Cisco Systems Add/Edit GTP Map

50-11
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter50 Configuring Inspection for Management Application Protocols
GTP Inspection
– Action—Shows the action if the match condition is met.
– Log—Shows the log state.
– Add—Opens the Add GTP Inspect dialog box to add an GTP inspection.
– Edit—Opens the Edit GTP Inspect dialog box to edit an GTP inspection.
– Delete—Deletes an GTP inspection.
– Move Up—Moves an inspection up in the list.
– Move Down—Moves an inspection down in the list.
Modes
The following table shows the modes in which this feature is available:
Add/Edit GTP Map
Configuration> Global Objects > Inspect Maps > GTP > GTP Inspect Map > Add/Edit GTP Map
The Add/Edit GTP Inspect dialog box lets you define the match criterion and value for the GTP inspect
map.
Fields
•Match Type—Specifies whether traffic should match or not match the values.
For example, if No Match is selected on the string “example.com,” then any traffic that contains
“example.com” is excluded from the class map.
•Criterion—Specifies which criterion of GTP traffic to match.
– Access Point Name—Match on access point name.
– Message ID—Match on the message ID.
– Message Length—Match on the message length
– Version—Match on the version.
•Access Point Name Criterion Values—Specifies an access point name to be matched. By default, all
messages with valid APNs are inspected, and any APN is allowed.
– Regular Expression—Lists the defined regular expressions to match.
– Manage—Opens the Manage Regular Expressions dialog box, which lets you configure regular
expressions.
– Regular Expression Class—Lists the defined regular expression classes to match.
– Manage—Opens the Manage Regular Expression Class dialog box, which lets you configure
regular expression class maps.
– Action—Drop.
– Log—Enable or disable.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••—