| ajay | b3f4098 | 2021-12-08 14:26:11 -0800 | [diff] [blame^] | 1 | .. |
| 2 | SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org> |
| 3 | SPDX-License-Identifier: Apache-2.0 |
| 4 | |
| ajay | 8794529 | 2021-12-08 00:52:00 -0800 | [diff] [blame] | 5 | .. _application-filtering: |
| 6 | |
| 7 | Application Filtering Overview |
| 8 | ============================== |
| 9 | |
| 10 | Below config snapshot shows how to configure application filtering in the network slice. |
| 11 | Each application filter in the network slice can have action either ``permit`` or ``deny`` |
| 12 | |
| 13 | .. code-block:: |
| 14 | |
| 15 | config: |
| 16 | simapp: |
| 17 | cfgFiles: |
| 18 | simapp.yaml: |
| 19 | configuration: |
| 20 | provision-network-slice: true |
| 21 | sub-provision-endpt: |
| 22 | addr: config4g |
| 23 | port: 5000 |
| 24 | subscribers: |
| 25 | - ueId-start: 208014567891201 |
| 26 | ueId-end: 208014567891211 |
| 27 | plmnId: 20801 |
| 28 | opc: "d4416644f6154936193433dd20a0ace0" |
| 29 | op: "" |
| 30 | key: "465b5ce8b199b49faa5f0a2ee238a6bc" |
| 31 | sequenceNumber: 96 |
| 32 | device-groups: |
| 33 | - name: "4g-oaisim-user" |
| 34 | imsis: |
| 35 | - "208014567891201" |
| 36 | - "208014567891202" |
| 37 | ip-domain-name: "pool1" |
| 38 | ip-domain-expanded: |
| 39 | dnn: internet |
| 40 | dns-primary: "8.8.8.8" |
| 41 | mtu: 1460 |
| 42 | ue-ip-pool: "172.250.0.0/16" |
| 43 | ue-dnn-qos: |
| 44 | dnn-mbr-downlink: 20000000 |
| 45 | dnn-mbr-uplink: 4000000 |
| 46 | bitrate-unit: bps |
| 47 | traffic-class: #default bearer QCI/ARP |
| 48 | name: "platinum" |
| 49 | qci: 9 |
| 50 | arp: 1 |
| 51 | pdb: 300 |
| 52 | pelr: 6 |
| 53 | site-info: "aiab" |
| 54 | |
| 55 | network-slices: |
| 56 | - name: "default" |
| 57 | slice-id: |
| 58 | sd: "010203" |
| 59 | sst: 1 |
| 60 | site-device-group: |
| 61 | - "4g-oaisim-user" |
| 62 | application-filtering-rules: |
| 63 | - rule-name: "deny-private1" |
| 64 | priority: 250 |
| 65 | action: permit |
| 66 | endpoint: "10.0.0.0/8" |
| 67 | protocol: 6 |
| 68 | dest-port-start: 20005 |
| 69 | dest-port-end : 20005 |
| 70 | traffic-class: |
| 71 | name: “platinum” |
| 72 | qci: 9 |
| 73 | arp: 1 |
| 74 | pdb: 300 |
| 75 | pelr: 6 |
| 76 | - rule-name: “deny-private-2” |
| 77 | priority: 251 |
| 78 | action : permit |
| 79 | endpoint: "172.16.0.0/16" |
| 80 | protocol: 6 |
| 81 | dest-port-start: 20005 |
| 82 | dest-port-end : 20005 |
| 83 | traffic-class: |
| 84 | name: “platinum” |
| 85 | qci: 9 |
| 86 | arp: 1 |
| 87 | pdb: 300 |
| 88 | pelr: 6 |
| 89 | site-info: |
| 90 | gNodeBs: |
| 91 | - name: "aiab-gnb1" |
| 92 | tac: 1 |
| 93 | plmn: |
| 94 | mcc: "208" |
| 95 | mnc: "01" |
| 96 | site-name: "aiab" |
| 97 | upf: |
| 98 | upf-name: "upf" |
| 99 | upf-port: 8805 |