APN

An access point name selects the gateway a mobile data session uses, from the public internet to a private enterprise network.

Definitions only — a term explained here is not a service we sell.

An access point name (APN) is the string a device sends to select the gateway a data session uses. The APN picks the exit; it does not set security.

The data exit an APN selects

  1. Device
  2. Radio access (RAN)
  3. Mobile core
  4. APN
  5. Gateway
  6. Public internet
The device attaches through the radio and core; the APN selects the gateway that carries its traffic onward.
Text description

The device requests a session with a provisioned APN string. The core resolves that string to a gateway, assigns an address and applies the routing policy tied to it. The gateway then sends traffic to the public internet.

How the string selects a gateway

The APN has two parts: a network identifier the operator chooses and an operator identifier built from MCC and MNC. When the device requests a session, the network checks the subscription, resolves the APN to a gateway (GGSN, PGW or, in 5G, an SMF selected by DNN) and assigns an address.

Public, private and what to check

A public APN shares a gateway and an address pool and usually reaches the internet directly. A private APN is a separate gateway context for one enterprise, often linked to the customer network over IPsec or a private line, with fixed addresses. The APN alone does not make a session private: a device with the right APN but an internet breakout is still on the public internet. Confirm the exact string, the authentication (usually none, PAP or CHAP), the address family and the DNS servers. Check the APN generator output against the provisioning record, including case.

FAQ

Is an APN the same as an encrypted tunnel?

No. The APN selects a gateway; an encrypted tunnel such as IPsec is a separate layer the device or gateway runs on top.

Do I need one APN per customer?

Usually one per service or security boundary, not per customer. Separate APNs add operational overhead, so split only where routing, addressing or policy must differ.

Why does a device work at home but not abroad?

Roaming can force a different APN or route the session back through the home network.

Learn more

Sources

  1. 3GPP TS 23.401: General Packet Radio Service (GPRS) enhancements for LTE
  2. 3GPP TS 23.003: Numbering, addressing and identification (APN structure)