PROCEDURE in J20 APN Definition 1. Login to the GGSN (10.63.0.21) 2. Save current configuration to a file.

Make sure there are no other users in edit mode: jpv8112@TKNBGGS01-Re0> show system users 2:58PM up 198 days, 18:13, 1 user, load averages: 0.03, 0.01, 0.00 USER TTY FROM LOGIN@ IDLE WHAT jpv8112 p1 10.21.19.165 2:56PM - -cli (cli) Enter configuration mode jpv8112@TKNBGGS01-Re0> edit exclusive warning: uncommitted changes will be discarded on exit Entering configuration mode [edit] jpv8112@TKNBGGS01-Re0# save <filename> File is saved in /var/home/admin Check the saved file # save ? File should be there 3. Define the APN.

For APN without accounting, include the following statements at the [services ggsn apn apn-name] hierarchy level. (In this procedure, we are creating bew.orange.co.ke as an example).

Still in config mode, jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke access-restrictions selectionmode public Public access to an APN network, means that any Mobile Station (MS) can access the APN network jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke routing-instance Gi APN networks that use private IP addresses must have an APN Virtual Private Network (VPN) configured. In these cases, the APN network must be associated with a virtual-router instance instead of using the master routing instance. The packet for this APN should be routed according to the Gi routing-instance. jpv8112@TKNBGGS01-Re0## set services ggsn apn bew.orange.co.ke pdp-context creation unblocked New APN definition. The creation of new PDP contexts is unblocked for this APN. jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke pdp-context address 10.53.0.0/16 Configuring the MS IP Address Range. jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke pdp-context addressallocation local-pool The defined MS IP address range will be assigned by GGSN.

jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke name-server 212.49.70.22 jpv8112@TKNBGGS01-Re0#set services ggsn apn bew.orange.co.ke name-server 212.49.70.23 Optionally, a maximum of two DNS servers can be configured for an APN. An MS can use the DNS servers if it does not receive DNS information from a RADIUS or DHCP server. If DNS information for an APN is available from both a configured DNS server and RADIUS or DHCP servers, the MS uses the information from the configured DNS server.

The following are for SACC configuration: jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging control-context 3gpp jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 diameter-application-system gypeer jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 service-context-id "v1.gy.ggsn@ericsson.com" jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 ccr-avp jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-preemptive-reservation jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 failure failure-action terminate jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-initiate-session-on-activation jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs credit-control-user cc 4 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs no-credit-control-user cc 8 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke service-based-charging credit-control query-ocs no-valid-answer cc 8 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke allow-rule-space servicesrulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default rulespace default services-rulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default rulespace default-secondary services-rulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category default creditcontrol-ro-profile cc-1 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 ccvalues 4 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 rule-space default services-rulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 rule-space default-secondary services-rulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 4 credit-control-ro-profile cc-1 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 ccvalues 8 jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 rule-space default services-rulespace jpv8112@TKNBGGS01-Re0# set services ggsn apn bew.orange.co.ke user-category category 8 rule-space default-secondary services-rulespace

For APN with accounting, include the following statements at the [services ggsn apn apnname] hierarchy level. (In this procedure, we will take wap.orange.co.ke as our example)

Still in config mode, jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke access-restrictions selectionmode public jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke routing-instance Gi jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke gi-address-range 10.36.18.9/29

These addresses will be used by the GGSN PICs for communication with the RADIUS server. jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context creation unblocked jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context address 10.54.0.0/16 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke pdp-context addressallocation local-pool jpv8112@TKNBGGS01-Re0#set attributes apn-identifier jpv8112@TKNBGGS01-Re0#set attributes ggsn-address jpv8112@TKNBGGS01-Re0#set attributes msisdn jpv8112@TKNBGGS01-Re0#set attributes pdp-type jpv8112@TKNBGGS01-Re0#set attributes signaling-sgsn jpv8112@TKNBGGS01-Re0#set attributes nas-port jpv8112@TKNBGGS01-Re0#set attributes ggsn-plmn-id jpv8112@TKNBGGS01-Re0#set attributes charging-identifier services ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting messageservices ggsn apn wap.orange.co.ke radius accounting message-

By including the message-attributes statement, it is possible to configure properties to determine which attributes, or fields, the RADIUS accounting messages will include. jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.132 timeout 6 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.132 retry 2 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.132 secret "$9$sU4Zjk.5Qz6Ujfz36u0" jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.132 serverdown-timeout 6 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.133 timeout 6 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.133 retry 2 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.133 secret jpv8112@TKNBGGS01-Re0#"$9$z2Yk6A01RSrlMp0clKMN-" jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting 10.36.17.133 serverdown-timeout 6 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke radius accounting for-every-context The following are for SACC configuration: jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging control-context 3gpp jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 diameter-application-system gypeer jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 service-context-id "v1.gy.ggsn@ericsson.com" jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 ccr-avp jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-preemptive-reservation jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 failure failure-action terminate jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control ro-profile cc-1 no-initiate-session-on-activation jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke service-based-charging credit-control query-ocs credit-control-user cc 4 server server server server server server server server message-

jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke credit-control query-ocs no-credit-control-user cc 8 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke credit-control query-ocs no-valid-answer cc 8 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke space default services-rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke space default-secondary services-rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke control-ro-profile cc-1 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke values 4 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke rule-space default services-rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke rule-space default-secondary services-rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke credit-control-ro-profile cc-1 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke values 8 jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke rule-space default services-rulespace jpv8112@TKNBGGS01-Re0#set services ggsn apn wap.orange.co.ke rule-space default-secondary services-rulespace 4. Commit the configuration. jpv8112@TKNBGGS01-Re0# commit check jpv8112@TKNBGGS01-Re0#commit synchronize

service-based-charging service-based-charging allow-rule-space servicesuser-category default ruleuser-category default ruleuser-category default credituser-category category 4 ccuser-category category 4 user-category category 4 user-category category 4 user-category category 8 ccuser-category category 8 user-category category 8

5. Verify the created APN. For example, bew.orange.co.ke defined. jpv8112@TKNBGGS01-Re0> show configuration services ggsn apn bew.orange.co.ke access-restrictions { selection-mode public; } routing-instance Gi; pdp-context { creation unblocked; address { 10.53.0.0/16; } address-allocation local-pool; } name-server { 212.49.70.22; 212.49.70.23; } service-based-charging { control-context 3gpp; credit-control { ro-profile cc-1 { diameter-application-system gypeer; service-context-id "v1.gy.ggsn@ericsson.com"; ccr-avp; no-preemptive-reservation; failure { failure-action terminate; } no-initiate-session-on-activation; } query-ocs { credit-control-user { cc 4; }

no-credit-control-user { cc 8; } no-valid-answer { cc 8; } } } } allow-rule-space services-rulespace; user-category { default { rule-space { default services-rulespace; default-secondary services-rulespace; } credit-control-ro-profile cc-1; } category 4 { cc-values 4; rule-space { default services-rulespace; default-secondary services-rulespace; } credit-control-ro-profile cc-1; } category 8 { cc-values 8; rule-space { default services-rulespace; default-secondary services-rulespace; } } }

Revert Procedure 1. Login to the GGSN. 2. There are two options:

2.1. Use the previously saved configuration.

jpv8112@TKNBGGS01-Re0#edit exclusive jpv8112@TKNBGGS01-Re0#load override <filename> Filename: the same that was used at Configuration Backup 2.2. Rollback the previous configuration To return to the prior configuration: jpv8112@TKNBGGS01-Re0#rollback 1 To check which configuration is needed the following command can be issued jpv8112@TKNBGGS01-Re0#rollback ? 3. Save the Configuration jpv8112@TKNBGGS01-Re0#commit check jpv8112@TKNBGGS01-Re0#commit synchornize coreUser@MRZGGS1#exit