Access Point Name

What can I do here?

Use this window to create or edit an access point name.

Getting Here - Object Explorer > New > Network Object > More > Access Point Name

Access Point Name

An Access Point Name provides routing information for SGSNs (Serving GPRS Support Nodes) and GGSNs (gateway GPRS Support Nodes). The APN, which is written as a string, contains the identity of the external service requested (the Operator ID) by the MS, and routing information (the Network ID). The two IDs are written something like this:

Operator ID: MNC1234.MCC5678.gprs

Network ID: example.net

Check Point has taken APNs a step further, integrating support of domains with APNs. A domain, consisting of addresses, IP subnets, address ranges or groups thereof, may be configured on an APN object. APN Domains specify the range of IP addresses that are assigned to MSs upon connecting to an APN. For example, you can create one APN called Content_Servers that assigns a range of IP addresses from 10.1.1.1 to 10.1.10.255, and another called Internet, that assigns from a range of 192.168.1.1 to 192.168.10.255.

You can also use APN objects to specify from which networks PDP contexts for enterprise APNs may be created, or to grant the CEO sole access to a specific APN, or to accept Handovers only between specified networks.

Configuring APN Options

Tell me about the fields

Name the APN with a user-friendly name.
APN string is the actual Access Point Name. An example of an APN string is internet.mnc55.mcc243.gprs, or example.com. You can also use an APN object to match multiple APN strings through the use of wildcards. For example, you can create an APN object called *.example.gprs that will match APN object strings like 123.example.gprs and abc.example.gprs.

Intra Tunnel Policy Enforcement

This section of the APN object window sets whether the APN allows PDP context activations from specified end user IP addresses in a number of circumstances.

Enforce End User Domain to allow only the address or addresses specified in the End User Domain drop-down list. Any PDP context activations using addresses other than the one(s) specified here are blocked and logged.
To prevent an MS from sending undesirable traffic to another MS, you can block internal GTP tunnel communications between MSs.
Block MS to MS traffic between this and other APN End User Domains to drop and log intra-tunnel traffic between two MSs with server IP addresses other than the one specified APN End User Domain
Block MS to MS traffic within this End User Domains to drop and log intra-tunnel traffic between two MSs with server IP addresses that match the address specified in the End User Domain drop-down list.