Verifying And Monitoring Gtp Inspection - Cisco ASA Series Configuration Manual

Chapter 15 Inspection of Database, Directory, and Management Protocols

Verifying and Monitoring GTP Inspection

To display the GTP configuration, enter the show service-policy inspect gtp command in privileged
EXEC mode.
Use the show service-policy inspect gtp statistics command to show the statistics for GTP inspection.
The following is sample output from the show service-policy inspect gtp statistics command:
hostname# show service-policy inspect gtp statistics
GPRS GTP Statistics:
version_not_support
unknown_msg
unexpected_data_msg
mandatory_ie_missing
optional_ie_incorrect
ie_out_of_order
total_forwarded
signalling_msg_dropped
signalling_msg_forwarded
total created_pdp
total created_pdpmcb
pdp_non_existent
The following is sample GSN output from the show service-policy inspect gtp statistics gsn command:
hostname# show service-policy inspect gtp statistics gsn 10.9.9.9
1 in use, 1 most used, timeout 0:00:00
GTP GSN Statistics for 10.9.9.9, Idle 0:00:00, restart counter 0
Use the show service-policy inspect gtp pdp-context command to display PDP context-related
information. For example:
hostname# show service-policy inspect gtp pdp-context detail
1 in use, 1 most used, timeout 0:00:00
Version TID
v1
The PDP context is identified by the tunnel ID, which is a combination of the values for IMSI and
NSAPI. A GTP tunnel is defined by two associated PDP contexts in different GSN nodes and is
identified with a Tunnel ID. A GTP tunnel is necessary to forward packets between an external packet
data network and a MS user.
Tunnels Active 0Tunnels Created 0
Tunnels Destroyed 0
Total Messages Received 2
Signaling Messages Data Messages
total received 2 0
dropped 0 0
forwarded 2 0
1234567890123425
user_name (IMSI): 214365870921435
primary pdp: Y
sgsn_addr_signal:
ggsn_addr_signal:
sgsn control teid:
ggsn control teid:
seq_tpdu_up:
signal_sequence:
upstream_signal_flow:
downstream_signal_flow:
RAupdate_flow:
0 msg_too_short
0 unexpected_sig_msg
0 ie_duplicated
0 mandatory_ie_incorrect
0 ie_unknown
0 ie_unexpected
0 total_dropped
0 data_msg_dropped
0 data_msg_forwarded
0 total deleted_pdp
0 total deleted_pdpmcb
0
MS Addr SGSN Addr
10.0.1.1 10.0.0.2 0:00:13
MS address:
nsapi: 2
10.0.0.2 sgsn_addr_data:
10.1.1.1 ggsn_addr_data:
0x000001d1 sgsn data teid:
0x6306ffa0 ggsn data teid:
0 seq_tpdu_down:
0
0 upstream_data_flow:
0 downstream_data_flow:
0
Cisco ASA Series Firewall CLI Configuration Guide
GTP Inspection
0
0
0
0
0
0
0
0
0
0
0
Idle APN
gprs.cisco.com
1.1.1.1
10.0.0.2
10.1.1.1
0x000001d3
0x6305f9fc
0
0
0
15-11