GTP control message path rate limit

You can now restrict the maximum packets per second for specific control messages on a path. These GTP messages include create-req, delete-req and other GTP messages. However, you can restrict the maximum packets per minute for an echo-req GTP message. The path-rate-limit function controls specific GTP messages in both the inbound and outbound directions. A drop threshold and an alarm threshold can be configured for each control message in the inbound and outbound direction for one path. If the control messages on one path reach the alarm threshold, an alarm log is generated. If the number of control messages received reaches the drop threshold, a packet drop log is generated and all other control messages of this type received later are dropped. To control message traffic in the inbound and outbound directions, configure a policy on the device such that the direction that is consistent with the configured policy is defined as forward, and the opposite direction is defined as reverse. Use the set security gprs gtp profile <profile-name> path-rate-limit statement to restrict the maximum packets per second for specific control messages on a path.