Cellular policies
Apple disabled APN settings in iOS 9.0, but re-enabled APN settings in iOS 9.0.1. Ivanti strongly recommends creating a cellular policy for new configurations.
Ivanti EPMM provides a cellular policy that defines the network path for cellular data connectivity, or the Access Point Name (APN). It is possible to configure a cellular data policy using an APN setting or a cellular policy, depending on the version of iOS running on a given device.
The cellular policy allows you to define a customized APN for devices without disrupting device users’ cellular connectivity. The cellular policy in Ivanti EPMM supports Apple’s configuration profile com.apple.cellular payload.
The cellular policy includes the following information:
- A name and description
- Active or inactive status
- A username and password for connecting to the cellular network
- Priority, if more than one cellular policy is defined in Ivanti EPMM
- The preferred method of authenticating with the cellular network
- An Access Point Name (APN), which defines the gateway between the mobile network and your computer network
Cellular policies can be applied to devices running iOS 7 through the most recently released version of iOS or supported newer versions. Only one cellular policy can be used on a device at any given time. A cellular policy cannot co-exist with an APN setting on the same device. If you upgrade a device from iOS 8 to iOS 9, for example, you must remove the APN setting and apply a cellular policy.
Migrating devices from an APN setting to a cellular policy
If you are managing devices with an APN setting applied, you will need to migrate these devices to a cellular policy.
- Make sure the devices are connected to a Wi-Fi network.
- Apply the relevant iOS devices to a label, and remove the APN setting from that label.
- Ensure the APN setting has been removed from iOS devices in the label.
- Apply the new cellular policy to the label applied to the iOS devices.
Defining a cellular policy
If you define more than one cellular policy, you can set the priority of each policy in relation to the others. For instance, if you define three policies, you can configure each policy to take precedence over the next, such that policy 1 would take priority over policy 2, which, in turn, would take priority over policy 3. Note that the most recent priority setting overrides the previous. For example, if you edit policy 3 to take higher priority than policy 2, then the order of priority shifts to policy 1, policy 3, policy 2.
All things being equal, this means that policy 1 will be applied to devices. If, however, policy 1 is only applied to label 1, this means that policy 3 will be applied to label 2.
Procedure
- Go to Policies & Configs > Policies.
- Click Add New.
- Select iOS and macOS > iOS Only > Cellular. The New Cellular Policy dialog box opens.
- Use the table in Cellular policy settings as a guideline for filling out the form.
- Click Save.
- Go to Actions > Apply To Label.
- Select the label or labels to apply from the Apply To Label dialog.
- Click Apply.
Cellular policy settings
The following table describes the settings available in the New Cellular Policy window. For more information about creating a cellular policy, see Defining a cellular policy.
Table Cellular policy settings
Item | Description |
|---|---|
Name | Enter a name for the cellular policy. |
Status | Select Active to enable the policy, or Inactive to disable it. |
Priority | Set the priority of cellular policies if there is more than one cellular policy. If you want to place greater priority on this cellular policy than another, select Higher than, and then select the cellular policy over which this policy will take priority. If you want to place lesser priority on this cellular policy than another, select Lower than, and then select the cellular policy that will be used before the one you are defining. |
Description | Enter a description of the cellular policy. |
User Name | Enter a user name for authentication. |
Password | Enter a password for authentication. |
Authentication Type | Select CHAP to use Challenge-Handshake Authentication Protocol (CHAP) to authenticate the user with the cellular carrier. Select PAP to use Password Authentication Protocol (PAP) to authenticate the user with the cellular carrier. |
Protocol Mask | Select the version of Internet Protocol you would like to enable for this cellular policy: IPv4, IPv6, or Both. |
APN Configurations | Click + to configure the name of the gateway between a mobile network and your computer network. Currently, iOS only uses the first APN setting from the list of APN settings. For each APN, enter the following values:
|