gprs
Syntax
gprs {
gtp {
handover-default {
deny;
}
ip-group name {
address-book name {
address-set set-name;
}
}
profile (Security GTP) profile-name {
apn pattern-string {
imsi-prefix imsi-prefix-digits {
action (APN GTP) {
drop;
pass;
selection (ms|net|vrf);
}
}
}
mask-uli (1-65535);
drop (Security GTP) {
aa-create-pdp 0;
aa-delete-pdp 0;
bearer-resource 2;
change-notification 2;
config-transfer 2;
context 2;
create-bearer 2;
create-data-forwarding 2;
create-pdp (0 | 1 | all);
create-session 2;
create-tnl-forwarding 2;
cs-paging 2;
data-record (0 | 1 | all);
delete-bearer 2;
delete-command 2;
delete-data-forwarding 2;
delete-pdn 2;
delete-pdp (0 | 1 | all);
delete-session 2;
detach 2;
downlink-notification 2;
echo (0 | 1 | 2 | all);
error-indication (0 | 1 | all);
failure-report (0 | 1 | all);
fwd-access 2;
fwd-relocation (1 | 2 | all);
fwd-srns-context 1;
g-pdu (0 | 1 | all);
identification (0 | 1 | 2 | all);
mbms-session-start (1 | 2 | all);
mbms-session-stop (1 | 2 | all);
mbms-session-update (1 | 2 | all);
modify-bearer 2;
modify-command 2;
node-alive (0 | 1 | all);
note-ms-present (0 | 1 | all);
pdu-notification (0 | 1 | all);
ran-info (1 | 2 | all);
redirection (0 | 1 | all);
release-access 2;
relocation-cancel (1 | 2 | all);
resume 2;
send-route (0 | 1 | all);
sgsn-context (0 | 1 | all);
stop-paging 2;
supported-extension 1;
suspend 2;
trace-session 2;
update-bearer 2;
update-pdn 2;
update-pdp (0 | 1 | all);
ver-not-supported (0 | 1 | 2 | all);
}
end-user-address-validated;
gtp-in-gtp-denied;
handover-group group-name;
handover-on-roaming-intf;
log (Security GTP) {
forwarded (basic | detail);
gtp-u name;
prohibited (basic | detail);
rate-limited (basic | detail);
state-invalid (basic | detail);
max-message-length max-message-length;
min-message-length min-message-length;
ne-group group-name;
path-rate-limit {
message-type (create-req | delete-req | echo-req | other) {
alarm-threshold (Security GPRS) {
forward forward;
reverse reverse;
}
drop-threshold (Security GPRS) {
forward forward;
reverse reverse;
}
}
}
rate-limit (Security GTP) limit;
remove-ie {
version v1 {
number ie-number;
release (R6 | R7 | R8 | R9);
}
}
req-timeout second;
restart-path (all | create | echo);
timeout (Security GTP) hour;
u-tunnel-validated;
ue-group group-name;
}
traceoptions (Security GTP) {
file <filename> <files files> <match match> <size size> <(world-readable | no-world-readable)>;
flag name;
no-remote-trace;
trace-level {
(error | info | notice | verbose | warning);
}
}
}
sctp {
log (Security SCTP) name;
multichunk-inspection disable;
nullpdu {
protocol (ID-0x0000 | ID-0xFFFF);
}
profile (Security SCTP) name {
association-timeout association-timeout;
drop (Security SCTP) {
m3ua-service name;
payload-protocol name;
}
handshake-timeout handshake-timeout;
limit (Security SCTP) {
address name {
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
}
payload-protocol (asap | bicc | ddp-segment | ddp-stream | diameter-dtls | diameter-sctp | dua | enrp | h248 | h323 | id | iua | m2pa | m2ua | m3ua | others | qipc | reserved | s1ap | simco | sua | tali | v5ua | x2ap) {
rate rate;
}
rate {
address name {
sccp sccp;
ssp ssp;
sst sst;
}
sccp sccp;
ssp ssp;
sst sst;
}
}
nat-only;
permit (Security SCTP) {
payload-protocol name;
}
}
traceoptions (Security SCTP) {
file <filename> <files files> <match match> <size size> <(world-readable | no-world-readable)>;
flag name;
no-remote-trace;
}
}
}
Hierarchy Level
[edit security]
Description
Use the gprs function to configure all the General Packet Radio Service (GPRS) features.
Use [edit security gprs] hierarchy-level only for Junos OS Release
20.3 or previous releases.
From Junos OS Release 20.4R1 onwards, we've removed the term gprs from all the configuration statements and operational commands for GTP and SCTP. As a part of this change:
- We've deprecated the
[edit security gprs]hierarchy-level and all the configuration options under this hierarchy-level. - All the configuration statements previously available under the
[edit security gprs gtp]hierarchy-level are now available under the[edit security gtp]hierarchy-level. - All the configuration statements previously available under the
[edit security gprs sctp]hierarchy-level are now available under the[edit security sctp]hierarchy-level. -
For default applications like junos-gprs-gtp and junos-gprs-sctp, you need not remove the term gprs.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 10.0. Statement modified in Junos OS Release 15.1X49-D40.