config firewall gtp
|
This command is available for model(s): FortiGate 3000D, FortiGate 3500F, FortiGate 3700D, FortiGate 3980E, FortiGate 4400F. It is not available for: FortiGate 1000D, FortiGate 1000F, FortiGate 1001F, FortiGate 100F, FortiGate 101F, FortiGate 1100E, FortiGate 1101E, FortiGate 120G, FortiGate 121G, FortiGate 140E-POE, FortiGate 140E, FortiGate 1800F, FortiGate 1801F, FortiGate 2000E, FortiGate 200E, FortiGate 200F, FortiGate 201E, FortiGate 201F, FortiGate 2200E, FortiGate 2201E, FortiGate 2500E, FortiGate 2600F, FortiGate 2601F, FortiGate 3000F, FortiGate 3001F, FortiGate 300E, FortiGate 301E, FortiGate 3100D, FortiGate 3200D, FortiGate 3200F, FortiGate 3201F, FortiGate 3300E, FortiGate 3301E, FortiGate 3400E, FortiGate 3401E, FortiGate 3501F, FortiGate 3600E, FortiGate 3601E, FortiGate 3700F, FortiGate 3701F, FortiGate 3960E, FortiGate 400E Bypass, FortiGate 400E, FortiGate 400F, FortiGate 401E, FortiGate 401F, FortiGate 40F 3G4G, FortiGate 40F, FortiGate 4200F, FortiGate 4201F, FortiGate 4401F, FortiGate 5001E1, FortiGate 5001E, FortiGate 500E, FortiGate 501E, FortiGate 600E, FortiGate 600F, FortiGate 601E, FortiGate 601F, FortiGate 60E DSLJ, FortiGate 60E DSL, FortiGate 60E-POE, FortiGate 60E, FortiGate 60F, FortiGate 61E, FortiGate 61F, FortiGate 70F, FortiGate 71F, FortiGate 800D, FortiGate 80E-POE, FortiGate 80E, FortiGate 80F Bypass, FortiGate 80F DSL, FortiGate 80F-POE, FortiGate 80F, FortiGate 81E-POE, FortiGate 81E, FortiGate 81F-POE, FortiGate 81F, FortiGate 900D, FortiGate 900G, FortiGate 901G, FortiGate 90G, FortiGate 91E, FortiGate 91G, FortiGate VM for AWS, FortiGate VM for Azure, FortiGate VM64, FortiGateRugged 60F 3G4G, FortiGateRugged 60F, FortiGateRugged 70F 3G4G, FortiGateRugged 70F, FortiWiFi 40F 3G4G, FortiWiFi 40F, FortiWiFi 60E DSLJ, FortiWiFi 60E DSL, FortiWiFi 60E, FortiWiFi 60F, FortiWiFi 61E, FortiWiFi 61F, FortiWiFi 80F 2R 3G4G DSL, FortiWiFi 80F 2R, FortiWiFi 81F 2R 3G4G DSL, FortiWiFi 81F 2R 3G4G-POE, FortiWiFi 81F 2R-POE, FortiWiFi 81F 2R. |
Configure GTP.
config firewall gtp
Description: Configure GTP.
edit <name>
set addr-notify {ipv4-address-any}
config apn
Description: APN.
edit <id>
set action [allow|deny]
set apnmember <name1>, <name2>, ...
set selection-mode {option1}, {option2}, ...
next
end
set apn-filter [enable|disable]
set authorized-ggsns {string}
set authorized-ggsns6 {string}
set authorized-sgsns {string}
set authorized-sgsns6 {string}
set comment {var-string}
set context-id {integer}
set control-plane-message-rate-limit {integer}
set default-apn-action [allow|deny]
set default-imsi-action [allow|deny]
set default-ip-action [allow|deny]
set default-noip-action [allow|deny]
set default-policy-action [allow|deny]
set denied-log [enable|disable]
set echo-request-interval {integer}
set extension-log [enable|disable]
set forwarded-log [enable|disable]
set global-tunnel-limit {string}
set gtp-in-gtp [allow|deny]
set gtpu-denied-log [enable|disable]
set gtpu-forwarded-log [enable|disable]
set gtpu-log-freq {integer}
set half-close-timeout {integer}
set half-open-timeout {integer}
set handover-group {string}
set handover-group6 {string}
set ie-allow-list-v0v1 {string}
set ie-allow-list-v2 {string}
config ie-remove-policy
Description: IE remove policy.
edit <id>
set remove-ies {option1}, {option2}, ...
set sgsn-addr {string}
set sgsn-addr6 {string}
next
end
set ie-remover [enable|disable]
config ie-validation
Description: IE validation.
set apn-restriction [enable|disable]
set charging-ID [enable|disable]
set charging-gateway-addr [enable|disable]
set end-user-addr [enable|disable]
set gsn-addr [enable|disable]
set imei [enable|disable]
set imsi [enable|disable]
set mm-context [enable|disable]
set ms-tzone [enable|disable]
set ms-validated [enable|disable]
set msisdn [enable|disable]
set nsapi [enable|disable]
set pdp-context [enable|disable]
set qos-profile [enable|disable]
set rai [enable|disable]
set rat-type [enable|disable]
set reordering-required [enable|disable]
set selection-mode [enable|disable]
set uli [enable|disable]
end
config imsi
Description: IMSI.
edit <id>
set action [allow|deny]
set apnmember <name1>, <name2>, ...
set mcc-mnc {string}
set msisdn-prefix {string}
set selection-mode {option1}, {option2}, ...
next
end
set imsi-filter [enable|disable]
set interface-notify {string}
set invalid-reserved-field [allow|deny]
set invalid-sgsns-to-log {string}
set invalid-sgsns6-to-log {string}
set ip-filter [enable|disable]
config ip-policy
Description: IP policy.
edit <id>
set action [allow|deny]
set dstaddr {string}
set dstaddr6 {string}
set srcaddr {string}
set srcaddr6 {string}
next
end
set log-freq {integer}
set log-gtpu-limit {integer}
set log-imsi-prefix {string}
set log-msisdn-prefix {string}
set max-message-length {integer}
set message-filter-v0v1 {string}
set message-filter-v2 {string}
config message-rate-limit
Description: Message rate limiting.
set create-aa-pdp-request {integer}
set create-aa-pdp-response {integer}
set create-mbms-request {integer}
set create-mbms-response {integer}
set create-pdp-request {integer}
set create-pdp-response {integer}
set delete-aa-pdp-request {integer}
set delete-aa-pdp-response {integer}
set delete-mbms-request {integer}
set delete-mbms-response {integer}
set delete-pdp-request {integer}
set delete-pdp-response {integer}
set echo-request {integer}
set echo-response {integer}
set error-indication {integer}
set failure-report-request {integer}
set failure-report-response {integer}
set fwd-reloc-complete-ack {integer}
set fwd-relocation-complete {integer}
set fwd-relocation-request {integer}
set fwd-relocation-response {integer}
set fwd-srns-context {integer}
set fwd-srns-context-ack {integer}
set g-pdu {integer}
set identification-request {integer}
set identification-response {integer}
set mbms-de-reg-request {integer}
set mbms-de-reg-response {integer}
set mbms-notify-rej-request {integer}
set mbms-notify-rej-response {integer}
set mbms-notify-request {integer}
set mbms-notify-response {integer}
set mbms-reg-request {integer}
set mbms-reg-response {integer}
set mbms-ses-start-request {integer}
set mbms-ses-start-response {integer}
set mbms-ses-stop-request {integer}
set mbms-ses-stop-response {integer}
set note-ms-request {integer}
set note-ms-response {integer}
set pdu-notify-rej-request {integer}
set pdu-notify-rej-response {integer}
set pdu-notify-request {integer}
set pdu-notify-response {integer}
set ran-info {integer}
set relocation-cancel-request {integer}
set relocation-cancel-response {integer}
set send-route-request {integer}
set send-route-response {integer}
set sgsn-context-ack {integer}
set sgsn-context-request {integer}
set sgsn-context-response {integer}
set support-ext-hdr-notify {integer}
set update-mbms-request {integer}
set update-mbms-response {integer}
set update-pdp-request {integer}
set update-pdp-response {integer}
set version-not-support {integer}
end
config message-rate-limit-v0
Description: Message rate limiting for GTP version 0.
set create-pdp-request {integer}
set delete-pdp-request {integer}
set echo-request {integer}
end
config message-rate-limit-v1
Description: Message rate limiting for GTP version 1.
set create-pdp-request {integer}
set delete-pdp-request {integer}
set echo-request {integer}
end
config message-rate-limit-v2
Description: Message rate limiting for GTP version 2.
set create-session-request {integer}
set delete-session-request {integer}
set echo-request {integer}
end
set min-message-length {integer}
set miss-must-ie [allow|deny]
set monitor-mode [enable|disable|...]
set noip-filter [enable|disable]
config noip-policy
Description: No IP policy.
edit <id>
set action [allow|deny]
set end {integer}
set start {integer}
set type [etsi|ietf]
next
end
set out-of-state-ie [allow|deny]
set out-of-state-message [allow|deny]
config per-apn-shaper
Description: Per APN shaper.
edit <id>
set apn {string}
set rate-limit {integer}
set version {integer}
next
end
config policy
Description: Policy.
edit <id>
set action [allow|deny]
set apn-sel-mode {option1}, {option2}, ...
set apnmember <name1>, <name2>, ...
set imei {string}
set imsi-prefix {string}
set max-apn-restriction [all|public-1|...]
set messages {option1}, {option2}, ...
set msisdn-prefix {string}
set rai {string}
set rat-type {option1}, {option2}, ...
set uli {string}
next
end
set policy-filter [enable|disable]
config policy-v2
Description: Apply allow or deny action to each GTPv2-c packet.
edit <id>
set action [allow|deny]
set apn-sel-mode {option1}, {option2}, ...
set apnmember <name1>, <name2>, ...
set imsi-prefix {string}
set max-apn-restriction [all|public-1|...]
set mei {string}
set messages {option1}, {option2}, ...
set msisdn-prefix {string}
set rat-type {option1}, {option2}, ...
set uli {string}
next
end
set port-notify {integer}
set rat-timeout-profile {string}
set rate-limit-mode [per-profile|per-stream|...]
set rate-limited-log [enable|disable]
set rate-sampling-interval {integer}
set remove-if-echo-expires [enable|disable]
set remove-if-recovery-differ [enable|disable]
set reserved-ie [allow|deny]
set send-delete-when-timeout [enable|disable]
set send-delete-when-timeout-v2 [enable|disable]
set spoof-src-addr [allow|deny]
set state-invalid-log [enable|disable]
set sub-second-interval [0.5|0.25|...]
set sub-second-sampling [enable|disable]
set traffic-count-log [enable|disable]
set tunnel-limit {integer}
set tunnel-limit-log [enable|disable]
set tunnel-timeout {integer}
set unknown-version-action [allow|deny]
set user-plane-message-rate-limit {integer}
set warning-threshold {integer}
next
end
config firewall gtp
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
addr-notify |
overbilling notify address |
ipv4-address-any |
Not Specified |
0.0.0.0 |
||||||||
|
apn-filter |
apn filter |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
authorized-ggsns |
Authorized GGSN/PGW group. |
string |
Maximum length: 79 |
|
||||||||
|
authorized-ggsns6 |
Authorized GGSN/PGW IPv6 group. |
string |
Maximum length: 79 |
|
||||||||
|
authorized-sgsns |
Authorized SGSN/SGW group. |
string |
Maximum length: 79 |
|
||||||||
|
authorized-sgsns6 |
Authorized SGSN/SGW IPv6 group. |
string |
Maximum length: 79 |
|
||||||||
|
comment |
Comment. |
var-string |
Maximum length: 255 |
|
||||||||
|
context-id |
Overbilling context. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
696 |
||||||||
|
control-plane-message-rate-limit |
control plane message rate limit |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
default-apn-action |
default apn action |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
default-imsi-action |
default imsi action |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
default-ip-action |
default action for encapsulated IP traffic |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
default-noip-action |
default action for encapsulated non-IP traffic |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
default-policy-action |
default advanced policy action |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
denied-log |
log denied |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
echo-request-interval |
echo request interval (in seconds) |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
extension-log |
log in extension format |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
forwarded-log |
log forwarded |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
global-tunnel-limit |
Global tunnel limit. |
string |
Maximum length: 63 |
|
||||||||
|
gtp-in-gtp |
gtp in gtp |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
gtpu-denied-log |
Enable/disable logging of denied GTP-U packets. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
gtpu-forwarded-log |
Enable/disable logging of forwarded GTP-U packets. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
gtpu-log-freq |
Logging of frequency of GTP-U packets. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
half-close-timeout |
Half-close tunnel timeout (in seconds). |
integer |
Minimum value: 1 Maximum value: 30 |
10 |
||||||||
|
half-open-timeout |
Half-open tunnel timeout (in seconds). |
integer |
Minimum value: 1 Maximum value: 300 |
300 |
||||||||
|
handover-group |
Handover SGSN/SGW group. |
string |
Maximum length: 79 |
|
||||||||
|
handover-group6 |
Handover SGSN/SGW IPv6 group. |
string |
Maximum length: 79 |
|
||||||||
|
ie-allow-list-v0v1 |
IE allow list. |
string |
Maximum length: 63 |
|
||||||||
|
ie-allow-list-v2 |
IE allow list. |
string |
Maximum length: 63 |
|
||||||||
|
ie-remover |
IE removal policy. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
imsi-filter |
imsi filter |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
interface-notify |
overbilling interface |
string |
Maximum length: 15 |
|
||||||||
|
invalid-reserved-field |
Invalid reserved field in GTP header |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
invalid-sgsns-to-log |
Invalid SGSN group to be logged |
string |
Maximum length: 79 |
|
||||||||
|
invalid-sgsns6-to-log |
Invalid SGSN IPv6 group to be logged. |
string |
Maximum length: 79 |
|
||||||||
|
ip-filter |
IP filter for encapsulted traffic |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
log-freq |
Logging of frequency of GTP-C packets. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
log-gtpu-limit |
the user data log limit |
integer |
Minimum value: 0 Maximum value: 512 |
0 |
||||||||
|
log-imsi-prefix |
IMSI prefix for selective logging. |
string |
Maximum length: 15 |
|
||||||||
|
log-msisdn-prefix |
the msisdn prefix for selective logging |
string |
Maximum length: 15 |
|
||||||||
|
max-message-length |
max message length |
integer |
Minimum value: 0 Maximum value: 4294967295 |
1452 |
||||||||
|
message-filter-v0v1 |
Message filter. |
string |
Maximum length: 63 |
|
||||||||
|
message-filter-v2 |
Message filter. |
string |
Maximum length: 63 |
|
||||||||
|
min-message-length |
min message length |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
miss-must-ie |
Missing mandatory information element |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
monitor-mode |
GTP monitor mode. |
option |
- |
vdom |
||||||||
|
|
|
|||||||||||
|
name |
Profile name. |
string |
Maximum length: 63 |
|
||||||||
|
noip-filter |
non-IP filter for encapsulted traffic |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
out-of-state-ie |
Out of state information element. |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
out-of-state-message |
Out of state GTP message |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
policy-filter |
Advanced policy filter |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
port-notify |
overbilling notify port |
integer |
Minimum value: 0 Maximum value: 65535 |
21123 |
||||||||
|
rat-timeout-profile |
RAT timeout profile. |
string |
Maximum length: 63 |
|
||||||||
|
rate-limit-mode |
GTP rate limit mode. |
option |
- |
per-profile |
||||||||
|
|
|
|||||||||||
|
rate-limited-log |
log rate limited |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
rate-sampling-interval |
rate sampling interval |
integer |
Minimum value: 1 Maximum value: 3600 |
1 |
||||||||
|
remove-if-echo-expires |
remove if echo response expires |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
remove-if-recovery-differ |
remove upon different Recovery IE |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
reserved-ie |
reserved information element |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
send-delete-when-timeout |
send DELETE request to path endpoints when GTPv0/v1 tunnel timeout. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
send-delete-when-timeout-v2 |
send DELETE request to path endpoints when GTPv2 tunnel timeout. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
spoof-src-addr |
Spoofed source address for Mobile Station. |
option |
- |
deny |
||||||||
|
|
|
|||||||||||
|
state-invalid-log |
log state invalid |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
sub-second-interval |
Sub-second interval. |
option |
- |
0.5 |
||||||||
|
|
|
|||||||||||
|
sub-second-sampling |
Enable/disable sub-second sampling. |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
traffic-count-log |
log tunnel traffic counter |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
tunnel-limit |
tunnel limit |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
tunnel-limit-log |
tunnel limit |
option |
- |
disable |
||||||||
|
|
|
|||||||||||
|
tunnel-timeout |
Established tunnel timeout (in seconds). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
86400 |
||||||||
|
unknown-version-action |
action for unknown gtp version |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
user-plane-message-rate-limit |
user plane message rate limit |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
warning-threshold |
Warning threshold for rate limiting. |
integer |
Minimum value: 0 Maximum value: 99 |
0 |
||||||||
config apn
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
apnmember |
APN member. APN name. |
string |
Maximum length: 79 |
|
||||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
selection-mode |
APN selection mode. |
option |
- |
ms net vrf |
||||||||
|
|
|
|||||||||||
config ie-remove-policy
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||
|
remove-ies |
GTP IEs to be removed. |
option |
- |
apn-restriction rat-type rai uli imei |
||||||||||||
|
|
|
|||||||||||||||
|
sgsn-addr |
SGSN address name. |
string |
Maximum length: 79 |
all |
||||||||||||
|
sgsn-addr6 |
SGSN IPv6 address name. |
string |
Maximum length: 79 |
all |
||||||||||||
config ie-validation
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
apn-restriction |
Validate APN restriction. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
charging-ID |
Validate charging ID. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
charging-gateway-addr |
Validate charging gateway address. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
end-user-addr |
Validate end user address. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
gsn-addr |
Validate GSN address. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
imei |
Validate IMEI(SV). |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
imsi |
Validate IMSI. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
mm-context |
Validate MM context. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
ms-tzone |
Validate MS time zone. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
ms-validated |
Validate MS validated. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
msisdn |
Validate MSISDN. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
nsapi |
Validate NSAPI. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
pdp-context |
Validate PDP context. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
qos-profile |
Validate Quality of Service(QoS) profile. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
rai |
Validate RAI. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
rat-type |
Validate RAT type. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
reordering-required |
Validate re-ordering required. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
selection-mode |
Validate selection mode. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
uli |
Validate user location information. |
option |
- |
disable |
||||||
|
|
|
|||||||||
config imsi
|
Parameter |
Description |
Type |
Size |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||||
|
|
|
|||||||||||
|
apnmember |
APN member. APN name. |
string |
Maximum length: 79 |
|
||||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||
|
mcc-mnc |
MCC MNC. |
string |
Maximum length: 15 |
|
||||||||
|
msisdn-prefix |
MSISDN prefix. |
string |
Maximum length: 15 |
|
||||||||
|
selection-mode |
APN selection mode. |
option |
- |
ms net vrf |
||||||||
|
|
|
|||||||||||
config ip-policy
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||
|
|
|
|||||||||
|
dstaddr |
Destination address name. |
string |
Maximum length: 79 |
|
||||||
|
dstaddr6 |
Destination IPv6 address name. |
string |
Maximum length: 79 |
|
||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||
|
srcaddr |
Source address name. |
string |
Maximum length: 79 |
|
||||||
|
srcaddr6 |
Source IPv6 address name. |
string |
Maximum length: 79 |
|
||||||
config message-rate-limit
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
create-aa-pdp-request |
Rate limit for create AA PDP context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
create-aa-pdp-response |
Rate limit for create AA PDP context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
create-mbms-request |
Rate limit for create MBMS context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
create-mbms-response |
Rate limit for create MBMS context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
create-pdp-request |
Rate limit for create PDP context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
create-pdp-response |
Rate limit for create PDP context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-aa-pdp-request |
Rate limit for delete AA PDP context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-aa-pdp-response |
Rate limit for delete AA PDP context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-mbms-request |
Rate limit for delete MBMS context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-mbms-response |
Rate limit for delete MBMS context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-pdp-request |
Rate limit for delete PDP context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-pdp-response |
Rate limit for delete PDP context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
echo-request |
Rate limit for echo requests (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
echo-response |
Rate limit for echo response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
error-indication |
Rate limit for error indication (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
failure-report-request |
Rate limit for failure report request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
failure-report-response |
Rate limit for failure report response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-reloc-complete-ack |
Rate limit for forward relocation complete acknowledge (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-relocation-complete |
Rate limit for forward relocation complete (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-relocation-request |
Rate limit for forward relocation request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-relocation-response |
Rate limit for forward relocation response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-srns-context |
Rate limit for forward SRNS context (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
fwd-srns-context-ack |
Rate limit for forward SRNS context acknowledge (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
g-pdu |
Rate limit for G-PDU (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
identification-request |
Rate limit for identification request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
identification-response |
Rate limit for identification response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-de-reg-request |
Rate limit for MBMS de-registration request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-de-reg-response |
Rate limit for MBMS de-registration response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-notify-rej-request |
Rate limit for MBMS notification reject request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-notify-rej-response |
Rate limit for MBMS notification reject response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-notify-request |
Rate limit for MBMS notification request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-notify-response |
Rate limit for MBMS notification response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-reg-request |
Rate limit for MBMS registration request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-reg-response |
Rate limit for MBMS registration response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-ses-start-request |
Rate limit for MBMS session start request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-ses-start-response |
Rate limit for MBMS session start response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-ses-stop-request |
Rate limit for MBMS session stop request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
mbms-ses-stop-response |
Rate limit for MBMS session stop response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
note-ms-request |
Rate limit for note MS GPRS present request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
note-ms-response |
Rate limit for note MS GPRS present response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
pdu-notify-rej-request |
Rate limit for PDU notify reject request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
pdu-notify-rej-response |
Rate limit for PDU notify reject response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
pdu-notify-request |
Rate limit for PDU notify request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
pdu-notify-response |
Rate limit for PDU notify response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
ran-info |
Rate limit for RAN information relay (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
relocation-cancel-request |
Rate limit for relocation cancel request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
relocation-cancel-response |
Rate limit for relocation cancel response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
send-route-request |
Rate limit for send routing information for GPRS request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
send-route-response |
Rate limit for send routing information for GPRS response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
sgsn-context-ack |
Rate limit for SGSN context acknowledgement (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
sgsn-context-request |
Rate limit for SGSN context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
sgsn-context-response |
Rate limit for SGSN context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
support-ext-hdr-notify |
Rate limit for support extension headers notification (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
update-mbms-request |
Rate limit for update MBMS context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
update-mbms-response |
Rate limit for update MBMS context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
update-pdp-request |
Rate limit for update PDP context request (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
update-pdp-response |
Rate limit for update PDP context response (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
version-not-support |
Rate limit for version not supported (packets per second). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
config message-rate-limit-v0
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
create-pdp-request |
Rate limit (packets/s) for create PDP context request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-pdp-request |
Rate limit (packets/s) for delete PDP context request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
echo-request |
Rate limit (packets/s) for echo request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
config message-rate-limit-v1
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
create-pdp-request |
Rate limit (packets/s) for create PDP context request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-pdp-request |
Rate limit (packets/s) for delete PDP context request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
echo-request |
Rate limit (packets/s) for echo request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
config message-rate-limit-v2
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
create-session-request |
Rate limit (packets/s) for create session request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
delete-session-request |
Rate limit (packets/s) for delete session request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
echo-request |
Rate limit (packets/s) for echo request. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
config noip-policy
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||
|
|
|
|||||||||
|
end |
End of protocol range. |
integer |
Minimum value: 0 Maximum value: 255 |
0 |
||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||
|
start |
Start of protocol range. |
integer |
Minimum value: 0 Maximum value: 255 |
0 |
||||||
|
type |
Protocol field type. |
option |
- |
etsi |
||||||
|
|
|
|||||||||
config per-apn-shaper
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
apn |
APN name. |
string |
Maximum length: 63 |
|
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
|
rate-limit |
Rate limit (packets/s) for create PDP context request. |
integer |
Minimum value: 0 Maximum value: 1000000 |
0 |
|
version |
GTP version number: 0 or 1. |
integer |
Minimum value: 0 Maximum value: 1 |
1 |
config policy
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
apn-sel-mode |
APN selection mode. |
option |
- |
ms net vrf |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
apnmember |
APN member. APN name. |
string |
Maximum length: 79 |
|
||||||||||||||||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||||||
|
imei |
IMEI pattern. |
string |
Maximum length: 40 |
|
||||||||||||||||||||
|
imsi-prefix |
IMSI prefix. |
string |
Maximum length: 15 |
|
||||||||||||||||||||
|
max-apn-restriction |
Maximum APN restriction value. |
option |
- |
all |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
messages |
GTP messages. |
option |
- |
create-req |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
msisdn-prefix |
MSISDN prefix. |
string |
Maximum length: 15 |
|
||||||||||||||||||||
|
rai |
RAI pattern. |
string |
Maximum length: 40 |
|
||||||||||||||||||||
|
rat-type |
RAT Type. |
option |
- |
any |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
uli |
ULI pattern. |
string |
Maximum length: 40 |
|
||||||||||||||||||||
config policy-v2
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
action |
Action. |
option |
- |
allow |
||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||
|
apn-sel-mode |
APN selection mode. |
option |
- |
ms net vrf |
||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||
|
apnmember |
APN member. APN name. |
string |
Maximum length: 79 |
|
||||||||||||||||||||||||
|
id |
ID. |
integer |
Minimum value: 0 Maximum value: 4294967295 |
0 |
||||||||||||||||||||||||
|
imsi-prefix |
IMSI prefix. |
string |
Maximum length: 15 |
|
||||||||||||||||||||||||
|
max-apn-restriction |
Maximum APN restriction value. |
option |
- |
all |
||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||
|
mei |
MEI pattern. |
string |
Maximum length: 40 |
|
||||||||||||||||||||||||
|
messages |
GTP messages. |
option |
- |
create-ses-req |
||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||
|
msisdn-prefix |
MSISDN prefix. |
string |
Maximum length: 15 |
|
||||||||||||||||||||||||
|
rat-type |
RAT Type. |
option |
- |
any |
||||||||||||||||||||||||
|
|
|
|||||||||||||||||||||||||||
|
uli |
GTPv2 ULI patterns (in order of CGI SAI RAI TAI ECGI LAI). |
string |
Maximum length: 40 |
|
||||||||||||||||||||||||