The Eudemon is deployed on the core network, and corresponding GTP policies are applied as required to secure the data transmission between the SGSN and the GGSN.

For example, as shown in Figure 1, the Eudemon works on the Gn interface. FTP policies are configured and applied to realize the following requirements:

• Filter GTP packets whose APNs are test.

• Filter GTP packets.

• Limit the length of the GTP packet to a range of 0 to 1400 bytes, and filter the GTP packets that do not meet the length requirement.

• Detect repetitive IEs, and filter the repetitive IEs that do not comply with protocol specifications.

• Record the logs of the GTP packets that match the rules for allowing and forbidding GTP packets. The log format is extended.

Figure 1:  Applying GTP policies on the core network

Thanks for your Excellent Post.

useful document, thanks