随着3G技术和标准的完善,系统和终端的成熟,业务和应用的发展,3G已在日、韩、欧洲等国家和地区进入商用阶段,国内运营商也在加紧对3G网络的部署。为了保证3G系统中核心网(CN)的安全,防止外部网络攻击,保护终端用户安全,必须在核心网络的Gn/Gp,Gi口部署3G防火墙。文中通过对3G网络、GTP协议的分析,给出了3G防火墙中GTP策略的设计。 With the improvement of 3G technologies and standards, the maturity of systems and terminals, the development of services and applications, 3G has entered the commercial phase in countries and regions such as Japan, South Korea and Europe, and domestic carriers are also stepping up the deployment of 3G networks. In order to ensure the security of the CN in the 3G system, prevent external network attacks and protect the safety of the end users, 3G firewalls must be deployed on the Gn / Gp and Gi ports of the core network. Through the analysis of 3G network and GTP protocol, this paper gives the design of GTP strategy in 3G firewall.