action (APN GTP)
Syntax
action {
drop;
pass;
selection (ms|net|vrf);
}
Hierarchy Level
[edit security gtp profile profile-name apn pattern-string imsi-prefiximsi-prefix]
Description
Use the GPRS tunneling protocol (GTP) profile access point name (APN) action (pass |drop |selection) to filter packets that helps you to allow or deny access to specific access points.
From Junos OS Release 20.4R1 onwards, the [edit security gprs gtp profile
profile-name apn pattern-string
imsi-prefix hierarchy-level is replaced by [edit security gtp
profile profile-name apn pattern-string
imsi-prefix.
Options
drop—Use drop to specify to deny GTP packets from all selection modes for the specified access points.
pass—Use pass to specify to permit GTP packets from all selection modes for the access points.
selection—Use selection to specify one of the following selection modes for the access points:
ms—The access point name is provided by a mobile station, and the user-subscription is not verified.
net—The access point name is provided by a network, and the user subscription is not verified.
vrf— The access point name is provided by a network or an MS, and the user-subscription is verified.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 10.0.