Cisco ASA 5506-X Configuration Manual page 246

GTP Inspection
Example:
hostname(config-pmap)# class inspection_default
To edit the default policy, or to use the special inspection_default class map in a new policy, specify
inspection_default for the name. Otherwise, you are specifying the class you created earlier in this
procedure.
Configure GTP inspection.
Step 4
inspect gtp [gtp_policy_map]
Where gtp_policy_map is the optional GTP inspection policy map. You need a map only if you want
non-default inspection processing. For information on creating the inspection policy map, see
a GTP Inspection Policy Map, page
Example:
hostname(config-class)# no inspect gtp
hostname(config-class)# inspect gtp gtp-map
Note
If you are editing an existing service policy (such as the default global policy called global_policy), you
Step 5
are done. Otherwise, activate the policy map on one or more interfaces.
service-policy policymap_name {global | interface interface_name}
Example:
hostname(config)# service-policy global_policy global
The global keyword applies the policy map to all interfaces, and interface applies the policy to one
interface. Only one global policy is allowed. You can override the global policy on an interface by
applying a service policy to that interface. You can only apply one policy map to each interface.
Verifying and Monitoring GTP Inspection
To display the GTP configuration, enter the show service-policy inspect gtp command in privileged
EXEC mode.
Use the show service-policy inspect gtp statistics command to show the statistics for GTP inspection.
The following is sample output from the show service-policy inspect gtp statistics command:
hostname# show service-policy inspect gtp statistics
GPRS GTP Statistics:
version_not_support
unknown_msg
unexpected_data_msg
mandatory_ie_missing
optional_ie_incorrect
ie_out_of_order
total_forwarded
signalling_msg_dropped
Cisco ASA Series Firewall CLI Configuration Guide
10-10
If you are editing the default global policy (or any in-use policy) to use a different inspection
policy map, you must remove the GTP inspection with the no inspect gtp command, and then
re-add it with the new inspection policy map name.
Chapter 10 Inspection for Management Application Protocols
10-6.
0 msg_too_short
0 unexpected_sig_msg
0 ie_duplicated
0 mandatory_ie_incorrect
0 ie_unknown
0 ie_unexpected
0 total_dropped
0 data_msg_dropped
Configure
0
0
0
0
0
0
0
0