Enhanced IP Allocation - Subpools (FT-1004.008)

About this document

Scope

This document provides background information as well as a functional description of the FT-1004.008 Enhanced IP Allocation - Subpools advanced feature. The described feature is supported from the release version 4.3.8 onwards.

Note

Enhanced IP Allocation - Subpools is an advanced feature and requires a special license. Ensure that you have agreed with Mavoco about the usage of this feature before taking it into use.

This feature is part of the APN Management functionality with number FN-1004.

Feature Availability

Feature overview

Goals

The aim of the Enhanced IP Allocation - Subpools feature is to support the subdivision of large APN IP Address Pools into sub-networks, which are assigned to Accounts and therefore can be aligned e.g. to VPNs.

Out of scope

• Management of Enterprise VPNs (firewall settings, etc.)

• IP Network Management

Preconditions & Assumptions

• Firewall VPN rules (to map static IP sub-ranges to VPN) are manually provisioned in the firewall and is not the responsibility of the CMP

Functionality of the feature

Enhanced IP Address Pool management in an advanced, licensable tenant-specific feature, which allows the subdivision of a large IP Pool into customer-specific sub-pools to support, for example, Enterprise VPN.

• When the feature is enabled, the enhanced IP Pool management options are enabled and the new configuration parameter will determine whether the feature is enabled for the tenant.

• When the feature is disabled, only basic IP Address Pools are available.

Note, that the feature only provides basic subnet management capabilities, more complex subnet management is out of scope.

To allow enhanced IP management, CMP splits the current view of an APN into

• a Base APN, which is defined in the network, and

• a (logical) APN, which is assigned to a SIM via an APN Group.

Each (logical) APN is realized by a Base APN, however, one Base APN can have multiple (logical) APNs on the condition that they don’t have overlapping IP Pools. The logical APNs have the same technical settings as the APN and can have IP Pools that are a subnet of the Base APN IP Address Pool.

The enhanced IP Pool management allows Users to create an enterprise dedicated IP subnet within an APN IP Address Pool. Based on the information from the enterprise the User will determine an IP subnet to be created.

CMP checks whether there is an overlap with any other subnet related to the technical (base) APN.

• If there is no overlap, the subnet is created.

• If there is an overlap, the User is presented with an error message.

Note that it is the User’s responsibility to ensure contiguous use of the APN IP Pool.

In case the enterprise has used all the allocated IP Addresses in the first subnet, subsequent subnets can be created for the same enterprise (i.e. CMP Account). In this scenario, existing IPs will not be changed and the existing subnet will continue unchanged.

Exceptionally, the User may need to remove a subnet. Note that a subnet can only be removed after all SIMs which had IPs allocated from the subnet are either retired or moved to a different APN.