Verifying And Monitoring Gtp Inspection - Cisco FirePOWER ASA 5500 series Configuration Manual

GTP Inspection

Verifying and Monitoring GTP Inspection

To display GTP configuration, enter the show service-policy inspect gtp command in privileged EXEC
mode. For the detailed syntax for this command, see the command page in the Cisco Security Appliance
Command Reference.
Use the show service-policy inspect gtp statistics command to show the statistics for GTP inspection.
The following is sample output from the show service-policy inspect gtp statistics command:
hostname# show service-policy inspect gtp statistics
GPRS GTP Statistics:
version_not_support
unknown_msg
unexpected_data_msg
mandatory_ie_missing
optional_ie_incorrect
ie_out_of_order
total_forwarded
signalling_msg_dropped
signalling_msg_forwarded
total created_pdp
total created_pdpmcb
pdp_non_existent
You can use the vertical bar (|) to filter the display. Type ?| for more display filtering options.
Use the show service-policy inspect gtp pdp-context command to display PDP context-related
information. The following is sample output from the show service-policy inspect gtp pdp-context
command:
hostname# show service-policy inspect gtp pdp-context detail
1 in use, 1 most used, timeout 0:00:00
Version TID
v1
The PDP context is identified by the tunnel ID, which is a combination of the values for IMSI and
NSAPI. A GTP tunnel is defined by two associated PDP contexts in different GSN nodes and is
identified with a Tunnel ID. A GTP tunnel is necessary to forward packets between an external packet
data network and a MS user.
You can use the vertical bar (|) to filter the display, as in the following example:
hostname# show service-policy gtp statistics
Cisco Security Appliance Command Line Configuration Guide
25-36
1234567890123425
user_name (IMSI): 214365870921435
primary pdp: Y
sgsn_addr_signal:
ggsn_addr_signal:
sgsn control teid:
ggsn control teid:
seq_tpdu_up:
signal_sequence:
upstream_signal_flow:
downstream_signal_flow:
RAupdate_flow:
Chapter 25
0 msg_too_short
0 unexpected_sig_msg
0 ie_duplicated
0 mandatory_ie_incorrect
0 ie_unknown
0 ie_unexpected
0 total_dropped
0 data_msg_dropped
0 data_msg_forwarded
0 total deleted_pdp
0 total deleted_pdpmcb
0
MS Addr SGSN Addr
10.0.1.1 10.0.0.2 0:00:13
MS address:
nsapi: 2
10.0.0.2 sgsn_addr_data:
10.1.1.1 ggsn_addr_data:
0x000001d1 sgsn data teid:
0x6306ffa0 ggsn data teid:
0 seq_tpdu_down:
0
0 upstream_data_flow:
0 downstream_data_flow:
0
| grep gsn
Configuring Application Layer Protocol Inspection
0
0
0
0
0
0
0
0
0
0
0
Idle APN
gprs.cisco.com
1.1.1.1
10.0.0.2
10.1.1.1
0x000001d3
0x6305f9fc
0
0
0
OL-10088-01