Cisco IOS XR Session Border Controller Command Reference, Release 3.3
SBC Commands on Cisco IOS XR Software

Table Of Contents

SBC Commands on Cisco IOS XR Software

account

action (CAC)

action (NA-DST)

action (RTG-SRC)

activate

active-cac-policy-set

active-call-policy-set

address ipv4

alias

attach

attach-controllers

authentication endpoint

authentication-key

billing

cache

cac-table

callee-dscp

callee-fax-qos-profile

callee-ip-precedence

callee-ip-TOS

callee-privacy

callee-video-qos-profile

callee-voice-qos-profile

caller-dscp

caller-fax-qos-profile

caller-ip-precedence

caller-ip-TOS

caller-privacy

caller-video-qos-profile

caller-voice-qos-profile

call-policy-set

category (NA-DST)

category (NA-SRC)

clear services

codecs

complete

congestion-cleared

congestion-threshold

control address aaa

control address h248

critical-alarm-threshold

dbe-location-id

deact-mode

description

disabled

dst-adjacency

dscp

dtmf-duration

dtmf-relay

early-media-deny

early-media-direction

early-media-timeout

edit

entry

fast-register disable

fast-register-interval

first-cac-scope

first-cac-table

first-call-routing-table

first-number-analysis-table

first-reg-routing-table

h248 allow-all-mg

ip precedence

ip TOS

ipv4 address

ipv4

key

ldr-check

local-address

local-id host

local-port

location-id

major-alarm-threshold

marking

match-account

match-address

match-adjacency

match-number

match-prefix

match-type

match-value

max-bandwidth

max-call-rate

max-channels

max-num-calls

max-reg-rates

max-regs-rate

max-updates

media-address

media-bypass

media-timeout

minor-alarm-threshold

nat-enable

network-id

pause

port

prefix

priority

qos fax

qos video

qos voice

radius

remote-address ipv4

resend

rtp payload-type nte

show services sbc sbe call-policy-set

show services sbc sbe call-policy-sets

show services sbc sbe call-policy-set table entries

show services sbc sbe calls

show services sbc sbe call-stats

show services sbc sbe gates

show services sbc sbe media-gateway-associations

show services sbc sbe media-gateways

show services sbc sbe qos-profiles

show services sbc sbe radius-client-stats

show services sbc sbe radius-server-stats

show services sbc sbe vrf

signaling-address ipv4

signaling-peer

signaling-peer-port

signaling-port

transcode-deny

transcoder

transport

use-any-local-port

vrf (interface)

vrf

vrf vpn-id


SBC Commands on Cisco IOS XR Software


This module describes session border controller (SBC) commands on Cisco IOS XR software.


Note The commands documented in this command reference module use complex modes and submodes. Accordingly, you must be in the correct configuration mode and submode to run each command. The "Examples" section provided for each command shows the hierarchy of modes and submodes required to run the command.


account

To define a SIP or H.323 adjacency account on an SBE, use the account command in the appropriate configuration mode. To remove this definition, use the no form of this command.

account account-name

no account account-name

Syntax Description

account-name

Specifies the SBE account name.


Defaults

No account name is associated with the adjacency.

Command Modes

Adjacency SIP configuration

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to account isp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# account isp42

The following example shows how to configure the SIP adjacency SipToIsp42 to account isp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# account isp42

action (CAC)

To configure the action to perform after this entry in an admission control table, use the action (CAC) command in CAC configuration mode.

action [cac-complete | next-table goto-table-name | cac-complete]

Syntax Description

cac-complete

When an event matches this CAC policy is complete.

goto-table-name

Specifies the table name identifying the next CAC table to process (or cac-complete, if processing should stop).


Defaults

No default behavior or values

Command Modes

CAC configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the next table to process for the entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1

Related Commands

Command
Description

action (RTG-SRC)

Configures the action to take if a routing entry is chosen.

action (NA-DST)

Configures the action to perform after an entry in an admission control table.


action (NA-DST)

To configure the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account, use the action (NA-DST) command in the appropriate configuration mode. To deconfigure the action, use the no form of this command.

action [next-table goto-table-name | accept | reject]

no action

Syntax Description

next-table goto-table-name

Specifies the next number analysis table to process, if the event matches this entry.

accept

Configures the call to be accepted if it matches the entry in the table.

reject

Configures the call to be rejected if it matches the entry in the table.


Defaults

No default behavior or values

Command Modes

NA-DST-number-table configuration mode

NA-DST-prefix-table configuration mode

NA-SRC-adjacency-table configuration mode

NA-SRC-account-table configuration mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the call to be accepted if it matches the entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the start of the entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the source adjacency entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-adjacency-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the source account entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

Related Commands

Command
Description

action (RTG-SRC)

Configures the action to take if a routing entry is chosen.

action (CAC)

Configures the action to perform after an entry in an admission control table.


action (RTG-SRC)

To configure the action to take if a routing entry is chosen, use the action (RTG-SRC) command in the appropriate configuration mode. To delete the action, use the no form of this command.

action [next-table goto-table-name | complete | reject]

no action

Syntax Description

next-table goto-table-name

Specifies the next routing table to process if the event matches the entry.

complete

Completes the action. This keyword is supported for rtg-round-robin-table routing tables only.

reject

Rejects the indicated action.


Defaults

No default behavior or values

Command Modes

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

RTG-DST-address-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-adjacency 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-account 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example configures the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action complete

Related Commands

Command
Description

action (NA-DST)

Configures the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account.

action (CAC)

Configures the action to perform after an entry in an admission control table.


activate

To initiate the SBC service when all SBE or DBE address configuration have been successfully committed, use the activate command in the appropriate configuration mode. To deactivate the SBE service of the SBC, use the no form of this command.

activate

no activate

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values

Command Modes

DBE configuration

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate the DBE on the service mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc dbe 

RP/0/0/CPU0:router (config-sbc-dbe)# activate


The following example shows how to activate the SBE on the service mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router (config-sbc-sbe)# activate

Related Commands

Command
Description

deact-mode

Indicates how to implement the deactivation of an SBE.


active-cac-policy-set

To set the active CAC-policy-set within an SBE entity, use the active-cac-policy-set command in SBE configuration mode. To deconfigure the active policy set, leaving the SBE with no active policy set, use the no form of this command.

active-cac-policy-set policy-set-id

no active-cac-policy-set policy-set-id

Syntax Description

policy-set-id

Integer identifying the policy set that should be made active. Range is 1 to 2147483647.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate policy set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router (config-sbc-sbe)# active-cac-policy-set 1

active-call-policy-set

To set the active routing policy set within an SBE entity, use the active-call-policy-set command in SBE configuration mode. To deconfigure the active routing policy set, leaving the SBE with no active routing policy set, use the no form of this command.

active-call-policy-set policy-set-id

active-call-policy-set

Syntax Description

policy-set-id

Integer that identifies the policy set that should be made active.
Range is 1 to 2147483647.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

If another policy set was previously active, it is made inactive by executing this command. The SBE is created with no active routing policy set; an active routing policy set must be explicitly configured using this command.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate policy set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router (config-sbc-sbe)# active-call-policy-set 1

address ipv4

To configure the address of the authentication server, use the address ipv4 command in server configuration mode. To remove the address configuration for the authentication server, use the no form of this command.

address ipv4 server-name

no address ipv4 server-name

Syntax Description

server-name

Specifies the DNS name or IP address of the authentication server.


Defaults

No default behavior or values

Command Modes

Server configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure authentication servers acctsvr and acctsvr2 on mySbc for the authentication RADIUS client:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address acctsvr2

alias

To configure the endpoint alias of an H.323 adjacency, use the alias command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

alias alias-name

no alias

Syntax Description

alias-name

Specifies the alias of the H.323 adjacency endpoint.


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 endpoint alias to foo:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# alias foo

Related Commands

Command
Description

attach-controllers

Configures a DBE to attach to a controller.


attach

To attach an adjacency to an account on an SBE, use the attach command in the appropriate configuration mode. To detach the adjacency from an account on an SBE, use the no form of this command.

attach

no attach force

Syntax Description

force

Executes a forced detach.


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Use the force argument to tear all SBE calls down.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to attach the H.323 adjacency to h323ToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# attach

attach-controllers

To configure a DBE to attach to a controller, use the attach-controllers command in VDBE configuration mode. To detach from a controller, use the no form of this command.

attach-controllers

no attach-controllers force

Syntax Description

force

Executes a forced detach. In such cases, all calls through this vDBE are immediately torn down.


Defaults

No default behaviour or values

Command Modes

VBDE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure a DBE to attach to a controller:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# attach-controllers

authentication endpoint

To configure the H.323 adjacency to use endpoint authentication, use the authentication endpoint command in Adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

authentication endpoint

no authentication endpoint

Syntax Description

This command has no arguments or keywords.

Defaults

By default, no authentication procedures are performed.

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use endpoint authentication:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication endpoint

Related Commands

Command
Description

authentication-key

Configures the H.323 adjacency authentication key.


authentication-key

To configure the H.323 adjacency authentication key, use the authentication-key command in Adjacency H.323 configuration mode. To deconfigure the H.323 adjacency authentication key, use the no form of this command.

authentication-key key

no authentication-key

Syntax Description

key

Specifies the authentication key. (This is valid only when authentication is turned on.)


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure H.323 adjacency h323ToIsp42 to use authentication key FG56KJ:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication-key FG56KJ

Related Commands

Command
Description

authentication-key

Configures an H.323 adjacency to use endpoint authentication.


billing

To configure local and remote billing policies, use the billing command in SBE configuration mode. To reset all parameters to their default values, use the no form of this command.

billing {local | remote}

no billing {local | remote}

Syntax Description

local

Configures local billing policies.

remote

Configures remote billing policies.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enter the local billing mode for mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)#

Related Commands

Command
Description

cache

Configures the name of the local or remote directory where to store the billing information.

critical-alarm-threshold

Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.

ldr-check

Configures the time of day to run the long duration check.

local-address

Configures the local IPv4 address.

major-alarm-threshold

Configures the threshold at which a major alarm is generated if the CDR file reaches that size.

minor-alarm-threshold

Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.


cache

To configure the local or remote billing directory where to store the billing records, use the cache command in the appropriate configuration mode. The billing directory is created under the default billing path. To unset the local or remote billing directory, use the no form of this command.

cache name

no cache

Syntax Description

name

Specifies the local or remote billing directory under the default billing path. See Usage Guidelines.


Defaults

The default drives for billing are:

harddisk: for local billing

disk0: for remote billing

After an SBC instance is created:

A predefined billing directory is mounted onto the Replication Data Service File System (RDSFS).

The billing directory name contains a prefix followed by _instance-name.

The billing directory prefix is sbcl for local billing and sbcr for remote billing.

For example, if an SBC instance mysbc is created, the two new RDSFS-mounted billing directories are:

harddisk:/sbcl_mysbc for local billing

disk0:/sbcr_mysbc for remote billing

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.1

The path parameter was changed to the name parameter.

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure a cache named mybillingrecords:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# cache mybillingrecords

cac-table

To create or configure an admission control table, use the cac-table command in CAC-policy-set configuration mode. To delete the admission control table, use the no form of this command.

cac-table table-name

no cac-table table-name

Syntax Description

table-name

Specifies the admission control table.


Defaults

No default behavior or values

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create the admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# 

Related Commands

Command
Description

description

Configures the descriptive text describing an admission control table within the context of an SBE policy set.

match-type

Configures the match-type of an admission control table within the context of an SBE policy set.


callee-dscp

To configure the DSCP to apply to signaling packets sent to the original callee, use the callee-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.

callee-dscp dscp

no callee-dscp

Syntax Description

dscp

Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.


Defaults

dscp: 0

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use DSCP AF41 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-dscp 34
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

callee-fax-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-fax-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-fax-qos-profile profile-name

no callee-fax-qos-profile

Syntax Description

profile-name

Specifies a QoS profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls to the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-fax-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

callee-ip-precedence

To configure the IP precedence to apply to signaling packets sent to the original callee, use the callee-ip-precedence command in CAC table configuration mode. To remove this configuration and set the IP precedence to its default (which is 0), use the no form of this command.

callee-ip-precedence value

no callee-ip-precedence

Syntax Description

value

Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP precedence 4 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-precedence 4
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-ip-TOS

To configure the IP ToS to apply to signaling packets sent to the original callee, use the callee-ip-TOS command i CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.

callee-ip-TOS value

no callee-ip-TOS

Syntax Description

value

Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default value is 0 (normal service).

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP ToS 3 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-TOS 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-privacy

To configure the level of privacy processing to perform on messages sent from callee to caller, use the callee-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

callee-privacy [callee_priv_setting]

no callee-privacy

Syntax Description

callee_priv_setting

Indicates specific callee privacy setting. Values are:

never: Never hides the identity.

account-boundary: Hides the identity if caller is different account from callee.

always: Always hides the identity.


Defaults

callee_priv_setting=never

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the entry to always hide callee identity in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# callee-privacy always

callee-video-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-video-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-video-qos-profile profile-name

no callee-video-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The callee-video-qos-profile can be executed only at the per-call scope. CAC policy won't activate if configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-video-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-voice-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-voice-qos-profile profile-name

no callee-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original callee.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-voice-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-dscp

To configure the DSCP to apply to signaling packets sent to the original caller, use the caller-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.

caller-dscp dscp

no caller-dscp

Syntax Description

dscp

Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use DSCP AF31 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-dscp 26
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-fax-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-fax-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-fax-qos-profile profile-name

no caller-fax-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-fax-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-ip-precedence

To configure the IP precedence to apply to signaling packets sent to the original caller, use the caller-ip-precedence command in CAC table configuration mode. To return the configuration to the default IP precedence (which is 0), use the no form of this command.

caller-ip-precedence value

no caller-ip-precedence

Syntax Description

value

Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The IP precedence is not be applied until you run the CAC decision process. This means that some initial signaling packets sent to the caller do not receive any particular IP precedence marking. If a DSCP has been configured in this submode, the DSCP value takes precedence, and the IP precedence value is not used.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP precedence 3 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-precedence 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-ip-TOS

To configure the IP ToS to apply to signaling packets sent to the original caller, use the caller-ip-TOS command in CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.

caller-ip-TOS value

no caller-ip-TOS

Syntax Description

value

Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default value is 0 (normal service).

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP ToS 12 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-TOS 12
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-privacy

To configure the level of privacy processing to perform on messages sent from caller to callee, use the caller-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

caller-privacy [privacy-setting]

no caller-privacy

Syntax Description

privacy_setting

Indicates specific caller privacy setting. Possible values include:

never: Never hides the identity.

account-boundary: Hides the identity if caller is different account from callee.

always: Always hides the identity.


Defaults

privacy_setting=never

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the entry to always hide caller identity in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-privacy always
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-video-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-video-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-video-qos-profile profile-name

no caller-video-qos-profile

Syntax Description

profile-name

Specifies the Qos profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The caller-video-qos-profile command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-video-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-voice-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-voice-qos-profile profile-name

no caller-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

No default behavior or values

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# caller-voice-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

call-policy-set

To create a new policy set, use the call-policy-set command in SBE configuration mode. To delete the policy set, use the no form of this command.

call-policy-set policy-set-id

no call-policy-set policy-set-id

Syntax Description

policy-set-id

Specifies the integer that identifies the policy set.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

Related Commands

Command
Description

first-call-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.

first-number-analysis-table

Configures the name of the first policy table to process when performing the number analysis stage of policy.

first-reg-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.


category (NA-DST)

To configure the entry category in the number analysis table with entries of the table matching a part of or the whole dialed number, use the category command in the appropriate configuration mode. To deconfigure the category of an entry, use the no form of this command.

category category-name

no category category-name

Syntax Description

category-name

Specifies a category to assign to the event.


Defaults

No default behavior or values

Command Modes

NA-DST number configuration

NA-DST prefix configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the category of entry 1 in the new number analysis table MyNaTable matching the whole number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

category (NA-SRC)

To configure the entry category in the number analysis table with entries of the table matching the source account or adjacency, use the category command in NA-SCR configuration mode. To deconfigure the entry category in the number analysis table, use the no form of this command.

category category-name

no category category-name

Syntax Description

category-name

Specifies a category to assign to the event.


Defaults

No default behavior or values

Command Modes

NA-SCR account configuration

NA-SCR adjacency configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the category of entry 1 in the new NA table MyNaTable matching the source account:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1

RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external

RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

clear services

To clear call statistics, calls, billing recorded, and cached information, use the clear services command in EXEC mode.

clear services [call-destroy call-index | media-stats | call-stats | flush-cdr-file | radius-client radius-server-stats [client-name | server-name] | radius-client-stats client-name]

Syntax Description

call destroy client-index

Clears the indentified call. (SBE only.)

media-stats

Clears all statistics collected by the media gateway manager of the DBE.

call-stats

Clears all recorded call stats. (SBE only.)

flush-cdr-file

Writes all cached local billing records to disk. (SBE only.)

radius-client radius-server-stats [client-name | server-name]

Clears all statistics for the specified RADIUS server or client. (SBE only.)

radius-client-stats client-name

Clears all statistics fro the specified local RADIUS client. (SBE only.)


Defaults

No default behavior or values

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The media-stats keyword is related to DBE. All other keywords apply to SBE.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to destroy call 5:

RP/0/0/CPU0:router# show services sbc mySbc sbe calls

SBC Service "mySbc"
  Call           State          Type
  -------------------------------------
      1           inactive       data
      2           active         video
      3           activating     audio
      4           active         audio
      5           inactive       unknown

RP/0/0/CPU0:router# show services sbc mySbc sbe call 5 branches

SBC Service "mySbc"
Call: 5
State: inactive
Type: unknown

Branch          Calling Number    Called Number
   1            102 789 767              -
   2                 -             105 659 896

RP/0/0/CPU0:router# clear services sbc mySbc sbe call-destroy 5

The following example shows how to clear all the statistics collected by the media gateway manager of the DBE:

RP/0/0/CPU0:router# clear services sbc mySbc dbe media-stats

The following example shows how to clear all the call statistics by the SBE:

RP/0/0/CPU0:router# clear services sbc mySbc sbe call-stats

The following example shows how to write all cached local billing records to disk:

RP/0/0/CPU0:router# clear services sbc mySbc sbe flush-cdr-file

The following example shows how to clear all the statistics for the specified RADIUS server:

RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client radius1 radius-server-stats 
acctsvr

The following example shows how to clear all the statistics for the local RADIUS clients:

RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client-stats readius1

codecs

To configure the codecs supported by the media gateway, use the codecs command in Media-gateway configuration mode. To set the codec support to nothing, use the no form of this command.

codecs codec-list

no codecs

Syntax Description

codec-list

Specifies the supported codecs.


Defaults

No default behavior or values

Command Modes

Media-gateway configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set media gateway 10.0.0.1's supported codecs to m=audio 6000 RTP/AVP 4 and a=rtpmap:0 PCMU/8000 (as defined in RFC 1890):

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1 
RP/0/0/CPU0:router(config-sbc-sbe-media-gateway)# codecs "m=audio 6000 RTP/AVP 
4,a=rtpmap:0 PCMU/8000"

complete

To complete the CAC- or call-policy set after committing the full set, use the complete command in the appropriate configuration mode. To change entries, use the no form of this command.

complete

no complete

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values

Command Modes

CAC-policy-set configuration

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The SBC checks that the routing-policy is self-consistent and can be set as the active policy set. When this command is issued, you cannot alter the CAC-policy-set.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to complete a cac-policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# complete
RP/0/0/CPU0:C12406_CH(config-sbc-sbe)# exit

congestion-cleared

To configure the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE, use the congestion-cleared command in VDBE configuration mode. To remove this configuration, use the no form of this command.

congestion-cleared percentage

no congestion-cleared

Syntax Description

percentage

Specifies the percentage of system resources to signal congestion that has passed to the SBE.


Defaults

percentage=60

Command Modes

VDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to signal congestion that has passed to the SBE at 90 percent of system resources consumed:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-cleared 90

Related Commands

Command
Description

congestion-threshold

Configures the percentage of system resources used such that the DBE signals a congestion event to the SBE.


congestion-threshold

To configure the percentage of system resources used such that the DBE signals a congestion event to the SBE, use the congestion-threshold command in VDBE configuration mode. To remove this configuration, use the no form of this command.

congestion-threshold percentage

no congestion-threshold

Syntax Description

percentage

Specifies the percentage value of system resources to signal congestion to the SBE. Range is 0 to 100.


Defaults

By default, this command assumes that percentage is 60 percent.

Command Modes

VDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The DBE tracks service card capacity as a function of number of calls (against a maximum of 2,500 per DBE instance in R0) and bandwidth (where the service card has a maximum forwarding rate of 500,000 packets per second in R0).

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to signal a congestion event to the SBE at 95 percent of maximum capacity:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-threshold 95

Related Commands

Command
Description

congestion-cleared

Configures the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE.


control address aaa

To configure an SBE to use a given IPv4 AAA control address when contacting an authentication or billing server, use the control address aaa ipv4 command in sbe configuration mode. To deconfigure the IPv4 AAA control address, use the no form of this command.

control address aaa ipv4 ip_address

no control address aaa ipv4 ip_address

Syntax Description

ipv4 ip_address

Specifies the IPv4 AAA control address.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the SBE to use address 10.1.0.1 as its AAA control address:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address aaa ipv4 10.1.0.1

Related Commands

Command
Description

control address h248

Configures IPv4 H.248 control addresses.


control address h248

To configure an SBE to use a given IPv4 H.248 control address, port, or transport for H.248 communications when acting as a media gateway controller, use the control address h248 command in SBE configuration mode. To deconfigure the given IPv4 H.248 control address when acting as a media gateway controller, use the no form of this command.

control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport transport-type]

no control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport transport-type]

Syntax Description

index value

Specifies the unique identifier of the H.248 control address to set. Range is 0 to 4294967295.

ipv4 ip_address

Specifies the IPv4 H.248 control address.

port port-number

Specifies the port number.

transport transport-type

Specifies the transport type. Possible values include udp or tcp for underlying transport.


Defaults

No default behavior or values

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the SBE to use address 10.1.0.1 as its H.248 control address:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address h248 ipv4 10.1.0.1

Related Commands

Command
Description

control address aaa

Configures AAA control addresses.


critical-alarm-threshold

To configure the threshold at which a critical alarm is generated if the CDR file reaches that size, use the critical-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

critical-alarm-threshold threshold

no critical-alarm-threshold

Syntax Description

threshold

Specifies the threshold (in MBs) when the alarm is generated.


Defaults

No default behavior or values

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the critical alarm threshold to 1000 MB:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# critical-alarm-threshold 1000
RP/0/0/CPU0:C12406_CH(config-sbc-sbe-lclbill)# exit

dbe-location-id

To configure an H.323 adjacency to use a given media gateway DBE location when routing media, use the dbe-location-id command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

dbe-location-id dbe-location-id

no dbe-location-id

Syntax Description

dbe-location-id

Specifies the DBE location ID of the DBE. A value of 0 denotes that the adjacency is within the local network.


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure H.323 adjacency h323ToIsp42 to use DBE location ID 1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dbe-location-id 1
RP/0/0/CPU0:C12406_CH(config-sbc-sbe-adj-h323)# exit

deact-mode

To specify the action to take upon DBE or SBE deactivation, use the deact-mode command in the appropriate configuration mode. To revert to the default value, use the no form of this command.

deact-mode deact-type

no deact-mode

Syntax Description

deact-type

Specifies the action to take upon DBE deactivation:

abort: All calls dropped with no signaling.

normal: Service change signalled to SBE, and all calls immediately terminated.

quiesce: No new calls accepted. Deactivation occurs only after existing calls have terminated naturally.

Specifies the action to take upon SBE deactivation:

abort: All calls dropped with no signaling.

normal: Existing calls are torn down gracefully.

quiesce: No new calls accepted. Existing calls are allowed to terminate.


Defaults

By default, this command assumes the normal parameter.

Command Modes

DBE configuration

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the DBE to deactivate in quiesce mode to prepare the device for hardware maintenance:

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# deact-mode quiesce

description

To configure descriptive text for a policy set, an adjacency, or a number analysis table, use the description command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

description description

no description description

Syntax Description

description

Specifies the object you are describing.


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Call-policy-set configuration

CAC-policy-set configuration

CAC-table configuration

NA-DST configuration

NA-DST-prefix-table configuration

NA-SRC-adjacency-table configuration

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

NA-SRC-account-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use the description test adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# description test adjacency

The following example shows how to set the SIP adjacency SipToIsp42 to use the description test adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42

RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# description test adjacency


The following example shows how to create a description for number analysis table MyNaTable with entries that match the whole dialed number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number 
analysis table"

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# description "empty set"

The following example shows how to set the description of an admission control table, MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# description "My first CAC table"

The following example shows how to create a description for number analysis table MyNaTable with entries that match the start of the dialed number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number 
analysis table"

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# description "empty set"

disabled

To disable the caching and sending of messages for a RADIUS account, use the disabled command in RADIUS accounting configuration mode.

disabled

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values

Command Modes

RADIUS accounting mode (config-sbc-sbe-acc)

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to stop the sending of messages from the cache for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# disabled

Related Commands

Command
Description

radius

Configures a RADIUS client for accounting purposes.


dst-adjacency

To configure the destination adjacency of an entry in a routing table, use the dst-adjacency command in the appropriate configuration mode. To delete the destination adjacency, use the no form of this command.

dst-adjacency target-adjacency

no dst-adjacency target-adjacency

Syntax Description

target-adjacency

Specifies the string that identifies the destination adjacency to use.


Defaults

No default behavior or values

Command Modes

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The target-adjacency argument is mandatory for routing tables entries with match-type round-robin.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

dscp

To configure a DSCP with which to mark IP packets belonging to a given QoS profile, use the dscp command in the appropriate configuration mode. To return to the default, use the no form of this command.

dscp value

no dscp

Syntax Description

value

Specifies the DSCP value with which to mark packets. Range is 0 to 63.


Defaults

The default DSCP value is 0.

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# dscp 10

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos video residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-video)# dscp 10

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos voice residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-voice)# dscp 10

dtmf-duration

To configure the default duration of a DTMF event (in milliseconds), use the dtmf-duration command in VDBE configuration mode. To remove this configuration, use the no form of this command.

dtmf-duration duration

no dtmf-duration

Syntax Description

duration

Specifies the time for a DTMF event (in milliseconds). Range is 1 to 1000.


Defaults

duration: 200ms

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the default duration of a DTMF event to 250 ms:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# dtmf-duration 250

dtmf-relay

To configure DTMF relay for an adjacency, use the dtmf-relay command in Adjacency H.323 configuration mode. To deconfigure DTMF relay for an adjacency, use the no form of this command.

dtmf-relay rtp-nte

no dtmf-relay

Syntax Description

rtp-nte

(Optional) Enables rtp-nte support.


Defaults

By default, rtp-nte is assumed to be specified.

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Note the following points:

All adjacencies support passing DTMF as H.245 UserInputIndication (alphanumeric), or in-band

By default, H.323 negotiates support for RFC 2833 RTP Named Telephone Events (rtp-nte) with the signaling peer, as well as the above two methods.

When a call is routed between two adjacencies, one of which is configured to support rtp-nte and one of which is not, DTMF interworking is enabled.

In DTMF interworking, H.245 UserInputIndications are converted to RFC 2833 packets and vice versa. When DTMF interworking is enabled for a call, the rtp-nte adjacency must be configured with the dynamic RTP payload type that the remote endpoint uses for RFC 2833.

The simplest configuration is to use the same value for all H.323 adjacencies. For mixed configurations, the requirements apply to all rtp-nte adjacencies.

All endpoints on that adjacency that support RFC 2833 use the same receive RTP dynamic payload type.

This dynamic payload type is configured on the adjacency in advance of call setup.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disable rtp-nte support on the H.323 adjacency h323ToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dtmf-relay

early-media-deny

To configure whether to disallow early-media for an entry in an admission control table, use the early-media-deny command in CAC table configuration mode. To return to the default value, use the no form of this command.

early-media-deny

no early-media-deny

Syntax Description

This command has no arguments or keywords.

Defaults

By default, early-media is allowed.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disallow early-media for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-deny
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-direction

Configures the direction of early-media to allow for an entry in an admission control table.

early-media-timeout

Configures the time to allow early-media before a call is established.


early-media-direction

To configure the direction of early-media to allow for an entry in an admission control table, use the early-media-direction command in CAC table configuration mode. To remove this configuration and return to the default setting, use the no form of this command.

early-media-direction [backward-half-duplex | forward-half-duplex | full-duplex]

no early-media-direction

Syntax Description

backward-half-duplex

Allows early-media in the backwards direction only.

forward-half-duplex

Allows early-media in the forwards direction only.

full-duplex

Allows early-media in both directions.


Defaults

The default direction is full-duplex.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the early-media-direction for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-direction 
full-duplex
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-deny

Configures you to disallow early-media for an entry in an admission control table.

early-media-timeout

Configures the time to allow early-media before a call is established.


early-media-timeout

To configure the amount of time for which to allow early-media before a call is established, use the early-media-timeout command in CAC table configuration mode. To return to the default value, use the no form of this command.

early-media-timeout value

no early-media-timeout

Syntax Description

value

Specifies the timeout period (in seconds). A value of 0 means that calls are not timed out.


Defaults

value: 0

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the early-media-timeout for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# early-media-timeout 90
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-deny

Configures you to disallow early-media for an entry in an admission control table.

early-media-direction

Configures the direction of early-media to allow for an entry in an admission control table.


edit

To configure a dial-string manipulation action for a number analysis table with entries of the table matching the whole dialed number, use the edit command in the appropriate configuration mode. To return to the default value, use the no form of this command.

edit [del-prefix pd] | [del-suffix sd] | [add-prefix pa] | [replace ds]

no edit

Syntax Description

del-prefix pd

Positive integer specifying a number of digits to delete from the front of the dialed digit string.

del-suffix sd

Positive integer specifying a number of digits to delete from the end of the dialed digit string.

add-prefix pa

String of digits to add to the front of the dialed string.

replace ds

String of digits to with which to replace the dialed.


Defaults

No default behavior or values

Command Modes

NA-DST-number-table configuration

NA-DST-prefix-table configuration

NA-SRC-account-table configuration

NA-SRC-adjacency-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure entry 1 to delete one digit from the first beginning of the dialed string in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-ent)# edit del-prefix 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

match-number

Configures the match value of an entry in a number analysis table.


entry

To create or modify an entry in a table, use the entry command in the appropriate configuration mode. To destroy the given entry in the admission control table, use the no form of this command.

entry entry-id

no entry entry-id

Syntax Description

entry-id

Specifies the table entry.


Defaults

No default behavior or values

Command Modes

CAC table configuration

NA-DST-number-table configuration

NA-DST-prefix-table configuration

NA-SRC-adjacency-table configuration

NA-SRC-account-table configuration

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note You cannot change the configuration of tables in the context of the active policy set. An entry may not be destroyed if the table is a part of the active policy set.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new admission control table, MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# 

fast-register disable

To disable fast-path register support on the SIP adjacency, use the fast-register disable command in Adjacency SIP configuration mode. To enable fast-path register support, use the no form of this command.

fast-register disable

no fast-register disable

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the fast-path register feature is enabled.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Fast-path register is used to prevent the SBC from forwarding all SIP register messages to the softswitch, thus reducing the load on the softswitch. This is enabled by default and can be disabled using this command. When active, a SIP register message received from the same host and port as an existing registration, and with a nonzero expires interval, is immediately responded to without further parsing or other processing performed.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disable fast-path register support on the SIP adjacency SipToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register disable

Related Commands

Command
Description

fast-register-interval

Configures the fast-path register interval.


fast-register-interval

To configure the fast-path register interval (in seconds), use the fast-register-interval command in Adjacency SIP configuration mode. To deconfigure the fast-path register interval, use the no form of this command.

fast-register-interval interval

no fast-register-interval

Syntax Description

interval

Specifies the interval value in seconds. Range is 1 to 2000000.


Defaults

No default behavior or values

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

If fast-path register support is enabled on this adjacency, this is the minimum expiry period accepted on a subscriber registration. The interval at which registrations are forwarded on to the softswitch is governed by the reg-min-expiry value.


Note The interval must be less than the min-expiry value.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enable the fast-register interval on the SIP adjacency SipToIsp42 to 10s:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register-interval 10

Related Commands

Command
Description

fast-register disable

Disables fast-path register support on the SIP adjacency.


first-cac-scope

To configure the scope at which to begin defining limits when performing the Admission Control stage of policy, use the first-cac-scope command in CAC-policy-set configuration mode.

first-cac-scope scope-name

Syntax Description

scope-name

Specifies the scope at which limits should be initially defined when performing the admission control stage of policy. Possible values are:

global

call

One or more of the following scopes can be defined in a comma-separated list:

src-adjacency

dst-adjacency

src-number

dst-number

src-account

dst-account

category


Defaults

No default behavior or values

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the scope category as the first scope at which to define an admission control policy in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope src-adjacency

first-cac-table

To configure the name of the first policy table to process when performing the Admission Control stage of policy, use the first-cac-table command in CAC-policy-set configuration mode. To remove this configuration, use the no form of this command.

first-cac-table table-name

no first-cac-table

Syntax Description

table-name

Specifies the admission control table that should be processed first.


Defaults

No default behavior or values

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the table RootCacTable as the first admission control table in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table RootCacTable

first-call-routing-table

To configure the name of the first policy table to process when performing the routing stage of policy for new-call events, use the first-call-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-call-routing-table table-name

no first-call-routing-table

Syntax Description

table-name

Specifies the routing table that should be processed first.


Defaults

No default behavior or values

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootCallRtgTable as the first routing table for new-call events in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-call-routing-table RootCallRtgTable

first-number-analysis-table

To configure the name of the first policy table to process when performing the number analysis stage of policy, use the first-number-analysis-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-number-analysis-table table-name

no first-number-analysis-table

Syntax Description

table-name

Specifies the number analysis table that should be processed first.


Defaults

No default behavior or values

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootNaTable as the first number analysis table in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-number-analysis-table RootNaTable

first-reg-routing-table

To configure the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events, use the first-reg-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-reg-routing-table table-name

no first-reg-routing-table

Syntax Description

table-name

Specifies the routing table that should be processed first.


Defaults

No default behavior or values

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootRegRtgTable as the first routing table for subscriber-registration events in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-reg-routing-table RootRegRtgTable

h248 allow-all-mg

To configure the H.248 signaling stack to allow connections from all media gateways, use the h248 allow-all-mg command in SBE configuration mode. To deconfigure the H.248 signaling stack from allowing connections from all media gateways, use the no form of this command.

h248 allow-all-mg

no h248 allow-all-mg

Syntax Description

This command has no arguments or keywords.

Defaults

By default, connections are allowed from all media gateways.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.248 signaling stack to allow any media gateway to connect to the SBE:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h248 allow-all-mg

ip precedence

To configure an IP precedence with which to mark IP packets belonging to the given QoS profile, use the ip precedence command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

ip precedence value

no ip precedence

Syntax Description

value

Specifies the IP precedence with which to mark packets. Range is 0 to 7.


Defaults

value: 0

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a precedence of 1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip precedence 1

ip TOS

To configure an IP ToS (type of service) with which to mark IP packets belonging to the QoS profile, use the ip TOS command in the appropriate configuration mode. To return the QoS profile to setting the default IP ToS, use the no form of this command.

ip TOS value

no ip TOS

Syntax Description

value

Specifies the IP ToS with which to mark packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default IP ToS is 0 (normal service).

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a TOS to minimize delay and maximize throughput:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip TOS 12

ipv4 address

To assign an IPv4 address to a particular SBC interface, use the ipv4 address command in interface SBC configuration mode. To remove the IPv4 address, use the no form of this command.

ipv4 address ipv4_address/prefix

no ipv4 address ipv4_address/prefix

Syntax Description

ipv4_address/prefix

Specifies the IPv4 media address and prefix assign.


Defaults

No default behavior or values

Command Modes

Interface SBC configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to assign address 10.0.0.1/32 to interface 999:

RP/0/0/CPU0:router(config)# interface sbc 999
RP/0/0/CPU0:router (config-if-sbc)# ipv4 address 10.0.0.1/32

ipv4

To create an IPv4 address within a DBE media address pool, use the ipv4 command in Media-address configuration mode. To delete an IPv4 address within a DBE media address pool, use the no form of this command.

ipv4 ipv4_address [vrf vrf-name]

no ipv4 ipv4_address [vrf vrf-name]

Syntax Description

ipv4_address

Specifies the IPv4 media address.

vrf vrf-name

(Optional) Specifies the VRF name.


Defaults

No default behavior or values

Command Modes

Media-address configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure address 10.0.1.1 for use both for non-VPN media and for media to or from vpn3:

RP/0/0/CPU0:router(config)# sbc mySbc dbe media-address
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4 
10.0.1.1
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4 
10.0.1.1 vrf vpn3

Related Commands

Command
Description

media-address

Configures a DBE media address pool and an address pool for use in a VRF.


key

To configure the authentication key of the accounting and authentication servers, use the key command in the appropriate server configuration mode. To disable any previously set authentication key, use the no form of this command.

key key

no key

Syntax Description

key

Specifies the authentication key. This is only valid if authentication is turned on.


Defaults

No default behavior or values

Command Modes

Server configuration (accounting or authentication)

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure accounting servers acctsvr with the authentication key HJ5689 and acctsvr2 with the authentication key cisco on mySbc for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key HJ5689
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr2

RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key cisco

RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit

RP/0/0/CPU0:router(config-sbc-sbe-acc)# exit

RP/0/0/CPU0:router(config-sbc-sbe)# exit

ldr-check

To configure the time of day to run the long duration check, tearing down calls over 24 hours long, use the ldr-check command in the appropriate configuration mode. To return to the default, use the no form of this command.

ldr-check HH:MM

no ldr-check

Syntax Description

HH:MM

Specifies the time (in hours and minutes using a 24-hour clock). Range is 0 to 23.


Defaults

HH:MM: 0

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the local long duration check to occur at 10.30 p.m.:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# ldr-check 22:30

local-address

To configure the local IPv4 addresses, use the local-address ipv4 command in the appropriate configuration mode. To deconfigure the local IPV4 address, use the no form of this command.

local-address ipv4 ipv4_IP_address

no local-address

Syntax Description

ipv4_IP_address

Specifies the local IPv4 address to be configured.


Defaults

No default behavior or values

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the local-address to 10.20.1.1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# local-address ipv4 10.20.1.1
RP/0/0/CPU0:router(config-sbc-sbe)# exit

local-id host

To configure the local identify name on a SIP adjacency, use the local-id command in Adjacency SIP configuration mode. To remove this configuration, use the no form of this command.

local-id host name

no local-id host

Syntax Description

name

Specifies the local identity name to present on outbound SIP messages. This may be a DNS name. This must not contain the port.


Defaults

When the name field is not set, the local signaling address is used in SIP messages.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the SIP local identity of SIP adjacency SipToIsp42 to mcarthur:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# local-id host mcarthur

local-port

To configure a DBE to use a given local port when connecting to the default MGC, use the local-port command in VDBE configuration mode. To return to the default value, use the no form of this command.

local-port abcd

no local-port abcd

Syntax Description

abcd

Specifies the local port. Range is 0 to 4294967295.


Defaults

No default behavior or values

Command Modes

VDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to use local port 5090:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# local-port 5090

location-id

To configure the location ID for a DBE, use the location-id command in DBE configuration mode.

location-id location-id

Syntax Description

location-id

Specifies the location ID of the DBE. Range is 0 to 4294967295.


Defaults

No default behavior or values

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the location ID for a DBE to be 1:

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# location-id 1

major-alarm-threshold

To configure the threshold (in MB) at which a major alarm is generated if the CDR file reaches that size, use the major-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

major-alarm-threshold threshold

no major-alarm-threshold

Syntax Description

threshold

Specifies the threshold (in MB) at which an alarm is generated.


Defaults

No default behavior or values

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the major alarm threshold to 500 MB:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# major-alarm-threshold 500

Related Commands

Command
Description

billing

Configures local and remote billing policies on the SBE.

critical-alarm-threshold

Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.

minor-alarm-threshold

Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.


marking

To config whether the QoS profile will mark packets with a DSCP value or an IP precedence and TOS value, use the marking command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

marking type

no marking

Syntax Description

type

Specifies the type of marking. Possible values are:

dscp: Marks packets with a DSCP value.

ip-precedence: Marks packets with an IP precedence and TOS value.


Defaults

No default behavior or values

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with DSCPs:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# marking dscp

match-account

To configure the match account of an entry in the number analysis or routing table whose entries match against the source account, use the match-account command in the appropriate configuration mode. To destroy the match value, use the no form of this command.

match-account key

no match-account key

Syntax Description

key

Specifies the account to match.


Defaults

No default behavior or values

Command Modes

NA-SCR-account-table configuration

RTG-SRC-account-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new number analysis table MyNaTable and sets the source account it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-account router_eastern

Related Commands

Command
Description

entry

Configures an entry in a number analysis table.


match-address

To configure the match value of an entry in a routing table whose entries match against the destination or source dialed number, use the match-address command in the appropriate configuration mode. To destroy the match value, use the no form of this command.

match-address key

no match-address key

Syntax Description

key

Specifies the string used to match the address.


Defaults

No default behavior or values

Command Modes

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new routing table MyRtgTable and sets the dialed number (destination address) it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)# match-address 999

Related Commands

Command
Description

entry

Configures an entry in a routing table.

action (RTG-SRC)

Configures the action of an entry a routing table.


match-adjacency

To configure the match value of an entry in a number analysis or routing table whose entries match against the source adjacency, use the match-adjacency command in the appropriate configuration mode. To destroy the match value of the given entry in the routing table, use the no form of this command.

match-adjacency key

no match-adjacency key

Syntax Description

key

Specifies the match adjacency. Use an asterisk to match all adjacencies.


Defaults

No default behavior or values

Command Modes

RTG-SRC-adjacency-table configuration

NA-SRC-adjacency-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations