GTPv0/v1 message rate limiting

In a GTP profile, you can use the following command to apply GTPv0/v1 message rate limiting.

config firewall gtp

set rate-sampling-interval <interval>

set rate-limit-mode {per-profile | per-stream | per-apn}

set warning-threshold <percent>

set user-plane-message-rate-limit 0

edit <name>

config message-rate-limit

set echo-request <limit>

set echo-reponse <limit>

set version-not-support <limit>

set create-pdp-request <limit>

set create-pdp-response <limit>

set update-pdp-request <limit>

set update-pdp-response <limit>

set delete-pdp-request <limit>

set delete-pdp-response <limit>

set create-aa-pdp-request <limit>

set create-aa-pdp-response <limit>

set delete-aa-pdp-request <limit>

set delete-aa-pdp-response <limit>

set error-indication <limit>

set pdu-notify-request <limit>

set pdu-notify-response <limit>

set pdu-notify-rej-request <limit>

set pdu-notify-rej-response <limit>

set support-ext-hdr-notify <limit>

set send-route-request <limit>

set send-route-response <limit>

set failure-report-request <limit>

set failure-report-response <limit>

set note-ms-request <limit>

set note-ms-response <limit>

set identification-request <limit>

set identification-response <limit>

set sgsn-context-request <limit>

set sgsn-context-response <limit>

set sgsn-context-ack <limit>

set fwd-relocation-request <limit>

set fwd-relocation-response <limit>

set fwd-relocation-complete <limit>

set relocation-cancel-request <limit>

set relocation-cancel-response <limit>

set fwd-srns-context <limit>

set fwd-reloc-complete-ack <limit>

set fwd-srns-context-ack <limit>

set ran-info <limit>

set mbms-notify-request <limit>

set mbms-notify-response <limit>

set mbms-notify-rej-request <limit>

set mbms-notify-rej-response <limit>

set create-mbms-request <limit>

set create-mbms-response <limit>

set update-mbms-request <limit>

set update-mbms-response <limit>

set delete-mbms-request <limit>

set delete-mbms-response <limit>

set mbms-reg-request <limit>

set mbms-reg-response <limit>

set mbms-de-reg-request <limit>

set mbms-de-reg-response <limit>

set mbms-ses-start-request <limit>

set mbms-ses-start-response <limit>

set mbms-ses-stop-request <limit>

set mbms-ses-stop-response <limit>

set g-pdu <limit>

end

rate-sampling-interval set how often, in seconds, to sample the rate. The range is 1 to 3600 and the default is 1 second.

rate-limit-mode select whether the rate limiting is applied per-profile (the default), per-stream, or per-apn.

warning-threshold set the rate limiting warning threshold in the range 0 to 99 percent. The default is 0 percent.

<limit> is the message limit in packets per second. The range is 0 to 4294967295. The default for all message types is 0, which is no rate limiting.