PROCEDURE in J20 APN Definition

1. Login to the GGSN (10.63.0.21)

2. Save current configuration to a file.
Make sure there are no other users in edit mode:
jpv8112@TKNBGGS01-Re0> show system users
2:58PM up 198 days, 18:13, 1 user, load averages: 0.03, 0.01, 0.00
USER TTY FROM
LOGIN@ IDLE WHAT
jpv8112 p1
10.21.19.165
2:56PM - -cli (cli)
Enter configuration mode
jpv8112@TKNBGGS01-Re0> edit exclusive
warning: uncommitted changes will be discarded on exit
Entering configuration mode
[edit]
jpv8112@TKNBGGS01-Re0# save <filename>
File is saved in /var/home/admin
Check the saved file
# save ?
File should be there
3. Define the APN.

For APN without accounting, include the following statements at the [services ggsn apn apn-name] hierarchy level. (In this
procedure, we are creating bew.orange.co.ke as an example).

Still in config mode,

jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke access-restrictions selection-mode public
Public access to an APN network, means that any Mobile Station (MS) can access the APN network
jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke routing-instance Gi
APN networks that use private IP addresses must have an APN Virtual Private Network (VPN) configured. In these cases, the APN
network must be associated with a virtual-router instance instead of using the master routing instance. The packet for this APN should be
routed according to the Gi routing-instance.
jpv8112@TKNBGGS01-Re0## set services ggsn apn bew.orange.co.ke pdp-context creation unblocked
New APN definition. The creation of new PDP contexts is unblocked for this APN.
jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke pdp-context address 10.53.0.0/16
Configuring the MS IP Address Range.
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke pdp-context address-allocation local-pool
The defined MS IP address range will be assigned by GGSN.
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke name-server 212.49.70.22
jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke name-server 212.49.70.23
Optionally, a maximum of two DNS servers can be configured for an APN. An MS can use the DNS servers if it does not receive DNS
information from a RADIUS or DHCP server. If DNS information for an APN is available from both a configured DNS server and RADIUS
or DHCP servers, the MS uses the information from the configured DNS server.

The following are for SACC configuration:

jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging control-context 3gpp

jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 diameterapplication-system gypeer
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 servicecontext-id "v1.gy.ggsn@ericsson.com"
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 ccr-avp
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 nopreemptive-reservation
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 failure failureaction terminate
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-initiatesession-on-activation
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs credit-controluser cc 4
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs no-credit-controluser cc 8
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs no-valid-answer
cc 8
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke allow-rule-space services-rulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default rule-space default-secondary servicesrulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default credit-control-ro-profile cc-1
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 cc-values 4
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 rule-space default-secondary servicesrulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 credit-control-ro-profile cc-1
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 cc-values 8
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 rule-space default-secondary servicesrulespace

For APN with accounting, include the following statements at the [services ggsn apn apn-name] hierarchy level. (In this
procedure, we will take wap.orange.co.ke as our example)

Still in config mode,

jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke access-restrictions selection-mode public
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke routing-instance Gi
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke gi-address-range 10.36.18.9/29
These addresses will be used by the GGSN PICs for communication with the RADIUS server.
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context creation unblocked
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context address 10.54.0.0/16
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context address-allocation local-pool
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes apn-identifier
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes ggsn-address
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes msisdn
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes pdp-type
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes signaling-sgsn
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes nas-port
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes ggsn-plmn-id
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-attributes charging-identifier
By including the message-attributes statement, it is possible to configure properties to determine which attributes, or fields, the RADIUS
accounting messages will include.
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.132 timeout 6
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.132 retry 2
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.132 secret
"$9$sU4Zjk.5Qz6Ujfz36u0"

jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.132 serverdown-timeout 6
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.133 timeout 6
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.133 retry 2
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.133 secret
jpv8112@TKNBGGS01-Re0#"$9$z2Yk6A01RSrlMp0clKMN-"
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting server 10.36.17.133 serverdown-timeout 6
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting message-for-every-context
The following are for SACC configuration:
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging control-context 3gpp
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 diameterapplication-system gypeer
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 servicecontext-id "v1.gy.ggsn@ericsson.com"
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 ccr-avp
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 nopreemptive-reservation
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 failure failureaction terminate
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-initiatesession-on-activation
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control query-ocs credit-control-user
cc 4
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control query-ocs no-credit-controluser cc 8
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control query-ocs no-valid-answer
cc 8
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke allow-rule-space services-rulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category default rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category default rule-space default-secondary servicesrulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category default credit-control-ro-profile cc-1
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 4 cc-values 4
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 4 rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 4 rule-space default-secondary servicesrulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 4 credit-control-ro-profile cc-1
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 8 cc-values 8
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 8 rule-space default services-rulespace
jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke user-category category 8 rule-space default-secondary servicesrulespace
4. Commit the configuration.
jpv8112@TKNBGGS01-Re0# commit check
jpv8112@TKNBGGS01-Re0#commit synchronize

5. Verify the created APN. For example, bew.orange.co.ke defined.

jpv8112@TKNBGGS01-Re0> show configuration services ggsn apn bew.orange.co.ke
access-restrictions {
selection-mode public;
}
routing-instance Gi;
pdp-context {
creation unblocked;
address {
10.53.0.0/16;
}
address-allocation local-pool;
}
name-server {
212.49.70.22;
212.49.70.23;
}
service-based-charging {
control-context 3gpp;

credit-control {
ro-profile cc-1 {
diameter-application-system gypeer;
service-context-id "v1.gy.ggsn@ericsson.com";
ccr-avp;
no-preemptive-reservation;
failure {
failure-action terminate;
}
no-initiate-session-on-activation;
}
query-ocs {
credit-control-user {
cc 4;
}
no-credit-control-user {
cc 8;
}
no-valid-answer {
cc 8;
}
}
}
}
allow-rule-space services-rulespace;
user-category {
default {
rule-space {
default services-rulespace;
default-secondary services-rulespace;
}
credit-control-ro-profile cc-1;
}
category 4 {
cc-values 4;
rule-space {
default services-rulespace;
default-secondary services-rulespace;
}
credit-control-ro-profile cc-1;
}
category 8 {
cc-values 8;
rule-space {
default services-rulespace;
default-secondary services-rulespace;
}
}
}

Revert Procedure
1. Login to the GGSN.
2. There are two options:
2.1. Use the previously saved configuration.
jpv8112@TKNBGGS01-Re0#edit exclusive
jpv8112@TKNBGGS01-Re0#load override <filename>
Filename: the same that was used at Configuration Backup
2.2.

Rollback the previous configuration

To return to the prior configuration:

jpv8112@TKNBGGS01-Re0#rollback 1

To check which configuration is needed the following command can be issued

jpv8112@TKNBGGS01-Re0#rollback ?
3. Save the Configuration
jpv8112@TKNBGGS01-Re0#commit check
jpv8112@TKNBGGS01-Re0#commit synchornize
coreUser@MRZGGS1#exit

NSAPI/Bearer ID:
APN:
PDP address:
Framed Route:
Charging ID:
Gi/SGi DiffServ class:
Maximum Bit Rate Downlink (kbps):
Maximum Bit Rate Uplink (kbps):
GTP-C version:
Session activation timestamp:
Total session duration:
Idle time:
Packets uplink:
Packets downlink: