All pages
Powered by GitBook
1 of 12

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

Loading...

4G-LTE/5G-NSA

Configurable Metadata Extraction in ASN

From this page, you can enable or disable the following metadata extraction options on the Aviz Service Node (ASN) for 5G-NSA:

User Information

  1. IMSI (International Mobile Subscriber Identity): A unique identifier for a mobile subscriber.

  2. IMEI (International Mobile Equipment Identity): A unique identifier for a mobile device.

  3. MSISDN (Mobile Station International Subscriber Directory Number): The phone number associated with the subscriber.

  4. APN/DNN (Access Point Name / Data Network Name): Defines the network path for data connections.

  5. USER TYPE: Classification of the user, typically indicating subscriber type or service level.

  6. UE IP ADDR(User Equipment IP Address):The IP address assigned to the user's device.

User Location Information

  1. CGI (Cell Global Identifier): A unique identifier for a cell in a mobile network.

  2. SAI (Service Area Identifier): Identifies the service area within a network.

  3. RAI (Routing Area Identifier): Specifies the routing area within a mobile network.

  4. TAI (Tracking Area Identifier)

Tunnel Information

  1. IPv4 Address Uplink (SGW): The IPv4 address for the uplink from the Serving Gateway (SGW).

  2. IPv4 Address Downlink (eNodeB): The IPv4 address for the downlink to the eNodeB (Evolved Node B).

  3. IPv6 Address Uplink (SGW): The IPv6 address for the uplink from the Serving Gateway (SGW).

  4. IPv6 Address Downlink (eNodeB): The IPv6 address for the downlink to the eNodeB (Evolved Node B).

Key Performance Indicator(KPIs)

  1. Cplane Latency: The latency in the control plane, measuring the delay in signaling and control messages.

  2. Per IMSI Metrics:

    • Uplane Bandwidth/Throughput: The bandwidth or throughput in the user plane, specific to each IMSI .

    • Uplane Latency

: Identifies the tracking area in LTE networks.
  • ECGI (EUTRAN CGI): A unique identifier for cells in LTE networks.

  • LAI (Local Area Identifier): Identifies the local area within a GSM network.

  • Macro eNodeB Field: Information related to the macro eNodeB, a type of base station in LTE networks.

  • Extended Macro eNodeB Field: Additional information for extended macro eNodeB configurations.

  • Cell Changed: Indicates whether the user's device has changed cells within the network.

  • TEID Uplink (SGW): The Tunnel Endpoint Identifier for the uplink from the Serving Gateway (SGW).

  • TEID Downlink (eNodeB): The Tunnel Endpoint Identifier for the downlink to the eNodeB (Evolved Node B).

  • CONTROL TEID: The Tunnel Endpoint Identifier used for control plane signaling.

  • CONTROL IP: The IP address used for control plane signaling.

  • Radio Access Type (RAT): The type of radio access technology being used (e.g., LTE, 5G).

  • : The latency in the user plane, measuring the delay in data transmission for each IMSI.

    Configuring Ports

    To configure ASN ports using the FlowVision GUI, navigate to:

    Configuration > Ports.

    This page displays:

    • Managed Nodes and their connected ports.

    • A detailed Ports Table showing:

      • Admin Status.

      • Link Status (UP = Green, DOWN = Red).

      • Speed & Mode.

      • GRE Strip.

      • Port Description.

    • Port Modes in ASN:

    Cplane (Control Plane): Handles control-plane traffic, such as S11, N4, and N11.

    Uplane (User Plane): Manages user-plane traffic, including S1-U and N3.

    The following image illustrate the ports page with device, ports, and port status details:

    Hover over a device or port icon for additional details.

    Editing Port Properties

    To edit the properties of a port,

    1. Click the Edit button against the required port in the ports table. The Port Properties window displays.

    2. Update the above properties as required.

    3. The following properties can be updated -

    Update Port Mode

    To update the mode of a ASN port in FlowVision, follow the steps below,

    • Select the appropriate mode from the drop-down menu with the following options:

      • C-plane

      • U-plane

    The port selection must adhere to the following criteria:

    • At least one U-plane port must be selected.

    • At least one C-plane port must be selected.

    • After selecting the appropriate mode from the drop-down menu, Click the "Update Port Mode" button

    • To proceed, click the "Continue" on the popup

    Once the port mode has been successfully changed, the ASN Core will automatically restart on the node to apply the updates

    Configuring Metadata Attributes

    The following Metadata Attributes can be modified using this menu:

    • 4G-LTE/5G-NSA

    • 5G-SA

    • U-Plane

    Kafka Export Attributes

    The list below specifies the unique unified data type of metadata attributes exported from ASN, 5GC-control-session-data-mapping, EPC-control-session-data-mapping, and the user-session-data-mapping file.

    • 5GC-control-session-data-mapping

    • EPC-control-session-data-mapping

    • User-session-data-mapping

    Description: Sets a custom link description
  • Admin Status: Configures the port’s administrative state (Up/Down).

  • GRE Strip: Enables or disables GRE stripping on incoming packets (applicable only to C-plane ports).

  • Click Save to apply the changes.

  • No more than one C-plane port can be selected.

    Ports page showing devices and their ports

    5G-SA

    Configurable Metadata Extraction in ASN

    From this page, you can enable or disable the following metadata extraction options on the Aviz Service Node (ASN) for 5G-SA:

    User Information

    1. IMSI (International Mobile Subscriber Identity): A unique identifier for a mobile subscriber.

    2. IMEI (International Mobile Equipment Identity): A unique identifier for a mobile device.

    3. MSISDN (Mobile Station International Subscriber Directory Number): The phone number associated with the subscriber.

    4. APN/DNN (Access Point Name / Data Network Name): Defines the network path for data connections.

    5. USER TYPE: Classification of the user, typically indicating subscriber type or service level.

    6. 5G-SA TYPE: Type of 5G network architecture, such as standalone (SA) or non-standalone (NSA).

    7. UE IP ADDR(User Equipment IP Address):The IP address assigned to the user's device.

    User Location Information

    1. CGI (Cell Global Identifier): Unique identifier for a cell in a mobile network.

    2. TAI (Tracking Area Identifier): Identifier for tracking areas in a 5G network.

    3. Cell Changed: Indicates whether the user's device has changed cells within the network.

    Tunnel Information

    1. IPV4 Address Uplink (UPF): IPv4 address for the uplink from the User Plane Function (UPF).

    2. IPv4 Address Downlink (RAN): IPv4 address for the downlink to the Radio Access Network (RAN).

    3. IPv6 Address Uplink (UPF): IPv6 address for the uplink from the User Plane Function (UPF).

    4. IPv6 Address Downlink (RAN)

    Key Performance Indicator(KPIs)

    1. Cplane Latency: The latency in the control plane, measuring the delay in signaling and control messages.

    2. Per IMSI Metrics:

      • Uplane Bandwidth/Throughput: Bandwidth or throughput in the user plane for each IMSI.

      • Uplane Latency

    : IPv6 address for the downlink to the Radio Access Network (RAN).
  • TEID Uplink (UPF): Tunnel Endpoint Identifier for the uplink from the User Plane Function (UPF).

  • TEID Downlink (RAN): Tunnel Endpoint Identifier for the downlink to the Radio Access Network (RAN).

  • RAT (Radio Access Type): The type of radio access technology used, such as 5G NR.

  • : Latency in the user plane, measuring data transmission delay for each IMSI.

    Configuration

    The configuration menu helps you perform the following:

    • Configuring Ports

    • Configuring Metadata Attributes

    • Configuring Global Parameters

    Configuring Deduplication

    Packet deduplication is a feature used to identify and eliminate duplicate network packets, improving network efficiency and reducing redundant data processing. It works by comparing incoming packets

    To configure and manage packet deduplication of ASN via the FlowVision GUI, navigate to:

    Configuration > ASN > Deduplication

    Deduplication Configuration Options:

    1. Packet Deduplication: Toggle this option to enable/disable deduplication.

    2. Selecting the Packet Source, you can choose one of the following packet sources:

      1. Full Packet: Deduplication is applied to the entire packet.

      2. Routed Packet: In real time, the packets can be routed across multiple devices/hops. Hence there are chances the duplicate packets can be received to monitoring fabric with different Src MAC/TTL/Checksum fields.

    3. Anchor : Determines the starting position for packet comparison during deduplication. Available options:

      1. Packet Start – Begins deduplication from the start of the packet.

      2. L3 Start – Uses the Layer 3 (network layer) header as the reference point.

      3. L4 Start – Anchors deduplication at the Layer 4 (transport layer) header.

    4. Offset: Define the byte offset from the anchor point where deduplication begins (14 to 128 bytes).

    5. Window Size: The time interval within which duplicate packets will be identified. Available options: 2,4,6 & 8ms.

    6. Deduplication Interface: Select the network interface where deduplication should be applied.

    Below image show packet deduplication for full packet

    Below image show the Packet Deduplication for Routed Packet

    When the Routed Packet option is selected, users can exclude the following fields from packet deduplication:

    • Ignore IPv4 TTL: Ignores changes in the TTL (Time-To-Live) field for IPv4 packets.

    • Ignore L2 Header: Excludes Layer 2 (Ethernet) header fields from deduplication.

    • Ignore IPv4 Checksum: Ignores differences in IPv4 checksums when comparing packets.

    • Packet drop for a few milliseconds is expected during configuration changes as the deduplication module reinitializes.

    • The deduplication feature operates in DC mode.

    • The maximum supported speed per port is 50Gbps.

    Configuring Control session timeout and Active communication KPI

    The Control Session Timeout Support feature enables automatic handling of inactive control-plane sessions by detecting and cleaning up sessions that exceed a defined period of inactivity.

    To configure and manage control session timeout and active communication bandwidth of ASN via the FlowVision GUI, navigate to:

    Configuration > ASN > Threshold and Timeout

    Threshold and Timeout Configuration Options:

    1. control session timeout

    2. Selecting the control session timeout, you can configure both value by H:M.

    3. KPI Active communication: configure threshold bytes and interval time

    Below image show control session timeout and active communication configuration

    • The control session timeout feature operates in Telco mode.

    Configuring System Parameters
    Configuring Kafka Security

    L4 Payload – Focuses on the Layer 4 payload for identifying duplicates.

    Deduplication For Full Packet
    Deduplication for Routed Packet

    Configuring Packet Capture

    The Packet Capture feature allows users to capture network traffic on selected interfaces for analysis. It provides configurable options to define capture duration, file size limits, & interface.

    Accessing Packet Capture

    1. Navigate to Configuration > ASN > Packet Capture.

    2. Select the device for which you want to capture packets.

    3. Configure the capture settings as needed.

    Packet Capture Options

    • Capture Duration (ms): Specifies the duration in milliseconds for which packet capture will run. The value can range from 1 to 10,000 ms..

    • Capture File Size Limit (MB): Defines the maximum file size for the captured packets before it stops capturing. The value can range from 1 to 1,000 MB.

    • Capture Interface Config: Allows selecting the interfaces (ports) from which packets will be captured, supporting both received (RX) and transmitted (TX) traffic.

    Starting Packet Capture

    1. Configure the desired settings.

    2. Click the Start Packet Capture button to begin capturing network traffic.

    Below image show the Packet Deduplication for Full Packet

    • Packet capture will stop on all configured ports if the cumulative file size or capture duration limit is reached on any port.

    • Captured PCAP files are stored in the ASN server at /var/log/ and can be transferred using the Linux SCP command.

    Configuring Systems Parameters

    To configure and manage system attributes of ASN via the FlowVision GUI, navigate to:

    Configuration > Systems.

    The Systems Manager page displays the configurations for Kafka, SNMP, NTP, and Syslog servers, allowing users to add or remove associated IP addresses as needed.

    The following image shows the System Parameters page:

    Flow Manager

    Kafka Configurations

    Configure and manage up to one Kafka server IP address for exporting metadata extracted by the Service Node.

    SNMP Trap Configuration

    Configure and manage up to three SNMP trap server IP addresses for receiving SNMP traps generated by the Service Node.

    NTP Configuration

    Configure and manage up to three NTP server IP addresses for time synchronization.

    Syslog Configuration

    Configure and manage up to three Syslog server IP addresses for receiving system logs from the Service Node.

    SNMP Trap Threshold

    Set thresholds for SNMP traps based on the following parameters:

    • Disk Usage (%): Define a trigger when disk utilization exceeds a specified percentage.

    • CPU Usage (%): Set a threshold for CPU utilization percentage.

    • Temperature (℃): Configure the ASN appliance temperature limit before an SNMP trap is triggered.

    • Memory Usage (%): Specify the threshold for memory consumption.

    Configuring Global Parameters

    To view and configure ASN global parameters from the FlowVision GUI, navigate to:

    Configuration > Global.

    The following image illustrates the ASN Global page:

    Configure Global Parameters

    Select a Node to configure the below parameters:

    RX/TX File Name: Defines the filenames for received (RX) and transmitted (TX) packets.

  • Clean Up Old PCAP File: When enabled, previously stored PCAP files will be deleted before capturing new data.

  • Packet Capture

    FAN RPM (%): Set a limit for fan speed in Revolutions Per Minute (RPM).

  • Kafka Export Interval (seconds): Sets the interval for exporting data to Kafka, configurable between 5 to 300 seconds.

  • 5G Cplane Processing (N4/N11): Choose between N4 or N11 for processing 5G control plane traffic.

  • HTTP2 Port: Define multiple HTTP2 ports, separated by commas (,).

  • GRE Offset Strip Length: Specifies the length of the GRE header to strip from ingress packets.

  • Application Identification: Enable or disable application identification.

  • Metadata Export: Enable or disable data export to Kafka.

  • Global Config Page

    Configuring Kafka Security

    To configure Kafka Security settings in the FlowVision GUI, navigate to:

    Configuration > Kafka Security

    This page allows you to modify Kafka security protocols and their configurations.

    SASL Support:

    Configure SASL authentication by providing:

    Username
  • Password

  • Click Save to apply the changes.

  • TLS Support:

    To enable TLS security, upload the required files:

    • CA File

    • Certificate File

    • Key File

    • Password

    Below image illustate TLS configuration page

    • Ensure the correct CA, Certificate, and Key files are uploaded.

    • Only .pem format files are supported.

    No Security Mode:

    If you don't want to configure SASL or TLS security, select "None" here to disable Kafka security.

    If a user changes the configuration but clicks Cancel instead of Submit, the system reverts to the previous settings automatically.

    Only an Admin can configure or modify Kafka security settings.

    SASL Configuration
    TLS Configuration