OWD090706(slide)GGSN9811 V900R007C01 APN configuration-20081020-B-V1.0

8/14/2019 OWD090706(slide)GGSN9811 V900R007C01 APN configuration-20081020-B-V1.0

1/62

www.huawei.com

GGSN9811 V900R007C01

APN Data Configuration

Huawei Technologies

www huawei com


2/62

HUAWEI TECHNOLOGIES CO., LTD. HUAWEI Confidential

Contents

1. Basic Concept

2. APN Configuration

3. Virtual APN Configuration

4. Alias APN Configuration


3/62


APN Definition and Function

APN: Access Point Name

APN function:

Use APN to identify the GGSN in the GPRS/WCDMA backbone

APN defines the external PDN which is connected to GGSN, such as

the ISP network and enterprise network


4/62


APN Structure

APN NI defines the external network

APN OI defines the GPRS backbone of GGSN

APN classification

General APN: local accessing

Area APN: home accessing

internet. mnc.mcc.gprs

APN Network

Identifier

APN Operator

Identifier


5/62


APN Application

MS

traffic

www.yahoo.com

=211.*.*.*Domain name: www.yahoo.com

APN: web

DNS of internet

www.yahoo.com

IP address=

211.*.*.*

DNS of GPRS

core network

APN=GGSN IP

SGSN GGSN


6/62


Contents

1. Basic Concept

1.1 APN

1.2 MS Access Mode

1.3 MS Address Allocation


7/62


MS Access Mode

Transparent mode

Fit for mobile operator acts as the ISP

The IP address allocate to the MS belong to the operators network

Generally, no need to authenticate the subscriber

None transparent mode

Fit for the mobile operator and ISP separate mode

The IP allocate to MS belong to the operator or ISP

Must authenticate the subscriber


8/62


Authentication Mode

The authentication mode is used when none-transparent, the user

name could be:

PCO

APN

MSISDN


9/62


MS Access Mode

GGSN

Radius

traffic

1. Create PDP context request

2. Create PDP context respondMS GGSN

Transparent


10/62


MS Access Mode

GGSN

Radius

trafficusername &password



No Transparent


11/62


MS Access Mode

Transparent and authentication

GGSN

Radius

traffic

username &

password




12/62


Contents

1. Basic Concept

1.1 APN

1.2 MS Access Mode

1.3 MS Address Allocation


13/62


MS Address Allocation

Static IP allocation

The subscriber get the IP address when the they subscribe the data

service

Dynamic IP allocation

Allocate by GGSN internal IP address pool

Allocate by RADIUS

Allocate by DHCP


14/62


Contents

1. Basic Concept





15/62


APN Information

VPN instance name

APN name

APN name

Bind

Global Route

Basic info

Address Pool

Radius

Dns

APN name

DHCP


16/62


Configuration steps

Basic information about APN

IP address pool for the APN

Configure Radius Information

Configure DNS

Configure DHCP


17/62


APN Basic Information

APN Basic Information command

APN name apn

selection-mode select-mode-checkaccess-mode

access-modeauthentication-mode

address-allocation address-allocation


18/62


Optional Data for APN Basic Information

Optional steps for APN basic information configuration

session-timeout

idle-timeout

max-bandwidth


19/62


Optional Data for APN Basic Information

Optional steps for APN basic information configuration

max-pdpnumber

apn-type-select

volume-statistic-mode

ppp-access authentication


20/62


Create APN Instance

apnapn-instance

[Huawei]apn huawei1

vpn-instancevpn-instance-name

[Huawei-apn-huawei1]vpn-instance ch-gi

select-mode-check{ enable| disable}

[Huawei-apn-huawei1]select-mode-check disable


21/62


Create APN Instance

access-mode{ transparent-authentication| transparent-non-

authentication| non-transparent[ authentication-mode{ pco|

apn[ authentication-passwordpassword-string] [ pco-priority

enable| disable] | msisdn[authentication-passwordpassword-stirng] [ pco-priorityenable| disable] } ] }

[Huawei-apn-huawei1]access-mode non-transparent authentication-

mode pco

[Huawei-apn-huawei1]common-user ch-mobile commonuser-

password ch-mobile


22/62


Create APN Instance

common-useruser-namecommonuser-passwordpassword

[Huawei-apn-huawei1]common-user ch-mobile commonuser-

password ch-mobile

[Huawei-apn-huawei1]idle-timeout enable length 60 updatemsg

enable

[Huawei-apn-huawei1]apn-type-select aaaacct service ocs service

perf service cg requested


23/62


Maintenance

Lock APN

[GGSN] apn isp.com

[GGSN-apn-isp.com] lock enable

Display apn-userinfo

display apn-userinfo isp.com


24/62


Configuration steps




Configure DNS

Configure DHCP


25/62


Address Allocation Mode

Command: [GGSN9811-apn-

huawei]address-allocate

Local: Radius-priority

Enable

Disable

DHCP: Radius-priority

Enable

Disable

Radius

Local poolPDP req (null)

Radius

Enable

IP


26/62


Static IP Processing

Static-ip:

APN

HLR: E/D

Conflict: E/D

Router: E/D Black-address-

list

White-address-list

IP pool/section/static

The IP address has

been used by other

IMSI?

Y

Reject

N

SPU

PDP req (APN/IP)

PDP RES (IP)

Des Mask Nhop

IP add 32 Gif

(1)

(2)

(3)

(4)(5)

(6)

Y

N

N

Y

Router: E/D


27/62


Dynamic Address Processing

Address allocate:

APN

Local : Radius priority

DHCP: Radius priority

Radius

Y

Reject

N

SPU

PDP req (APN/null)

PDP RES (IP)

Des Mask Nhop

IP add 27 Gif

The IP address has

been used by other

IMSI?

Local pool

DHC

P

Radius

(Agent IP)

(1)

(2)

(3)

(4)

(5)

(6)


28/62


Gif

Physical interface

G interface

LPU SPU

SGSN

Gif interface

Gnif interface

Data

Other router

GGSN is a router with GPRS functionso there are two kinds of data

to come in GGSN: the IP package (black line) which sends to MS and

ordinary data package (red line). None but the MS IP package needs

to be transfer to Gnif interface to conduct GTP encapsulation, ordinary

data package neednt


29/62


Address Allocate Mode

address-allocate{ local[ radius-prior{ enable| disable}] |

dhcp[ radius-prior{ enable| disable}] | radius}

[Huawei-apn-huawei1]address-allocate radius


30/62


Local Pool Configuration

Local pool for dynamic ip allocation

create IP pool

pool name

[GGSN-access]ip poolLocal /remote

IP pool section

configuration

section-num

[GGSN-access-ip-pool-testpool]

section

start-ip-address

end-ip-address

binding with APN pool name

[GGSN-apn-huawei1] address-

pool

binding with VPN pool name

[Huawei-access-ip-pool-

huawei1]vpn-instance ch-gi


31/62


Blacklist and Whitelist Configuration

Static IP Attribution Configuration

configure black-address-

list [GGSN-access] black-address-list

start-ip-address

end-ip-address

vpn-instance-name (o)

configure white-address-

list

[GGSN-access]ip pool

pool-name

remote

[GGSN-access-ip-pool-testpool] section

section-num

start-ip-address

end-ip-address

static

binding with VPN (o)

[GGSN-access-ip-pool-testpool] vpn-

instance vrf1

binding with APN [GGSN-apn-isp.com] address-pool pool-name


32/62


Whitelist Configuration

ip poolpool-name[ remote| local[ ipv4| ipv6] ]

[Huawei-access] ip pool huawei1 local

sectionsection-numstart-ip-addressend-ip-address[ static]

[Huawei-access-ip-pool-huawei1] section 2 100.100.1.1

100.100.1.100 static

[Huawei-access-ip-pool-huawei1]vpn-instance ch-gi

[Huawei-apn-huawei1]address-pool huawei1


33/62


Enable Active PDP by Static IP

static-ip[ hlr-provided{ enable[ conflict{ deactive| ignore} ] |

disable} ] [ route{ enable[ hlr| radius| all] | disable} ]

[Huawei-apn-huawei1]static-ip hlr-provided enable route enable all

Enable active by static IP

Configure the static IP

function [GGSN-apn-isp.com] static-ip

hlr-provided

conflict

route

vpn-instance-

name (o)


34/62


Maintenance

Lock Pool

[GGSN-access] ip pool testpool local

[GGSN-access-ip-pool-testpool] lock


35/62


Maintenance


36/62


Configuration steps




Configure DNS

Configure DHCP


37/62


AAA Authentication Configuration

Configure AAA server

authentication

[GGSN-access] radius-server group isp.com

[GGSN-access-radius- isp.com] radius-server

authentication

Configure radius-server

retransmit timeout [GGSN-access-radius- isp.com] radius-server

Configure radius server

authentication attribute

[GGSN-access-radius- isp.com] radius-server auth-

attribute

Configure radius serverauthentication 3GPP

extension attributes

[GGSN-access-radius- isp.com] radius-server auth-

3gppvsa


38/62


AAA Authentication Configuration

Configure radius-server accept-

attribute [GGSN-access-radius-server1] radius-server accept-attribute

Bind RADIUS server group to APN

instance

[GGSN] apn test

[GGSN-apn-test] radius-server group isp.com

Configure public user name and

password of the APN [GGSN-apn-test] common-user

Configure that the domain name of

the APN can be stripped [GGSN-apn-isp.com] strip-domain-name enable


39/62


AAA Accounting Configuration

Configure active AAA

accounting server

[GGSN-access] radius-server group TMO

[GGSN-access-radius- tmo] radius-server

accounting

Configure AAA accounting

server retransmit timeout [GGSN-access-radius- tmo] radius-server

configure AAA accounting

private extension attributes

[GGSN-access-radius- tmo] radius-server acct-

attribute

Configure radius server 3GPP

accounting extension attributes

[GGSN-access-radius-server1] radius-server acct-

3gppvsa

configure cache-acct-stop-

message [GGSN-apn- Germany] cache-acct-stop-msg enable


40/62


AAA Accounting Configuration

Bind RADIUS server group to

APN instance

[GGSN] apn Germany

[GGSN-apn- Germany] radius-server group TMO

configure the charging

signaling control attributes of

the AAA client [GGSN-apn- Germany] radius acctctrl

configure the traffic threshold

and time threshold

[GGSN-apn- Germany] radius threshold time-

threshold

configure cache-acct-stop-

message [GGSN-apn- Germany] cache-acct-stop-msg enable


41/62


Optional Steps

Optional steps

radius-server auth-attribute

radius-server auth-3gppvsa

radius-server acct-attribute

radius-server acct-3gppvsa

radius-server acct-onoffsig

strip-domain-name


42/62


Configuration

radius-server groupgroup-name

[Huawei-access] radius-server group huawei1

radius-server authenticationip-address[vpn-instancevpn-

instance] [portport] keykey-string

[Huawei-access-radius-huawei1] radius-server authentication

10.111.23.7 vpn-instance ch-gi key huawei1


43/62


Configuration

radius-server auth-attribute[ acct-session-id {enable|

disable} | nas-id {enable{ sys-name| apn} | disable} | imsi

{ enable| disable} | charging-id {enable| disable} | prepaid-

ind { enable| disable} |ggsn-ip {enable| disable} | sgsn-ip{ enable| disable} |apn-alias{ enable| disable} |ggsn-

vendor{enable| disable} |ggsn-version{enable| disable} ]

*

[Huawei-access-radius-huawei1]radius-server auth-attribute acct-

session-id enable charging-id enable ggsn-ip enable ggsn-vendor

enable apn-alias enable ggsn-version enable


44/62


Configuration

3GPP extension attributes configuration

[Huawei-access-radius-huawei1] radius-server auth-3gppvsa 3gpp

enable

radius-server accountingip-address[ portport-number] [ vpn-

instancevpn-instance] keykey-string

[Huawei-access-radius-huawei1]radius-server accounting 10.111.23.7

vpn-instance ch-gi key huawei1


45/62


Configuration

Accounting attribute configuration

[Huawei-access-radius-huawei1]radius-server acct-attribute charging-

id enable

3GPP extension attributes configuration

[Huawei-access-radius-huawei1]radius-server acct-3gppvsa 3gpp

enable

Optional accounting message attributes configuration

[Huawei-access-radius-huawei1]radius-server acct-onoffsig optional-

account-message enable


46/62


Configuration

radius-server groupgroup-name

[Huawei-apn-huawei1]radius-server group huawei1

control attributes of accounting signaling of an AAA client

[Huawei-apn-huawei1] radius acctctrl wait-accounting-response

enable

radius threshold[ time-thresholdtime-threshold| volume-

thresholdvolume-threshold] *

[Huawei-apn-huawei1] radius threshold time-threshold 10


47/62


Configuration steps




Configure DNS

Configure DHCP


48/62


DNS Configuration

[GGSN] access-view

Configure the DNS for the specific APN

[GGSN-access]APN huawei

[GGSN-access-huawei] dns primary-ip 192.168.2.1 secondary-ip

192.168.1.1 priority radius

Configure the DNS for default

[GGSN-access]defdns primary-ip 192.168.2.1 secondary-ip 192.168.1.1

radius


49/62


Configuration steps




Configure DNS

Configure DHCP


50/62


DHCP Configuration

Set the DHCP group information

[GGSN-access] dhcp-server group

[GGSN-access-dhcp-server-group-group1] dhcp-server

[GGSN-access-dhcp-server-group-group1] dhcp-server leasetime

Set the ip pool information

[GGSN-access]ip pool

[GGSN-access-ip-pool-testpool] agent-ip

[GGSN-access-ip-pool-testpool] dhcp-server group

Binding the ip pool with APN

[GGSN-apn-isp.com] address-pool


51/62


Contents

1. Basic Concept





52/62


Virtual and Alias APN

Virtual APN

The virtual APN means that multiple users who access different PDNs

can carry the same APN, that is, they can access different PDNs

through the same virtual APN on the GGSN.

Alias APN

Multiple APNs in the current network can be aliases of a single APN

and they can use the same resources.


53/62


Virtual APN by IMSI


54/62


Virtual APN by MSISDN


55/62


Virtual APN by RAT


56/62


Virtual APN by PCO


57/62


Virtual APN by PCO


58/62


Configuration Steps

virtual-apn{ enable[ virtual-apn-activate{ enable| disable} ] |

disable}

[GGSN9811-apn-huawei1] virtual-apn enable virtual-apn-activate

enable


59/62


Configuration Steps

virtual-apn-rule virtual-apn-instanceimsi imsi-matching-numberapn apn-instance| msisdn msisdn-matching-numberapn

apn-instance| rat matching-modeapn apn-instance| pco |

radius

[GGSN-access] virtual-apn-rule huawei imsi 46001 apn beijing

prefix-separatorand suffix-separator


60/62


Contents

1. Basic Concept





61/62


Virtual and Alias APN

Virtual APN

The virtual APN means that multiple users who access different PDNs

can carry the same APN, that is, they can access different PDNs

through the same virtual APN on the GGSN.

Alias APN

Multiple APNs in the current network can be aliases of a single APN

and they can use the same resources.


62/62

Thank youwww.huawei.com

OWD090706(slide)GGSN9811 V900R007C01 APN configuration-20081020-B-V1.0

Documents

Transcript of OWD090706(slide)GGSN9811 V900R007C01 APN configuration-20081020-B-V1.0