Introduction
Modern Network Operations Center (NOC) heavily depends on the ability to collect, correlate, and analyze the mobile network events to quickly identify and respond to security threats. Gaining visibility in to subscriber's traffic at small sites or remote locations can be challenging owing to the associated costs. However, service providers can achieve more with less and get better ROI from existing network monitoring probes by deploying Gigamon's subscriber-aware filtering solution using a single Gigamon device for correlating and optimizing 5G subscriber's traffic before forwarding the traffic for inspection. This Gigamon Validated Design (GVD) illustrates one such solution using whitelisting and flow-sampling traffic based on subscriber ID like SUPI, PEI or GPSI, and load-balancing the traffic among identical network monitoring probes.
Design Overview
The following example illustrates the deployment of Gigamon's subscriber-aware filtering solution in a service provider's 5G mobile core network that has Gigamon devices deployed at two sites viz. Los Angeles and Seattle (remote sites).
At the Los Angeles site, control plane traffic tapped from the interfaces N4 (PFCP packets) and user plane traffic tapped from the interfaces N3 (GTP-U packets) are fed to UPN1 for filtering and load-balancing the traffic among identical network monitoring probes. Note that UPN1 is a Gigamon device having a single GigaSMART engine.
At the Seattle site, control plane traffic tapped from the interfaces N4 (PFCP packets) and user plane traffic tapped from the interfaces N3 (GTP-U packets) are fed to UPN2 for filtering and load-balancing the traffic among identical network monitoring probes. Note that UPN2 is a Gigamon device having a single GigaSMART engine.
Figure 1: Gigamon's subscriber-aware filtering solution
To learn more about this solution, read complete details on the Gigamon Community: Deploying-Gigamon-s-5G-visibility-solution-in-small-sites-or-remote-locations-5-10-01.
