Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Configurable Metadata Extraction in ASN
From this page, you can enable or disable the following metadata extraction options on the Aviz Service Node (ASN) for 5G-NSA:
IMSI (International Mobile Subscriber Identity): A unique identifier for a mobile subscriber.
IMEI (International Mobile Equipment Identity): A unique identifier for a mobile device.
MSISDN (Mobile Station International Subscriber Directory Number): The phone number associated with the subscriber.
APN/DNN (Access Point Name / Data Network Name): Defines the network path for data connections.
USER TYPE: Classification of the user, typically indicating subscriber type or service level.
UE IP ADDR(User Equipment IP Address):The IP address assigned to the user's device.
CGI (Cell Global Identifier): A unique identifier for a cell in a mobile network.
SAI (Service Area Identifier): Identifies the service area within a network.
RAI (Routing Area Identifier): Specifies the routing area within a mobile network.
TAI (Tracking Area Identifier)
IPv4 Address Uplink (SGW): The IPv4 address for the uplink from the Serving Gateway (SGW).
IPv4 Address Downlink (eNodeB): The IPv4 address for the downlink to the eNodeB (Evolved Node B).
IPv6 Address Uplink (SGW): The IPv6 address for the uplink from the Serving Gateway (SGW).
IPv6 Address Downlink (eNodeB): The IPv6 address for the downlink to the eNodeB (Evolved Node B).
Cplane Latency: The latency in the control plane, measuring the delay in signaling and control messages.
Per IMSI Metrics:
Uplane Bandwidth/Throughput: The bandwidth or throughput in the user plane, specific to each IMSI .
Uplane Latency
ECGI (EUTRAN CGI): A unique identifier for cells in LTE networks.
LAI (Local Area Identifier): Identifies the local area within a GSM network.
Macro eNodeB Field: Information related to the macro eNodeB, a type of base station in LTE networks.
Extended Macro eNodeB Field: Additional information for extended macro eNodeB configurations.
Cell Changed: Indicates whether the user's device has changed cells within the network.
TEID Uplink (SGW): The Tunnel Endpoint Identifier for the uplink from the Serving Gateway (SGW).
TEID Downlink (eNodeB): The Tunnel Endpoint Identifier for the downlink to the eNodeB (Evolved Node B).
CONTROL TEID: The Tunnel Endpoint Identifier used for control plane signaling.
CONTROL IP: The IP address used for control plane signaling.
Radio Access Type (RAT): The type of radio access technology being used (e.g., LTE, 5G).

To configure ASN ports using the FlowVision GUI, navigate to:
Configuration > Ports.
This page displays:
Managed Nodes and their connected ports.
A detailed Ports Table showing:
Admin Status.
Link Status (UP = Green, DOWN = Red).
Speed & Mode.
GRE Strip.
Port Description.
Port Modes in ASN:
Cplane (Control Plane): Handles control-plane traffic, such as S11, N4, and N11.
Uplane (User Plane): Manages user-plane traffic, including S1-U and N3.
The following image illustrate the ports page with device, ports, and port status details:
To edit the properties of a port,
Click the Edit button against the required port in the ports table. The Port Properties window displays.
Update the above properties as required.
The following properties can be updated -
To update the mode of a ASN port in FlowVision, follow the steps below,
Select the appropriate mode from the drop-down menu with the following options:
C-plane
U-plane
The port selection must adhere to the following criteria:
At least one U-plane port must be selected.
At least one C-plane port must be selected.
After selecting the appropriate mode from the drop-down menu, Click the "Update Port Mode" button
To proceed, click the "Continue" on the popup
Once the port mode has been successfully changed, the ASN Core will automatically restart on the node to apply the updates
The following Metadata Attributes can be modified using this menu:
The list below specifies the unique unified data type of metadata attributes exported from ASN, 5GC-control-session-data-mapping, EPC-control-session-data-mapping, and the user-session-data-mapping file.
Admin Status: Configures the port’s administrative state (Up/Down).
GRE Strip: Enables or disables GRE stripping on incoming packets (applicable only to C-plane ports).
Click Save to apply the changes.
No more than one C-plane port can be selected.
Configurable Metadata Extraction in ASN
From this page, you can enable or disable the following metadata extraction options on the Aviz Service Node (ASN) for 5G-SA:
IMSI (International Mobile Subscriber Identity): A unique identifier for a mobile subscriber.
IMEI (International Mobile Equipment Identity): A unique identifier for a mobile device.
MSISDN (Mobile Station International Subscriber Directory Number): The phone number associated with the subscriber.
APN/DNN (Access Point Name / Data Network Name): Defines the network path for data connections.
USER TYPE: Classification of the user, typically indicating subscriber type or service level.
5G-SA TYPE: Type of 5G network architecture, such as standalone (SA) or non-standalone (NSA).
UE IP ADDR(User Equipment IP Address):The IP address assigned to the user's device.
CGI (Cell Global Identifier): Unique identifier for a cell in a mobile network.
TAI (Tracking Area Identifier): Identifier for tracking areas in a 5G network.
Cell Changed: Indicates whether the user's device has changed cells within the network.
IPV4 Address Uplink (UPF): IPv4 address for the uplink from the User Plane Function (UPF).
IPv4 Address Downlink (RAN): IPv4 address for the downlink to the Radio Access Network (RAN).
IPv6 Address Uplink (UPF): IPv6 address for the uplink from the User Plane Function (UPF).
IPv6 Address Downlink (RAN)
Cplane Latency: The latency in the control plane, measuring the delay in signaling and control messages.
Per IMSI Metrics:
Uplane Bandwidth/Throughput: Bandwidth or throughput in the user plane for each IMSI.
Uplane Latency
TEID Uplink (UPF): Tunnel Endpoint Identifier for the uplink from the User Plane Function (UPF).
TEID Downlink (RAN): Tunnel Endpoint Identifier for the downlink to the Radio Access Network (RAN).
RAT (Radio Access Type): The type of radio access technology used, such as 5G NR.
The configuration menu helps you perform the following:
Packet deduplication is a feature used to identify and eliminate duplicate network packets, improving network efficiency and reducing redundant data processing. It works by comparing incoming packets
To configure and manage packet deduplication of ASN via the FlowVision GUI, navigate to:
Configuration > ASN > Deduplication
Deduplication Configuration Options:
Packet Deduplication: Toggle this option to enable/disable deduplication.
Selecting the Packet Source, you can choose one of the following packet sources:
Full Packet: Deduplication is applied to the entire packet.
Routed Packet: In real time, the packets can be routed across multiple devices/hops. Hence there are chances the duplicate packets can be received to monitoring fabric with different Src MAC/TTL/Checksum fields.
Anchor : Determines the starting position for packet comparison during deduplication. Available options:
Packet Start – Begins deduplication from the start of the packet.
L3 Start – Uses the Layer 3 (network layer) header as the reference point.
L4 Start – Anchors deduplication at the Layer 4 (transport layer) header.
Offset: Define the byte offset from the anchor point where deduplication begins (14 to 128 bytes).
Window Size: The time interval within which duplicate packets will be identified. Available options: 2,4,6 & 8ms.
Deduplication Interface: Select the network interface where deduplication should be applied.
Below image show packet deduplication for full packet
Below image show the Packet Deduplication for Routed Packet
When the Routed Packet option is selected, users can exclude the following fields from packet deduplication:
Ignore IPv4 TTL: Ignores changes in the TTL (Time-To-Live) field for IPv4 packets.
Ignore L2 Header: Excludes Layer 2 (Ethernet) header fields from deduplication.
Ignore IPv4 Checksum: Ignores differences in IPv4 checksums when comparing packets.
The Control Session Timeout Support feature enables automatic handling of inactive control-plane sessions by detecting and cleaning up sessions that exceed a defined period of inactivity.
To configure and manage control session timeout and active communication bandwidth of ASN via the FlowVision GUI, navigate to:
Configuration > ASN > Threshold and Timeout
Threshold and Timeout Configuration Options:
control session timeout
Selecting the control session timeout, you can configure both value by H:M.
KPI Active communication: configure threshold bytes and interval time
Below image show control session timeout and active communication configuration






L4 Payload – Focuses on the Layer 4 payload for identifying duplicates.
The Packet Capture feature allows users to capture network traffic on selected interfaces for analysis. It provides configurable options to define capture duration, file size limits, & interface.
Accessing Packet Capture
Navigate to Configuration > ASN > Packet Capture.
Select the device for which you want to capture packets.
Configure the capture settings as needed.
Capture Duration (ms): Specifies the duration in milliseconds for which packet capture will run. The value can range from 1 to 10,000 ms..
Capture File Size Limit (MB): Defines the maximum file size for the captured packets before it stops capturing. The value can range from 1 to 1,000 MB.
Capture Interface Config: Allows selecting the interfaces (ports) from which packets will be captured, supporting both received (RX) and transmitted (TX) traffic.
Configure the desired settings.
Click the Start Packet Capture button to begin capturing network traffic.
Below image show the Packet Deduplication for Full Packet
Packet capture will stop on all configured ports if the cumulative file size or capture duration limit is reached on any port.
Captured PCAP files are stored in the ASN server at /var/log/ and can be transferred using the Linux SCP command.
To configure and manage system attributes of ASN via the FlowVision GUI, navigate to:
Configuration > Systems.
The Systems Manager page displays the configurations for Kafka, SNMP, NTP, and Syslog servers, allowing users to add or remove associated IP addresses as needed.
The following image shows the System Parameters page:
Configure and manage up to one Kafka server IP address for exporting metadata extracted by the Service Node.
Configure and manage up to three SNMP trap server IP addresses for receiving SNMP traps generated by the Service Node.
Configure and manage up to three NTP server IP addresses for time synchronization.
Configure and manage up to three Syslog server IP addresses for receiving system logs from the Service Node.
Set thresholds for SNMP traps based on the following parameters:
Disk Usage (%): Define a trigger when disk utilization exceeds a specified percentage.
CPU Usage (%): Set a threshold for CPU utilization percentage.
Temperature (℃): Configure the ASN appliance temperature limit before an SNMP trap is triggered.
Memory Usage (%): Specify the threshold for memory consumption.
RX/TX File Name: Defines the filenames for received (RX) and transmitted (TX) packets.
Clean Up Old PCAP File: When enabled, previously stored PCAP files will be deleted before capturing new data.
FAN RPM (%): Set a limit for fan speed in Revolutions Per Minute (RPM).
Kafka Export Interval (seconds): Sets the interval for exporting data to Kafka, configurable between 5 to 300 seconds.
5G Cplane Processing (N4/N11): Choose between N4 or N11 for processing 5G control plane traffic.
HTTP2 Port: Define multiple HTTP2 ports, separated by commas (,).
GRE Offset Strip Length: Specifies the length of the GRE header to strip from ingress packets.
Application Identification: Enable or disable application identification.
Metadata Export: Enable or disable data export to Kafka.




Password
Click Save to apply the changes.
To enable TLS security, upload the required files:
CA File
Certificate File
Key File
Password
Below image illustate TLS configuration page
If you don't want to configure SASL or TLS security, select "None" here to disable Kafka security.
If a user changes the configuration but clicks Cancel instead of Submit, the system reverts to the previous settings automatically.
Only an Admin can configure or modify Kafka security settings.



