IPv6 in Mobile

Guillaume Gottardi - Consulting Systems Engineer Patrice Nivaggioli - Consulting Systems Engineer

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 Introduction 3GPP Architecture readiness for IPv6 : Dual-Stack in UMTS 3GPP Architecture readiness for IPv6 : Dual-Stack in LTE IPv6 only endpoints ? Dual-Stack deployment scenarios IPv6 only deployment scenarios Conclusion

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Introduction

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Very brief summary

Current Situation
Massive growth of number of mobile data traffic and number of mobile end-points IPv4 run out: Most Operators started to deploy NA(P)T44 (on gateway or dedicated devices)

Drivers for IPv6

Key: Off-load NAT44 Infrastructure Provider-hosted IPv6 only services (VoIP/IMS) Sensor-Networks/Machine 2 Machine communication

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

 Top 10 devices generating 60% of

Radio Signaling overload,

total traffic (Cisco VNI 2010-2015)

Android is catching fast iOS with

simultaneous updates
Bandwidth hogging, concurrent

iPhone for usage

Device OS & installed Apps will have

flow, NAT pin holes

Malware/DOS attacks

unique characteristics
2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5

Where to Place the NAT Function?

Option 1: NAT on Gateway (Distributed)
NAT44 private IPv4 IPv4 eNB SGW PGW
NAT

public IPv4 IPv4 Public

Key Benefits: Subscriber aware NAT - per subscriber control - per subscriber accounting Large Scale (further enhanced by distribution) Highly available (incl. geo-redundancy)

Option 2: NAT on Router (Centralized)

NAT44 private IPv4 IPv4 eNB SGW PGW private IPv4 IPv4 CGN/ CGv6
Cisco Confidential 6 NAT

public IPv4 IPv4 Public

Key Benefits: Integrated NAT for multiple administrative domains (operational separation) Large Scale Overlapping private IPv4 domains (e.g. w/ VPNs)

2010 Cisco and/or its affiliates. All rights reserved.

Overlapping private IPv4 addresses / Large Deployments

NAT
10.1.1.1

PE

10.1.1.1

NAT+ Private IPv4 PE

VRF #1 Private IPv4 VRF #2

PE NAT PE Public IPv4 NAT PE IPv4 Internet

10.1.2.1

IPv4 Internet

10.1.1.1

10.1.1.1

PE

IP/MPLS

10.1.1.1

Standalone CGN: GI-DS-lite concept

NAT Integrated in Gateway

Limited IPv4 life extension for large domains Run-out of private IPv4 addresses (more than ~16M addresses needed)

Approaches Standalone CGN: Access tunnels extended to NAT44 (e.g. using MPLS VPN) Gateway-Initiated Dual Stack Lite (draft-ietf-softwire-gateway-init-ds-lite-02) Gateway-Integrated NAT w/ distributed local address pools Per gateway RFC1918 address space

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

3GPP architecture readiness Dual-stack in UMTS

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

GPRS/UMTS
AAA/HLR
Gr Gb Gn/Gp Gc Gi

BTS

GERAN (2.5G)

Internet

NodeB

UTRAN (3G)

Iu

SGSN

GGSN PDP Context

PDP Contexts / Bearer

IPv4 only: UE GGSN link is IPv4 only IPv6 only: UE GGSN link is IPv6 only IPv4v6 (>= Rel. 9): UE GGSN link transports IPv4 and IPv6 (and has /64 prefix and IPv4 address configured)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

PCRF/AAA/DHCP
Deployment examples:

IPv4-Public
IPv6 as default for IMS, Youtube, iTunes, Google IPv4 as default for IPv4 internet IPv4 as fallback for roaming roaming

IPv6-Public SGSN GGSN

NodeB RNC

IPv6 impacts handsets, SGSN, GGSN, DNS, AAA, Policy Server, Billing, Gi-nodes/VAS platforms, OSS/BSS IPv6 and Dual Stack are well supported by 3GPP Standards 3G Pre-release 9 infrastructure requires PDP context per IP-Stack It doesnt solve the IPv4 exhaustion issue as IPv4 address is assigned to the handset It allows offload IPv4 infrastructure (NAT) to native off-net IPv6 services (Youtube...) and on-net (IMS/RCS...)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

10

PCRF/AAA/DHCP
Deployment examples:

IPv4-Public
IPv6 as default for IMS, Youtube, iTunes, Google IPv4 as default for IPv4 internet IPv4 as fallback for roaming roaming

IPv6-Public SGSN GGSN

NodeB RNC

3GPP R9 lifts the dedicated PdP context per stack restriction, and introduces the IPv4v6 PdP context supports Optimized design which requires less ressources and signalling as for dedicated stack case Considerations to request an IPv4 address on-demand ((e.g., when an application binds to an IPv4 socket interface)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

11

Select GGSN for given APN UE Attach Request Create PDP Context Request (APN, QoS, PDP-type=IPv6,) Option 1 empty UE IP-address for dynamic allocation Option 2 Option 3 Create PDP Context Reply (UE IP-address, Protocol config options (e.g. DNS-server list,), cause) Router Solicitation Router Advertisement DHCPv6 Information Request DHCPv6 Reply DHCPv6 Reply
2010 Cisco and/or its affiliates. All rights reserved.

SGSN

GGSN

AAA

DHCP

/64 prefix allocation: 3 Options: Local Pool, AAA, DHCP /64 prefix allocation from local pool Prefix Retrieval DHCPv6 PD Prefix communicated to SGSN

Attach Accept

SLAAC

DHCPv6 Relay Forward DHCPv6 Relay Reply DHCPv6 Relay Reply

Cisco Confidential 12

Design Considerations
Content providers RAN NodeB Femto HNB RNC Gn Ga (GTP) Gn/Gp (GTP) Core Network GRX Ga (GTP) Ga (GTP) DNS IXC GGSN IMS Core RADIUS QS DHCP Signaling Data DPI NAT Policy WAP DMZ Internet

SGSN

Element eNodeB RNC SGSN HLR/HSS GGSN Billing DPI, Quote Server WAP, Data Accelerator Firewalls DNS

Design consideration (If IPv6 is used for internet & internal Apps)
Charging Billing System Radio layer. Gateway

Can use IPv4

Roaming partners backhaul

Impact

No

Iu-CS/Iu-PS can use IPv4 backhaul Initiate mobile APN query & authentication IPv6 capable IPv6 PDP, standards IPv6 features, prefix allocation Mediation and processing of IPv6 CDR Pre-paid implementation, IPv6 parsing & CDR capability IPv6 packet compressions, cache capability IPv6 rules capability, performance IPv6 DNS capability

No Yes Yes Yes Yes Yes Yes Yes Yes

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

3GPP architecture readiness Dual-stack in LTE

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

14

3GPP 23.401/23.402
HSS S6a (DIAMETER) SWx (DIAMETER)
PCRF

S12 (GTP-U)
UTRAN

GERAN

S4 (GTP-C, GTP-U) SGSN S3 (GTP-C) MME S11 (GTP-C) S1-MME (S1-AP) S10 (GTP-C)

Rx+ Gxc (Gx+)

Gx (Gx+) PDN-GW

Gxa (Gx+)

Gxb (Gx+)

S5 (PMIPv6, GRE)
E-UTRAN
UE

S6b (DIAMETER) SGi

3GPP AAA Operators x-CSCF IP Services

eNB

S1-U (GTP-U)

S-GW

S5 (GTP-C, GTP-U)

SWm (DIAMETER) S2a (PMIPv6, GRE MIPv4 FACoA) S2b SWa (PMIPv6, (TBD) GRE) ePDG STa (RADIUS, DIAMETER) SWn (TBD) Trusted Non-3GPP IP Access Untrusted Non-3GPP IP Access SWu (IKEv2, MOBIKE, IPSec)

2010 Cisco and/or its affiliates. All rights reserved.

Note: Protocol choice analysis in TR 29.803

Cisco Confidential

15

IPv6 Deployment Domains

Initial Deployment Objective / Driver

1 Enable IPv6 customer applications

IPv6 for user plane interfaces IPv6 related attributes for control plane interfaces IPv6 related attributes for policy/charging/control interfaces

2 Enable IPv6 transport

IPv6 Home-PLMN IPv6 Visted-PLMN IPv6 Interconnect-PLMN
Cisco Confidential 16

2010 Cisco and/or its affiliates. All rights reserved.

Note: Protocol choice analysis in TR 29.803

 IPv4 only bearer

The link is IPv4 only: One IPv4 Address

IPv6 only bearer

The link is IPv6 only: One /64 prefix per bearer; One IPv6 Address on UE

Dual Stack results in 2 EPC Bearers (i.e. two interfaces on PGW); Can be supported within the same APN

IPv4v6 bearer (since Rel-8)

The link is dual-stack: The bearer is configured with both IPv4 address and one /64 prefix. v4v6 bearer type is the default in Rel-8 and beyond If v4v6 bearer establishment fails and only a single stack bearer is enabled for UE, UE should try to establish separate PDN connection for missing stack Dual Stack results in 1 EPC Bearers (i.e. one interface on PGW)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

17

 IPv4 Address Configuration: 2 Methods

Within EPS bearer setup signaling (typical) DHCPv4 (DHCP optional on UE and PGW)
IPv6 Address Configuration: 1 Method

Stateless Address Autoconfiguration after the bearer setup /64 prefix for the UE-PGN connection

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

18

UE Attach Request

MME

SGW

PGW

AAA

DHCP

Create Session Request Create Session Request (APN, QoS, (APN, QoS, PDN-type=IPv6,) PDN-type=IPv6,) Option 1 Option 2 Option 3 Create Session Reply (UE IP-address, Protocol config options, cause) Router Solicitation Router Advertisement Create Session Reply (UE IP-address, Protocol config options (e.g. DNS-server list,), cause)

/64 prefix allocation: 3 Options: Local Pool, AAA, DHCP /64 prefix allocation from local pool Prefix Retrieval DHCPv6 PD Prefix communicated to SGW/MME

empty UE IP-address for dynamic allocation

Attach Accept

SLAAC

DHCPv6 Information Request DHCPv6 Reply DHCPv6 Reply

2010 Cisco and/or its affiliates. All rights reserved.

DHCPv6 Relay Forward DHCPv6 Relay Reply DHCPv6 Relay Reply

Cisco Confidential 19

Gateway Focused
Enable IPv6 customer applications

IPv6 PDP Context support Protocols/Encapsulation

GTP-U (v6 over v4/v6) IPsec (incl. IPsec for GTP-C/GTP-U)

Control Protocols
v6 AVPs in Gx, Gy, Rf v6 AVPs/VSAs for S6b v6 IE in GTP v6 IE in GTP-C v6 LI SNMP, UDP, FTP

Addressing
ICMPv6, ND, SLAAC, Stateless-DHCPv6 Prefix allocation w/ priotity from Local-pool, Radius, DHCP Mobile-specific parameterization (29.061, clause 11.2.1.3.4)

Session Services
Per APN & interface redirect, ...

Security

Enable IPv6 Transport for Access Network

Control Protocols
Gx, Gy, Rf over v6 S6b over v6 GTP over v6 GTP-C over v6 SNMPv6, FTPv6, UDP for LI SNMPv6

IPv6 routing/forwarding infrastructure

IPv4/v6 concurrent support on interfaces IPv6 IGPs IPv6 VPN 6PE/6vPE

Security
Cisco Confidential 20

2010 Cisco and/or its affiliates. All rights reserved.

Towards Prefix Delegation

Deployment Scenarios
In-home routing to separate different classes of devices (and allow for different security settings etc.) Fixed-LTE to attach multi-party homes Multi-Technology Mobile Station Mobile-Station (Mobile Access Router) supports multiple client access technologies: Fixed-Ethernet, WiFi, Bluetooth Dedicated network / prefix for each mobile access technology
Sensors; Surveillance PC/Web

/60 /64

Entertainment; Video/TV/Voice

/60 /64

/60 /64 /56

Approach
DHCPv6 Prefix Delegation added to 3GPP Architecture Follows draft-ietf-v6ops-ipv6-cpe-router

Service Provider Network

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

21

Notes on Solution for Rel-10

/64

IPv6 Host IPv6 Host

subnet

IPv6 UE
Requesting Router

IPv6 Bearer
/64

PDN-GW
Delegating Router
/56

Route announced

IPv6 Host IPv6 Host

/60

Prefix Delegation

subnet
/64

Single Prefix per PDN Connection / PDP Context

Prefixes delegated to the UE are portions of this single prefix /64 default prefix also aggregates into the single prefix

Prefix Allocation as part of PDN Connection setup

Local Pool or AAA

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

22

IPv6 Only Endpoints ?

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

23

IPv6 user plane with 3GPP defined tunneling: - GTP - PMIP/GRE - IPsec

Access Network: - native IPv4 and/or - native IPv6 - v6 tunneling options, e.g. 6PE apply as well

Core Network: - native IPv6 - v6 tunneling options, e.g. 6PE, Softwires

NAT64
NAT

public IPv4 IPv4 Public

IPv6

IPv6 IPv4 IPv6 PGW IPv4 CGN/ CGv6

eNB

SGW

IPv6

IPv6 only as a default service Simplify operations, optimize resource usage IPv4 kept as a backup service in case IPv6 not available (eg roaming) Still, bridging the IPv6 only islands with Public IPv4 resources is a must

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

24

stateful

stateless

1. 2. 3. 4. 5. 6.

IPv6 Network

IPv4 Internet

IPv4 Internet IPv6 Internet

IPv4 Network

IPv6 Network

IPv4 Network

IPv6 Internet
IPv4 Network

Not viable because too few IPv4 addresses

IPv6 Network

IPv4 Network

IPv6 Network

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

25

Stateless
State creation Flow does NOT create any state in the translator, algorithmic operation performed on packet headers 1:1 mappings (one IPv4 address used for each translation to an IPv6 host), no IPv4 address savings IPv6 systems must have IPv4translatable addresses (RFC6052)

Stateful
Each flow creates state in the translator. amount of state based on O(# of translations) N:1 mappings (like NAPT with NAT44), save IPv4 addresses IPv6 systems may use any IPv6 addresses

Address Savings

Address Space

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

26

App App App

App App App

App App App

Support for IPv6 resides in 3 different areas: - Applications - OS - Cellular interface

Handset OS

Radio Cellular Chipset

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

27

Slide courtesy of Jari Akko (presented at Technical Plenary, IETF 79)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

28

IPv4 Application IPv4 Network Stack BIH IPv6 Network Stack IPv6 transport PGW IPv6 CNAT IPv4

IPv6

BIH function makes the needed Bump-in-the-API (BIA) and the Bump-in-the-Stack (BIS) changes

IPv4 Application
Socket API (IPv4) (Socket API Translator): Ext. Name resolver, Address mapper, function mapper TCP/UDP over IPv6 Interface Driver BIA

Hosts main DNS resolver

TCP/UDP over IPv4 Protocol Translator Etx. Name resolver

IPv4 Application

TCP/UDP ovr IPv6 Interface Driver BIS

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

29

Option for IPv6 introduction: IPv4/IPv6 Dual-stack UE

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

30

IPv6 address and IPv4 address

IPv4 & IPv6 Inline Services (DPI, Steering, H-insertion)

RADIUS (MSISDN, IPv4) (MSISDN, IPv6)

Lawful Interception Gi Services

IPv6 Internet and Services

Dual Stack Endpoint

GGSN P-GW

IPv4 Gi Services NAT44

IPv4 Internet

Incoming Responses: AAAA and/or A Records AAAA and/or A Records DNS Outgoing Responses: AAAA and/or A Records

IPv6 address allocated to UE via SLAAC/GGSN-PGW, IPv4 address allocated at PdP-context / bearer setup Mobile Gateway performs Inline Services, Header Insertion can be used for user identity propagation GGSN-PGW provides IPv4 MSISDN and IPv6 MSISDN correlation via RADIUS/DIAMETER to LI and Service Platforms No NAT involved, except in case of Private IPv4 where NAT44 is required
Cisco Confidential 31

2010 Cisco and/or its affiliates. All rights reserved.

Option for IPv6 introduction: IPv6 Only UE

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

32

IPv6 address

RADIUS (MSISDN, IPv6) Lawful Interception RADIUS (IPv6, IPv4, Ports) GGSN P-GW Stateful NAT64 AFT Incoming Responses: A Records with IPv4 address

IPv6 Internet and Services

IPv6-Only Endpoint

IPv4 Internet

AAAA Records with synthesized Outgoing Responses: A Records with IPv4 NAT64 CGN address Address: PREFIX:IPv4 Portion:(SUFFIX) DNS64

IPv6 address allocated to UE via SLAAC/GGSN-PGW GGSN-PGW provides IPv6 MSISDN correlation via RADIUS/DIAMETER to LI Stateful NAT64 provides IPv6 IPv4 Ports correlation via RADIUS/DIAMETER/NETFLOW to LI DNS64/NAT64 synthesizes destination/target IPv4 addresses in AAAA records

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

33

IPv6 address

Lawful Interception RADIUS (MSISDN, IPv4, Ports) GGSN P-GW Stateful NAT64 AFT Incoming Responses: A Records with IPv4 address

IPv6 Internet and Services

IPv6-Only Endpoint

IPv4 Internet

AAAA Records with synthesized Outgoing Responses: A Records with IPv4 NAT64 GW address Address: PREFIX:IPv4 Portion:(SUFFIX) DNS64

IPv6 address allocated to UE via SLAAC/GGSN-PGW Stateful NAT64 is performed on the Mobile Gateway GGSN-PGW provides IPv4, Ports MSISDN correlation via RADIUS/DIAMETER DNS64/NAT64 synthesizes destination/target IPv4 addresses in AAAA records

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

34

IPv6 address

RADIUS (MSISDN, IPv6) RADIUS (IPv6, IPv4, Ports) GGSN P-GW Stateful NAT64 AFT

IPv6 Internet and Services LI & Gi Services

IPv6-Only Endpoint

IPv4-Only Service Platforms NAT44

IPv4 Internet

Incoming Responses: A Records with IPv4 address AAAA Records with synthesized Outgoing Responses: A Records with IPv4 NAT64 CGN Address Address: PREFIX:IPv4 Portion:(SUFFIX) DNS64

IPv6 address allocated to UE via SLAAC/GGSN-PGW GGSN-PGW provides IPv6 MSISDN correlation via RADIUS/DIAMETER Stateful NAT64 provides IPv6 IPv4 Ports correlation via RADIUS/DIAMETER/NETFLOW DNS64/NAT64 synthesizes destination/target IPv4 addresses in AAAA records NAT44 is used to translate private to public source IPv4 addresses (if private IP address is used on Stateful NAT64)
Cisco Confidential 35

2010 Cisco and/or its affiliates. All rights reserved.

IPv6 address

IPv4 & IPv6 Inline Services (DPI, Steering, H-insertion)

RADIUS (MSISDN, IPv4, Ports)

IPv6 Internet and Services LI & Gi Services

IPv6-Only Endpoint

GGSN P-GW Stateful NAT64 AFT

IPv4 Internet and IPv4 Gi Services

Incoming Responses: A Records with IPv4 address AAAA Records with synthesized Outgoing Responses: A Records with IPv4 NAT64 GW Address Address: PREFIX:IPv4 Portion:(SUFFIX) DNS64

IPv6 address allocated to UE via SLAAC/GGSN-PGW Stateful NAT64 is performed on the Mobile Gateway Mobile Gateway performs Inline Services, Header Insertion can be used for user identity propagation GGSN-PGW provides IPv4, Ports MSISDN correlation via RADIUS/DIAMETER to LI and Service Platforms DNS64/NAT64 synthesizes destination/target IPv4 addresses in AAAA records
Cisco Confidential 36

2010 Cisco and/or its affiliates. All rights reserved.

Conclusion

Presentation_ID

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

38

UE: Dual-Stack or Single-Stack IPv6 ?

Historically, Dual-Stack (with NAPT44) used to be the typical answer in response to the

what is your migration strategy? question

Several 4G/LTE networks (will) start with DS UE offering
4G/LTE allows for single v4v6 bearer right from the start DS handset offerings still (very) limited

Dual-Stack challenges
3G: < Rel. 9: 2 PDP contexts needed dual stack (cost and scalability concern) Current OS-behavior (preferences, stack-selection) Often BSS/OSS/PCC infrastructure uses the IP-address/prefix to identify the subscriber: There can only be one address/prefix not two Operational overhead to operate two networks (routing, addressing, etc.)

Multiple SPs re-consider their strategy and consider IPv6-only UE connectivity (along with stateful NAT64) v6 only service offering options considered simple service: v6-only phones not so smart phones advanced service: v6/v4 phones with v6-only connectivity will require BIH/NAT46 on handset (there are still a lot of IPv4 only applications out there)

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

39

 Dual-Stack Transport Networks

Several Providers start to consider IPv6 in the IP RAN (for LTE), DS Core (6PE based)

NA(P)T44 Deployment
NAT on Gateway or Router/Standalone device: Both options considered Private IPv4 run out: Regionalization or GI-DS-lite NAT-Standalone deployments: How to select the appropriate NAT device?

IPv6 only deployments and NAT64

DNS64 deployment: Standalone or bundled/integrated w/ router? BIH, dIVI an option for Mobile?

Evolution of deployment models

4G/LTE deployment models sometimes similar to classic broadband
Increasing interest in Mobile-Router models with IPv6 prefix delegation to UE Increasing demand for static IPv6-prefixes on UEs?

2010 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

40

Thank you.