To configure an AA GTP firewall

Purpose

Perform this procedure to configure a firewall for AA GTP traffic associated with an AQP that is bound to an ISA-AA group or partition.

Steps
Configure AA GTP filter
 

Choose Policies→ISA Policies→Application Assurance from the NFM-P main menu. The Application Assurance Policies form opens.


Click Create→AA GTP Filter or select an AA GTP filter and click Properties. The AA GTP Filter (Create | Edit) form opens.


Configure the parameters.


Click on the Message Type tab.


Click Create, or select an entry and click Properties. The AA GTP Message Type (Create | Edit) form opens.


Configure the parameters.


Click OK to save your changes and close the form.


Click on the General tab.


Click Apply.


10 

Distribute the policy to NEs, as required.


11 

Close the AA GTP Filter (Create | Edit) form.


Configure AA SCTP filter
 
12 

Choose Policies→ISA Policies→Application Assurance from the NFM-P main menu. The Application Assurance Policies form opens.


13 

Click Create→AA SCTP Filter or select an AA SCTP filter and click Properties. The AA SCTP Filter (Create | Edit) form opens.


14 

Configure the parameters.


15 

Click on the PPID tab.


16 

Click Create, or select an entry and click Properties. The AA SCTP Message Type (Create | Edit) form opens.


17 

Configure the parameters; click Select or type a value to specify a PPID.


18 

Click OK to save your changes and close the form.


19 

Click on the General tab.


20 

Click Apply.


21 

Distribute the policy to NEs, as required.


22 

Close the AA SCTP Filter (Create | Edit) form.


Bind GTP and SCTP filters to AQP
 
23 

Choose Policies→ISA Policies→Application Assurance from the NFM-P main menu. The Application Assurance Policies form opens.


24 

Choose AA Group Policy (Application Assurance) from the drop-down menu and click Select. A list of AA group policies is displayed.


25 

Select a policy and click Properties. The AA Group Policy (Edit) form opens.


26 

Click on the Application QoS Entries tab.


27 

Select an entry and click Properties. The Application QoS Policy (Edit) form opens.


28 

Click on the Action tab.


29 

Use the Select buttons to specify the GTP and SCTP filters.


30 

Click OK to save your changes and close the form.


31 

Click Apply.


32 

Distribute the policy to NEs, as required.


33 

Close the AA Group Policy (Edit) form.


Configure GTP flow count monitoring in AA policer
 
34 

Choose Policies→ISA Policies→Application Assurance from the NFM-P main menu. The Application Assurance Policies form opens.


35 

Choose AA Policer (Application Assurance) from the drop-down menu and click Select. A list of AA policers is displayed.


36 

Select a policer and click Properties. The AA Policer (Edit) form opens.


37 

Configure the GTP Flow Count Limit parameter.


38 

Click Apply.


39 

Distribute the policer to NEs, as required.


40 

Close the AA Policer (Edit) form.


41 

Close the Application Assurance Policies form.


Configure firewall on AA group or partition
 
42 

Right-click on an ISA-AA group in the Equipment view of the network navigation tree and choose Properties. The ISA-AA Group (Edit) form opens.


43 

To configure the GTP firewall for the group, configure the parameters in the GTP panel.

You can configure a GTP firewall for an ISA-AA group only if the group is not partitioned.


44 

To configure the GTP firewall for a partition:

  1. Click on the ISA-AA partitions tab.

  2. Select a partition and click Properties. The ISA-AA Group Partition (Edit) form opens.

  3. Configure the parameters in the GTP panel.

  4. Click OK to save your changes and close the form.


45 

Click OK to save your changes and close the ISA-AA Group (Edit) form.

End of steps