mcc–mnc (gtp)

Syntax

mcc-mnc <mcc-mnc-number> {action <drop | pass | selection <ms | net | vrf> {}}

Hierarchy Level

[edit security gprs gtp profile profile name apn pattern-string mcc-mnc]

Release Information

Statement introduced in Release 10.0 of Junos OS.

Description

By default, the security device grants access to any International Mobile Station Identity (IMSI) prefix. An IMSI prefix consists of a Mobile Country Code (MCC) and a Mobile Network Code (MNC). The set and unset commands allow or deny specific IMSI prefixes. These commands only apply to create pdp context request GTP messages. The MCC-MNC pair can be five or six digits.

You can filter GTP packets based on the combination of an IMSI prefix and an APN.

number—Specify an IMSI prefix.
string—Specify an APN.
drop—Enable the security device to deny GTP packets from all Selection Modes for the specified APN.
selection—Specify one of the following Selection Modes for the APN:
- ms The APN is provided by a mobile station (MS) and the user-subscription is not verified.
- net The APN is provided by a network and the user-subscription is not verified.
- vrf The APN is provided by a network or an MS and the user-subscription is verified.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.