimedia Subsystem) network for legacy equipment that cannot support IMS access security (IMS AKA).

accessTypeN/A

The location type of the Access network this trunk group represents (default values are in square brackets []).

  • ethernet <[ieee-802-3] (default)| ieee-802-3a | ieee-802-3ab | ieee-802-3ae | ieee-802-3ak | ieee-802-3an | ieee-802-3aq | ieee-802-3e | ieee-802-3i | ieee-802-3j | ieee-802-3u | ieee-802-3y | ieee-802-3z>
  • fiber <[g-pon] (default)| ieee-802-3ah | xgpon1>
  • none (default)
  • xdsl <[adsl] (default) | adsl2 | adsl2Plus | g-hdsl | hdsl | hdsl2 | idsl | radsl | sdsl | vdsl>
clfRealm

1-128 characters

The DIAMETER domain of a Policy and Charging Rule Function for this NBA configuration.

ueDefaultLocation

1-64 characters

The UE default location name.

 

Command Example

For ueDefaultLocation:

Code Block
dmin@BIMOTA1% set addressContext default zone ACCESS sipTrunkGroup S1372_ACCESS_TG signaling nassImsAuth ueDefaultLocation 
Possible completions:
<string, min: 1 chars, max: 64 chars>[noc=XYZABC345;lac=EFGH;line-code=IJKL]

 

Pagebreak