Cisco PIX 525 Especificações descarregar pdf (Página 349)

100

101

21-23

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing GTP Inspection

Note The actions that you can specify for messages that fail the criteria set using the different configuration

commands include allow, reset, or drop. In addition to these actions, you can specify to log the event or

not.

Verifying and Monitoring GTP Inspection

To display GTP configuration, enter the show service-policy inspect gtp command in privileged EXEC

mode. For the detailed syntax for this command, see the command page in the Cisco Security Appliance

Command Line Configuration Guide.

Use the show service-policy inspect gtp statistics command to show the statistics for GTP inspection.

The following is sample output from the show service-policy inspect gtp statistics command:

hostname# show service-policy inspect gtp statistics

GPRS GTP Statistics:

version_not_support 0 msg_too_short 0

unknown_msg 0 unexpected_sig_msg 0

unexpected_data_msg 0 ie_duplicated 0

mandatory_ie_missing 0 mandatory_ie_incorrect 0

optional_ie_incorrect 0 ie_unknown 0

ie_out_of_order 0 ie_unexpected 0

total_forwarded 0 total_dropped 0

signalling_msg_dropped 0 data_msg_dropped 0

signalling_msg_forwarded 0 data_msg_forwarded 0

total created_pdp 0 total deleted_pdp 0

total created_pdpmcb 0 total deleted_pdpmcb 0

pdp_non_existent 0

You can use the vertical bar (|) to filter the display. Type ?| for more display filtering options.

Use the show service-policy inspect gtp pdp-context command to display PDP context-related

information. The following is sample output from the show service-policy inspect gtp pdp-context

command:

hostname# show service-policy inspect gtp pdp-context detail

1 in use, 1 most used, timeout 0:00:00

Version TID MS Addr SGSN Addr Idle APN

v1 1234567890123425 10.0.1.1 10.0.0.2 0:00:13 gprs.cisco.com

user_name (IMSI): 214365870921435 MS address: 1.1.1.1

primary pdp: Y nsapi: 2

sgsn_addr_signal: 10.0.0.2 sgsn_addr_data: 10.0.0.2

ggsn_addr_signal: 10.1.1.1 ggsn_addr_data: 10.1.1.1

sgsn control teid: 0x000001d1 sgsn data teid: 0x000001d3

ggsn control teid: 0x6306ffa0 ggsn data teid: 0x6305f9fc

no Removes the specified configuration.

request-queue Specifies the maximum requests allowed in the queue.

timeout Specifies the idle timeout for the GSN, PDP context, requests,

signaling connections, and tunnels.

tunnel-limit Specifies the maximum number of tunnels allowed.

Table 21-4 GTP Map Configuration Commands (continued)

Command Description

1 2 ... 344 345 346 347 348 349 350 351 352 353 354 ... 603 604

Comentários a estes Manuais

Sem comentários

Cisco PIX 525 Especificações Página 349

Comentários a estes Manuais