gtp-header
语法
gtp-header
层次结构级别
[edit firewall family family-name filter filter-name from]
Description
包括 GTP 数据包的匹配条件。示例如下：
firewall {
family inet /inet6 {
filter gtp_filter {
from {
protocol udp;
port 2123;
gtp-header {
gtp-teid <TEID value/list/range>;
ipv4/ipv6 {
source-address <32bit for v4 and 128 bit for v6>;
source-prefix-list <prefix-list>;
destination-address <32bit for v4 and 128 bit for v6>;
destination-prefix-list <prefix-list>;
Protocol/next-header <8 bit>;
Protocol/next-header-except <8 bit>;
source-port <16 bit>;
source-port-except <16 bit>;
destination-port <16 bit>;
destination-port-except <16 bit>;
}
}
then {
count gtp;
}
所需权限级别
-
防火墙 - 在配置中查看此语句。
-
防火墙控制 — 将此语句添加到配置中。
发布信息
Junos 22.2R1 中引入的语句