GTP-U Logging
FortiOS 5.2 supports GPRS Tunnelling Protocol User Plane (GTP-U) logging for both forwarded and dropped packets at the kernel level. FortiGate log entries now contain International Mobile Subscriber Identity (IMSI), Mobile Subscriber Integrated Services Digital Network-Number (MSISDN), Access Point Name (APN), and header Tunnel Endpoint Identifier (TEID) if available/applicable.
Three new CLI commands are added to GTP profile for GTP-U logging:
• gtpu-forwarded-log: Enable/disable logging of forwarded GTP-U packets.
• gtpu-denied-log: Enable/disable logging of denied GTP-U packets.
• gtpu-log-freq: Sets the logging frequency of GTP-U packets.
Syntax
config firewall gtp
edit gtp_profile
set gtpu-forwarded-log enable
set gtpu-denied-log enable
set gtpu-log-freq 10
end
end
| The log frequency value is per number of packets, for example set gtpu-log-freq 10 means the FortiGate unit should have a log entry per 10 packets. |