This document discusses small cell and carrier Wi-Fi architectures. It begins with an agenda that covers the need for service provider Wi-Fi, intelligent service gateways, call flows, evolution with mobile packet core integration, intelligent wireless access gateways, and challenges for residential service provider Wi-Fi. It then provides background on Wi-Fi trends, defines small cells, discusses drivers for service provider Wi-Fi including increasing data usage and shift to indoor usage, and outlines the need for integrated Wi-Fi performance. Subsequent sections cover specific architectures, technologies, and components like intelligent service gateways and their call flows, as well as intelligent wireless access gateways.

1. @MOURCOUS
MARC NADER
CCIE #9364
SMALL CELLS & CARRIER WIFI
ARCHITECTURES

2. AGENDA
• Need for SP Wi-Fi
• Intelligent Service Gateway (ISG)
• ISG Call flows
• SP Wi-Fi Evolution with MPC Integration
• Intelligent Wireless Access Gateway (iWAG)
• NTT Residential SP Wi-Fi challenges
• References

3. NEED FOR SP WI-FI

4. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 4
‘Small cells’ is an
umbrella term for
operator-controlled,
low-powered radio
access nodes, including
those that operate in
licensed spectrum and
unlicensed carrier-
grade Wi-Fi. Small cells
typically have a range
from 10 meters to
several hundred meters.
WHAT IS A SMALL CELL?

5. Users Want
more data
Mobile data traffic growth
Mobile broadband subscriptions
up
Metro densification
More devices, more Wi-Fi
capable devices and more Wi-Fi
usage on Wi-Fi capable devices
(Wi-Fi devices doubling).
Source: Mobidia (2013)
Aug
2012
Apr
2013
33% 27%
67% 73%
Cellular
Wi-Fi

6. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 6

7. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 7
BACKGROUND: WI-FI TRENDS
Increasing portion of total
network access on Wi-Fi

8. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 8
Explosion in Mobile Devices(Wi-Fi
enabled)
NEED FOR SP WI-FI
SP Wi-Fi
39x Surge in Mobile Data, Apps!
Big Shift to
Indoor Consumption
- Lack of 3G / 4G
Spectrum
- Limited BW
- Attractive
Economics of
Offload
- Unlicensed
Wi-Fi
Spectrum

9. Wi-Fi is part of that performance
experience
How?

10. IN CITY centers

11. And High Traffic Venues

12. In Offices

13. And Special events

14. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 14
WI-FI IS INTEGRATED INTO THE MBB
OFFERING
Technology visualization
WiFi performance not guaranteed
Cumbersome to monetize Carrier WiFi
Performance & business visualization
Carrier WiFi performance guaranteed
Monetize Carrier WiFi (part of data bucket)
2G 3G 4G
Carrier & Public WiFi
Mobile Broadband
Public WiFi
Performance
indicator
Operator controlled access
(2G/3G/4G/WiFi)
Today Vision
Coverage & Access technology

15. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 15
NEED FOR SP WIFI [CONTD…]
DIFFERENT MOTIVATIONS
Mobile
Operator 1
Mobile
Operator 2
Wireline Operator with
Wi-Fi Access
Mobile Users
Mobile Operators
Wireline
Operator 1
Wireline
Operator 2
Mobile Operator Motivations
• Data traffic growing
exponentially
• Licensed spectrum
limitations
Wireline/Wi-Fi Operator
Motivation
• Increase Service Revenues
• Cater to multiple Mobile
Operators
• Leverage existing
infrastructure
Subscriber Motivation
• Always connected
experience
• Seamless Authentication
• Mobility/Roaming without
disrupting apps
3G/4G delivered
via Mobile
Backhaul
Wi-Fi Access
Gateway Peering

16. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 16
TERMINOLOGY BASICS
Service Provider Wi-Fi Wireline Broadband
User type Mobile Users Fixed Residential
Session Type IP Based Sessions PPP Based Sessions
Session Control Intelligent Services Gateway (ISG) – software component
Place in Network
(PIN) Designation
Wireless Access Gateway
(WAG)
Broadband Network Gateway
(BNG)

17. INTELLIGENT SERVICE
GATEWAY (ISG)

18. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 18
Policy
Server
CISCO INTELLIGENT SERVICES GATEWAY (ISG) IS A LICENSED FEATURE SET ON
CISCO IOS THAT PROVIDES SESSION MANAGEMENT AND POLICY MANAGEMENT
SERVICES TO A VARIETY OF ACCESS NETWORKS
WHAT IS ISG?
Subscriber
Identity
Management
Policy
Management
and
Enforcement
DHCP
Server
…AAA
Server
ISG
Web
Portal
Open
Northbound
Interfaces
Subscriber Policy Layer
So focal, that the entire device is often referred as an:
Intelligent Services Gateway router or simply “The ISG”ISG

19. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 19
Open GardenWalled Garden
ACCESS TECHNOLOGY ABSTRACTION
ATM/Ethernet
Switch
DSL
802.11 or
802.16
Access
Distribution
Ethernet
CMTS
Cable
 Subscriber-centric services regardless of:
Access Technology
Access Protocol
 Access Technology:
Legacy DSL/ATM
Metro Ethernet, Wireless LAN, Cable
 Access Protocol:
IP
PPP
DSLAM
BRAS/BNG

20. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 20
THE NEW USER EXPERIENCE
ENABLING THE NEXT WAVE OF
BROADBAND
Add Subscribers
Pay As You
Go!
Buy credit
Pay What
You Use!
Buy
Broadband
“Value”
Buy: $29.99
Broadband
“Premium”
Buy: $49.99
Broadband
“Ultra”
Buy: $69.99
“Double Play”
Internet +
TV or Voice
($74.99)
Add Value
Add Services
Register Log in
“Triple Play”
Internet + TV +
Video
($99.99)

21. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 21
Multi-Dimensional Identifier for Subscribers
over L2/L3 access networks:
 From multiple sources and events
 Over session lifecycle
 L2 – Pt-to-Pt vis-à-vis L3 – Pt-to-Cloud
Services and Rules updated based on :
 How subscriber behaves
 What the subscriber requires NOW
Different Services and Rules applied based on:
 Who the subscriber is
 Location of the subscriber
 Requirement of the subscriber
SUBSCRIBER AWARENESS -
ELEMENTS OF CUSTOMIZATION
Initiators &
Identity
Session
Services
Dynamic
Service
Management
Intelligent
Service
Gateway
Session
authentication
Dynamic Policy
Push and Pull
Session
initiation

22. ISG CALL FLOWS

23. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 23
IP Packet
Session-start
event posted
2 BNG session creation
3 PBHK service applied (*)
4a
Access-Request
username = mac
4bAccess-Reject
5 OpenGarden and L4R
services applied (*)
2
6 Authentication Timer started
(*) assumes that the definition
of PBHK, L4R and
OpenGarden are already
available on the BNG
class type control always event session-start
10 service-policy type service name PBHK_SRV
20 authorize aaa list IP_AUTHOR_LIST
password cisco123 identifier mac-addr
30 service-policy type service name OG_SRV
40 service-policy type service name L4R_SRV
50 set-timer AUTHEN_TMR 10
2
3
4a
5
6
interface GigabitEthernet 0/0.1
encapsulation dot1Q 10
ip address ...
service-policy type control IP_SESSION_RULE1
ip subscriber l2-connected
initiator unclassified-mac
policy-map type control IP_SESSION_RULE1
<snip>
2
Client obtains IP
address independent
of the ISG
1

24. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 24
http://www.cisco.com
7 L4Redirect to Portal
8
HTTP Redirect. User self-registers9
CoA Req. Account Logon
username, password
11bAccess-Accept
service: BASIC_HSI_SRV
Access-Request
username, password
Account-
Logon event
posted
Service-start
event posted
11a
12bAccess-Accept
BASIC_HSI_SRV definition
Access-Request
BASIC_HSI_SRV, srvpwd
12a
13 BASIC_HSI_SRV is applied
15 L4R and OpenGarden services are unapplied
10a
CoA Ack. Account Logon
http://www.cisco.com16
10c
11a
15
14Accounting-Request (Start) and
Response
Simplified call flow
10b
10b
11c
aaa author subscriber-service default
SERVER_GRP1
subscriber service password servicecisco
class type control always event account-logon
10 authenticate aaa list IP_AUTHEN_LIST
20 service-policy type service unapply
name L4R_SRV
30 service-policy type service unapply
name OG_SRV
!
class type control BASIC_HSI_SRV_CM event
service-start
10 service-policy type service identifier service-
name
Service-Name: “BASIC_HSI_SRV”
Service-Password: “servicecisco”
Attr 28: idle-timeout = 600
AVPair: “subscriber:accounting-list=
IP_ACCNT_LIST”
ServiceInfo: QU;256000;D;768000;
12a
12b
11c

25. SP WI-FI DEPLOYMENTS

26. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 26
SP WI-FI ACCESS + AGGREGATION +
CORE NETWORK – METRO WI-FI / HOT
SPOTS
Open/Walled Garden
Internet/Core
Video
Audio
Servers
AAA
Server
Policy
Server
Web
Portal
DHCP
Server
Subscriber Policy Layer
Controller
Access
Unified Architecture
Radio Intelligence
Access Aggregation
Seamless
Experience
Access
Network SP

27. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 27
ARCHITECTURE OVERVIEW
AZR
Internet
Open Garden
Services
ITP
SS7 Network
HLR Proxy
Access Zone Router
(AZR)Open no-WEP
Web Authentication
EAP
Client
Open no-WEP
Web Authentication
AAA, Portal, Billing
Corporate
VPN
MPLS /
IP
DHCP ServerIOS AP
EAP
Client
IP
HLR /AuC
ASR1K
Client
Smartphone
user
PC/Laptop
user
Access Network
AZR assigns IP.
Client--ISG L3 network.
Service
Web authentication for Unclassified IP
session.
RADIUS Proxy session with accounting
from AZR.

28. SP WI-FI EVOLUTION WITH MPC
INTEGRATION

29. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 29
SP WI-FI ACCESS + AGGREGATION +
CORE NETWORK
Open/Walled Garden
Internet/Core
Video
Audio
Servers
AAA
Server
Policy
Server
Web
Portal
DHCP
Server
Subscriber Policy Layer
Controller
Access
Unified Architecture
Radio Intelligence
Access Aggregation
Seamless
Experience
Access
Network SP
ISG

30. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 30
SP WI-FI ACCESS + AGGREGATION +
CORE NETWORK + MPC INTEGRATION
Open/Walled Garden
Internet/Core
Video
Audio
Servers
AAA
Server
Policy
Server
Web
Portal
DHCP
Server
Subscriber Policy Layer
Controller
Access
Unified Architecture
Radio Intelligence
Access Aggregation
Seamless
Experience
Access
Network SP
HLR/HSS Policy
Server
Web
Portal
DHCP
Server
Subscriber Policy Layer
Mobile Packet Core
Converged
Core
Mobile
Network Operator
iWAG
MPC

31. IWAG – INTELLIGENT WIRELESS
ACCESS GATEWAY

32. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 32
 SIMPLE IP USERS DO NOT
RECEIVE A MOBILITY SERVICE
(EITHER GTP OR PMIPV6)
 SUBSCRIBER SESSION IS
ANCHORED AND MAINTAINED
ON IWAG
 IP ADDRESS FOR THE
SUBSCRIBERS ARE ALLOCATED
EITHER VIA EXTERNAL DHCP
SERVER OR VIA IWAG ITSELF
 SUBSCRIBERS ARE NOT
EXPECTED TO HAVE IP
PERSISTENCY WHILE ROAMING
 SUBSCRIBER AUTHENTICATION
IS TYPICALLY PERFORMED
USING WEB-AUTHENTICATION
OR/AND TRANSPARENT AUTO-
LOGON
 SUBSCRIBERS USING MOBILITY
SERVICES (EITHER GTP OR
PMIPV6)
 SUBSCRIBER SESSION IS
ANCHORED ON THE MPC
(PGW/GGSN) AND ALSO
MAINTAINED ON IWAG
 IP ADDRESS FOR THE
SUBSCRIBERS ARE ALLOCATED
FROM THE MPC, IWAG ACTS AS
A PROXY DHCP SERVER
 SUBSCRIBERS MAINTAIN IP
ADDRESS PERSISTENCY WHILE
ROAMING ACROSS WI-FI TO WI-
FI OR WI-FI TO 3G/4G
 SUBSCRIBER AUTHENTICATION
IS TYPICALLY PERFORMED
USING OUT-OF-BAND OR IN-
BAND EAP-SIM/AKA
MOBILE IP SUBSCRIBER SIMPLE IP SUBSCRIBER

33. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 33
WHAT IS IWAG?
GPRS Tunneling Protocol (GTP) for
integrating Wi-Fi traffic
into Gateway GPRS Support Node
(GGSN)
ISG Features
• IPoE Sessions: DHCP initiated, unclassified IP
or MAC-address initiator, Radius-Proxy
initiator
• Layer-4 Redirect
• Traffic Classes
• Postpaid & Prepaid Accounting
• Dynamic Rate Limiting
• Lawful Intercept
• Radius based authentication and accounting
• Radius CoA Interface
• Per-subscriber QoS
• IP Session keep-alives, timeouts
• VRF Transfer
• Port Bundle Host Key (PBHK)
• Walk-by session handling/optimization
 Local Breakout of subscriber traffic for
Simple IP subscribers
 …..and more http://www.cisco.com/go/isg
Mobile Access Gateway (MAG)
using Proxy Mobile IPv6 (PMIPv6)
for integrating Wi-Fi traffic into
Packet Data Network Gateway
(PGW)
iWAG = Intelligent
Wireless Access
Gateway

34. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 34
ASR 1000 IWAG – IOS XE 3.8S
4G Core
Internet
Portal
GGSN
DHCP
GTP
PGW/LMA
3G Core
L2 Connected
AP
WLC
AP
AAA
Mobile Home Network Policy
PCRFHLR OCS CGF
Access Network Policy
Gy Gx Ga
Gn’
Features:
• L2 Access & AAA Policy
1. EAP-SIM/AKA (via WLC) / FSOL – DHCP
2. EAP-SIM/AKA (via ISG) / FSOL – Radius Proxy
3. Web Logon /TAL. FSOL – Unclassified MAC
• GGSN selection via DNS
• Overlapping MNO address support with multiple
SSID
iWAG
ASR1K
Hotspot 2.0:
Next-Generation Hotspot. Automated Login.
IEEE 802.11u, WPA2-Enterprise, and EAP-based authentication.
Wi-Fi Certified Passpoint ™

35. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 35
BY KEEPING KEY MOBILITY PARAMETERS CONSTANT THROUGHOUT
THE WI-FI NETWORK/WLAN:
A. MN’s IP address & anchor point
B. MN’s Gateway IP address
C. Gateway’s MAC (or Link-Layer address in IPv6) – RFC6543
 TRACKING THE MOVEMENT OF MOBILE NODE – INTRA & INTER MAG
MOVEMENTS
 IN ADDITION, THE DHCP SERVER IS REACHABLE AND CONSISTENT
THROUGHOUT THE WI-FI MOBILITY DOMAIN
HOW PMIPV6 FACILITATES IP
MOBILITY?

36. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 36
iWAG
WLC
LMA
Wi-FiNetwork
WLC
WLC
iWAG
802.11(x) CAPWAP PMIPv6L2
1
2
3
4
7
6
5
8
GxGy
AAA/
Portal
HLR OCS PCRF
WLC
AAA
MN
Traffic flow for Mobile
IP subscriber
AAA interactions
CN – Server/Host
Internet
Walled Garden
Content
WI-FI AGGREGATION WITH
STANDALONE LMA
Traffic flow for Simple
IP subscribers

37. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 37
WI-FI AGGREGATION WITH MULTIPLE
MOBILE NETWORK OPERATOR (MNO)

38. IWAG CALL FLOW AND
CONFIGURATION

39. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 39
SP WIFI-4G INTEGRATION
ARCHITECTURE
DEPLOYMENT MODEL 1
L2 Connected
AP
WLC
AP
Internet
iWAG
ASR1K
AAA
Mobile Home Network Policy
PCRFHLR OCS CGF
Access Network Policy
EAP-SIM/AKA
Authentication
(out-of-band)
FSOL: DHCP Discover
Gy Gx Ga
Model #
Access
Type
Authentication FSOL Service IP
1 Layer 2
EAP-SIM/AKA (out-
of- band)
DHCP
Discover
PGW/LMA
DHCP
Service IP
4G Core
PGW/LMA

40. © Copyright 2014 DATACONSULT All rights reserved. No part of this presentation in all its property may be used or reproduced in any form without a written permission Page 40
PMIPV6 - NETWORK-BASED MOBILITY DEPLOYMENT GUIDE:
HTTP://WWW.CISCO.COM/EN/US/DOCS/IOS-
XML/IOS/MOB_PMIPV6/CONFIGURATION/XE-3S/DEPLOYMENT/MOB-PMIPV6-
DEPLOY.HTML
ISG: CISCO ASR 1000 HTTP://WWW.CISCO.COM/EN/US/DOCS/IOS-
XML/IOS/ISG/CONFIGURATION/XE-3S/ISG-XE-3S-BOOK.HTML
MAG : CISCO ASR 1000
HTTP://WWW.CISCO.COM/EN/US/DOCS/IOS-
XML/IOS/MOB_PMIPV6/CONFIGURATION/XE-3S/ASR1000/MOB-PMIPV6-XE-3S-
ASR1000-BOOK.HTML
MAG: CISCO ISR HTTP://WWW.CISCO.COM/EN/US/DOCS/IOS-
XML/IOS/MOB_PMIPV6/CONFIGURATION/15-2MT/IMO-PMIPV6-MAG-
SUPPORT.HTML
MAG: CISCO WLC
HTTP://WWW.CISCO.COM/EN/US/PRODUCTS/PS10315/PRODUCTS_TECH_NOTE09
186A0080BD4100.SHTML
PMIPV6 CEC PAGE: HTTP://WWWIN.CISCO.COM/IOS/TECH/MOBILE/PROXYIPV6/
REFERENCES

41. THANK YOU
Marc Nader
@mourcous
www.linkedin.com/in/marcnader