apn (gtp)

Syntax

apn pattern-string {mcc-mnc <mcc-mnc-number> {action <drop | pass | selection <ms | net | vrf> {}}

Hierarchy Level

[edit security gprs gtp profile profile name apn]

Release Information

Statement introduced in Release 10.0 of Junos OS.

Description

Allow or deny access to specific Access Point Names (APNs)

pattern-string—Set an APN suffix such as “juniper.net.mcc123.mnc456.gprs”.
drop—Specify to deny GTP packets from all Selection Modes for this APN.
pass—Specify to permit GTP packets from all Selection Modes for this APN.

selection—Specify one of the following Selection Modes for the APN:

ms The APN is provided by a mobile station (MS) and the user-subscription is not verified.
net The APN is provided by a network and the user-subscription is not verified.
vrf The APN is provided by a network or an MS and the user-subscription is verified.

Note: Because APN filtering is based on a perfect match, using the wildcard * when setting an APN suffix can prevent the inadvertent exclusion of APNs you would otherwise authorize. The security device automatically permits all other APNs that do not match. The wildcard * can only be used as the first character in the APN string.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.