listening-mode
Syntax
listening-mode;
Hierarchy Level
[edit security gtp profile profile-name]
Description
Use listening-mode to enable listening-mode for GTP inspection.
The SRX Series firewall enables GPRS tunneling protocol (GTP) listening mode on the S5, S8, or S11 interface. In listening mode, the firewall performs sanity check and stateful inspection on GTP packets. Any failure in the GTP packet processing will stop the sanity check and stateful inspection, but the GTP packets are forwarded directly.
In this case, SRX Series Firewall does not provide protection to GTP traffic in listening mode. If a GTP packet containing invalid content arrives at the destination, it can harm the operator’s network.
Required Privilege Level
security
Release Information
Statement introduced in Junos OS Release 20.4R1.