Cisco IOS XR Session Border Controller Command Reference Release 3.6
SBC Commands on Cisco IOS XR Software

Table Of Contents

SBC Commands on Cisco IOS XR Software

account

action (CAC)

action (NA-DST)

action (RTG-SRC)

activate

active-cac-policy-set

active-call-policy-set

address ipv4

adjacency

adjacency timeout

alias

allow private info

attach

attach-controllers

authentication endpoint

authentication-key

authentication mode

authentication nonce timeout

authentication-realm

billing

blacklist (DoS)

blacklist (sip)

blacklist address-default

blacklist default-port-limit

cache

cac-table

callee-dscp

callee-fax-qos-profile

callee-ip-precedence

callee-ip-TOS

callee-privacy

callee-sig-qos-profile

callee-video-qos-profile

callee-voice-qos-profile

caller-dscp

caller-fax-qos-profile

caller-ip-precedence

caller-ip-TOS

caller-privacy

caller-sig-qos-profile

caller-video-qos-profile

caller-voice-qos-profile

call-policy-set

category (NA-DST)

category (NA-SRC)

clear blacklist

clear services

clear services sbc sbe policy-failure-stats dst-account

clear services sbc sbe policy-failure-stats dst-adjacency

clear services sbc sbe policy-failure-stats src-account

clear services sbc sbe policy-failure-stats src-adjacency

codec

codec-list

codec-list description

codec packetization-period

codecs

complete

congestion-cleared

congestion-threshold

control address aaa

control address h248 (SBE)

control-address h248 ipv4 (DBE)

controller h248

critical-alarm-threshold

dbe-location-id

deact-mode

description

disabled

dst-adjacency

dscp

dtmf-duration

dtmf-relay

early-media-deny

early-media-direction

early-media-timeout

edit-cic

edit

entry

fast-register disable

fast-register-interval

first-cac-scope

first-cac-table

first-call-routing-table

first-number-analysis-table

first-reg-routing-table

force-limited-call-hold

group

h225 timeout

h245-tunnel disable

h248 allow-all-mg

h248-association-timeout

h248-max-term-per-context

h248-media-alert-event

h248-napt-package

h248-preserve-gates

h248-profile

h248-profile-version

h248-tmax

h248-version

header

header-profile (adj-sip)

header-profile (sip)

hold-media-timeout

hunting-trigger

hw-module service sbc location

invite-timeout

ip precedence

ip TOS

ipv4 address

ipv4

key

ldr-check

local-address

local-id host

local-port

location-id

major-alarm-threshold

marking

match-account

match-address

match-adjacency

match-cic

match-domain

match-number

match-prefix

match-type

match-value

max-bandwidth

max-call-rate

max-channels

max-num-calls

max-pdu-size

max-regs

max-regs-rate

max-updates

media-address

media-address port range

media-bypass

media-bypass-forbid

media-gateway

media-timeout

method

method-profile (adj-sip)

method-profile (sip)

minor-alarm-threshold

mode

na-dst-prefix-table

na-src-account-table

nat

network-id

overload-time-threshold

package

pass-body

passthrough

pause

port

port-range

prefix

priority

privacy restrict outbound

qos fax

qos sig

qos video

qos voice

radius

ras retry

ras rrq

ras timeout

reason

redirect-limit

redirect-mode

registration rewrite-register

registration target address

registration target port

remote-address ipv4

resend

resource-priority

resource-priority-set

rtg-carrier-id-table

rtg-dst-address-table

rtg-dst-domain-table

rtg-round-robin-table

rtg-src-account-table

rtg-src-address-table

rtg-src-adjacency-table

rtg-src-domain-table

rtp payload-type nte

secure-media

security

server

service-location preferred-active

show services redundancy

show services sbc dbe addresses

show services sbc dbe controllers

show services sbc dbe h248-profile

show services sbc dbe media-flow-stats

show services sbc dbe media-stats

show services sbc dbe signaling-flow-stats

show services sbc sbe adjacencies

show services sbc sbe adjacency all-authentication-realms

show services sbc sbe adjacency authentication-realms

show services sbc sbe billing

show services sbc sbe blacklist

show services sbc sbe blacklist configured-limits

show services sbc sbe blacklist current-blacklisting

show services sbc sbe cac-policy-set

show services sbc sbe call-policy-set

show services sbc sbe call-policy-sets

show services sbc sbe call-policy-set table entries

show services sbc sbe calls

show services sbc sbe call-stats

show services sbc sbe codec-list

show services sbc sbe gates

show services sbc sbe h323 timers

show services sbc sbe hold-media-timeout

show services sbc sbe hunting-trigger

show services sbc sbe media-gateway-associations

show services sbc sbe media-gateways

show services sbc sbe policy-failure-stats

show services sbc sbe policy-failure-stats dst-account

show services sbc sbe policy-failure-stats dst-adjacency

show services sbc sbe policy-failure-stats src-account

show services sbc sbe policy-failure-stats src-adjacency

show services sbc sbe qos-profiles

show services sbc sbe radius-client-stats

show services sbc sbe radius-server-stats

show services sbc sbe redirect-limit

show services sbc sbe sip essential-headers

show services sbc sbe sip essential-methods

show services sbc sbe sip header-profile

show services sbc sbe sip header-profiles

show services sbc sbe sip method-profile

show services sbc sbe sip method-profiles

show services sbc sbe sip timers

show services sbc sbe vrf

signaling-address ipv4

signaling-peer

signaling-peer-port

signaling-port

sip encryption key

sip home network identifier

sipi

sip inherit profile

sip timer

sip visited network identifier

tcp-connect-timeout

tcp-idle-timeout

tech-prefix

timeout

tls-idle-timeout

transcode-deny

transcoder

transport (h.248)

transport (vdbe)

trigger-period

trigger-size

udp-first-retransmit-interval

udp-max-retransmit-interval

udp-response-linger-period

unexpected-source-alerting

use-any-local-port

vdbe

vrf (interface)

vrf

vrf vpn-id


SBC Commands on Cisco IOS XR Software


This section describes session border controller (SBC) commands on Cisco IOS XR software.


Note The commands documented in this section use complex modes and submodes. Accordingly, you must be in the correct configuration mode and submode to run each command. The "Examples" section provided for each command shows the hierarchy of modes and submodes required to run the command.


account

To define a SIP or H.323 adjacency account on an SBE, use the account command in the appropriate configuration mode. To remove this definition, use the no form of this command.

account account-name

no account account-name

Syntax Description

account-name

Specifies the SBE account name.


Defaults

No account name is associated with the adjacency

Command Modes

Adjacency SIP configuration

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to account isp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# account isp42

The following example shows how to configure the SIP adjacency SipToIsp42 to account isp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# account isp42

action (CAC)

To configure the action to perform after the entry in an admission control table, use the action (CAC) command in CAC configuration mode. To delete the action, use the no form of this command.

action [cac-complete | next-table goto-table-name | cac-complete]

Syntax Description

cac-complete

When an event matches this CAC policy is complete.

goto-table-name

Specifies the table name identifying the next CAC table to process (or cac-complete, if processing should stop).


Defaults

None

Command Modes

CAC configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the action to perform after the entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table)# action cac-complete

Related Commands

Command
Description

action (RTG-SRC)

Configures the action to take if a routing entry is chosen.

action (NA-DST)

Configures the action to perform after an entry in an admission control table.


action (NA-DST)

To configure the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account, use the action (NA-DST) command in the appropriate configuration mode. To delete the action, use the no form of this command.

action [next-table goto-table-name | accept | reject]

no action

Syntax Description

next-table goto-table-name

Specifies the next number analysis table to process, if the event matches this entry.

accept

Configures the call to be accepted if it matches the entry in the table.

reject

Configures the call to be rejected if it matches the entry in the table.


Defaults

None

Command Modes

NA-DST-number-table configuration mode

NA-DST-prefix-table configuration mode

NA-SRC-adjacency-table configuration mode

NA-SRC-account-table configuration mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the call to be accepted if it matches the entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the start of the entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the source adjacency entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-adjacency-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

The following example shows how to configure the call to be accepted if it matches the source account entry in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

Related Commands

Command
Description

action (RTG-SRC)

Configures the action to take if a routing entry is chosen.

action (CAC)

Configures the action to perform after an entry in an admission control table.


action (RTG-SRC)

To configure the action to take if a routing entry is chosen, use the action (RTG-SRC) command in the appropriate configuration mode. To delete the action, use the no form of this command.

action [next-table goto-table-name | complete | reject]

no action

Syntax Description

next-table goto-table-name

Specifies the next routing table to process if the event matches the entry.

complete

Completes the action. This keyword is supported for rtg-round-robin-table routing tables only.

reject

Rejects the indicated action.


Defaults

None

Command Modes

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

RTG-DST-address-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-adjacency 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-account 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example configures the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action complete

Related Commands

Command
Description

action (NA-DST)

Configures the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account.

action (CAC)

Configures the action to perform after an entry in an admission control table.


activate

To initiate the SBC service when all SBE or DBE address configuration have been successfully committed, use the activate command in the appropriate configuration mode. To deactivate the SBE service of the SBC, use the no form of this command.

activate

no activate

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

DBE configuration

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate the DBE on the service mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc dbe 

RP/0/0/CPU0:router (config-sbc-dbe)# activate

The following example shows how to activate the SBE on the service mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router (config-sbc-sbe)# activate

Related Commands

Command
Description

deact-mode

Indicates how to implement the deactivation of an SBE.


active-cac-policy-set

To set the active CAC-policy-set within an SBE entity, use the active-cac-policy-set command in SBE configuration mode. To deconfigure the active policy set, leaving the SBE with no active policy set, use the no form of this command.

active-cac-policy-set policy-set-id

no active-cac-policy-set policy-set-id

Syntax Description

policy-set-id

Integer identifying the policy set that should be made active. Range is 1 to 2147483647.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate policy set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router (config-sbc-sbe)# active-cac-policy-set 1

active-call-policy-set

To set the active routing policy set within an SBE entity, use the active-call-policy-set command in SBE configuration mode. To deconfigure the active routing policy set, leaving the SBE with no active routing policy set, use the no form of this command.

active-call-policy-set policy-set-id

no active-call-policy-set

Syntax Description

policy-set-id

Integer that identifies the policy set that should be made active.
Range is 1 to 2147483647.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

If another policy set was previously active, it is made inactive by executing this command. The SBE is created with no active routing policy set; an active routing policy set must be explicitly configured using this command.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to activate policy set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe 
RP/0/0/CPU0:router(config-sbc-sbe)# active-call-policy-set 1

address ipv4

To configure the address of the authentication server, use the address ipv4 command in server configuration mode. To remove the address configuration for the authentication server, use the no form of this command.

address ipv4 server-name

no address ipv4 server-name

Syntax Description

server-name

Specifies the DNS name or IP address of the authentication server.


Defaults

None

Command Modes

Server configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure authentication servers acctsvr and acctsvr2 on mySbc for the authentication RADIUS client:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address acctsvr2

adjacency

To configure an adjacency for an SBC service, use the adjacency command in SBE mode. To deconfigure the adjacency, use the no form of this command.

adjacency {sip | h323} adjacency name

no adjacency {sip | h323} adjacency name

Syntax Description

sip

Enters the mode of an SBE SIP adjacency.

h323

Enters the mode of an SBE H.323 adjacency.

adjacency name

Specifies the name of the SBE SIP or H.323 adjacency.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section below shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the adjacency command configures a SIP adjacency named sipGW.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip sipGW

The following example shows how the adjacency command configures an H.323 adjacency named 
H323ToIsp42.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42

adjacency timeout

To configure the adjacency retry timeout interval, use the adjacency timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.

adjacency timeout value

no adjacency timeout value

Syntax Description

value

Specifies the timeout period in milliseconds. Valid values are from 10000 to 30000. The default value is 30 seconds.


Defaults

None

Command Modes

Adjacency H.323 configuration

H.323 configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the adjacency timeout command configures adjacency retry timeout in Adjacency H.323 configuration mode.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# adjacency timeout 10000

The following example shows how the adjacency timeout command configures adjacency retry timeout in H.323 configuration mode.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# adjacency timeout 10000

alias

To configure the endpoint alias of an H.323 adjacency, use the alias command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

alias alias-name

no alias

Syntax Description

alias-name

Specifies the alias of the H.323 adjacency endpoint.


Defaults

None

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 endpoint alias to end1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# alias end1

Related Commands

Command
Description

attach-controllers

Configures a DBE to attach to a controller.


allow private info

To configure an H.323 adjacency to allow private information on messages sent out by the adjacency, use the allow private info command in the H.323 adjacency mode. To disallow private information on messages sent out by the adjacency, use the no form of this command.

allow private info

no allow private info

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command. Please note that if you configure the H.323 adjacency to allow private information, then it will allow private information on messages even if the CAC policy is configured to apply privacy service or the user requests privacy service.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the allow private info command is used to configure an H.323 adjacency to allow private information on messages sent by the adjacency.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323ToIsp422
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# allow private info

Related Commands

Command
Description

privacy restrict outbound

Configures an H.323 adjacency to apply privacy restriction on outbound messages if the user requests it.



attach

To attach an adjacency to an account on an SBE, use the attach command in the appropriate configuration mode. To detach the adjacency from an account on an SBE, use the no form of this command.

attach

no attach force

Syntax Description

force

Executes a forced detach.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Use the force argument to tear all SBE calls down.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to attach the H.323 adjacency to h323ToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# attach

attach-controllers

To configure a DBE to attach to a controller, use the attach-controllers command in vDBE configuration mode. To detach from a controller, use the no form of this command.

attach-controllers

no attach-controllers force

Syntax Description

force

Executes a forced detach. In such cases, all calls through this vDBE are immediately torn down.


Defaults

None

Command Modes

vDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure a DBE to attach to a controller:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# attach-controllers

authentication endpoint

To configure the H.323 adjacency to use endpoint authentication, use the authentication endpoint command in Adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

authentication endpoint

no authentication endpoint

Syntax Description

This command has no arguments or keywords.

Defaults

By default, no authentication procedures are performed.

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use endpoint authentication:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication endpoint

Related Commands

Command
Description

authentication-key

Configures the H.323 adjacency authentication key.


authentication-key

To configure the H.323 adjacency authentication key, use the authentication-key command in Adjacency H.323 configuration mode. To deconfigure the H.323 adjacency authentication key, use the no form of this command.

authentication-key key

no authentication-key

Syntax Description

key

Specifies the authentication key. (This is valid only when authentication is turned on.)


Defaults

None

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure H.323 adjacency h323ToIsp42 to use authentication key FG56KJ:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication-key FG56KJ

Related Commands

Command
Description

authentication endpoint

Configures an H.323 adjacency to use endpoint authentication.


authentication mode

To configure the authentication mode for a SIP adjacency, use the authentication mode command in the SIP adjacency mode. To deconfigure the authentication mode, use the no form of this command.

authentication mode {local | remote}

no authentication mode {local | remote}

Syntax Description

local

Configures the Sip adjacency for local authentication.

remote

Configures the SIP adjacency for remote authentication.


Defaults

None

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the authentication mode command is used to configure the SIP adjacency for local authentication:

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# authentication mode local

Related Commands

Command
Description

authentication nonce timeout

Configures the authentication nonce timeout for a SIP adjacency.



authentication nonce timeout

To configure the authentication nonce timeout for a SIP adjacency, use the authentication nonce timeout command in the SIP adjacency mode. To deconfigure the authentication nonce timeout, use the no form of this command.

authentication nonce timeout value

no authentication nonce timeout

Syntax Description

value

Specifies the timeout value in seconds. The range of values is 0 to 65535 seconds.


Defaults

The default timeout value is 300 seconds.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the authentication nonce timeout command is used to configure the authentication nonce timeout in seconds for a SIP adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# authentication nonce timeout 10

Related Commands

Command
Description

authentication mode

Configures the authentication mode for a SIP adjacency.



authentication-realm

To configure a set of authentication credentials for a specified domain on the specified SIP adjacency, use the authentication-realm command in SIP adjacency configuration mode. To deconfigure the authentication realm on the specified adjacency, use the no form of this command.

authentication-realm {inbound domain | outbound domain username password}

no authentication-realm {inbound domain | outbound domain}

Syntax Description

inbound

Specifies inbound authentication-realm.

outbound

Specifies outbound authentication-realm.

domain

Name of the domain for which the authentication credentials are valid.

username

Username that identifies the SBC in the specified domain.

password

Password to authenticate the username in the specified domain.


Defaults

None

Command Modes

SIP adjacency configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the authentication-realm command configures an authentication realm for the domain example.com on SIP adjacency SipToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SiptoISP42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# authentication-realm outbound example.com 
usersbc passwordsbc

billing

To configure local and remote billing policies, use the billing command in SBE configuration mode. To reset all parameters to their default values, use the no form of this command.

billing {local | remote}

no billing {local | remote}

Syntax Description

local

Configures local billing policies.

remote

Configures remote billing policies.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enter the local billing mode for mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)#

Related Commands

Command
Description

blacklist address-default

Configures the name of the local or remote directory where to store the billing information.

critical-alarm-threshold

Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.

ldr-check

Configures the time of day to run the long duration check.

local-address

Configures the local IPv4 address.

major-alarm-threshold

Configures the threshold at which a major alarm is generated if the CDR file reaches that size.

minor-alarm-threshold

Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.


blacklist (DoS)

To enter the mode for configuring the event limits of a given source, use the blacklist command in the SBE mode. To return the event limits to the default values, use the no form of this command.

blacklist source

no blacklist source

Syntax Description

source

Specifies the VPN ID, an IP address, or port of a given address.

The following values are valid:

global—for all global addresses

VRF name—for all addresses within a given VPN

{ipv4 IP address}for a global IP address

{VRF name ipv4 IP address}—for a specific VPN IP address

{ipv4 IP address {UDP | TCP} port number}—for a global port

{VRF name ipv4 IP address {UDP | TCP} port number} for a VPN port


Defaults

This field must be configured in one of the forms specified above.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the blacklist command is used to enter the mode for configuring the event limits for the IP address 25.25.25.5:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 25.25.25.5

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

trigger-period

Defines the period over which events are considered.

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.


blacklist (sip)

To configure SIP header or method blacklist profiles on a Session Initiation Protocol (SIP) message, use the blacklist command in the appropriate configuration mode. To configure the profile as a whitelist, use the no form of this command.

blacklist

no blacklist

Syntax Description

This command has no arguments or keywords.

Defaults

The profile is a whitelist.

Command Modes

SIP header-profile configuration
SIP method-profile configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to use the blacklist command to configure the SIP header profile test1 as a blacklist:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr)# blacklist

The following example shows how to use the blacklist command to configure the SIP method profile test1 as a blacklist:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# blacklist

blacklist address-default

To enter the mode for configuring the default event limits for the source addresses in a given VPN, use the blacklist command in the SBE mode. To set the values for the VPN to the same as global addresses, use the no form of this command.

blacklist VRF name address-default

no blacklist VRF name address-default

Syntax Description

VRF name

Specifies the VRF of the VPN. To use the default value, this argument is omitted.


Defaults

Event limits are set to the same value for all VPNs.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the blacklist address-default command is used to enter the mode for configuring the default event limits for all addresses:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist address-default

Related Commands

Command
Description

blacklist default-port-limit

Enters a submode for configuring the default even limits for the ports of a given address.

reason

Enters a submode for configuring a limit to a specific event type on the source.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

trigger-period

Defines the period over which events are considered.

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.


blacklist default-port-limit

To enter the mode for configuring the default event limits for the ports of a given address, use the blacklist default-port-limit command in the SBE mode. To remove the event limits set, use the no form of this command.

blacklist {ipv4 IP address | VRF name ipv4 IP address} default-port-limit

no blacklist {ipv4 IP address | VRF name ipv4 IP address} default-port-limit

Syntax Description

ipv4

Specifies IPv4.

IP address

Specifies the IPv4 address.

VRF name

Specifies the VRF of the VPN. To use the default value, this argument is omitted.


Defaults

No event limits are defined for ports.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the blacklist default-port-limit command is used to enter the mode for configuring the default event limits for the ports of the source address 123.123.2.2:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 123.123.2.2 default-port-limit

Related Commands

Command
Description

blacklist address-default

Enters the mode for configuring the default event limits for the source addresses in a given VPN.

reason

Enters a submode for configuring a limit to a specific event type on the source.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

trigger-period

Defines the period over which events are considered.

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.


cache

To configure the local or remote billing directory where to store the billing records, use the cache command in the appropriate configuration mode. The billing directory is created under the default billing path. To unset the local or remote billing directory, use the no form of this command.

cache name

no cache

Syntax Description

name

Specifies the local or remote billing directory under the default billing path. See Usage Guidelines.


Defaults

The default drives for billing are:

harddisk: for local billing

disk0: for remote billing

After an SBC instance is created:

A predefined billing directory is mounted onto the Replication Data Service File System (RDSFS).

The billing directory name contains a prefix followed by _instance-name.

The billing directory prefix is sbcl for local billing and sbcr for remote billing.

For example, if an SBC instance mysbc is created, the two new RDSFS-mounted billing directories are:

harddisk:/sbcl_mysbc for local billing

disk0:/sbcr_mysbc for remote billing

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.3.1

The path parameter was changed to the name parameter.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure a cache named mybillingrecords:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# cache mybillingrecords

cac-table

To create or configure an admission control table, use the cac-table command in CAC-policy-set configuration mode. To delete the admission control table, use the no form of this command.

cac-table table-name

no cac-table table-name

Syntax Description

table-name

Specifies the admission control table.


Defaults

None

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create the admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# 

Related Commands

Command
Description

description

Configures the descriptive text describing an admission control table within the context of an SBE policy set.

match-type

Configures the match-type of an admission control table within the context of an SBE policy set.


callee-dscp

To configure the DSCP to apply to signaling packets sent to the original callee, use the callee-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.

callee-dscp dscp

no callee-dscp

Syntax Description

dscp

Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.


Defaults

dscp: 0

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use DSCP AF41 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-dscp 34
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

callee-fax-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-fax-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-fax-qos-profile profile-name

no callee-fax-qos-profile

Syntax Description

profile-name

Specifies a QoS profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls to the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-fax-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

callee-ip-precedence

To configure the IP precedence to apply to signaling packets sent to the original callee, use the callee-ip-precedence command in CAC table configuration mode. To remove this configuration and set the IP precedence to its default (which is 0), use the no form of this command.

callee-ip-precedence value

no callee-ip-precedence

Syntax Description

value

Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP precedence 4 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-precedence 4
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-ip-TOS

To configure the IP ToS to apply to signaling packets sent to the original callee, use the callee-ip-TOS command in CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.

callee-ip-TOS value

no callee-ip-TOS

Syntax Description

value

Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default value is 0 (normal service).

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP ToS 3 for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-TOS 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-privacy

To configure the level of privacy processing to perform on messages sent from callee to caller, use the callee-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

callee-privacy [callee_priv_setting]

no callee-privacy

Syntax Description

callee_priv_setting

Indicates specific callee privacy setting. Values are:

never: Never hides the identity.

account-boundary: Hides the identity if caller is different account from callee.

always: Always hides the identity.


Defaults

callee_priv_setting=never

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the entry to always hide callee identity in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# callee-privacy always

callee-sig-qos-profile

To configure the QoS profile to be used for signaling packets sent to the original callee, use the callee-sig-qos-profile command in the CAC policy Admission control table mode. To deconfigure the QoS profile, use the no form of this command.

callee-sig-qos-profile profile-name

no callee-sig-qos-profile profile-name

Syntax Description

profile-name

Specifies the name of the QoS profile. The string default is reserved.


Defaults

None

Command Modes

CAC policy admission control table entry configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the callee-sig-qos-profile command is used to configure the QoS profile named enterprise to be used for signaling packets sent to the original callee.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-sig-qos-profile 
enterprise

callee-video-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-video-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-video-qos-profile profile-name

no callee-video-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The callee-video-qos-profile can be executed only at the per-call scope. CAC policy does not activate if configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original callee:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-video-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

callee-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-voice-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.

callee-voice-qos-profile profile-name

no callee-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original callee.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-voice-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-dscp

To configure the DSCP to apply to signaling packets sent to the original caller, use the caller-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.

caller-dscp dscp

no caller-dscp

Syntax Description

dscp

Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use DSCP AF31 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-dscp 26
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-fax-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-fax-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-fax-qos-profile profile-name

no caller-fax-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-fax-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-ip-precedence

To configure the IP precedence to apply to signaling packets sent to the original caller, use the caller-ip-precedence command in CAC table configuration mode. To return the configuration to the default IP precedence (which is 0), use the no form of this command.

caller-ip-precedence value

no caller-ip-precedence

Syntax Description

value

Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.


Defaults

The default value is 0.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The IP precedence is not be applied until you run the CAC decision process. This means that some initial signaling packets sent to the caller do not receive any particular IP precedence marking. If a DSCP has been configured in this submode, the DSCP value takes precedence, and the IP precedence value is not used.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP precedence 3 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-precedence 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-ip-TOS

To configure the IP ToS to apply to signaling packets sent to the original caller, use the caller-ip-TOS command in CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.

caller-ip-TOS value

no caller-ip-TOS

Syntax Description

value

Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default value is 0 (normal service).

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use IP ToS 12 for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-TOS 12
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-privacy

To configure the level of privacy processing to perform on messages sent from caller to callee, use the caller-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

caller-privacy [privacy-setting]

no caller-privacy

Syntax Description

privacy_setting

Indicates specific caller privacy setting. Possible values include:

never: Never hides the identity.

account-boundary: Hides the identity if caller is different account from callee.

always: Always hides the identity.


Defaults

The privacy_setting value is set to never.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the entry to always hide caller identity in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-privacy always
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-sig-qos-profile

To configure the QoS profile to be used for signaling packets sent to the original caller, use the caller-sig-qos-profile command in the CAC policy Admission control table mode. To deconfigure the QoS profile, use the no form of this command.

caller-sig-qos-profile profile-name

no caller-sig-qos-profile profile-name

Syntax Description

profile-name

Specifies the name of the QoS profile. The string default is reserved.


Defaults

None

Command Modes

CAC policy admission control table entry configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the caller-sig-qos-profile command configures the QoS profile named enterprise to be used for signaling packets sent to the original caller.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-sig-qos-profile 
enterprise

caller-video-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-video-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-video-qos-profile profile-name

no caller-video-qos-profile

Syntax Description

profile-name

Specifies the Qos profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The caller-video-qos-profile command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-video-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

caller-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-voice-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-voice-qos-profile profile-name

no caller-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Defaults

None

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original caller:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# caller-voice-qos-profile 
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

call-policy-set

To create a new policy set, use the call-policy-set command in SBE configuration mode. To delete the policy set, use the no form of this command.

call-policy-set policy-set-id

no call-policy-set policy-set-id

Syntax Description

policy-set-id

Specifies the integer that identifies the policy set.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

Related Commands

Command
Description

first-call-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.

first-number-analysis-table

Configures the name of the first policy table to process when performing the number analysis stage of policy.

first-reg-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.


category (NA-DST)

To configure the entry category in the number analysis table with entries of the table matching a part of or the whole dialed number, use the category command in the appropriate configuration mode. To deconfigure the category of an entry, use the no form of this command.

category category-name

no category category-name

Syntax Description

category-name

Specifies a category to assign to the event.


Defaults

None

Command Modes

NA-DST number configuration

NA-DST prefix configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the category of entry 1 in the new number analysis table MyNaTable matching the whole number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

category (NA-SRC)

To configure the entry category in the number analysis table with entries of the table matching the source account or adjacency, use the category command in NA-SRC configuration mode. To deconfigure the entry category in the number analysis table, use the no form of this command.

category category-name

no category category-name

Syntax Description

category-name

Specifies a category to assign to the event.


Defaults

None

Command Modes

NA-SRC account configuration

NA-SRC adjacency configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the category of entry 1 in the new NA table MyNaTable matching the source account:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#

clear blacklist

To remove the given source from a blacklist, use the clear blacklist command in the SBE mode.

clear blacklist source

Syntax Description

source

Specifies the source VPN, address, or port to stop blacklisting.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the clear blacklist command is used to remove the specified source address from the blacklist.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# clear blacklist ipv4 123.124.1.2

Related Commands

Command
Description

show services sbc sbe blacklist

Lists the limits in force for a specified source.



clear services

To clear call statistics, calls, billing recorded, and cached information, use the clear services command in EXEC mode.

clear services [call-destroy call-index | media-stats | call-stats | flush-cdr-file | radius-client radius-server-stats [client-name | server-name] | radius-client-stats client-name]

Syntax Description

call destroy client-index

Clears the indentified call. (SBE only.)

media-stats

Clears all statistics collected by the media gateway manager of the DBE.

call-stats

Clears all recorded call stats. (SBE only.)

flush-cdr-file

Writes all cached local billing records to disk. (SBE only.)

radius-client radius-server-stats [client-name | server-name]

Clears all statistics for the specified RADIUS server or client. (SBE only.)

radius-client-stats client-name

Clears all statistics fro the specified local RADIUS client. (SBE only.)


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The media-stats keyword is related to DBE. All other keywords apply to SBE.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to destroy call 5:

RP/0/0/CPU0:router# show services sbc mySbc sbe calls

SBC Service "mySbc"
  Call           State          Type
  -------------------------------------
      1           inactive       data
      2           active         video
      3           activating     audio
      4           active         audio
      5           inactive       unknown

RP/0/0/CPU0:router# show services sbc mySbc sbe call 5 branches

SBC Service "mySbc"
Call: 5
State: inactive
Type: unknown

Branch          Calling Number    Called Number
   1            102 789 767              -
   2                 -             105 659 896

RP/0/0/CPU0:router# clear services sbc mySbc sbe call-destroy 5

The following example shows how to clear all the statistics collected by the media gateway manager of the DBE:

RP/0/0/CPU0:router# clear services sbc mySbc dbe media-stats

The following example shows how to clear all the call statistics by the SBE:

RP/0/0/CPU0:router# clear services sbc mySbc sbe call-stats

The following example shows how to write all cached local billing records to disk:

RP/0/0/CPU0:router# clear services sbc mySbc sbe flush-cdr-file

The following example shows how to clear all the statistics for the specified RADIUS server:

RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client radius1 radius-server-stats 
acctsvr

The following example shows how to clear all the statistics for the local RADIUS clients:

RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client-stats readius1

clear services sbc sbe policy-failure-stats dst-account

To clear all of the call setup policy failure statistics for a specified target account, use the clear services sbc sbe policy-failure-stats dst-account command in EXEC mode.

clear services sbc sbc-name sbe policy-failure-stats dst-account name

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the target account name from which you want to clear statistics.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to clear all of the call setup policy failure statistics for an account named AA:

RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats dst-account AA
RP/0/0/CPU0:router#

Related Commands

Command
Description

clear services sbc sbe policy-failure-stats dst-adjacency

Clears call setup policy failure statistics for the specified target adjacency.

clear services sbc sbe policy-failure-stats src-account

Clears call setup policy failure statistics for the specified source account.

clear services sbc sbe policy-failure-stats src-adjacency

Clears call setup policy failure statistics for the specified source adjacency.


clear services sbc sbe policy-failure-stats dst-adjacency

To clear all of the call setup failure statistics for a specified target adjacency, use the clear services sbc sbe policy-failure-stats dst-adjacency command in EXEC mode.

clear services sbc sbc-name sbe policy-failure-stats dst-adjacency name

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the target adjacency name from which you want statistics cleared.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to clear all of the policy failure statistics for an adjacency named ZZ:

RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats dst-adjacency ZZ
RP/0/0/CPU0:router#

Related Commands

Command
Description

clear services sbc sbe policy-failure-stats dst-account

Clears policy failure statistics for the specified target account.

clear services sbc sbe policy-failure-stats src-account

Clears policy failure statistics for the specified source account.

clear services sbc sbe policy-failure-stats src-adjacency

Clears policy failure statistics for the specified source adjacency.


clear services sbc sbe policy-failure-stats src-account

To clear all the call setup policy failure statistics for a specified source account, use the clear services sbc sbe policy-failure-stats src-account command in EXEC mode.

clear services sbc sbc-name sbe policy-failure-stats src-account name

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the source account name from which you want statistics cleared.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to clear all of the policy failure statistics for a source account named BB:

RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats src-account BB

RP/0/0/CPU0:router#

Related Commands

Command
Description

clear services sbc sbe policy-failure-stats dst-adjacency

Clears policy failure statistics for the specified target adjacency.

clear services sbc sbe policy-failure-stats dst-account

Clears policy failure statistics for the specified target account.

clear services sbc sbe policy-failure-stats src-adjacency

Clears policy failure statistics for the specified source adjacency.


clear services sbc sbe policy-failure-stats src-adjacency

To clear all of the call setup failure statistics for a specified source adjacency, use the clear services sbc sbe policy-failure-stats src-adjacency command in EXEC mode.

clear services sbc sbc-name sbe policy-failure-stats src-adjacency name

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the source adjacency name from which you want to clear statistics.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to clear all of the policy failure statistics for an adjacency named YY:

RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats src-adjacency YY

RP/0/0/CPU0:router#

Related Commands

Command
Description

clear services sbc sbe policy-failure-stats dst-adjacency

Clears policy failure statistics for the specified target adjacency.

clear services sbc sbe policy-failure-stats dst-account

Clears policy failure statistics for the specified target account.

clear services sbc sbe policy-failure-stats src-account

Clears policy failure statistics for the specified source account.


codec

To add a codec to a codec list, use the codec command in the sbe-codec-list mode. To remove a named codec from a codec list, use the no form of this command.

codec codec-name

no codec codec-name

Syntax Description

codec-name

Specifies the name of a codec. This value must be one of the list of codecs that the SBE is hard-coded to recognize. Otherwise, when you execute this command, the SBE displays an error.

The format of the codec name is the same as the string used to represent it in SDP. For example, PCMU or VDVI. A codec can only be added to each list one time.


Defaults

None

Command Modes

sbe-codec-list

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to assign the PCMU codec to the my_codecs codec list.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec PCMU

codec-list

To create a codec list, use the codec-list command in the sbe mode. To delete a codec list, use the no form of this command.

codec-list list-name

no codec-list list-name

Syntax Description

list-name

Specifies the name of the codec list.


Defaults

None

Command Modes

sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enter a submode to create a codec list using the name my_codecs.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs

codec-list description

To provide a description of a codec list, use the codec-list description command in sbe mode. To delete the description for the codec list, use the no form of this command.

codec-list description text

no description

Syntax Description

text

An arbitrary text string that describes the codec list.


Defaults

None

Command Modes

sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to provide the my_codecs codec list with a description (Legitimate codecs).

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# description Legitimate codecs

codec packetization-period

To set a minimum packetization period for a codec, use the codec packetization-period command in the sbe-codec-list mode. To remove a packetization-period from a codec, use the no form of this command.

codec codec-name packetization-period packet-period

no codec codec-name packetization-period packet-period

Syntax Description

codec-name

Specifies the name of a codec. This value must be one of the list of codecs that the SBE is hard-coded to recognize. Otherwise, when you execute this command, the SBE displays an error.

The format of the codec name is the same as the string used to represent it in SDP (for example, PCMU or VDVI).

packet-period

The codec can optionally be followed by a minimum acceptable packetization period in milliseconds as indicated by packetization-period.

For example, codec PCMU packetization-period 20 adds the codec PCMU to the list with a minimum acceptable packetization period of 20 ms. The range of packetization period is limited to 0 to 1000 ms.



Note For each minimum packetization period, only one codec is allowed to be added to each list, one time only.


Defaults

None

Command Modes

sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to set a minimum packetization period for the PCMU and G729 codecs that are in the my_codecs codec list.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec PCMU packetization-period 20
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec G729 packetization-period 10

codecs

To configure the codecs supported by the media gateway, use the codecs command in Media-gateway configuration mode. To set the codec support to nothing, use the no form of this command.

codecs codec-list

no codecs

Syntax Description

codec-list

Specifies the supported codecs.


Defaults

None

Command Modes

Media-gateway configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set media gateway 10.0.0.1's supported codecs to m=audio 6000 RTP/AVP 4 and a=rtpmap:0 PCMU/8000 (as defined in RFC 1890):

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1 
RP/0/0/CPU0:router(config-sbc-sbe-media-gateway)# codecs "m=audio 6000 RTP/AVP 
4,a=rtpmap:0 PCMU/8000"

complete

To complete the CAC- or call-policy set after committing the full set, use the complete command in the appropriate configuration mode. To change entries, use the no form of this command.

complete

no complete

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

CAC-policy-set configuration

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The SBC checks that the routing-policy is self-consistent and can be set as the active policy set. When this command is issued, you cannot alter the CAC-policy-set.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to complete a cac-policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# complete
RP/0/0/CPU0:router(config-sbc-sbe)# exit

congestion-cleared

To configure the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE, use the congestion-cleared command in vDBE configuration mode. To remove this configuration, use the no form of this command.

congestion-cleared percentage

no congestion-cleared

Syntax Description

percentage

Specifies the percentage of system resources to signal congestion that has passed to the SBE.


Defaults

percentage=60

Command Modes

vDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to signal congestion that has passed to the SBE at 90 percent of system resources consumed:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-cleared 90

Related Commands

Command
Description

congestion-threshold

Configures the percentage of system resources used such that the DBE signals a congestion event to the SBE.


congestion-threshold

To configure the percentage of system resources used such that the DBE signals a congestion event to the SBE, use the congestion-threshold command in vDBE configuration mode. To remove this configuration, use the no form of this command.

congestion-threshold percentage

no congestion-threshold

Syntax Description

percentage

Specifies the percentage value of system resources to signal congestion to the SBE. Range is 0 to 100.


Defaults

By default, this command assumes that percentage is 60 percent.

Command Modes

vDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The DBE tracks service card capacity as a function of number of calls (against a maximum of 2,500 per DBE instance in R0) and bandwidth (where the service card has a maximum forwarding rate of 500,000 packets per second in R0).

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to signal a congestion event to the SBE at 95 percent of maximum capacity:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-threshold 95

Related Commands

Command
Description

congestion-cleared

Configures the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE.


control address aaa

To configure an SBE to use a given IPv4 AAA control address when contacting an authentication or billing server, use the control address aaa ipv4 command in sbe configuration mode. To deconfigure the IPv4 AAA control address, use the no form of this command.

control address aaa ipv4 ip_address [vrf vrf-name]

no control address aaa ipv4 ip_address

Syntax Description

ipv4 ip_address

Specifies the IPv4 AAA control address.

vrf

(Optional) Specifies VRF.

vrf-name

(Optional) Specifies the VRF name.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.5.1

This command was modified on the Cisco XR 12000 Series Router to add the VRF keyword option.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the SBE to use address 10.1.0.1 as its AAA control address:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address aaa ipv4 10.1.0.1 vrf myvrf

Related Commands

Command
Description

control address h248 (SBE)

Configures IPv4 H.248 control addresses.


control address h248 (SBE)

To configure an SBE to use a given IPv4 H.248 control address, port, or transport for H.248 communications when acting as a media gateway controller, use the control address h248 command in SBE configuration mode. To deconfigure the given IPv4 H.248 control address when acting as a media gateway controller, use the no form of this command.

control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport transport-type]

no control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport transport-type]

Syntax Description

index value

Specifies the unique identifier of the H.248 control address to set. Range is 0 to 4294967295.

ipv4 ip_address

Specifies the IPv4 H.248 control address.

port port-number

Specifies the port number.

transport transport-type

Specifies the transport type. Possible values include udp or tcp for underlying transport.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the SBE to use address 10.1.0.1 as its H.248 control address:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address h248 ipv4 10.1.0.1

Related Commands

Command
Description

control address aaa

Configures AAA control addresses.


control-address h248 ipv4 (DBE)

To configure the control address for vDBE with a specific IPv4 address, use the control-address h248 ipv4 command in the vDBE mode. To return to the default value, use the no form of this command.

control-address h248 ipv4 ipv4_address

no control-address h248 ipv4

Syntax Description

ipv4_address

Specifies the IPv4 address assigned to this H.248 association.


Defaults

None

Command Modes

vDBE

Command History

Release
Modification

Release 3.5.1

The control address h248 command was enhanced to include support for the DBE module on the Cisco XR 12000 Series Router. Only the ipv4_address argument is supported in the vDBE submode.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the local vDBE IPv4 address:

RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe

RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# control-address h248 ipv4 10.2.0.10

Related Commands

Command
Description

controller h248 [vrf] remote-address ipv4

Configures the remote address for vDBE H.248 controller.


controller h248

To enter the mode for configuring an H.248 controller for a DBE, use the controller h248 command in DBE mode.

controller h248 controller-index

Syntax Description

controller-index

Specifies the index of the media controller. Range is 0 to 4294967295.


Defaults

None

Command Modes

dbe-vdbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enter the mode for configuring an H.248 controller for a DBE.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1

critical-alarm-threshold

To configure the threshold at which a critical alarm is generated if the CDR file reaches that size, use the critical-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

critical-alarm-threshold threshold

no critical-alarm-threshold

Syntax Description

threshold

Specifies the threshold (in MBs) when the alarm is generated.


Defaults

None

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the critical alarm threshold to 1000 MB:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# critical-alarm-threshold 1000
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# exit

dbe-location-id

To configure an H.323 adjacency to use a given media gateway DBE location when routing media, use the dbe-location-id command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

dbe-location-id dbe-location-id

no dbe-location-id

Syntax Description

dbe-location-id

Specifies the DBE location ID of the DBE. A value of 0 denotes that the adjacency is within the local network.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure H.323 adjacency h323ToIsp42 to use DBE location ID 1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dbe-location-id 1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# exit

deact-mode

To specify the action to take upon DBE or SBE deactivation, use the deact-mode command in the appropriate configuration mode. To revert to the default value, use the no form of this command.

deact-mode deact-type

no deact-mode

Syntax Description

deact-type

Specifies the action to take upon DBE deactivation:

abort: All calls dropped with no signaling.

normal: Service change signalled to SBE, and all calls immediately terminated.

quiesce: No new calls accepted. Deactivation occurs only after existing calls have terminated naturally.

Specifies the action to take upon SBE deactivation:

abort: All calls dropped with no signaling.

normal: Existing calls are torn down gracefully.

quiesce: No new calls accepted. Existing calls are allowed to terminate.


Defaults

By default, this command assumes the normal parameter.

Command Modes

DBE configuration

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the DBE to deactivate in quiesce mode to prepare the device for hardware maintenance:

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# deact-mode quiesce

description

To configure descriptive text for a policy set, an adjacency, source and its event limits, or a number analysis table, use the description command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

description description

no description description

Syntax Description

description

Specifies the object you are describing.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Call-policy-set configuration

CAC-policy-set configuration

CAC-table configuration

NA-DST configuration

NA-DST-prefix-table configuration

NA-SRC-account-table configuration

NA-SRC-adjacency-table configuration

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

SBE blacklist configuration

SIP header-profile configuration

SIP method-profile configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.4.1

This command was modified on the Cisco XR 12000 Series Router to add the following configuration modes:

SIP header-profile configuration

SIP method-profile configuration

Release 3.5.0

This command was modified on the Cisco XR 12000 Series Router to add the SBE-blacklist configuration.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use the description test adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# description test adjacency

The following example shows how to set the SIP adjacency SipToIsp42 to use the description test adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42

RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# description test adjacency


The following example shows how to create a description for number analysis table MyNaTable with entries that match the whole dialed number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number 
analysis table"

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# description "empty set"

The following example shows how to set the description of an admission control table, MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# description "My first CAC table"

The following example shows how to create a description for number analysis table MyNaTable with entries that match the start of the dialed number:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number 
analysis table"

The following example shows how to add a description for a specific source IP address:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# description "test"

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# description "empty set"

The following example shows how to add description text "myheaderprofile" for SIP header profile Profile1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe sip header-profile Profile1
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# description "myheaderprofile"
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# commit

The following example shows how to add description text "mymethodprofile" for SIP method profile Profile1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe sip method-profile Profile1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# description "mymethodprofile"
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# commit

disabled

To disable the caching and sending of messages for a RADIUS account, use the disabled command in RADIUS accounting configuration mode.

disabled

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

RADIUS accounting mode (config-sbc-sbe-acc)

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to stop the sending of messages from the cache for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# disabled

Related Commands

Command
Description

radius

Configures a RADIUS client for accounting purposes.


dst-adjacency

To configure the destination adjacency of an entry in a routing table, use the dst-adjacency command in the appropriate configuration mode. To delete the destination adjacency, use the no form of this command.

dst-adjacency target-adjacency

no dst-adjacency target-adjacency

Syntax Description

target-adjacency

Specifies the string that identifies the destination adjacency to use.


Defaults

None

Command Modes

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The target-adjacency argument is mandatory for routing tables entries with match-type round-robin.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1

dscp

To configure a DSCP with which to mark IP packets belonging to a given QoS profile, use the dscp command in the appropriate configuration mode. To return to the default, use the no form of this command.

dscp value

no dscp

Syntax Description

value

Specifies the DSCP value with which to mark packets. Range is 0 to 63.


Defaults

The default DSCP value is 0.

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# dscp 10

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos video residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-video)# dscp 10

The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos voice residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-voice)# dscp 10

dtmf-duration

To configure the default duration of a DTMF event (in milliseconds), use the dtmf-duration command in vDBE configuration mode. To remove this configuration, use the no form of this command.

dtmf-duration duration

no dtmf-duration

Syntax Description

duration

Specifies the time for a DTMF event (in milliseconds). Range is 1 to 1000.


Defaults

duration: 200ms

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the default duration of a DTMF event to 250 ms:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# dtmf-duration 250

dtmf-relay

To configure DTMF relay for an adjacency, use the dtmf-relay command in Adjacency H.323 configuration mode. To deconfigure DTMF relay for an adjacency, use the no form of this command.

dtmf-relay rtp-nte

no dtmf-relay

Syntax Description

rtp-nte

(Optional) Enables rtp-nte support.


Defaults

By default, rtp-nte is assumed to be specified.

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Note the following points:

All adjacencies support passing DTMF as H.245 UserInputIndication (alphanumeric), or in-band

By default, H.323 negotiates support for RFC 2833 RTP Named Telephone Events (rtp-nte) with the signaling peer, as well as the above two methods.

When a call is routed between two adjacencies, one of which is configured to support rtp-nte and one of which is not, DTMF interworking is enabled.

In DTMF interworking, H.245 UserInputIndications are converted to RFC 2833 packets and vice versa. When DTMF interworking is enabled for a call, the rtp-nte adjacency must be configured with the dynamic RTP payload type that the remote endpoint uses for RFC 2833.

The simplest configuration is to use the same value for all H.323 adjacencies. For mixed configurations, the requirements apply to all rtp-nte adjacencies.

All endpoints on that adjacency that support RFC 2833 use the same receive RTP dynamic payload type.

This dynamic payload type is configured on the adjacency in advance of call setup.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disable rtp-nte support on the H.323 adjacency h323ToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dtmf-relay

early-media-deny

To configure whether to disallow early-media for an entry in an admission control table, use the early-media-deny command in CAC table configuration mode. To return to the default value, use the no form of this command.

early-media-deny

no early-media-deny

Syntax Description

This command has no arguments or keywords.

Defaults

By default, early-media is allowed.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disallow early-media for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-deny
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-direction

Configures the direction of early-media to allow for an entry in an admission control table.

early-media-timeout

Configures the time to allow early-media before a call is established.


early-media-direction

To configure the direction of early-media to allow for an entry in an admission control table, use the early-media-direction command in CAC table configuration mode. To remove this configuration and return to the default setting, use the no form of this command.

early-media-direction [backward-half-duplex | forward-half-duplex | full-duplex]

no early-media-direction

Syntax Description

backward-half-duplex

Allows early-media in the backwards direction only.

forward-half-duplex

Allows early-media in the forwards direction only.

full-duplex

Allows early-media in both directions.


Defaults

The default direction is full-duplex.

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the early-media-direction for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-direction 
full-duplex
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-deny

Configures you to disallow early-media for an entry in an admission control table.

early-media-timeout

Configures the time to allow early-media before a call is established.


early-media-timeout

To configure the amount of time for which to allow early-media before a call is established, use the early-media-timeout command in CAC table configuration mode. To return to the default value, use the no form of this command.

early-media-timeout value

no early-media-timeout

Syntax Description

value

Specifies the timeout period (in seconds). A value of 0 means that calls are not timed out.


Defaults

value: 0

Command Modes

CAC table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the early-media-timeout for an existing entry in the admission control table MyCacTable.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# early-media-timeout 90
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

early-media-deny

Configures you to disallow early-media for an entry in an admission control table.

early-media-direction

Configures the direction of early-media to allow for an entry in an admission control table.


edit-cic

To manipulate a carrier identification code in any number analysis table, use the edit-cic command.

The no version of the command undoes the edit.

edit-cic [del-prefix pd] | [del-suffix sd] | [add-prefix pa] | [replace ds]

Syntax Description

add-prefix pa

A string of digits to add to the front of the carrier ID string.

del-prefix pd

A positive integer specifying the number of digits to delete from the front of the carrier ID string.

del-suffix sd

A positive integer specifying the number of digits to delete from the end of the carrier ID string.

replace ds

A string of digits with which to replace the carrier ID string.


Defaults

None

Command Modes

sbe-callpolicy-natable

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

If you want to remove the carrier ID entirely from outgoing messages, specify a replacement string of 0 or a prefix deletion string of 4. For example:

edit-cic del-prefix 4

or

edit-cic replace 0

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command sets entry 1 to delete the first digit of the carrier ID in NA table MyNaTable.

RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router#(config-sbc-sbe-callpolicy-natable)# entry 1 edit-cic del-prefix 1

Related Commands

Command
Description

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

entry

Enters the mode for configuring an entry in a number analysis table, creating the table, if necessary.

na-src-account-table

Enters the mode for configuring a number analysis table within an SBE policy set, with entries that match the source account.

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.


edit

To configure a dial-string manipulation action for a number analysis table with entries of the table matching the whole dialed number, use the edit command in the appropriate configuration mode. To return to the default value, use the no form of this command.

edit [del-prefix pd] | [del-suffix sd] | [add-prefix pa] | [replace ds]

no edit

Syntax Description

del-prefix pd

Positive integer specifying a number of digits to delete from the front of the dialed digit string.

del-suffix sd

Positive integer specifying a number of digits to delete from the end of the dialed digit string.

add-prefix pa

String of digits to add to the front of the dialed string.

replace ds

String of digits to with which to replace the dialed.


Defaults

None

Command Modes

NA-DST-number-table configuration

NA-DST-prefix-table configuration

NA-SRC-account-table configuration

NA-SRC-adjacency-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure entry 1 to delete one digit from the first beginning of the dialed string in the new number analysis table MyNaTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-ent)# edit del-prefix 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

match-number

Configures the match value of an entry in a number analysis table.


entry

To create or modify an entry in a table, use the entry command in the appropriate configuration mode. To destroy the given entry in the admission control table, use the no form of this command.

entry entry-id

no entry entry-id

Syntax Description

entry-id

Specifies the table entry.


Defaults

None

Command Modes

CAC table configuration

NA-DST-number-table configuration

NA-DST-prefix-table configuration

NA-SRC-adjacency-table configuration

NA-SRC-account-table configuration

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

RTG-SRC-adjacency-table configuration

RTG-SRC-account-table configuration

RTG-round-robin-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note You cannot change the configuration of tables in the context of the active policy set. An entry may not be destroyed if the table is a part of the active policy set.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new admission control table, MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# 

fast-register disable

To disable fast-path register support on the SIP adjacency, use the fast-register disable command in Adjacency SIP configuration mode. To enable fast-path register support, use the no form of this command.

fast-register disable

no fast-register disable

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the fast-path register feature is enabled.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Fast-path register is used to prevent the SBC from forwarding all SIP register messages to the softswitch, thus reducing the load on the softswitch. This is enabled by default and can be disabled using this command. When active, a SIP register message received from the same host and port as an existing registration, and with a nonzero expires interval, is immediately responded to without further parsing or other processing performed.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to disable fast-path register support on the SIP adjacency SipToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register disable

Related Commands

Command
Description

fast-register-interval

Configures the fast-path register interval.


fast-register-interval

To configure the fast-path register interval (in seconds), use the fast-register-interval command in Adjacency SIP configuration mode. To deconfigure the fast-path register interval, use the no form of this command.

fast-register-interval interval

no fast-register-interval

Syntax Description

interval

Specifies the interval value in seconds. Range is 1 to 2000000.


Defaults

None

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

If fast-path register support is enabled on this adjacency, this is the minimum expiry period accepted on a subscriber registration. The interval at which registrations are forwarded on to the softswitch is governed by the reg-min-expiry value.


Note The interval must be less than the min-expiry value.


Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enable the fast-register interval on the SIP adjacency SipToIsp42 to 10s:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register-interval 10

Related Commands

Command
Description

fast-register disable

Disables fast-path register support on the SIP adjacency.


first-cac-scope

To configure the scope at which to begin defining limits when performing the Admission Control stage of policy, use the first-cac-scope command in CAC-policy-set configuration mode.

first-cac-scope scope-name

Syntax Description

scope-name

Specifies the scope at which limits should be initially defined when performing the admission control stage of policy. Possible values are:

global

call

One or more of the following scopes can be defined in a comma-separated list:

src-adjacency

dst-adjacency

src-number

dst-number

src-account

dst-account

category


Defaults

None

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the scope category as the first scope at which to define an admission control policy in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope src-adjacency

first-cac-table

To configure the name of the first policy table to process when performing the Admission Control stage of policy, use the first-cac-table command in CAC-policy-set configuration mode. To remove this configuration, use the no form of this command.

first-cac-table table-name

no first-cac-table

Syntax Description

table-name

Specifies the admission control table that should be processed first.


Defaults

None

Command Modes

CAC-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the table RootCacTable as the first admission control table in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table RootCacTable

first-call-routing-table

To configure the name of the first policy table to process when performing the routing stage of policy for new-call events, use the first-call-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-call-routing-table table-name

no first-call-routing-table

Syntax Description

table-name

Specifies the routing table that should be processed first.


Defaults

None

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootCallRtgTable as the first routing table for new-call events in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-call-routing-table RootCallRtgTable

first-number-analysis-table

To configure the name of the first policy table to process when performing the number analysis stage of policy, use the first-number-analysis-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-number-analysis-table table-name

no first-number-analysis-table

Syntax Description

table-name

Specifies the number analysis table that should be processed first.


Defaults

None

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootNaTable as the first number analysis table in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-number-analysis-table RootNaTable

first-reg-routing-table

To configure the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events, use the first-reg-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.

first-reg-routing-table table-name

no first-reg-routing-table

Syntax Description

table-name

Specifies the routing table that should be processed first.


Defaults

None

Command Modes

Call-policy-set configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the table RootRegRtgTable as the first routing table for subscriber-registration events in configuration set 1 on mySbc:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-reg-routing-table RootRegRtgTable

force-limited-call-hold

To prevent SBC from changing media address or port by suppressing media format changes when a call is put on hold, use the force-limited-call-hold command in the cac-policy configuration mode.

force-limited-call-hold

no force-limited-call-hold

Syntax Description

This command has no arguments or keywords.

Defaults

This command is not enabled. SBC automatically changes the media address port when a call is put on hold.

Command Modes

cac-policy

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Only use this command with endpoints that do not support media address or port changes.

If you apply this command to endpoints that do support media address or port changes, this command might break application features, for example, music on hold. Calls that invoke these features might fail.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enable the force limited call hold feature:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# service-location preferred-active 0/1/CPU0
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# activate
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 7200-1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# cac-policy-set 234
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table root
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table root
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# match-type policy-set
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table-ent)# force-limited-call-hold
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table-ent)

group

To configure an adjacency to an adjacency group, use the group command in the adjacency mode. To remove the adjacency from the specified group, use the no form of this command.

group adjacency-group name

no group adjacency-group name

Syntax Description

adjacency-group name

Defines the adjacency group to the which the specified adjacency is assigned.


Defaults

None

Command Modes

SBE SIP or H.323 adjacency mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the group command assigns a SIP adjacency named sipGW to adjacency group named InternetEth0:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip sipGW
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# group InternetEth0

The following example shows how the group command assigns an H.323 adjacency named H323ToIsp42 to an adjacency group named Isp42.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# group Isp42

h225 timeout

To configure the H.225 timeout interval, use the h225 timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.

h225 timeout {setup | proceeding | establishment} value

no h225 timeout {setup | proceeding | establishment} value

Syntax Description

setup

Specifies the setup state. Default value for this state is 4 seconds.

proceeding

Specifies the proceeding state. Default value for this state is 10 seconds.

establishment

Specifies the establishment state. Default value for this state is 180 seconds.

value

Specifies the timeout period in seconds. For setup and proceeding timeout periods, valid values are from 1 to 30 seconds. For establishment timeout, valid values are from 30 to 300 seconds.


Defaults

None

Command Modes

Adjacency H.323 configuration

H.323 configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the h225 timeout command configures an H.225 timeout interval in Adjacency H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout setup 30
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout proceeding 30
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout establishment 30

The following example shows how the h225 timeout command configures an H.225 timeout interval in H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout setup 30
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout proceeding 30
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout establishment 30

h245-tunnel disable

To disable H.245 tunneling on a per-adjacency basis, use the h245-tunnel disable command in SBE H.323 adjacency mode. To enable tunneling, use the no form of this command.

h245-tunnel disable

no h245-tunnel disable

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

SBE H.323 adjacency

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the h245-tunnel disable command disables H.245 tunneling on an H.323 adjacency named H323ToIsp42.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h245-tunnel disable

h248 allow-all-mg

To configure the H.248 signaling stack to allow connections from all media gateways, use the h248 allow-all-mg command in SBE configuration mode. To deconfigure the H.248 signaling stack from allowing connections from all media gateways, use the no form of this command.

h248 allow-all-mg

no h248 allow-all-mg

Syntax Description

This command has no arguments or keywords.

Defaults

By default, connections are allowed from all media gateways.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.248 signaling stack to allow any media gateway to connect to the SBE:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h248 allow-all-mg

h248-association-timeout

To configure the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications, use the h248-association-timeout command in the vdbe mode. To return to the default value, use the no form of this command.

h248-association-timeout

no h248-association-timeout

Syntax Description

This command has no arguments or keywords.

Defaults

Default is the no form of this command

Command Modes

vdbe

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to reset associations with an H.248 controller:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-association-timeout






Related Commands

Command
Description

h248-preserve-gates

Configures the DBE not to delete the media terminations or contexts when there is a media timeout and the association with the controller is down.


h248-max-term-per-context

To configure the H.248 maximum terminations per context for the DBE using the base root package, use the h248-max-term-per-context command in the vDBE mode. To return to the default value, use the no form of this command.

h248-max-term-per-context max-contexts

no h248-max-term-per-context

Syntax Description

max-contexts

Specifies the maximum number of terminations per context. Range is 2-32.


Defaults

Default value is 32.

Command Modes

vDBE

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure eight maximum terminations per context:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-max-terms-per-context 8

Related Commands

Command
Description

h248-association-timeout

Configures the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications



h248-media-alert-event

To define a Middlebox Pin-Hole Timer Expired Event to generate when the VDBE detects lost media, use the h248-media-alert-event command in VDBE mode. To disable the generation of the Middlebox Pin-Hole Timer Expired Event when lost media is detected, use the no form of this command.

h248-media-alert-event

no h248-media-alert-event

Syntax Description

This command has no arguments or keywords.

Defaults

The Middlebox Pin-Hole Timer Expired Event is generated

Command Modes

sbc-dbe-vdbe mode

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the h248-inactivity-duration command disables the generation of Middlebox Pin-Hole Timer Expired Event.

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-media-alert-event

h248-napt-package

To configure which H.248 package a VDBE to use for signaling NAT features, use the h248-napt-package command in VDBE mode. To deconfigure the H.248 package, use the no form of this command.

h248-napt-package {napt | ntr}

no h248-napt-package {napt | ntr}

Syntax Description

napt

Uses the IP NAPT package defined in H.248.37.

ntr

Uses the NAT package defined in ETSI TS 102 333.


Defaults

The NAT package is used.

Command Modes

sbc-dbe-vdbe mode

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the h248-napt-package command configures the VDBE to use the IP NAPT package.

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-napt-package napt

h248-preserve-gates

To configure the DBE to preserve the media terminations or contexts when there is a media timeout and the association with the controller is down, use the h248-preserve-gates command in the vDBE mode. To return to the default value, use the no form of this command.

h248-preserve-gates

no h248-preserve-gates

Syntax Description

This command has no arguments or keywords.

Defaults

The DBE deletes the media terminations or contexts when there is a timeout and the association with the controller is down.

Command Modes

vDBE

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to preserve the media terminations or contexts:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-preserve-gates





Related Commands

Command
Description

h248-association-timeout

Configures the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications


h248-profile

To configure the vDBE H.248 profile name to interoperate with media gateway controller (SBE), use the h248-profile command in the vdbe mode. To return to the default value, use the no form of this command.

h248-profile profile-name

no h248-profile

Syntax Description

profile-name

Specifies the name of the H.248 profile. Only two profiles are supported: Cisco profile: SBC_GateControl (value: gatecontrol), and Ia profile: ESSI_BGF (value: etsi-bgf). After the DBE is configured to use the H.248 profile name, the profile name is advertised with the Service Change messages.


Defaults

Default value is gatecontrol.

Command Modes

vDBE

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the vDBE H.248 Ia profile to interoperate with the media gateway controller (SBE).

RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe

RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-profile etsi-bgf

Related Commands

Command
Description

h248-profile-version

Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.

package enable | disable

Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).

show services sbc dbe vdbe h248-profile

Displays the information on the specified profile, including transport, H.248 version, and active packages.


h248-profile-version

To configure the vDBE H.248 profile version to interoperate with media gateway controller (SBE), use the h248-profile-version command in the vdbe-h248-profile mode. Use this command after you have defined the name of the profile using the h248-profile command. To return to the default value, use the no form of this command.

h248-profile-version profile-version

no h248-profile-version

Syntax Description

profile-version

Specifies the version number of the H.248 profile. Values are 1-3. 3 stands for gatecontrol, 1 for etsi-bgf.


Defaults

Default value is 3.

Command Modes

vdbe-h248-profile

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the vDBE H.248 profile version to interoperate with the media gateway controller (SBE).

RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-profile etsi-bgf
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248-profile)# h248-profile-version 1

Related Commands

Command
Description

h248-profile

Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).

package

Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).

show services sbc dbe vdbe h248-profile

Displays the information on the specified profile, including transport, H.248 version, and active packages.


h248-tmax

To configure the value of the T-Max timer which defines the maximum retransmission time that can pass after the H.248 stack on the DBE sent the initial message over the unreliable transport media, never received a response from the MGC, and kept retransmitting the message, use the h248-tmax command in the vDBE mode. To return to the default value, use the no form of this command.

h248-tmax timer-value

no h248-tmax

Syntax Description

timer-value

Specifies the T-Max time, in milliseconds, that the DBE can use to retransmit the message. After this time elapses, the DBE concludes that the MGC has failed and begun its recovery process. Range is 5000-50000.


Defaults

Default value is 10000 milliseconds

Command Modes

vDBE

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the T-max retransmission time for 20000 ms:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-tmax 20000

h248-version

To configure the version of an H.248 protocol for a VDBE when forming associations with an H.248 controller, use the h248-version command in VDBE mode. To leave the default as version 2 of the H.248 protocol, use the no form of this command.

h248-version version number

no h248-version version number

Syntax Description

version number

Specifies the version number. The default version is 2.


Defaults

h248 version 2 is used.

Command Modes

sbc-dbe-vdbe mode

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the h248-version command configures the vDBE to use version 3 of the H.248 protocol.

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-version 3

header

To add a header with a specified name to a SIP message profile, use the header command in header-profile mode. To remove the method from the profile, use the no form of this command.

header header name

no header header name

Syntax Description

header name

Specifies the name of the header added to the header profile. Valid names are 1 to 32 characters in length (inclusive) and are case-sensitive.


Defaults

None

Command Modes

SIP header-profile configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the header command adds a header test to the header profile MyProfile.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile MyProfile
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# header test

Related Commands

Command
Description

blacklist

Configures SIP header or method blacklist profiles on a Session Inititation Protocol (SIP) message.

description

Configures descriptive text for a SIP header.


header-profile (adj-sip)

To set a specified header profile for inbound and outbound signaling on a specified SBE SIP adjacency, use the header-profile command in SBE SIP adjacency mode.

header-profile inbound | outbound profile name

Syntax Description

inbound | outbound

Sets the inbound and outbound SIP header profiles.

profile name

Specifies the name of the header profile to be set for inbound or outbound signaling on a specified adjacency. If you enter the name default, the default header profile is set for inbound or outbound signaling.


Defaults

None

Command Modes

sbc-sbc-adj-sip

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the header-profile command sets header profiles for inbound and outbound signaling on an SBE SIP adjacency test.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# header-profile inbound Profile1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# header-profile outbound Profile2
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)#commit

header-profile (sip)

To configure a header profile in the mode of an SBE entity, use the header-profile command in SBE SIP mode. To remove the header profile, use the no form of this command.

header-profile profile-name

no header-profile

Syntax Description

profile name

Specifies the name of the header profile. If you enter the name default, the default profile is configured. This profile is used for all adjacencies which do not have a specific profile configured.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the header-profile command configures a header profile with the name of test1:

RP/0/0/CPU0:router(config)# sbc umsbc-node3 sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile test1

hold-media-timeout

To configure the length of time SBE waits after receiving a media timeout notification from the DBE for an on-hold call before tearing down that call, use the hold-media-timeout command in sbc-sbe mode. To return to the default value, use the no form of this command.

hold-media-timeout timeout

no hold-media-timeout

Syntax Description

timeout

Specifies the time, in seconds, that the SBE waits before ending an on hold call. Range is 1 to 2000000 seconds. Unless you set a specific duration, on-hold calls never time out.


Defaults

This command is not enabled.

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the SBE on-hold timeout value to 200 seconds:

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# hold-media-timeout 200
RP/0/0/CPU0:router(config-sbc-sbe)# commit

hunting-trigger

To configure failure return codes to trigger hunting, use the hunting-trigger command in one of its supported modes: sip (global SIP scope), h323 (global h323 scope), adjacency sip (destination SIP adjacency), and adjacency h323 (destination h323 adjacency).

The no version of the command clears all error codes.

If you enter no hunting-trigger x y, then just codes x and y are removed from the configured list.

hunting-trigger error-codes

no hunting-trigger error-codes

Syntax Description

error-codes
(SIP and adjacency modes)

Signifies a space-separated list of SIP numeric error codes.

error-codes
(h323 and adjacency h323 modes)

Specifies one of the following values:

noBandwidth

unreachableDestination

destinationRejection

noPermission

gatewayResources

badFormatAddress

securityDenied

connectFailed (internally defined)

noRetry value—Specifies that routing should never be retired for this adjacency no matter what failure return code is received.


Defaults

None

Command Modes

sbc-sbe-sip

sbc-sbe-h323

sbc-sbe-adj-sip

sbc-sbe-adj-h323

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

If you enter hunting-trigger x followed by hunting-trigger y, the value of x is replaced with y.

To set both x and y to be hunting triggers, you must enter hunting-trigger x y.

To use this command, you must be in the correct configuration mode and submode.

The "Examples" section shows the hierarchy of modes and submodes required to run the command.

In the adjacency sip or h323 adjacency modes, if you specify the special hunting-trigger value of disable, routes are never retried to this adjacency, even if the error code is on the global retry list.

Task ID
Task ID
Operations

sbc

read, write


Examples

SIP mode

The following example shows how to configure SIP to retry routing if it receives a 415 (media unsupported) or 480 (temporarily unavailable) error.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# sip
RP/0/0/CPU0:router(config-sbc-sbe-sip)# hunting trigger 416 480

H.323 mode

The following example shows how to configure H.323 to retry routing if it receives a noBandwidth or securityDenied error.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# h323

RP/0/0/CPU0:router (config-sbc-sbe-h323)# hunting-trigger noBandwidth securityDenied

SIP adjacency mode

The following example shows how to configure SIP to retry routing to the sip adjacency SipAdj1 if it receives a 415 (media unsupported) or 480 (temporarily unavailable) error.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipAdj1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# hunting-trigger 415 480

adjacency H.323

The following command configures H323 to retry routing to the adjacency H323Adj1 if it receives a noBandwidth or securityDenied error.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323Adj1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# hunting-trigger noBandwidth securityDenied

Related Commands

Command
Description

adjacency h323

Configures the failure return codes at destination h323 adjacency that cause hunting to occur.

adjacency sip

Configures the failure return codes at a destination SIP adjacency that cause hunting to occur.

h323

Configures the failure return codes to cause hunting to occur globally at H323.

hunting-mode

Configures a search for alternative routes or destination adjacencies, while in either the h323 or h323 adjacency mode, in case of a failure.

show services sbc sbe {h323|sip} hunting-trigger

Shows the H.323 or SIP hunting triggers.

sip

Configures the failure return codes at a global SIP scope that cause hunting to occur.


hw-module service sbc location

To configure the SBC service as the role of the node, use the hw-module service sbc location command in the configure mode.

hw-module service sbc location <location>

Syntax Description

location

Specifies the location of the SBC.


Defaults

None

Command Modes

config

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to assign 0/1/CPU as the SBC service:

RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# hw-module service sbc location 0/1/CPU

invite-timeout

To configure the time that SBC waits for a final response to an outbound SIP invite request, use the invite-timeout command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.

invite-timeout <interval>

no invite-timeout

Syntax Description

interval

Specifies the time, in seconds, that SBC waits before timing out an outbound invite request.


Defaults

The default wait interval is 180 seconds. If no response is received during that time, an internal 408 Request Timeout response generates and is sent to the caller.

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following command configures the SBC to time out invite transactions after 60 seconds:

RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # invite-timeout 60
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end

ip precedence

To configure an IP precedence with which to mark IP packets belonging to the given QoS profile, use the ip precedence command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

ip precedence value

no ip precedence

Syntax Description

value

Specifies the IP precedence with which to mark packets. Range is 0 to 7.


Defaults

value: 0

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a precedence of 1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip precedence 1

ip TOS

To configure an IP ToS (type of service) with which to mark IP packets belonging to the QoS profile, use the ip TOS command in the appropriate configuration mode. To return the QoS profile to setting the default IP ToS, use the no form of this command.

ip TOS value

no ip TOS

Syntax Description

value

Specifies the IP ToS with which to mark packets. This may be a value of 0 (normal service) or a bit field consisting of one or more of the following bits OR'ed together:

8: Minimize delay.

4: Maximize throughput.

2: Maximize reliability.

1: Minimize monetary cost.


Defaults

The default IP ToS is 0 (normal service).

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with a TOS to minimize delay and maximize throughput:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip TOS 12

ipv4 address

To assign an IPv4 address to a particular SBC interface, use the ipv4 address command in interface SBC configuration mode. To remove the IPv4 address, use the no form of this command.

ipv4 address ipv4_address/prefix

no ipv4 address ipv4_address/prefix

Syntax Description

ipv4_address/prefix

Specifies the IPv4 media address and prefix assign.


Defaults

None

Command Modes

Interface SBC configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to assign address 10.0.0.1/32 to interface 999:

RP/0/0/CPU0:router(config)# interface sbc 999
RP/0/0/CPU0:router (config-if-sbc)# ipv4 address 10.0.0.1/32

ipv4

To create an IPv4 address within a DBE media address pool, use the ipv4 command in Media-address configuration mode. To delete an IPv4 address within a DBE media address pool, use the no form of this command.

ipv4 ipv4_address [vrf vrf-name]

no ipv4 ipv4_address [vrf vrf-name]

Syntax Description

ipv4_address

Specifies the IPv4 media address.

vrf vrf-name

(Optional) Specifies the VRF name.


Defaults

None

Command Modes

Media-address configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure address 10.0.1.1 for use both for non-VPN media and for media to or from vpn3:

RP/0/0/CPU0:router(config)# sbc mySbc dbe media-address
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4 
10.0.1.1
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4 
10.0.1.1 vrf vpn3

Related Commands

Command
Description

media-address

Configures a DBE media address pool and an address pool for use in a VRF.


key

To configure the authentication key of the accounting and authentication servers, use the key command in the appropriate server configuration mode. To disable any previously set authentication key, use the no form of this command.

key key

no key

Syntax Description

key

Specifies the authentication key. This is only valid if authentication is turned on.


Defaults

None

Command Modes

Server configuration (accounting or authentication)

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure accounting servers acctsvr with the authentication key HJ5689 and acctsvr2 with the authentication key cisco on mySbc for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key HJ5689
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key cisco
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# exit
RP/0/0/CPU0:router(config-sbc-sbe)# exit

ldr-check

To configure the time of day to run the long duration check, tearing down calls over 24 hours long, use the ldr-check command in the appropriate configuration mode. To return to the default, use the no form of this command.

ldr-check HH:MM

no ldr-check

Syntax Description

HH:MM

Specifies the time (in hours and minutes using a 24-hour clock). Range is 0 to 23.


Defaults

HH:MM: 0

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the local long duration check to occur at 10.30 p.m.:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# ldr-check 22:30

local-address

To configure the local IPv4 addresses, use the local-address ipv4 command in the appropriate configuration mode. To deconfigure the local IPV4 address, use the no form of this command.

local-address ipv4 ipv4_IP_address

no local-address

Syntax Description

ipv4_IP_address

Specifies the local IPv4 address to be configured.


Defaults

None

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the local-address to 10.20.1.1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# local-address ipv4 10.20.1.1
RP/0/0/CPU0:router(config-sbc-sbe)# exit

local-id host

To configure the local identify name on a SIP adjacency, use the local-id command in Adjacency SIP configuration mode. To remove this configuration, use the no form of this command.

local-id host name

no local-id host

Syntax Description

name

Specifies the local identity name to present on outbound SIP messages. This may be a DNS name. This must not contain the port.


Defaults

When the name field is not set, the local signaling address is used in SIP messages.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the SIP local identity of SIP adjacency SipToIsp42 to mcarthur:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# local-id host mcarthur

local-port

To configure a DBE to use a given local port when connecting to the default MGC, use the local-port command in vDBE configuration mode. To return to the default value, use the no form of this command.

local-port abcd

no local-port abcd

Syntax Description

abcd

Specifies the local port. Range is 0 to 4294967295.


Defaults

None

Command Modes

vDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to use local port 5090:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# local-port 5090

location-id

To configure the location ID for a DBE, use the location-id command in DBE configuration mode.

location-id location-id

Syntax Description

location-id

Specifies the location ID of the DBE. Range is 0 to 4294967295.


Defaults

None

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the location ID for a DBE to be 1:

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# location-id 1

major-alarm-threshold

To configure the threshold (in MB) at which a major alarm is generated if the CDR file reaches that size, use the major-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

major-alarm-threshold threshold

no major-alarm-threshold

Syntax Description

threshold

Specifies the threshold (in MB) at which an alarm is generated.


Defaults

None

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the major alarm threshold to 500 MB:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# major-alarm-threshold 500

Related Commands

Command
Description

billing

Configures local and remote billing policies on the SBE.

critical-alarm-threshold

Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.

minor-alarm-threshold

Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.


marking

To config whether the QoS profile will mark packets with a DSCP value or an IP precedence and TOS value, use the marking command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

marking type

no marking

Syntax Description

type

Specifies the type of marking. Possible values are:

dscp: Marks packets with a DSCP value.

ip-precedence: Marks packets with an IP precedence and TOS value.


Defaults

None

Command Modes

QOS fax configuration

QOS video configuration

QOS voice configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the QoS profile to mark IP packets with DSCPs:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# marking dscp

match-account

To configure the match account of an entry in the number analysis or routing table whose entries match against the source account, use the match-account command in the appropriate configuration mode. To delete the match value, use the no form of this command.

match-account key

no match-account key

Syntax Description

key

Specifies the account to match.


Defaults

None

Command Modes

NA-SCR-account-table configuration

RTG-SRC-account-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new number analysis table MyNaTable and sets the source account it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-account router_eastern

Related Commands

Command
Description

entry

Configures an entry in a number analysis table.


match-address

To configure the match value of an entry in a routing table whose entries match against the destination or source dialed number, use the match-address command in the appropriate configuration mode. To delete the match value, use the no form of this command.

match-address key

no match-address key

Syntax Description

key

Specifies the string used to match the address.


Defaults

None

Command Modes

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new routing table MyRtgTable and sets the dialed number (destination address) it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)# match-address 999

Related Commands

Command
Description

entry

Configures an entry in a routing table.

action (RTG-SRC)

Configures the action of an entry a routing table.


match-adjacency

To configure the match value of an entry in a number analysis or routing table whose entries match against the source adjacency, use the match-adjacency command in the appropriate configuration mode. To delete the match value of the given entry in the routing table, use the no form of this command.

match-adjacency key

no match-adjacency key

Syntax Description

key

Specifies the match adjacency. Use an asterisk to match all adjacencies.


Defaults

None

Command Modes

RTG-SRC-adjacency-table configuration

NA-SRC-adjacency-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new routing table MyRtgTable and sets the source adjacency it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-adjacency ADJ1

Related Commands

Command
Description

action (RTG-SRC)

Configures the action of an entry a routing table.


match-cic

To create or modify the carrier ID code in a routing table, use the match-cic command.

The no version of the command deletes the precedence of the given entry in the routing table.

match-cic cic

no match-cic cic

Syntax Description

cic

Carrier ID, on which to match.


Defaults

The default precedence of an entry is 0, meaning, "Never match with this entry."

Command Modes

sbc-sbe-rtgpolicy-rtg-carrier-id-table-entry

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command configures the match-domain of an entry in the new routing table MyRtgTable to be cisco.com

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-carrier-id-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# entry 2
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable-entry)# match-cic 0234

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-carrier-id-table

Enters the configuration mode for creation or configuration of a routing table, whose entries match the carrier ID of an SBE call policy set.

entry

Enters the configuration submode for creation or configuration of a routing table, whose entries match the source domain name of an SBE call policy set.


match-domain

To create or modify the match value of an entry in a routing table, with entries that match the destination domain, use the match-domain command.


Note You cannot issue this command if the table is part of the active policy set.


The no version of the command deletes the match value of the given entry in the routing table.

match-domain <domain name>

no match-domain <domain name>

Syntax Description

domain name

Name of the domain.


Defaults

None

Command Modes

sbc-sbe-callpolicy-rtgtable-entry

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

A match-domain is a regular expression, not just a string.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command modifies the matching domain in a routing table to cisco.com.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-dst-domain-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable-entr)# match-domain cisco.com

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-dst-domain-table

Enters the configuration mode for creation of a routing table, with entries that match the destination domain name of an SBE call policy set.

rtg-src-domain-table

Enters the configuration submode for creation or configuration of a routing table, with entries that match the source domain name of an SBE call policy set.


match-number

To configure the match value of an entry in the number analysis table whose entries match against the whole dialed number, use the match-number command in NA-DST-number-table configuration mode. To delete the match value, use the no form of this command.

match-number key

no match-number key

Syntax Description

key

Specifies the string used to match the dialed number.


Defaults

None

Command Modes

NA-DST-number-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new NA table MyNaTable and sets the dialed number it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-number 9XXX

Related Commands

Command
Description

category (NA-DST)

Configures the action of an entry in a number analysis table.


match-prefix

To configure the match value of an entry in the number analysis table whose entries match against the start of the dialed number, use the match-prefix command in NA-DST-prefix-table configuration configuration mode. To delete the match value, use the no form of this command.

match-prefix key

no match-prefix key

Syntax Description

key

Specifies the string used to match the start of the dialed number.


Defaults

None

Command Modes

NA-DST-prefix-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create an entry in the new NA table MyNaTable and sets the dialed number prefix it matches against:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-prefix *X*

Related Commands

Command
Description

action (NA-DST)

Configures the action of an entry in a number analysis table.


match-type

To configure the match-type of an admission control table within the context of an SBE policy set, use the match-type command in CAC-table configuration mode. To delete the match-type of the admission control table, use the no form of this command.

match-type table-type

no match-type table-type

Syntax Description

table-type

Specifies the table type. This parameter controls the syntax of the match-value fields of the entries in the table. The table types available are:

policy-set

dst-prefix

src-prefix

src-adjacency

src-account

dst-adjacency

dst-account

category

event-type

adj-group

src-adj-group

dst-adj-group

all


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

This command was modified on the Cisco XR 12000 Series Router to add the following table type values for adjacency groups:

adj-group

src-adj-group

dst-adj-group

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the match-type of the admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# match-type call-priority

Related Commands

Command
Description

cac-table

Configures admission control tables.

match-value

Configures the match-value of an entry in an admission control table.


match-value

To configure the match-value of an entry in an admission control table, use the match-value command in CAC-table configuration mode. To delete the match value in the given entry in the admission control table, use the no form of this command.

match-value key

no match-value key

Syntax Description

key

Specifies the string used to match events. The format of the key is determined by the match-type of the enclosing table.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the match-value for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# match-value 0208366

Related Commands

Command
Description

match-type

Configures the match-type of an admission control table within the context of an SBE policy set.


max-bandwidth

To configure the maximum bandwidth for an entry in an admission control table, use the max-bandwidth command CAC-table configuration mode. To delete the maximum bandwidth in the given entry in the admission control table, use the no form of this command.

max-bandwidth mbw

no max-bandwidth mbw

Syntax Description

mbw

Positive integer specifying the maximum rate at which call media should be admitted (in bytes per second) at the relevant scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum bandwidth for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-bandwidth 6000000

Related Commands

Command
Description

entry

Configures an admission control table.


max-call-rate

To configure the maximum call rate for an entry in an admission control table, use the max-call-rate command in CAC-table configuration mode. To delete the maximum call rate in the given entry in the admission control table, use the no form of this command.

max-call-rate mcr

no max-call-rate mcr

Syntax Description

mcr

Positive integer specifying the maximum number of calls per minute to permit at the given scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum call rate for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-call-rate 30

max-channels

To configure the maximum number of channels for an entry in an admission control table, use the max-channels command in CAC-table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

max-channels mc

no max-channels mc

Syntax Description

mc

Positive integer specifying the maximum number of media channels to permit at the relevant scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum number of channels for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-channels 50

max-num-calls

To configure the maximum number of calls of an entry in an admission control table, use the max-num-calls command in CAC-table configuration mode. To delete the maximum number of calls in the given entry in the admission control table, use the no form of this command.

max-num-calls mnc

no max-num-calls mnc

Syntax Description

mnc

Positive integer specifying the maximum number of calls to permit at the relevant scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum number of calls for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-num-calls 50

max-pdu-size

To specify H.248 maximum PDU size in bytes that the User Datagram Protocol (UDP) must use for H.248 control signaling, use the max-pdu-size command in vDBE mode. To disable the segmentation package, use the no form of this command.

max-pdu-size size

no max-pdu-size

Syntax Description

size

Size in bytes of the H.248 segmentation package. Valid values are from 0 to 4294967295 bytes. A value of 0 disables the segmentation package.


Defaults

The segmentation package is disabled.

Command Modes

DBE-vDBE configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the max-pdu-size command sets the PDU size that the UDP must use for H.248 signaling.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# max-pdu-size 64000

Related Commands

Command
Description

show services dbe controllers

Lists the statistics of theH.248 controller on the DBE.


max-regs

To configure the maximum call number of subscriber registrations for an entry in an admission control table, use the max-regs command in CAC-table configuration mode. To delete the maximum number of subscriber registrations in the given entry in the admission control table, use the no form of this command.

max-regs mrr

no max-regs mrr

Syntax Description

mrr

Positive integer specifying the maximum number of subscriber registrations to permit at the relevant scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum number of subscriber registrations for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-regs 500

max-regs-rate

To configure the maximum rate of subscriber registrations for an entry in an admission control table, use the max-regs-rate command in entry configuration mode. To delete the maximum rate of subscriber registrations in the given entry in the admission control table, use the no form of this command.

max-regs-rate mrr

no max-regs-rate mrr

Syntax Description

mrr

Positive integer specifying the maximum number of subscriber registrations per minute to permit at the relevant scope. Only one parameter may be supplied for each command.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum registration rate for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-regs-rate 150

max-updates

To configure the maximum call updates for an entry in an admission control table, use the max-updates command in CAC-table configuration mode. To delete the maximum call updates in the given entry in the admission control table, use the no form of this command.

max-updates mu

no max-updates mu

Syntax Description

mu

Positive integer specifying the maximum number of updates to call media to permit at the relevant scope.


Defaults

None

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the maximum number of call updates for an entry in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-updates 500

media-address

To configure a DBE IPv4 or IPv6 media address or media address pool, use the media-address command in the DBE mode. To deconfigure the media address or media address pool, use the no version of this command.

media-address {ipv4 ipv4_address | ipv6 ipv6_address | pool [ ipv4 ipv4_starting_address ipv4_ending_address | ipv6 ipv6_starting_address ipv6_ending_address]} [vrf vrf_name] [nat-mode [twice-nat | twice-napt]] [managed-by [dbe | mgc]]

no media-address {ipv4 ipv4_address | ipv6 ipv6_address | pool [ ipv4 ipv4_starting_address ipv4_ending_address | ipv6 ipv6_starting_address ipv6_ending_address]} [vrf vrf_name] [nat-mode [twice-nat | twice-napt]] [managed-by [dbe | mgc]]

Syntax Description

ipv4

Specifies IPv4.

ipv4_address

Specifies the IPv4 address.

ipv6

Specifies IPv6.

ipv6_address

Specifies the IPv6 address.

pool

Specifies media address pool.

ipv4_starting_address

Specifies the starting IPv4 media address of the range.

ipv4_ending_address

Specifies the ending IPv4 media address of the range.

ipv6_starting_address

Specifies the IPv6 media pool starting address of the range.

ipv6_ending_address

Specifies the IPv6 media pool ending address of the range.

vrf

(Optional) Specifies VRF.

vrf_name

Specifies the VRF name.

nat-mode

(Optional) Specifies NAT mode.

twice-nat

Specifies the address to be used for twice-NAT flows.

twice-napt

Specifies the address to be used for twice-NAPT flows.

managed-by

(Optional) Specifies Managed-By.

dbe

Specifies the address that DBE is allowed to select as the local address for flows.

mgc

Specifies the address that MGC is allowed to specify as the local address for flows


Defaults

None

Command Modes

sbc-dbe mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.4.1

This command was modified to add the pool option to support the media address pools feature.

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the media-address command configures a DBE IPv4 media address.

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4 10.0.1.4 managed by mgc

The following example shows how to add addresses (from 10.10.10.1 through 10.10.10.20 and also 10.20.10.1 through 10.20.10.20) to the address pool.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#media-address pool ipv4 10.10.10.1 10.10.10.20
RP/0/0/CPU0:router(config-sbc-dbe-media-address-pool)#exit
RP/0/0/CPU0:router(config-sbc-dbe)#media-address pool ipv4 10.20.10.1 10.20.10.20

The following example shows how to configure an address pool for use in VRF vpn3:

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address vrf vpn3
RP/0/0/CPU0:router(config-sbc-dbe-media-address)#

media-address port range

To create a port range associated with a media address or range of addresses, use the media-address port range command in dbe mode. To remove a port range associated with a media address or range of addresses, use the no form of this command.

media-address port range min-port max-port class-of-service

no media-address port range min-port max-port class-of-service

Syntax Description

min-port

Specifies the starting port number of the range. Value starts at 1 and must be less than or equal to the max-port value.

max-port

Specifies the ending port number of the range. Value must be less than or equal to 65535 and greater than or equal to the min-port value.

class-of-service

Specifies the class of service affinity for the port range. Class-of-service is one of [any | voice | video].


Defaults

min-port = 16384

max-port = 32767

class-of-service = any

Command Modes

dbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to create a new port range for a media address range. The range runs from 10000 to 20000. It also specifies voice as the class of service.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4
RP/0/0/CPU0:router(config-sbc-dbe-media-address-ipv4)# port-range 10000 20000 voice

media-bypass

To configure the H.323 or SIP adjacency to allow media traffic to bypass the DBE, use the media-bypass command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

media-bypass

no media-bypass

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Adjacency SIP configuration

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

When configured, media traffic for calls originating and terminating on this adjacency flows direct between the endpoints and does not pass through the DBE. When deconfigured, media traffic must always pass through a gateway.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to allow media traffic for the SIP adjacency SipToIsp42 to bypass a gateway:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# media-bypass

media-bypass-forbid

To configure the H.323 or SIP adjacency to forbid media traffic to bypass the DBE, use the media-bypass-forbid command in the appropriate configuration mode. To return to the default state, use the no form of this command.

media-bypass-forbid

no media-bypass-forbid

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Adjacency SIP configuration

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to set media traffic for the SIP adjacency SipToIsp42 to bypass a gateway:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# media-bypass-forbid

media-gateway

To configure a media gateway, use the media-gateway command in SBE mode. To remove a media gateway configuration, use the no form of this command.

media-gateway ipv4 A.B.C.D

no media-gateway ipv4 A.B.C.D

Syntax Description

ipv4

Specifies IPv4.

A.B.C.D

Specifies the IPv4 media gateway address.


Defaults

None

Command Modes

sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to access media gateway submode from where you configure a media gateway.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#media-gateway ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-mg)#

media-timeout

To configure the time that the DBE should wait since the last media packet has been received on a call, before determining that the call has ceased and clearing up the call resources and signaling the SBE to do the same, use the media-timeout command in DBE media-address configuration mode.

media-timeout timeout

Syntax Description

timeout

Specifies the maximum time a DBE should wait since the last media packet has been received on a call, before determining that the call has ceased and before clearing up the call resources and signaling the SBE to do the same.


Defaults

timeout: 30seconds

Command Modes

DBE media-address configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to wait 10 seconds after receiving the last media packet before cleaning up the call resources:

RP/0/0/CPU0:router(config)# sbc mySbc dbe media-address
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# media-timeout 10

Related Commands

Command
Description

media-address

Configures a DBE media address pool and an address pool for use in a VRF.


method

To add a method with a specified name to a SIP message profile, use the method command in the method-profile mode. To remove the method from the profile, use the no form of this command.

method method name

no method method name

Syntax Description

method name

Specifies the name of the method added to the method profile. Valid names are 1 to 32 characters in length (inclusive) and are case-sensitive.


Defaults

None

Command Modes

SIP method-profile configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the method command adds a method test to the method profile MyProfile.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile MyProfile
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# method test

method-profile (adj-sip)

To set a specified method profile for inbound and outbound signaling on a specified SBE SIP adjacency, use the method-profile command in SBE SIP adjacency mode.

method-profile inbound | outbound profile name

Syntax Description

inbound | outbound

Sets the inbound and outbound SIP method profiles.

profile name

Specifies the name of the method profile to be set for inbound signaling on a specified adjacency. If you enter the name default, the default method profile is set for inbound signaling.


Defaults

None

Command Modes

sbc-sbe-adj-sip

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the method-profile command sets method profile Profile1 for inbound and outbound signaling on an SBE SIP adjacency test.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# method-profile inbound Profile1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# method-profile outbound Profile2

method-profile (sip)

To configure a method profile in the mode of an SBE entity, use the method-profile command in sbe-sip mode. To remove the method profile, use the no form of this command.

method-profile profile-name

no method-profile

Syntax Description

profile name

Specifies the name of the method profile. If you enter the name default, the default profile is configured. This profile is used for all adjacencies which do not have a specific profile configured.


Defaults

None

Command Modes

sbe-sip

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the method-profile command configures a method profile with the name of test1.

RP/0/0/CPU0:node3(config)# sbc umsbc-node3 sbe
RP/0/0/CPU0:node3(config-sbc-sbe)# sip method-profile test1

minor-alarm-threshold

To configure the threshold (in MB) at which a minor alarm is generated if the CDR file reaches that size, use the minor-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

minor-alarm-threshold threshold

no minor-alarm-threshold

Syntax Description

threshold

Specifies the threshold (in MB) at which an alarm is generated.


Defaults

None

Command Modes

Billing local configuration

Billing remote configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the minor alarm threshold to 50 MB:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# minor-alarm-threshold 50

mode

To configure the mode for a RADIUS authentication server, use the mode command in the SIP adjacency mode. To deconfigure the mode, use the no form of this command.

mode {local | remote}

no mode {local | remote}

Syntax Description

local

Configures the RADIUS authentication server for local authentication.

remote

Configures the RADIUS authentication server for remote authentication.


Defaults

None

Command Modes

RADIUS authentication server mode

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the mode command is used to configure the RADIUS authentication server for local authentication.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbe-adj-auth)# server authserv
RP/0/0/CPU0:router(config-sbe-adj-auth-ser)# mode local

na-dst-prefix-table

To enter the mode in which to configure a number analysis table, with numbers that match the prefix of the dialed number within an SBE policy set, use the na-dst-prefix-table command.

na-dst-prefix-table table-name

Syntax Description

table-name

Name of the number analysis table you are creating or of an existing table you are configuring.


Defaults

None

Command Modes

sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example illustrates the use of the na-dst-prefix-table command to create a number analysis table called MyNaTable.

RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)#

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.


na-src-account-table

To enter the mode for configuring a number analysis table within an SBE policy set, with entries that match the source account, use the na-src-account-table command.

na-src-account-table table-name

Syntax Description

table-name

Name of the number analysis table within an SBE policy set, with entries matching the source account.


Defaults

None

Command Modes

sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following commands enter the submode for the NA table MyNaTable, or if it does not already exist, it creates it.

RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-src-account-table MyNaTable

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

edit-cic

Allows you to manipulate a carrier identification code in any number analysis table.

entry

Enters the mode for configuring an entry in a number analysis table, creating the table, if necessary.


nat

To configure a SIP adjacency to assume that all endpoints are behind a NAT device, use the nat command in the SIP adjacency mode. To deconfigure this feature on the SIP adjacency, use the no form of this command.

nat {force-on | force-off}

no nat {force-on | force-off}

Syntax Description

force-on

Sets the SIP adjacency to assume that all endpoints are behind a NAT device.

force-off

Sets the SIP adjacency to assume that the endpoints are not behind a NAT device.


Defaults

The SBC autodetects whether all the endpoints are behind a NAT device.

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the nat force-on command is used to configure the SIP adjacency to assumes that all endpoints are behind a NAT device.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# nat force-on

network-id

To configure the network ID, use the network-id command in SBE configuration mode. To deconfigure the network ID, use the no form of this command.

network-id id

no network-id

Syntax Description

id

Specifies the eight-digit network ID. Range is 0 to 99999.


Defaults

None

Command Modes

SBE configuration mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the network ID to 0x56878905:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# network-id 0x56878905

overload-time-threshold

To the threshold time (in milliseconds) for Media Gateway (MG) overload control detection, use the overload-time-threshold command in DBE mode. To remove the threshold time, use the no form of this command.

overload-time-threshold time

no overload-time-threshold time

Syntax Description

time

Specifies the threshold time (in milliseconds) for MG overload control detection. The range is 0 to 2000000000.


Defaults

time = 100

Command Modes

dbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the threshold time (in milliseconds) for MG overload control detection.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#overload-time-threshold 200

package

To enable or disable the vDBE H.248 profile optional packages to interoperate with media gateway controller (SBE), use the package command in the vdbe-h248-profile mode. Use this command after you have defined the name of the profile using the h248-profile command. To return to the default value, use the no form of this command.

package package-name enable | disable

no package enable | disable

Syntax Description

package-name

Specifies the names of the packages that should be enabled or disabled. Values are:

aud-cap—Audit Capability package

chp—Congestion Handling H248 package

dtmfd—DTMF Detection H248 package

dtmfg—DTMF Generation H248 package

emp—Middlebox (emp) H248 package

epstat—End Point Statistics H248 package

eroot—Enhanced Root H248 package

evpnd—Extended VPN Discrimination H248 package

ginfo—GINFO H248 package

mgcinfo—MGC Info H248 package

ocp—Overlord Control H248 package

rtp—RTP H248 package

sfr—Session Failure Reaction H248 package

tsc—Termination State Control H248 package

For the Ia profile the following packages are disabled by default: epstats, rtp, emp, chp, ocp, sfr, tsc, dtmfd, dtmfg, mgcinfo, evpnd, and eroot packages.


Defaults

None

Command Modes

vdbe-h248-profile

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enable the MGC information package for vDBE to interoperate with the media gateway controller (SBE).

RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)#h248-profile etsi-bgf
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248-profile)#package mgcinfo enable

Related Commands

Command
Description

h248-profile

Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).

h248-profile-version

Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.

show services sbc dbe vdbe h248-profile

Displays the information on the specified profile, including transport, H.248 version, and active packages.


pass-body

To permit SIP message bodies to pass through [for non-vital SIP methods accepted by a method profile] in the SIP method profile mode of an SBE entity, use the pass-body command in SBE-SIP mode. To remove the message bodies out of non-vital SIP messages accepted by the method profile, use the no form of this command.

pass-body

no pass-body

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the message bodies are removed out of non-vital SIP messages.

Command Modes

SIP method-profile configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the pass-body command permits SIP message bodies to pass through for non-vital SIP methods accepted by method profile test1.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# pass-body

passthrough

To configure the passthrough header in non-REGISTER requests, use the passthrough command in the SIP adjacency mode. To deconfigure the passthrough header in non-REGISTER requests, use the no form of this command.

passthrough {from | to} header

no passthrough {from | to} header

Syntax Description

from

Configures the from header.

to

Configures the to header.


Defaults

None

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the passthrough command is used to configure the passthrough header for non-REGISTER requests.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# passthrough from header
RP/0/0/CPU0:router(config-sbe-adj-sip)# passthrough to header

pause

To pause resending the cache of messages to the RADIUS server, use the pause command in RADIUS accounting configuration mode.

pause

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

RADIUS accounting configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

When the sending of messages is stopped, new records are added to the cache, rather than being sent.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to stop the sending of messages from the cache for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# pause

Related Commands

Command
Description

radius

Configures a RADIUS client for accounting purposes.

resend

Begins resending cached messages for the RADIUS client.


port

To configure the port that the RADIUS server will use to receive Access-Request or Accounting-Request packets, use the port command in server configuration mode.

port port-num

no port

Syntax Description

port-num

Specifies the port where the RADIUS server receives access-request packets. Range is 1 to 65535.


Defaults

Access-Request packets use default port 1812.

Accounting-Request packets use default port 1813.

Command Modes

RADIUS accounting configuration

RADIUS authentication configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure authentication server acctsvr to use port 1009 on mySbc for the authentication RADIUS client instance:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# port 1009

port-range

To create a port range associated with a media address or range of addresses, use the port-range command in either media-address or media-address configuration mode. To deconfigure port ranges, use the no form of this command.

port-range starting-port ending-port {any | signaling | video | voice}

no port-range starting-port ending-port {any | signaling | video | voice}

Syntax Description

starting-port

Specifies the starting port number of the range. Valid values begin at 10000 and must be less than the ending port number. Default value is 16384.

ending-port

Specifies the ending port number of the range, which must be greater than the starting port number. Maximum value is 65535. Default value is 32767.

any

(Optional) Specifies the port range applies to any class of service.

signaling

(Optional) Specifies the port range applies to signaling class of service.

video

(Optional) Specifies the port range applies to video class of service.

voice

(Optional) Specifies the port range applies to voice class of service.


Defaults

None

Command Modes

sbc-dbe-media-address-ipv4

sbc-dbe-media-address-ipv6

sbc-dbe-media-address-pool

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the port-range command creates a port range associated with an IPv4 media address.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-dbe-media-address-ipv4)# port-range 10000 20000 voice

prefix

To configure whether the match-address of this entry matches the start of the source or destination address, use the prefix command in the appropriate configuration mode. To delete the match-type in the routing table, use the no form of this command.

prefix

no prefix

Syntax Description

This command has no arguments or keywords.

Defaults

By default, the match-address is not to be denoted as a prefix.

Command Modes

RTG-DST-address-table configuration

RTG-SRC-address-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure an entry to match dialed numbers starting with 9:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 9
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# prefix

priority

To configure the priority of the accounting or authentication server, use the priority command in RADIUS accounting configuration mode. To disable any previously set priority, use the no form of this command.

priority pri

no priority

Syntax Description

pri

Specifies the priority. Range is 1 to 10.


Defaults

By default, this command assumes that pri is 1.

Command Modes

RADIUS accounting configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The priority determines which of the configured servers is selected as the default server and where all requests are sent. A RADIUS client contacts the RADIUS servers sequentially, in order of priority, to establish an active RADIUS session. Each RADIUS client sends call detail records to the currently active RADIUS server.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure accounting servers acctsvr as priority 1 and acctsvr2 as priority 2 on mySbc for RADIUS client instance radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# priority 1
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# priority 2

privacy restrict outbound

To configure an H.323 adjacency to apply privacy restriction on outbound messages if the user requests it, use the privacy restrict outbound command in the H.323 adjacency mode. To disallow privacy restriction on outbound messages sent out by the adjacency, use the no form of this command.

privacy restrict outbound

no privacy restrict outbound

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the privacy restrict outbound command is used to configure an H.323 adjacency to apply privacy restriction on outbound messages if a user requests it.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323ToIsp422
RP/0/0/CPU0:router(config-sbe-adj-h323)# privacy restrict outbound

Related Commands

Command
Description

allow private info

Configures an H.323 adjacency to allow private information on messages sent out by the H.323 adjacency.



qos fax

To configure a fax QoS profile, use the qos fax command in SBE configuration mode. To delete the given profile, use the no form of this command.

qos fax qos-name

no qos fax qos-name

Syntax Description

qos-name

Specifies the QoS profile. The string default is reserved.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enter the submode for configuring a fax QoS profile named residential:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-fax)# exit

qos sig

To configure a signaling QoS profile, use the qos sig command in SBE configuration mode. To destroy the given profile, use the no form of this command.

qos sig qos-name

no qos sig qos-name

Syntax Description

qos-name

Specifies the name of an existing QoS profile. The string default is reserved.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how qos sig command enters the submode for configuring a signaling QoS profile residential:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos sig residential
RP/0/0/CPU0:router(config-sbc-sbe-sig)# exit

qos video

To configure a video QoS profile, use the qos video command in the SBE configuration mode. To delete the given profile, use the no form of this command

qos video qos-name

no qos video qos-name

Syntax Description

qos-name

Specifies the QoS profile. The string default is reserved.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enter the submode for configuring a video QoS profile named residential:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos video residential
RP/0/0/CPU0:router(config-sbc-sbe-video)# exit

qos voice

To configure a voice QoS profile, use the qos voice command in SBE configuration mode. To delete the given profile, use the no form of this command.

qos voice qos-name

no qos voice qos-name

Syntax Description

qos-name

Specifies the QoS profile. The string default is reserved.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to enter the submode for configuring a voice QoS profile named residential:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos voice residential
RP/0/0/CPU0:router(config-sbc-sbe-voice)# exit

radius

To create and configuring a RADIUS client for accounting or authentication purposes, use the radius accounting command in SBE configuration mode. To delete the RADIUS client, use the no form of this command.

radius [accounting client-name | authentication]

no radius [accounting client-name | authentication]

Syntax Description

accounting client-name

Specifies the name to assign to the accounting RADIUS client.

authentication

Enables client authentication.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Each named client maintains a list of servers consisting of one active server and a set of standby servers. The list is traversed by the client in order of configured priority. An SBC instance can be configured with multiple clients (each with its own ordered set of servers) if call detail reports (CDRs) must be sent to multiple RADIUS servers simultaneously. CDRs are sent by the client to the currently active server. If the active server cannot be contacted, a standby server is used.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to create a RADIUS client instance called radius1:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# exit

Related Commands

Command
Description

disabled

Disables the caching and sending of messages for a RADIUS account.

pause

Pauses resending the cache of messages to the RADIUS server.

resend

Begins resending cached messages for the RADIUS client.


ras retry

To configure an H.323 RAS retry count for an RAS transaction type, use the ras retry command in the appropriate configuration mode. To return to the default value for the specified RAS transaction type, use the no form of this command.

ras retry {arq | brq | drq | grq | lrq | rrq | urq} value

no ras retry {arq | brq | drq | grq | lrq | rrq | urq} value

Syntax Description

arq

Specifies an ARQ transaction.

brq

Specifies a BRQ transaction.

drq

Specifies a DRQ transaction.

grq

Specifies a GRQ transaction.

lrq

Specifies an LRQ transaction.

rrq

Specifies an RRQ transaction.

urq

Specifies a URQ transaction.

value

Specifies the retry count value. Valid values are 0 to 30.


Defaults

The default values vary depending on the transaction type.

Command Modes

Adjacency H.323 configuration

H.323 configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the ras retry command configures an H.323 RAS retry count in Adjacency H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras retry arq 5
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras retry lrq 5

The following example shows how the ras retry command configures an H.323 RAS retry count in H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras retry arq 5
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras retry lrq 5


ras rrq

To configure the registration request (RRQ), use the ras rrq command in the appropriate configuration mode. To return to the default value, use the no form of this command.

ras rrq {keepalive | ttl} value

no ras rrq {keepalive | ttl} value

Syntax Description

keepalive

Specifies keepalive messages used to refresh an H.323 adjacency.

ttl

Specifies time to live (TTL) for an RRQ request.

value

Specifies the keepalive or ttl value in seconds. Valid values for keepalive are from 15 to 150. Valid values for ttl are from 16 to 300.

The ttl value must be higher than the keepalive value.


Defaults

The default keepalive and ttl values are 45 and 60 respectively.

Command Modes

Adjacency H.323 configuration

H.323 configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the ras rrq command configures H.323 RAS RRQ in Adjacency H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras rrq ttl 100
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras rrq keepalive 60

The following example shows how the ras rrq command configures RAS RRQ in H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras rrq ttl 100
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras rrq keepalive 60

ras timeout

To configure an H.323 RAS timeout interval, use the ras timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.

ras timeout {arq | brq | drq | grq | lrq | rrq | urq} value

no ras timeout {arq | brq | drq | grq | lrq | rrq | urq} value

Syntax Description

arq

Specifies ARQ transaction.

brq

Specifies BRQ transaction.

drq

Specifies DRQ transaction.

grq

Specifies GRQ transaction.

lrq

Specifies LRQ transaction.

rrq

Specifies RRQ transaction.

urq

Specifies URQ transaction.

value

Specifies timeout value (seconds). Valid values are from 1 to 45 seconds.


Defaults

The default values vary depending on the transaction type.

Command Modes

Adjacency H.323 configuration

H.323 configuration

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the ras timeout command configures an H.323 RAS timeout interval in Adjacency H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras timeout arq 1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras timeout lrq 1

The following example shows how the ras timeout command configures an H.323 RAS timeout interval in H.323 configuration mode.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras timeout arq 1
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras timeout lrq 1

reason

To enter a submode for configuring a limit to a specific event type on the source (a port, IP address, VPN, global address space), use the reason command. The no version of this command, returns the event to its previous values.

reason event | description

no reason

Syntax Description

event

The event type that should trigger the limit can be defined as any of the following:

authentication-failure—Requests that fail to be authenticated.

bad-address—Packets from unexpected addresses.

corrupt-message—Signaling packets that are corrupt and cannot be decoded.

endpoint-registration—Endpoint-registrations.

policy-rejection—Requests that are rejected by configured policy.

routing-failure—Requests that fail to be routed onward by SBC.

description

Helpful description of an event that should trigger blacklisting.


Defaults

This event argument is mandatory.

Command Modes

sbc-sbe-blacklist

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

This field can only take the explicit strings described in the "Syntax Description."

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows the use of the reason command in context.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure

Related Commands

Command
Description

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

trigger-period

Defines the period over which events are considered. For details, see the description of the trigger-size command.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.

show services sbc sbe blacklist source

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.


redirect-limit

To configure the maximum number of redirections that SBC performs on a call, use the redirect-limit command in config-sbc-sbe mode. The no version of this command returns the adjacency to the default behavior.

redirect-limit limit

no redirect-limit limit

Syntax Description

limit

Specifies the maximum number of SIP 3xx retry attempts. The range is 0 to 200.


Defaults

The default number of redirections is 2.

Command Modes

config-sbc-sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the maximum number of SIP 3xx retries as 4:

RP/0/0/CPU0:router(config)sbc mysbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)#redirect-limit 4

redirect-mode

To configure the behavior of SBC on receipt of a 3xx response to an invite from the SIP adjacency, use the redirect-mode command in config-sbc-sbe-adj-sip mode. The no version of this command returns the adjacency to the default behavior.

redirect-mode pass-through | recurse

no redirect-mode pass-through | recurse

Syntax Description

pass-through

Passes all 3xx responses back to the caller.

recurse

On 300, 301, 302 and 305 invite responses, SBC resends the invite to the first listed contact address, or else passes the 3xx responses back.


Defaults

pass-through

Command Modes

config-sbc-sbe-adj-sip

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to resend an invite to the first listed contact address or else pass the 3xx responses back to the sender:

RP/0/0/CPU0:router(config)sbc mysbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)#adjacency sip test1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)#redirect-mode recurse
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)commit

Related Commands

Command
Description

redirect-limit

Configures the maximum number of redirections SBC performs on a call.


registration rewrite-register

To configure the SIP register request rewriting, use the registration rewrite-register command in SIP adjacency mode. To deconfigure the register request rewriting, use the no form of this command.

registration rewrite-register

no registration rewrite-register

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

SBE SIP adjacency configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the registration rewrite-register command configures the SIP register request rewriting on SIP adjacency SipToIsp42.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration rewrite-register

registration target address

To set the address to be used when an outbound SIP register request rewriting occurs, use the registration target address command in the SIP adjacency mode. To remove the address, use the no form of this command.

registration target address host address

no registration target address host address

Syntax Description

host address

Specifies the host address to use when an outbound SIP register request rewriting occurs. This parameter can be a DNS name or an IPv4 address in dotted decimal format. Valid strings are from 1 to 255 characters in length.


Defaults

None

Command Modes

SBE SIP adjacency mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the registration target address command sets the target address for SIP adjacency SipToIsp42 as example.com.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration target address example.com

registration target port

To set the port to be used when an outbound SIP REGISTER request rewriting occurs, use the registration target port command in SIP adjacency mode. To remove the port, use the no form of this command.

registration target port port number

no registration target port port number

Syntax Description

port number

Specifies the port number to use when an outbound SIP REGISTER request rewriting occurs. Valid values can be from 1 to 65535. If you enter the default value of 0, no port address is set.


Defaults

None

Command Modes

SBE SIP adjacency mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the registration target port command sets the port number for SIP adjacency SipToIsp42 as 5070.

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration target port 5070

remote-address ipv4

To configure an H.323 or SIP adjacency to restrict the set of remote signaling peers that can be contacted over the adjacency to those with the given IP address prefix, use the remote-address ipv4 command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

To configure the remote address for vDBE H.248 controller, use the controller h248 remote-address ipv4 command in the vDBE mode. To return to the default value, use the no form of this command.

remote-address ipv4 ipv4_IP_address/prefix

no remote-address

Syntax Description

ipv4_IP_address/prefix

Specifies the IPv4 address and prefix length for the remote address.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

dbe-vdbe-h248 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.5.1

Support was added for the DBE module in the H.248 submode on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the SIP adjacency SipToIsp42 to match calls from 1.2.3.0/24 to this adjacency:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# remote-address ipv4 1.2.3.0/24

The following example shows how to configure the remote address for the vDBE H.248 controller:

RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe

RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1

RP/0/0/CPU0:router(config-sbc-dbe-h248)# remote-address ipv4 34.34.34.34

RP/0/0/CPU0:router(config-sbc-dbe-h248)#

resend

To begin resending cached messages for the RADIUS client, use the resend command in the services mode.

resend

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

services

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.5.1

This command was modified to be supported in the services mode.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure record resending for RADIUS client instance radius1:

RP/0/0/CPU0:router# services sbc mysbc sbe radius accounting radius1 resend
RP/0/0/CPU0:router#

Related Commands

Command
Description

radius

Configures a RADIUS client for accounting purposes.

pause

Pauses resending the cache of messages to the RADIUS server.


resource-priority

To configure the priority of a resource-priority header string, use the resource-priority command in resource-priority-set mode. To deconfigure the priority, use the no form of this command.

resource-priority value

no resource-priority value

Syntax Description

value

Specifies the string value to be assigned the priority. The value must be followed by the priority as shown: value.priority


Defaults

None

Command Modes

Resource Priority set mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modifications.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the resource-priority command configures the priority for resource-priority header string dsn.

RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# resource-priority-set dsn
RP/0/0/CPU0:router(config-sbc-sbe-rsrc-pri)# resource-priority dsn.flash

resource-priority-set

To establish the resource priority set to be used with the specified SIP adjacency in the mode of an SBE entity, use the resource-priority-set command in SIP adjacency mode. To remove the priority-set, use the no form of this command.

resource-priority-set resource-priority-set name

no resource-priority-set resource-priority-set name

Syntax Description

resource-priority-set name

Specifies the name of the resource priority set.


Defaults

No default behavior or values

Command Modes

SBE SIP adjacency mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the resource-priority-set command sets the SIP adjacency SipToIsp42 with the resource-priority-set named dsn.

RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# resource-priority-set dsn

rtg-carrier-id-table

To enter the configuration mode of or to create a new routing table, whose events match the carrier ID of an SBE policy set, use the rtg-carrier-id-table command.

The no version of the command destroys the routing table. However, a routing table may not be destroyed if it is in the context of the active policy set.

rtg-carrier-id-table table-name

no rtg-carrier-id-table table-name

Syntax Description

table-name

Name of the routing table to be configured.


Defaults

None

Command Modes

sbc-sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

The actions of this command are restricted to setting destination adjacency. A group of adjacencies is chosen for an event if an entry in a routing table matches that event and points to a round-robin adjacency table in the next table action.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to add the carrier ID table MyCarrierIDTable.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-carrier-id-table MyCarrierIDTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#

Related Commands

Command
Description

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-round-robin-table

Enters the configuration mode of a policy table, with events that have no match-value parameters or next-table actions.

rtg-src-account-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source account.

rtg-src-adjacency-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.


rtg-dst-address-table

To access a destination address routing policy table where you can then configure or edit an entry in the routing table, use the rtg-dst-address-table command in the sbe mode. To remove the table entry, use the no form of this command.

rtg-dst-address-table table-id

no rtg-dst-adress-table table-id

Syntax Description

table-id

Specifies the name of the table.


Defaults

No default behavior or values

Command Modes

sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to access a destination address routing policy table where you can then configure or edit an entry in the routing table.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)#rtg-dst-address-table desttable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)#

rtg-dst-domain-table

To enter the configuration submode of a routing table with entries that match the destination domain name of an SBE policy set, use the rtg-dst-domain-table command. If no table exists, the command creates a new routing table.

The no version of the command deletes the routing table.

rtg-dst-domain-table table-name

no rtg-dst-domain-table table-name

Syntax Description

table-name

Name of the routing table to be configured.


Defaults

None

Command Modes

sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command. You cannot delete a routing table if it is in the active policy set. You cannot enter the submode of a routing table configuration in the active policy set.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command creates the routing policy table MyRtgTable.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-dst-domain-table MyRtgTable 
(RP/0/0/CPU0:routerconfig-sbc-sbe-callpolicy-rtgtable)#

Related Commands

Command
Description

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-carrier-id-table

Enters the configuration mode for creation or configuration of a routing table, with entries that match the carrier ID of an SBE call policy set.

rtg-src-domain-table

Enters the configuration submode for creation or configuration of a routing table, with entries that match the source domain name of an SBE call policy set.

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.


rtg-round-robin-table

To enter the configuration mode of a policy table, whose events have no match-value parameters or next-table actions, use the rtg-round-robin-table command.

rtg-round-robin-table table-name

Syntax Description

table-name

Name of the routing table to be configured.


Defaults

None

Command Modes

sbc-sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

The actions of this command are restricted to setting destination adjacency. A group of adjacencies is chosen for an event if an entry in a routing table matches that event and points to a round-robin adjacency table in the next table action.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example show how to add the round robin routing table MyRoundRobinTable.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-round-robin-table MyRoundRobinTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-src-adjacency-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.

rtg-carrier-id-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the carrier ID of an SBE policy set.

rtg-src-account-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source account.


rtg-src-account-table

To enter the configuration mode of an existing routing table or to create a new one, with entries that match the source account, use the rtg-src-account-table command.


Note You cannot issue this command if the table is part of the active policy set.


The no version of the command deletes the match value of the given entry in the routing table.

rtg-src-account-table table-id

no rtg-src-account-table table-id

Syntax Description

table-id

ID of the routing table to be configured.


Defaults

None

Command Modes

sbc-sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command modifies the matching domain in a routing table to cisco.com.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# 

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

rtg-src-adjacency-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.

rtg-round-robin-table

Enters the configuration mode of a policy table, with events that have no match-value parameters or next-table actions.

rtg-carrier-id-table

Enters the configuration mode of an existing routing table or creates a new one, with entries that match the carrier ID of an SBE policy set.


rtg-src-address-table

To access a source address routing policy table to configure or edit an entry in the routing table, use the rtg-src-address-table command in SBE mode. To remove the table entry, use the no form of this command.

rtg-src-address-table table-id

no rtg-src-adress-table table-id

Syntax Description

table-id

Specifies the name of the table.


Defaults

None

Command Modes

sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to access a source address routing policy table to configure or edit an entry in the routing table.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)#rtg-src-address-table mytable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)#

Related Commands

Command
Description

call-policy-set

Configures a dial-string manipulation action.

rtg-dst-address-table

Configures a dial-string manipulation action in the routing table.


rtg-src-adjacency-table

To enter the configuration mode of an existing routing table or to create a new table whose entries match the source adjacency, use the rtg-src-adjacency-table command.

The no version of the command deletes the match value of the entry in the routing table.

rtg-src-adjacency-table table-id

no rtg-src-adjacency-table table-id

Syntax Description

table-id

ID of the routing table to be configured.


Defaults

None

Command Modes

sbc-sbe-rtgpolicy-rtgtable

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command modifies the matching domain in a routing table to cisco.com.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-adjacency-table MyRtgTable

Related Commands

Command
Description

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

rtg-src-account-table

Enters the configuration mode of an existing routing table or creates a new table whose entries match the source account

rtg-round-robin-table

Enters the configuration mode of a policy table whose events have no match-value parameters or next-table actions.


rtg-src-domain-table

To enter the submode of a routing table configuration, with entries that match the source domain name, use the rtg-src-domain table command. If no table exists, the command creates a new routing table.


Note You cannot enter the submode of a routing table configuration in the active policy set.


The no version of the command destroys the routing table.


Note You cannot destroy a routing table if it is in the active policy set.


rtg-src-domain-table table-name

no rtg-src-domain-table table-name

Syntax Description

table-name

Name of the number analysis table within an SBE policy set, with entries matching the source account.


Defaults

None

Command Modes

sbe-callpolicy

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command creates the routing policy table MyRtgTable.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-domain-table MyRtgTable 
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# 

Related Commands

Command
Description

sbc

Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.

sbe

Enters the mode of an SBE entity within an SBC service.

call-policy-set

Enters the mode of a routing policy configuration within an SBE entity.


rtp payload-type nte

To configure the dynamic RTP payload type for RFC 2833 Named Telephone Event (rtp-nte) packets for DTMF interworking, use the rtp payload-type nte command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

rtp payload-type nte number

no rtp payload-type nte

Syntax Description

number

Payload value. Range is 96 to 127.


Defaults

None

Command Modes

Adjacency H.323 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The payload type is used both for transmitting and receiving. Therefore, it must be the same value that is used on the peer.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set the RTP payload type to 111 on the H.323 adjacency h323ToIsp42:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# rtp payload-type nte 111

secure-media

To configure the DBE to enable a DTLS or SRTP media passthrough, use the secure-media command in the DBE mode. To disable the media passthrough, use the no form of this command.

secure-media

no secure-media

Defaults

The media passthrough is disabled.

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the secure-media command is used to configure the DBE to enable DTLS or SRTP media passthrough.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# secure-media

security

To implement transport-level security on a SIP adjacency, use the security command in the SIP adjacency mode. To indicate that the adjacency cannot be secured, use the no form of this command.

security type

no security type

Syntax Description

type

Specifies the type of security to be implemented on the adjacency. Possible values are:

untrusted—The adjacency is not secured.

trusted-encrypted—The adjacency is secured by means of encryption.

trusted-unencrypted—The adjacency is assumed to be secure by other means (for example, a single dedicated link)


Defaults

None

Command Modes

SBE SIP adjacency mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the security command is used to set to trusted—encrypted for SIP adjacency test.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# security trusted-encrypted

server

To configure an accounting server or an authentication server for a RADIUS client instance on an SBC service, use the server command in the configuration mode of the RADIUS client for accounting purposes and in the SBE RADIUS authentication configuration mode respectively. To deconfigure the accounting server or authentication server, use the no form of this command.

server server name

no server server name

Syntax Description

server name

Specifies the name of the server.


Defaults

None

Command Modes

SBE RADIUS client mode

SBE RADIUS authentication mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.1

This command was modified on the Cisco XR 12000 Series Router to add the SBE RADIUS authentication mode.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the server command configures accounting server test1 for RADIUS client instance radius1.

RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server test1

The following example shows how the server command enters the mode to configure the RADIUS 
authentication server test2 for local authentication.

RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server test2

service-location preferred-active

To enable a service card to run the SBC function as a primary, use the service-location preferred-active command in sbc mode.

service-location preferred-active <location>

Syntax Description

location

Specifies the preferred active location of the SBC.


Defaults

None

Command Modes

sbc

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to assign 0/0/CPU as preferred active location of the SBC:

RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# service-location preferred-active 0/0/CPU0

show services redundancy

To show information related to all services, use the show services redundancy command in the EXEC mode.

show services redundancy

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows sample data for all services:

RP/0/0/CPU0:router# show services redundancy

Service type     Name                    Pref. Active        Pref. Standby      
--------------------------------------------------------------------------------
SBC              service-1               0/1/CPU0 Active 

show services sbc dbe addresses

To list all the addresses configured on the DBEs, use the show services sbc dbe addresses command in EXEC mode.

show services sbc sbc-name dbe addresses

Syntax Description

sbc-name

Specifies the name of the SBC service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows a list of all the addresses configured on the DBEs.

RP/0/0/CPU0:PE6_C12406#show services sbc mySbc dbe addresses

SBC Service "mySbc"
  H.248 control address:	10.0.0.1
  Media Address              VRF      Port range    Service Class
    10.10.10.1               Global   16384-20000   voice
    10.10.10.1               Global   20001-65535   video
    10.10.11.1-10.10.11.10   Global   16384-30000   voice   
    10.10.11.1-10.10.11.10   Global   30001-40000   video   
    10.10.11.21-10.10.11.30  Global   20000-40000   
    10.10.10.1               vpn3

Related Commands

Command
Description

sbc dbe media-address ipv4

Configures a DBE media address pool and an address pool.

sbc dbe media-address pool ipv4

Creates an IPv4 address range within a DBE media address pool.

sbc dbe media-address port range

Creates a port range associated with a media address or range of addresses,

show services sbc dbe media-flow-stats

Lists the statistics about one or more media flows collected on the DBE.


show services sbc dbe controllers

To display the statistics of the H.248 controller on the DBE, use the show services sbc dbe controllers command in the EXEC mode.

show services sbc sbc-name dbe controllers

Syntax Description

sbc-name

Specifies the name of the SBC service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc dbe controllers command is used to display statistics about the H.248 controller on the DBE.

RP/0/0/CPU0:router# show services sbc mySbc dbe controllers
vDBE in DBE location 1
DBE Admin Status: Active
Media gateway controller in use:
H.248 controller address 
192.10.2.2:2955
Status:         Attached
Sent      Received      Failed      Retried
Requests  2             4         1       13
Replies   4             1                  0

Segmentation
MG Segmentation Timer 0 ms
MGC Segmentation Timer 0 ms
MG Segmentation Max PDU Size 4294967295 bytes
MGC Segmentation Max PDU Size 512 bytes
Segmentation Packets Sent 0
Segmentation Packets Received 0
T-Max Value:
T-Max Value = 50000

Configured controllers: 
H.248 controller 1:
Remote address:       192.11.2.1.2944 (using default port)

Transport: UDP (with IAH)

Related Commands

Command
Description

show services sbc dbe addresses

Displays the addresses configured on DBEs.

show services sbc dbe media-flow-stats

Displays the statistics about one or more media flows collected on the DBE.

show services sbc dbe signaling-flow-stats

Displays statistics of one or more signaling flows.


show services sbc dbe h248-profile

To list theinformation on the specified H.248 profile, including transport, H.248 version, and active packages, use the show services sbc dbe h248-profile command in the EXEC mode.

show services sbc sbc-name dbe h248-profile

Syntax Description

sbc-name

Defines the name of the service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows the defaults and configured options for the H.248 profile:

RP/0/0/CPU0:router#show services sbc mysbc dbe h248-profile

Transport UDP IAH
H.248 Version 3
Packages:
Generic(g)
Base Root(root): Max Terminations per context 10
Network(l)
DiffServ(ds)
Gate Management(gm)
Traffic Management(tman)
IP NAPT(ipnapt)
Segment(seg): Max PDU Size 4096 bytes

Related Commands

Command
Description

h248-profile

Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).

h248-profile-version

Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.

package

Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).


show services sbc dbe media-flow-stats

To list statistics about one or more media flows collected on the DBE, use the show services sbc dbe media-flow-stats command in EXEC mode.

show services sbc sbc-name dbe media-flow-stats vrf vrf-name ipv4 A.B.C.D port port-number

Syntax Description

vrf-name

(Optional) Displays media flows only to or from the specific VPN.

A.B.C.D

(Optional) Displays media flows only to or from the specific IPv4 media address.

port-number

(Optional) Displays media flows only to or from the specific port.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows media flows to/from port 24000 at the 10.1.1.1 IPv4 address and through VPN3.

RP/0/0/CPU0:PE6_C12406#show services sbc mySbc dbe media-flow-stats vrf vpn3 ipv4 10.1.1.1 
port 24000

SBC Service "mySbc"
  mediaFlow 1
      FlowPairState Open
      GateAge  15340 ms
      CallPriority Routine (CD5)
      FlowPairBandwidth 1500
      DtmfPacketsQueued  0
      Side A
        VpnId vpn3
        LocalAddress 10.1.1.1
        LocalPort 24000
        RemoteAddress 192.168.1.1
        RemotePort 32420
        RtpPacketsRcvd 300
        RtpOctetsRcvd 6000
        RtpPacketsSent 100
        RtpOctetsSent 2000
        RtpPacketsDiscarded 0
        RtpOctetsDiscarded 0
        EndPointPacketsSent 300
        EndPointPacketsRcvd 97
        EndPointPacketsLost 1
        DtmfInterworking No
        MediaFlowing Yes
        RouteError No
        Unexpected SrcAddr Packets Yes (CD6)
        BillingId 12AB3C4D567124C7124C12DE

Side B
        VpnId <none>
        LocalAddress 10.1.1.2
        LocalPort 24002
        RemoteAddress 172.192.2.3
        RemotePort 24002
        RtpPacketsRcvd 100
        RtpOctetsRcvd 2000
        RtpPacketsSent 300
        RtpOctetsSent 6000
        RtpPacketsDiscarded 0
        RtpOctetsDiscarded 0
        EndPointPacketsSent 100
        EndPointPacketsRcvd 300
        EndPointPacketsLost 0
        DtmfInterworking No
        MediaFlowing Yes
        RouteError No
        Unexpected SrcAddr Packets No (CD6)
        BillingId 5DAB3C4D153624C7124E1234

Related Commands

Command
Description

sbc dbe media-address ipv4

Configures a DBE media address pool and an address pool.

sbc dbe media-address pool ipv4

Creates an IPv4 address range within a DBE media address pool.

sbc dbe media-address port range

Creates a port range associated with a media address or range of addresses.

showservices sbc dbe addresses

Lists the addresses configured on DBEs.


show services sbc dbe media-stats

To display general DBE statistics that do not include contributions from active calls, use the show services sbc dbe media-stats command in the EXEC mode.

show services sbc sbc-name dbe media-stats

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc dbe media-stats command is used to display DBE statistics for the specified SBC service.

RP/0/0/CPU0:router# show services sbc mySbc dbe media-stats

SBC Service "mysbc"
 Available Bandwidth           = 40 Mbps
 Available Flows               = 1000
 Available Packet Rate         = 500 (packets/second)
 Active Media Flow             = 56
 Peak Media Flows              = 156
 Total Media Flows             = 78
 Active Signaling Flows        = 108
 Peak Signaling Flows          = 186
 Total Signaling Flows         = 244
 Unclassified Packets          = 100
 RTP Packets Reveived          = 1009
 RTP Octets Received           = 20000
 RTP Packets Sent              = 1009
 RTP Octets Sent               = 20000
 RTP Packets Discarded         = 0
 RTP Octets Discarded          = 0
 No Media Count                = 0
 Route Error Count             = 0

Related Commands

Command
Description

show services sbc dbe signaling-flow-stats

Displays statistics of one or more signaling flows.


show services sbc dbe signaling-flow-stats

To display statistics of one or more signaling flows collected on the DBE, use the show services sbc dbe signaling-flow-stats command in the EXEC mode.

show services sbc sbc-name dbe signaling-flow-stats vrf vrf-name {ipv4 ipv4 media address | ipv6 ipv6 media address} port port number

Syntax Description

vrf

Specifies vrf

vrf-name

Displays media flows to and from the specified VRF

ipv4

Specifies IPv4

ipv4 media address

Displays media flows to and from the specified IPV4 media address

ipv6

Specifies IPv6

ipv6 media address

Displays media flows to and from the specified IPV6 media address

port

Specifies port

port number

Displays media flows to and from the specified port


Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the show services sbc dbe signaling-flow-stats command is used to display statistics of the signaling flow for the specified SBC service.

RP/0/0/CPU0:router# show services sbc mySbc dbe signaling-flow-stats vrf vpn3 ipv4 
10.1.1.1 port 24000

SBC Service "mySbc"
  signalingFlow 1
      FlowPairState Open
      PinholeAge  15340 ms
      PinholeBandwidth 1500
      Side A
        VpnId vpn3
        LocalAddress 10.1.1.1
        LocalPort 24000
        RemoteAddress 192.168.1.1
        RemotePort 32420
        PacketsRcvd 300
        OctetsRcvd 6000
        PacketsSent 100
        OctetsSent 2000
        PacketsDiscarded 0
        OctetsDiscarded 0
      Side B
        VpnId <none>
        LocalAddress 10.1.1.2
        LocalPort 24002
        RemoteAddress 172.192.2.3
        RemotePort 24002
        PacketsRcvd 100
        OctetsRcvd 2000
        PacketsSent 300
        OctetsSent 6000
        PacketsDiscarded 0
        OctetsDiscarded 00```

Related Commands

Command
Description

show services sbc dbe media-stats

Displays general DBE statistics.


show services sbc sbe adjacencies

To list the adjacencies configured on SBEs, use the show services sbc sbe adjacencies command in the EXEC mode.

show services sbc sbc-name sbe adjacencies

Syntax Description

sbc-name

Specifies the name of the SBC service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows the adjacencies that are configured on SBEs:

RP/0/0/CPU0:router#show services sbc mysbc sbe adjacencies
SBC Service "mysbc"
  Adjacency sipGW (SIP)
    Status:                Attached
    Signaling address:     88.88.141.3:5060
    Signaling-peer:        10.10.121.10:5060
    Force next hop:        No
    Account:               iosgw
    Group:                 
    In header profile:     Default
    Out header profile:    Default
    In method profile:     Default
    Out method profile:    Default
    In UA option prof:     Default
    Out UA option prof:    Default
    In proxy opt prof:     Default
    Out proxy opt prof:    Default
    Priority set name:     None
    Local-id:              
    Rewrite REGISTER:      On
      target address:      None
    NAT Support:           Disabled
    Reg-min-expiry:        3000
    Fast-register:         Enabled
    Fast-register-int:     30
    Media passthrough:     No
    Preferred transport:   UDP
    Hunting Triggers:      Global Triggers
    Redirect mode:         Pass-through
    Security:              Untrusted
  Adjacency sipPROXY (SIP)
    Status:                Attached
    Signaling address:     88.88.141.11:5060
    Signaling-peer:        200.200.200.98:5060
    Force next hop:        No
    Account:               COREvlan
    Group:                 
    In header profile:     Default
    Out header profile:    Default
    In method profile:     Default
    Out method profile:    Default
    In UA option prof:     Default
    Out UA option prof:    Default
    In proxy opt prof:     Default
    Out proxy opt prof:    Default
    Priority set name:     None
    Local-id:              
    Rewrite REGISTER:      Off
      target address:      200.200.200.98:5060
    NAT Support:           Disabled
    Reg-min-expiry:        3000
    Fast-register:         Disabled
    Media passthrough:     No
    Preferred transport:   UDP
    Hunting Triggers:      Global Triggers
    Redirect mode:         Pass-through
    Security:              Untrusted
RP/0/0/CPU0:router#

show services sbc sbe adjacency all-authentication-realms

To view all currently configured authentication-realms for all SIP adjacencies, use the show services sbc sbe all-authentication-realms command in EXEC mode.

show services sbc sbc-name sbe all-authentication-realms

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how to display all currently configured authentication-realms for all SIP adjacencies using the show services sbc sbe all-authentication-realms command.

RP/0/0/CPU0:router# show services sbc mySbc sbe all-authentication-realms
Configured authentication realms
---------------------------------------
Adjacency: SipToIsp42
Domain           Username        Password
Example.com      usersbc         password1sbc

Adjacency: SipToIsp50
Domain           Username        Password
Example.com      user2sbc        password2sbc
Other.com        sbcuser         password3sbc

Related Commands

Command
Description

show services sbc sbe adjacency-name authentication-realms

Displays all currently configured authentication-realms for the SIP adjacency.




show services sbc sbe adjacency authentication-realms

To view all currently configured authentication-realms for the specified SIP adjacency, use the show services sbc sbe adjacency authentication-realms command in EXEC mode.

show services sbc sbc-name sbe adjacency adjacency-name authentication-realms

Syntax Description

adjacency-name

Specifies the name of the SIP adjacency.


Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe adjacency authentication-realms command displays all currently configured authentication-realms for a specified SIP adjacency.

RP/0/0/CPU0:router# show services sbc mySbc sbe adjacency SipToISP42 authentication-realms

Configured authentication realms"mysbc"
Domain        Username        Password
---------------------------------------
Example.com   usersbc       passwordsbc

Related Commands

Command
Description

show services sbc sbe all-authentication-realms

Displays all currently configured authentication-realms for all SIP adjacencies.


show services sbc sbe billing

To display the local and remote billing configurations, use the show services sbc sbe billing command in the EXEC mode.

show services sbc sbc-name sbe billing local | remote

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe billing command is used to display the local billing configuration.

RP/0/0/CPU0:router# show services sbc mySbc sbe billing local

Local Billing
====================================
Local IP address: 10.21.20.1
LDR check time: 19:30
Cache path: disk0:/billing
Minor alarm threshold: 500 MB
Major alarm threshold: 900 MB
Critical alarm threshold: 950 MB
Activating status: Activated

show services sbc sbe blacklist

To list the limits in force for a particular source—whether from defaults or explicitly configured—in a form in which they can be entered into the CLI, use the show services sbc sbe blacklist command in EXEC mode. Also listed are any defaults for a smaller scope configured at this address.

Values not explicitly configured and, therefore, inherited from other defaults, are bracketed.

show services sbc sbc-name sbe blacklist source

Syntax Description

sbc-name

Specifies the name of the SBC.

source

Specifies the source for which you want to display blacklisting information. This source is one of the following values:

VPN ID

VPN ID and IP address

VPN ID, IP address, and port.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to list blacklisting information for a specific VPN with a valid IPv4 address:

RP/0/0/CPU0:PE6_C12406(config-sbc-sbe)# show services sbc mySbc sbe blacklist vpn3 ipv4 
172.19.12.12

SBC Service mySbc SBE dynamic blacklist vpn3 172.19.12.12

vpn3 172.19.12.12
=================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication     (20)            10 ms          (1 hour)
Bad address        (20)            10 ms          (1 hour)
Routing            (20)            10 ms          (1 hour)
Registration        (5)           100 ms        (10 hours)
Policy             (20)            10 ms           (1 day)
Corrupt              40            10 ms          (1 hour)

Default for ports of vpn3 172.19.12.12
======================================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication       20            1 sec            1 hour
Bad address          20            1 sec            1 hour
Routing              20            1 sec            1 hour
Registration          5           30 sec          10 hours
Policy               20            1 sec             1 day
Corrupt              20           100 ms            1 hour

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

trigger-period

Defines the period over which events are considered. For details, see the description of the trigger-size command.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.


show services sbc sbe blacklist configured-limits

To list the explicitly configured limits, showing only the sources configured, use the show services sbc sbe blacklist configured-limits command in EXEC mode.

Values not explicitly configured and, therefore, inherited from other defaults, are bracketed.

show services sbc sbc-name sbe blacklist configured-limits

Syntax Description

sbc-name

Specifies the name of the SBC.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command lists the limits that you explicitly configured, showing only the sources. Non-explicitly configured values appear in brackets.

RP/0/0/CPU0:PE6_C12406(config-sbc-sbe)# show services sbc mySbc sbe blacklist 
configured-limits

SBC Service mySbc SBE dynamic blacklist configured limits

Default for all addresses
=========================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication       20            1 sec            1 hour
Bad address          20            1 sec            1 hour
Routing              20            1 sec            1 hour
Registration          5           30 sec          10 hours
Policy               20            1 sec             1 day
Corrupt              20           100 ms            1 hour

Default for addresses on vpn3
=============================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication       20            1 sec             1 day
Bad address          20            1 sec             1 day
Routing              20            1 sec             1 day
Registration          5           30 sec             1 day
Policy               20            1 sec             1 day
Corrupt              50           100 ms          12 hours

112.234.23.2
============
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication     2000          (1 sec)          (1 hour)
Bad address        2000          (1 sec)          (1 hour)
Routing            2000          (1 sec)          (1 hour)
Registration        500         (30 sec)        (10 hours)
Policy             2000          (1 sec)           (1 day)
Corrupt            2000         (100 ms)          (1 hour)

vpn3 172.19.12.12
=================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication     (20)          (1 sec)          (1 hour)
Bad address        (20)          (1 sec)          (1 hour)
Routing            (20)          (1 sec)          (1 hour)
Registration        (5)         (30 sec)        (10 hours)
Policy             (20)          (1 sec)           (1 day)
Corrupt              40            10 ms          (1 hour)

Default for ports of vpn3 172.19.12.12
======================================
Reason          Trigger          Trigger      Blacklisting
                   Size           Period            Period
------          -------          -------      ------------
Authentication       20            1 sec            1 hour
Bad address          20            1 sec            1 hour
Routing              20            1 sec            1 hour
Registration          5           30 sec          10 hours
Policy               20            1 sec             1 day
Corrupt              20           100 ms            1 hour

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

trigger-period

Defines the period over which events are considered. For details, see the description of the trigger-size command.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.



show services sbc sbe blacklist current-blacklisting

To list the limit causing sources to be blacklisted, use the show services sbc sbe blacklist current-blacklisting command in the EXEC mode.

show services sbc sbc-name sbe blacklist current-blacklisting

Syntax Description

sbc-name

Defines the name of the service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows the current blacklisting information for the SBC:

RP/0/0/CPU0:router# show sbc mySbc sbe blacklist current-blacklisting

SBC Service mySbc SBE dynamic blacklist current members

Global addresses
================
Source           Source   Blacklist       Time
Address          Port     Reason          Remaining
-------          ------   ---------       ---------
125.125.111.123  All      Authentication  15 mins
125.125.111.253  UDP 85   Registration    10 secs
144.12.12.4      TCP 80   Corruption      Never ends
VRF: vpn3
=========
Source           Source   Blacklist       Time
Address          Port     Reason          Remaining
-------          ------   ---------       ---------
132.15.1.2       TCP 285  Registration    112 secs
172.23.22.2      All      Policy          10 hours

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

trigger-period

Defines the period over which events are considered. For details, see the description of the trigger-size command.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.


show services sbc sbe cac-policy-set

To list detailed information for a given entry in a connection admission control (CAC) policy table, use the show services sbc sbe cac-policy-set command in the EXEC mode.

show services sbc sbc-name sbe cac-policy-set set-id {table name entry entry-id} {tables}

Syntax Description

sbc-name

Specifies the name of the SBC service.

set-id

Specifies the numeric identifier of the CAC policy set to which the table belongs.

table name

Specifies the name of the table.

entry entry-id

Specifies the numeric identifier of the entry that you want to display.

tables

Shows all tables in the specified CAC policy set.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example lists detailed information for entry 1 of the standard_policy_list CAC table which is part of CAC policy set 1:

RP/0/0/CPU0:router# show services sbc mysbc sbe cac-policy-set 1 table 
standard_policy_list entry 1

SBC Service "mysbc"

Policy set 1 table standard_policy_list entry 1

Match value Bob
Action CAC policy complete
Max calls 1000
Max call rate 10
Max updates Unlimited
Max registrations Unlimited
Max reg. rate Unlimited
Max bandwidth Unlimited
Max channels Unlimited
Transcoder Not Allowed
Caller privacy setting Never hide
Caller privacy setting Always hide
Early media Allowed
Early media direction Both
Early media timeout 90
Total failures in this entry 2

Related Commands

Command
Description

show services sbc sbe call-policy-set table entry

Displays a summary of the entries associated with the given routing table.


show services sbc sbe call-policy-set

To show the properties associated with a given routing policy set or policy table, use the show services sbc sbe call-policy-set command in EXEC mode.

show services sbc sbc-name sbe call-policy-set id table name entry entry

Syntax Description

id

Specifies the numeric identifier of the routing policy set or table.

name

Specifies the routing policy table whose entry is to be displayed.

entry

Specifies table entry.

entry

Specifies the numeric identifier of the entry.


Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to display the properties associated with the given routing policy set:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1

Policy set 1
------------
Description                            Master policy set
Active policy set?                 Yes
First Number Analysis table         myFirstNATable
First call routing table           myFirstCallRoutingTable
First registration routing table   myFirstRegRoutingTable

The following example shows how to display a summary of the routing policy tables associated with the given policy set:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 tables

Policy set 1 tables
Table name             Match type       Description
-----------------------------------------------
NaSrcAdj               src-adjacency    First NA table
NaEuropeEmergency      dst-prefix       Euro emergency no. table
NaUKEmergency          dst-prefix       UK emergency no. table
startRouting           dst-prefix       Master routing table
internalRouting        src-adjacency    Routes internal calls
externalRouting        dst-prefix       Routes external calls
softswitchRoundRobin   round-robin      Choose a softswitch

The following example shows how to display a summary of the entries associated with the given table:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 table NaSrcAdj entry 1

Policy set 1 table NaSrcAdj entry 1
Match value         porscheStuttgart
Next table          NaEuropeEmergency

Related Commands

Command
Description

description

Configures descriptive text for the CAC-policy-set.

first-number-analysis-table

Configures the name of the first policy table to process when performing the number analysis stage of policy.

first-call-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.

first-reg-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.


show services sbc sbe call-policy-sets

To list all of the routing policy sets on the SBE, use the show services sbc sbe call-policy-sets command in EXEC mode.

show services sbc sbc-name sbe call-policy-sets

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list all of the routing policy sets on the SBE:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-sets

Policy set     Comment
----------------------------------------------------------
1              Master policy set
2              Temporary policy set for editing
3              Night-time policy set, used from 10pm-6am

Active policy set = 1.

show services sbc sbe call-policy-set table entries

To display a summary of the entries associated with a given table, use the show services sbc sbe call-policy-set table entries command in EXEC mode.

show services sbc sbc-name sbe call-policy-set id table name entries

Syntax Description

id

Specifies the numeric identifier of the routing policy set to which the table belongs.

name

Specifies the table whose entries are to be displayed.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to display a summary of the entries associated with the given table:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 table NaSrcAdj entries

Policy set 1 table NaSrcAdj entries
Entry   Match value       
-----------------------------
1     porscheStuttgart
2       porscheBerlin
3       lotus
4       lada
5       skoda
6       rover

show services sbc sbe calls

To list all the calls on the SBEs, use the show services sbc sbe calls command in EXEC mode.

show services sbc sbc-name sbe calls

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the complete call statistics for the current hour:

RP/0/0/CPU0:router# show services sbc mySbc sbe calls

SBC Service "mySbc"
  Call           State           Type
  --------------------------------------
     1           inactive        unknown
     2           active          video 
     3           activating      audio 
     4           deactivating    data

show services sbc sbe call-stats

To list the statistics for all the calls on the specified SBE, use the show services sbc sbe call-stats command in EXEC mode.

show services sbc sbc-name sbe call-stats period

Syntax Description

period

Specifies the interval when the statistics display:

current5mins

previous5mins

current15mins

previous15mins

currenthour

previoushour

currentday

previousday


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Readings are taken at 5-minute intervals past the hour (that is, 05, 10, 15, and so on). Current readings apply to the statistics since the last appropriate readings were taken.

If the time is now 12:34, currenthour will apply to the statistics collected since 11:35 and current15mins will be since 12:20. In this example, previoushour would be 10:35-11:35 and previous15mins would be 12:05-12:20.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the complete call statistics for the current hour:

RP/0/0/CPU0:router# show services sbc mySbc sbe call-stats currenthour

SBC Service "mySbc"
  Call statistics for the current hour:
    Active calls:                         5000
    Activating calls:                       30
    Deactivating calls:                     15
    Total call attempts:                100000
    Failed call attempts:                   10
    Call routing failed:                     1
    Call resources failed:                   2
    Call media failed:                       3
    Call signaling failed:                   4
    Active call failures:                    0
    Congestion failures:                     0
    Unconnected emergency calls in progress: 6
    Connected emergency calls in progress:  24

Note The Deactivating calls statistic displays the number of calls that are undergoing deactivation internally in the SBC. This statistic does not include the number of calls for which the SBC is waiting for a response from an endpoint to signal call teardown.


Related Commands

Command
Description

show services sbc sbe calls

Lists all the calls on the SBEs.


show services sbc sbe codec-list

To show information about the codec lists that are configured on the SBE, use the show services sbc sbe codec-list command in EXEC mode.

show services sbc sbc-name sbe codec-list list-name

Syntax Description

list-name

Specifies the name of the codec list.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how to display information about the codec list (my_codecs).

RP/0/0/CPU0:router#show services sbc mySbc sbe codec-list my_codecs

SBC Service "mySbc"

Codec list "my_codecs" (Legitimate codecs)
  Codec Name                Min Packetization Period
  ==========                ========================
  PCMU                      20ms
  G729                      10ms

Related Commands

show services sbc sbe gates

To list the gates created on the SBE, use the show services sbc sbe gates command in EXEC mode.

show services sbc sbc-name sbe gates

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the gates created on the SBE:

RP/0/0/CPU0:router# show services sbc mySbc sbe gates

SBC Service "mySbc"
  Billing Correlator = value
    Media Gateway IP address = 1.2.3.4
    Number of flow pairs = 1

show services sbc sbe h323 timers

To display a list of H.323 timer configuration, use the show services sbc sbe h323 command in the EXEC mode.

show services sbc sbc-name sbe h323 timers

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe h323 timers command is used to display a list of H.323 timer configuration.

RP/0/0/CPU0:router# show services sbc mySbc sbe h323 timers

H.323 timers
 Global scope
   adjacency timeout          31
   h225 timeout setup         5
   h225 timeout establishment 250
   ras rrq keepalive          34
   ras rrq ttl                40
   ras timeout rrq            3
 Adjacency h323ToIsp42
   RAS RRQ TTL                100
   RAS Timeout (drq)          5
 Adjacency h323Access
   Adjacency Retry Timeout    20
   RAS Retry Count (arq)      30

show services sbc sbe hold-media-timeout

To show the configured duration of the media timeout timer for on-hold calls, use the show services sbc sbe hold-media-timeout command in the EXEC mode.

show services sbc sbc-name sbe hold-media-timeout

Syntax Description

sbc-name

Specifies the SBC service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows sample data for the media timeout timer for on-hold calls:

RP/0/0/CPU0:router#show services sbc mysbc sbe hold-media-timeout
SBC Service "mysbc"

SBE On-hold media timeout duration is: 10 seconds
RP/0/0/CPU0:router#

show services sbc sbe hunting-trigger

To show the H.323 or SIP hunting triggers, use the show services sbc sbe hunting-trigger command in the EXEC mode.

show services sbc sbc-name sbe {h323 | sip} hunting-trigger

Syntax Description

sbc-name

Specifies the SBC service.

h323

Specifies the H.323 submode.

sip

Specifies the SIP submode


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows sample data for the media timeout timer for on-hold calls:

RP/0/0/CPU0:router#show services sbc mysbc sbe sip hunting-trigger
SIP Hunting Triggers
--------------------
415 480

RP/0/0/CPU0:PE6_C12406#

show services sbc sbe media-gateway-associations

To list all the media gateways associated with this SBE and statistics associated with the media gateway, use the show services sbc sbe media-gateway-associations command in EXEC mode.

show services sbc sbc-name sbe media-gateway-associations

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list all the media gateways associated with this SBE and statistics associated with the media gateway:

RP/0/0/CPU0:router# show services sbc mySbc sbe media-gateway-associations

SBC Service "mySbc" Media Gateway Associations

  Media gateway 10.0.0.1:653
    Gateway Protocol    = megaco
    Transport Protocol  = tcp
    Local address       = a.b.c.d:e
                Sent         Received    Failed      Retried
    Requests    100          200         10          5
    Replies     20           20          0           -            

  Media gateway 10.0.0.2:34
    Gateway Protocol    = megaco
    Transport Protocol  = udpip
    Local address       = a.b.c.d:e
                Sent         Received    Failed      Retried
    Requests    500          1000        500         200
    Replies     1000         500         0           -            

show services sbc sbe media-gateways

To list the gateway configuration and attachment status on SBE, use the show services sbc sbe media-gateways command in EXEC mode.

show services sbc sbc-name sbe media-gateways

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the gateway configuration and attachment status on SBEs:

RP/0/0/CPU0:router# show services sbc mySbc sbe media-gateways

SBC Service "mySbc"
  Configured Gateway 10.0.0.1 
  Configured Gateway 100.1.0.1
  Configured Gateway 172.3.4.9

show services sbc sbe policy-failure-stats

To list the statistics for all of the policy failures on a specific SBE, use the show services sbc sbe policy-failure-stats command in EXEC mode.

show services sbc sbc-name sbe policy-failure-stats period

Syntax Description

period

Specifies the time period for the statistics that you want to display. The time period can be one of the following:

current5mins

previous5mins

current15mins

previous15mins

currenthour

previoushour

currentday

previousday

Readings are taken at five-minute intervals past the hour (for example, 05, 10, 15 and so on). Current readings apply to the statistics since the last appropriate readings were taken.

If the time is now 12:34 then "currenthour" applies to the statistics collected since 11:35 and "current15mins" is since 12:20. Also, in this example, "previoushour" indicates 10:35-11:35 and "previous15mins" indicates 12:05-12:20.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

The statistics track how many calls, associated with the given adjacency or account, have failed. A single call failure increments the statistics for more than one call attribute.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows the complete policy failure stats for the current hour.

RP/0/0/CPU0:router# show services sbc mySbc sbe policy-failure-stats currenthour

SBC Service "mySbc"
  Policy failure statistics for the current hour:
    Total call setup failures:              97 
    Total call update failures:             28
    Call setups failed due to NA:           15
    Call setups failed due to rtg:          34
    Call setups failed due to CAC:          48
    CAC fails due to num call lim:          17
    CAC fails due to rate call lim:         11
    CAC fails due to num channels lim:      11
    CAC fails due to num media updates:     4
    CAC fails due to bandwidth lim:         5

Related Commands

Command
Description

clear services sbc sbe policy-rejection-stats

Clears all the policy rejection statistics by the SBE.

show services sbc sbe policy-failure-stats src-adjacency

Lists the statistics for all the policy failures on the specified SBE.

show services sbc sbe policy-failure-stats dst-adjacency

Lists the statistics for the policy failures for calls with the adjacency.

show services sbc sbe policy-failure-stats src-account

Lists the statistics for the policy failures for calls with the account.

show services sbc sbe policy-failure-stats dst-account

Lists the statistics for the policy failures for calls with the account.


show services sbc sbe policy-failure-stats dst-account

To list policy failure statistics for a specified target account for a specified time period, use the show services sbc sbe policy-failure-stats dst-account command in the EXEC mode.

show services sbc sbc-name sbe policy-failure-stats dst-account name period time period

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the name of the account for which you would like to display statistics. The maximum length of this value is 30 characters.

period time period

Specifies the time period to which the statistics apply. Choose one of the following time intervals:

current15mins—Displays statistics in 15 minute intervals starting from the current minute.

current5mins—Displays statistics in 5 minute intervals starting from the current minute.

currentday—Displays statistics for the current day starting midnight of the same day.

currenthour—Displays statistics for the current hour.

previous15mins—Displays statistics from previous 15 minute intervals.

previous5mins—Displays statistics from previous 5 minute intervals.

previousday—Displays statistics from the previous day.

previoushour—Displays statistics from the previous hour.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example lists the policy failure statistics for an adjacent account named AA for the current hour:

RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure-stats dst-account AA 
currenthour

SBC Service "mysbc"
Policy failure statistics for the current hour for source adjacency AA
Policy failure statistics for the current hour

Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1

Related Commands

Command
Description

show services sbc sbe policy-failure-stats dst-adjacency

Lists policy failure statistics for calls within the specified target adjacency for the specified time period.

show services sbc sbe policy-failure-stats src-account

Lists policy failure statistics for calls within the specified source account for the specified time period.

show services sbc sbe policy-failure-stats src-adjacency

Lists policy failure statistics for calls within the specified source adjacency for the specified time period.


show services sbc sbe policy-failure-stats dst-adjacency

To list policy failure statistics for a specified target adjacency for a specified time period use the show services sbc sbe policy-failure-stats dst-adjacency command in the EXEC mode.

show services sbc sbc-name sbe policy-failure-stats dst-adjacency name period time period

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the name of the adjacency for which you would like to display statistics. The maximum length of this value is 30 characters.

period time period

Specifies the time period to which the statistics apply. Choose one of the following time intervals:

current15mins—Displays statistics in 15 minute intervals starting from the current minute.

current5mins—Displays statistics in 5 minute intervals starting from the current minute.

currentday—Displays statistics for the current day starting midnight of the same day.

currenthour—Displays statistics for the current hour.

previous15mins—Displays statistics from previous 15 minute intervals.

previous5mins—Displays statistics from previous 5 minute intervals.

previousday—Displays statistics from the previous day.

previoushour—Displays statistics from the previous hour.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows the policy failure statistics for an adjacency named ZZ for the current hour:

RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure-stats dst-adjacency ZZ 
currenthour

SBC Service "mysbc"
Policy failure statistics for the current hour for source adjacency ZZ
Policy failure statistics for the current hour

Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1

Related Commands

Command
Description

show services sbc sbe policy-failure-stats dst-account

Lists policy failure statistics for calls within the specified target account for the specified time period.

show services sbc sbe policy-failure-stats src-account

Lists policy failure statistics for calls within the specified source account for the specified time period.

show services sbc sbe policy-failure-stats src-adjacency

Lists policy failure statistics for calls within the specified source adjacency for the specified time period.


show services sbc sbe policy-failure-stats src-account

To list policy failure statistics for a specified source account for a specified time period use the show services sbc sbe policy-failure-stats src-account command in the EXEC mode.

show services sbc sbc-name sbe policy-failure-stats src-account name period time period

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the name of the account for which you would like to display statistics. The maximum length of this value is 30 characters.

period time period

Specifies the time period to which the statistics apply. Choose one of the following time intervals:

current15mins—Displays statistics in 15 minute intervals starting from the current minute.

current5mins—Displays statistics in 5 minute intervals starting from the current minute.

currentday—Displays statistics for the current day starting midnight of the same day.

currenthour—Displays statistics for the current hour.

previous15mins—Displays statistics from previous 15 minute intervals.

previous5mins—Displays statistics from previous 5 minute intervals.

previousday—Displays statistics from the previous day.

previoushour—Displays statistics from the previous hour.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows the policy failure statistics for a source account named BB for the current hour:

RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure stats src-account BB 
currenthour

SBC Service "mysbc"
Policy failure statistics for the current hour for source adjacency BB
Policy failure statistics for the current hour

Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1

Related Commands

Command
Description

show services sbc sbe policy-failure-stats dst-adjacency

Lists policy failure statistics for calls within the specified target adjacency for the specified time period.

show services sbc sbe policy-failure-stats dst-account

Lists policy failure statistics for calls within the specified target account for the specified time period.

show services sbc sbe policy-failure-stats src-adjacency

Lists policy failure statistics for calls within the specified source adjacency for the specified time period.


show services sbc sbe policy-failure-stats src-adjacency

To list policy failure statistics for a specified source adjacency for a specified time period use the show services sbc sbe policy-failure-stats src-adjacency command in the EXEC mode.

show services sbc sbc-name sbe policy-failure-stats src-adjacency name period time period

Syntax Description

sbc-name

Specifies the name of the SBC service.

name

Specifies the name of the adjacency for which you would like to display statistics. The maximum name length is 30 characters.

period time period

Specifies the time period to which the statistics apply. Choose one of the following time intervals:

current15mins—Displays statistics in 15 minute intervals starting from the current minute.

current5mins—Displays statistics in 5 minute intervals starting from the current minute.

currentday—Displays statistics for the current day starting midnight of the same day.

currenthour—Displays statistics for the current hour.

previous15mins—Displays statistics from previous 15 minute intervals.

previous5mins—Displays statistics from previous 5 minute intervals.

previousday—Displays statistics from the previous day.

previoushour—Displays statistics from the previous hour.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read


Examples

The following example displays policy failure statistics for a source adjacency named YY for the current hour:

RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure stats src-adjacency YY 
currenthour

SBC Service "mysbc"
Policy failure statistics for the current hour for source adjacency YY
Policy failure statistics for the current hour

Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1

Related Commands

Command
Description

show services sbc sbe policy-failure-stats dst-adjacency

Lists policy failure statistics for calls within the specified target adjacency for the specified time period.

show services sbc sbe policy-failure-stats src-account

Lists policy failure statistics for calls within the specified source account for the specified time period.

show services sbc sbe policy-failure-stats dst-account

Lists policy failure statistics for calls within the specified target account for the specified time period.


show services sbc sbe qos-profiles

To list all QoS profiles, use the show services sbc sbe qos-profiles command in EXEC mode. If you specify a QoS profile, the details of that profile are shown.

show services sbc sbc-name sbe qos-profiles [profile-name]

Syntax Description

profile-name

(Optional) Specifies the profile name.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list all of the QoS profiles on the SBE:

RP/0/0/CPU0:router# show services sbc mySbc sbe qos-profiles

Profile name                       Class                 
---------------------------------------------------------
Profile1                           Voice                 
Profile2                           Fax                   

# show services sbc mySbc sbe qos-profiles Profile1

QoS profile Profile1         
  Class of Service      Voice
  Marking type          DSCP 
  DSCP                  7    

show services sbc sbe radius-client-stats

To list the RADIUS accounting client statistics for all accounting clients configured on an SBE, use the show services sbc sbe radius-client-stats command in EXEC mode.

show services sbc sbc-name sbe radius-client-stats radius-client

Syntax Description

radius-client

Specifies the RADIUS client to show.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the RADIUS accounting server statistics for all accounting servers configured on an SBE:

RP/0/0/CPU0:router# show services sbc mySbc sbe radius-client-stats

show services sbc sbe radius-server-stats

To list the RADIUS server statistics for all accounting servers configured on a RADIUS client on an SBE, use the show services sbc sbe radius-server-stats command in EXEC mode.

show services sbc sbc-name sbe radius-server-stats radius-client

Syntax Description

radius-client

Specifies the RADIUS client name.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the RADIUS server statistics for all accounting servers configured on a radius client on an SBE:

RP/0/0/CPU0:router# show services sbc mySbc sbe radius-server-stats radius1

SBC Service "mySbc"
  Accounting servers
    acctsvr:
      Round Trip time:                    10ms
      Access-request sent:                12
      Access-request retransmitted:        6
      Access-accept received:             12
      Access-rejects received:             0
      Access-Challenge received:          13
      Accounting-request sent:          1000
      Accounting-request retransmitted:    2 
      Accounting-response received:     1000
      Malformed packets received:          0
      Invalid authenticators received:     2
      Outstanding response:                3
      Timeouts occurred:                   0
      Unknown packets:                     4
      Packets dropped:                     0     

    acctsvr2: 
      Round Trip time:                    15ms
      Access-request sent:                14
      Access-request retransmitted:        0
      Access-accept received:             13
      Access-rejects received:             0
      Access-Challenge received:          16
      Accounting-request sent:             0
      Accounting-request retransmitted:    0 
      Accounting-response received:        0
      Malformed packets received:          0
      Invalid authenticators received:     0
      Outstanding response:                0
      Timeouts occurred:                   0
      Unknown packets:                     0
      Packets dropped:                     0 

show services sbc sbe redirect-limit

To display the current limit on the maximum number of redirections that a call can undergo, use the show services sbc sbe redirect-limit command in EXEC mode.

show services sbc sbc-name sbe redirect-limit

Syntax Description

sbc-name

Specifies the name of the SBC service.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example displays the limit on the maximum number of redirections that a call can undergo:

RP/0/0/CPU0:router# show service sbc mysbc sbe redirect-limit
Call redirect limit is 4

show services sbc sbe sip essential-headers

To display a list of the essential SIP headers, use the show services sbc sbe sip essential-headers command in the EXEC mode.

show services sbc sbc-name sbe sip essential-headers

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip essential-headers command is used to display a list of all essential headers.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip essential-headers

Essential SIP headers for SBC service "mysbc"
To
From
Via

Related Commands

Command
Description

show services sbc sbe sip header-profiles

Displays a list of all configured SIP header profiles.


show services sbc sbe sip essential-methods

To display a list of the essential SIP methods, use the show services sbc sbe sip essential-methods command in the EXEC mode.

show services sbc sbc-name sbe sip essential-methods

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip essential-methods command is used to display a list of all essential methods.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip essential-methods

Essential SIP methods for SBC service "mysbc"
INVITE
ACK
CANCEL
BYE
REGISTER
INFO
OPTIONS
PRACK
UPDATE
NOTIFY
REFER
SUBSCRIBE

Related Commands

Command
Description

show services sbc sbe sip method-profiles

Displays a list of all configured SIP method profiles.


show services sbc sbe sip header-profile

To display details of the specified SIP header profile, use the show services sbc sbe sip header-profile command in the EXEC mode.

show services sbc sbc-name sbe sip header-profile profile-name

Syntax Description

profile-name

Specifies the name of the header profile. If you enter the name default, the details of the default header profile are displayed.


Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip header-profile command is used to display details of the specified header profile.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip header-profile Profile1

Header profile "Profile1"
Type:    Blacklist
Headers:
       Myheader
In use by:
       Adjacency:SipAdj1

Related Commands

Command
Description

show services sbc sbe sip header-profiles

Displays a list of all configured SIP header profiles.


show services sbc sbe sip header-profiles

To display a list of all configured SIP header profiles, use the show services sbc sbe sip header-profiles command in the EXEC mode.

show services sbc sbc-name sbe sip header-profiles

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip header-profiles command is used to display a list of all configured header profiles.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip header-profiles

Header profile for SBC service "mysbc"
Name                          In use
====================================
Profile1                           Yes
Default                            No

Related Commands

Command
Description

show services sbc sbe sip header-profile

Displays details of the specified SIP header profile.


show services sbc sbe sip method-profile

To display details of the specified SIP method profile, use the show services sbc sbe sip method-profile command in EXEC mode.

show services sbc sbc-name sbe sip method-profile profile-name

Syntax Description

profile-name

Specifies the name of the method profile. If you enter the name default, the details of the default method profile are displayed.


Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip method-profile command is used to display details of the specified method profile.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip method-profile Profile1

Method profile "Profile1"
Type:    Blacklist
Methods:
      Method1
    In use by:
       Not in use with any adjacencies

Related Commands

Command
Description

show services sbc sbe sip method-profiles

Displays a list of all configured SIP method profiles.


show services sbc sbe sip method-profiles

To display a list of all SIP method profiles, use the show services sbc sbe sip method-profiles command in EXEC mode.

show services sbc sbc-name sbe sip method-profiles

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read


Examples

The following example shows how the show services sbc sbe sip method-profiles command is used to display a list of all configured method profiles.

RP/0/0/CPU0:router# show services sbc mySbc sbe sip method-profiles
Method profile for SBC service "mysbc"
Name                          In use
====================================
Profile1                           No
Default                            Yes







Related Commands

Command
Description

show services sbc sbe sip method-profile

Displays details of the specified SIP method profile.


show services sbc sbe sip timers

To show the current configuration of SIP-related timers, use the show services sbc sbe sip timers command in the EXEC mode. To return to the default value, use the no form of this command.

show services sbc service-name sbe sip timers

Syntax Description

service-name

Specifies the name of the SBC.


Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to list the configurations of SIP-related timers:

RP/0/0/CPU0:router# show services sbc mysbc sbe sip timers

SIP timer configuration:
TCP connect timeout: 0 ms
TCP idle timeout: 120000 ms
TLS idle timeout: 3600000 ms
invite timeout: 180 s
UDP first retransmit interval: 500 ms
UDP max retransmit interval: 4000 ms
UDP response linger period: 5000 ms

show services sbc sbe vrf

To list all the currently assigned bindings between VRF name and VPN IDs within SBC, use the show services sbc sbe vrf command in EXEC mode.

show services sbc sbc-name sbe vrf

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

EXEC

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Task ID
Task ID
Operations

sbc

read

firewall

read


Examples

The following example shows how to list the assigned bindings between VRF name and VPN IDs:

RP/0/0/CPU0:router# show services sbc mySbc sbe vrf

SBC Service "mySbc" VRF name to VPN id bindings

   VRF name                 VPN id (per RFC2685)
   Isp1Vpn1                 00 05 01 : 01 11 11 11
   Isp1Vpn2                 00 05 01 : 01 22 22 22
   Isp1Vpn3                 00 05 01 : 01 33 33 33
   Isp2Vpn1                 01 43 02 : 00 00 00 01
   Isp2Vpn2                 01 43 02 : 00 00 00 02

signaling-address ipv4

To define the local IPv4 signaling address of an H.323 or SIP adjacency, use the signaling-address ipv4 command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.

signaling-address ipv4 ipv4_IP_address

no signaling-address

Syntax Description

ipv4_IP_address

Specifies the IPv4 address for the signaling address of the SIP or H.323 adjacency.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

When defined, the SBE listens on this address for inbound call signaling from the adjacency. If two adjacencies share the same signaling address, a different remote domain name must be specified for each one.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to listen on signaling address 10.1.0.2:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-address ipv4 10.1.0.2

signaling-peer

To configure an H.323 or SIP adjacency to use the given remote signaling-peer, use the signaling-peer command in adjacency sip configuration mode. To remove this configuration, use the no form of this command.

signaling-peer peer-name gk

no signaling-peer

Syntax Description

peer-name

Specifies the IPv4 address in dotted decimal format.

gk

Specifies the H.323 gatekeeper.


Defaults

No default behavior or values

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use gatekeeper 10.10.10.10:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42

RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-peer gk 10.10.10.10

The following example shows how to configure the SIP adjacency SipToIsp42 to use call agent athene:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-peer athene

Related Commands

Command
Description

signaling-peer-port

Configures an H.323 or SIP adjacency to use the given remote signaling-peer's port.


signaling-peer-port

To configure an H.323 or SIP adjacency to use the given remote signaling-peer's port, use the signaling-peer-port command in adjacency sip configuration mode. To remove this configuration, use the no form of this command.

signaling-peer-port port-num

no signaling-peer-port

Syntax Description

port-num

Specifies the number of the signaling port. Range is 1 to 65535.


Defaults

By default, this command assumes that port-num is 5060.

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use port 123 on the signaling peer:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-peer-port 123

The following example shows how to configure the SIP adjacency SipToIsp42 to port 123 as the signaling peer's port:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-peer-port 123

signaling-port

To define the local port of signaling address of an H.323 or SIP adjacency, use the signaling-port command in the appropriate configuration mode. To return to the default value, use the no form of this command.

signaling-port port-num

no signaling-port

Syntax Description

port-num

Specifies the number of the signaling peer. Range is 1 to 65535.


Defaults

port-num: 5060

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The SBE will listen on this port for inbound call signaling from the adjacency. The port will also be appended to the SBE's contact header on outbound SIP requests and responses.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the SIP adjacency SipToIsp42 to listen on signaling port 5000:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-port 5000

Related Commands

Command
Description

signaling-peer

Configures a SIP adjacency to use the given remote signaling-peer.


sip encryption key

To configure a global encryption key on a SIP IBCF adjacency, use the sip encryption key command in the SIP adjacency mode. To deconfigure the global encryption key, use the no form of this command.

sip encryption key key

no sip encryption key key

Syntax Description

key

Specifies the encryption key.


Defaults

None

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the sip encryption key command is used to configure a global encryption key on a SIP IBCF adjacency.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# encryption key mykey

Related Commands

Command
Description

sip inherit profile

Configures a global inherit profile in the SIP adjacency mode.



sip home network identifier

To configure a home network identifier on all IBCF adjacencies, use the sip home network identifier command in the SBE mode. To deconfigure the home network identifier, use the no form of this command.

sip home network identifier network-name

no sip home network identifier

Syntax Description

network-name

Specifies the name of the home network identifier.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the home network identifier command is used to configure a home network identifier on all IBCF adjacencies.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip home network identifier myhome.com

Related Commands

Command
Description

sip visited network identifier

Configures a visited network identifier on a SIP P-CSCF adjacency.



sipi

To configure the SIP-I commands on a SIP adjacency, use the sipi command in SIP adjacency mode. To deconfigure the SIP-I commands, use the no form of this command.

sipi passthrough

no sipi passthrough

Syntax Description

passthrough

Configures a SIP adjacency for SIP-I passthrough.


Defaults

None

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the sipi command is used to configure a SIP adjacency for SIP-I passthrough.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# sipi passthrough

Related Commands

Command
Description

show services sbcs sbe adjacencies

Lists the adjacencies configured on the SBE.



sip inherit profile

To configure a global inherit profile, use the sip inherit command in SIP adjacency mode. To deconfigure the global inherit profile, use the no form of this command.

sip inherit profile {preset -ibcf-ext-untrusted | preset -ibcf-external | preset -ibcf-internal | preset-p-cscf-access | preset-p-cscf-core | preset-standard-non-ims}

no sip inherit profile

Syntax Description

preset-ibcf-ext-untrusted

Specifies a preset IBCF untrusted profile

preset-ibcf-external

Specifies a preset IBCF external profile

preset-ibcf-internal

Specifies a presetIBCF internal profile

preset-p-cscf-access

Specifies a preset P-CSCF-access profile

preset-p-cscf-core

Specifies a preset P-CSCF-core profile

preset-standard-non-ims

Specified a preset standard-non-IMS profile


Defaults

No default behavior or values

Command Modes

Adjacency SIP configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the sip inherit profile command is used to configure a P-CSCF-access inherit profile on a SIP adjacency.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# inherit profile preset-p-cscf-access

Related Commands

Command
Description

sip timer

Enters the mode of a SIP timer function.



sip timer

To enter the mode of the SIP timer function, use the sip timer command in config-sbc-sbe mode. To return to the default value, use the no form of this command.

sip timer

no sip timer

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

config-sbc-sbe

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enter the SIP timer submode:

RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)

sip visited network identifier

To configure a visited network identifier on a SIP Proxy Call Session Controller Function (P-CSCF) adjacency, use the sip visited network identifier command in SBE configuration mode. To deconfigure the visited network identifier, use the no form of this command.

sip visited network identifier network-name

no sip visited network identifier

Syntax Description

network-name

Specifies the name of the visited network identifier.


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.5.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to use the sip visited network identifier command to configure a visited network identifier on a P-CSCF-access adjacency.

RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip visited network identifier cisco.com2

Related Commands

Command
Description

sip home network identifier

Configures a home network identifier on all IBCF adjacencies.


tcp-connect-timeout

To configure the time that SBC waits for a SIP TCP connection to a remote peer to complete before failing that connection, use the tcp-connect-timeout command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.

tcp-connect-timeout interval

no tcp-connect-timeout

Syntax Description

interval

Specifies the time, in milliseconds, that the SIP TCP connection to a remote peer stays alive before timing out.


Defaults

Default interval is 30000 milliseconds.

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to set the TCP connection timeout to 30 seconds.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# tcp-connect-timeout 30000

tcp-idle-timeout

To configure the length of time that the TCP connection should stay active when in the idle state, use the tcp-idle-timeout command in the sbe-sip-tmr mode. To return to the default value, use the no form of this command.

tcp-idle-timeout <interval>

no tcp-idle-timeout

Syntax Description

interval

Specifies the minimum time, in milliseconds, that the TCP connection stays active when it is not processing any traffic. After this time, the TCP connection closes. Range is 1-4294967295 ms.

Note The value for this command might not be precise since the idle timers are checked every 12 seconds.


Defaults

Default value is 120000 ms (2 minutes).

Command Modes

sbe-sip-tmr mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the minimum TCP idle timeout value to 10000 ms.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)#tcp-idle-timeout 10000

tech-prefix

To configure RAS Tech Prefix on an H.323 adjacency, use the tech-prefix command in SBE H.323 adjacency mode. To deconfigure RAS Tech Prefix, use the no form of this command.

tech-prefix tech-prefix name

no tech-prefix tech-prefix name

Syntax Description

tech-prefix name

Specifies the name of the tech-prefix.


Defaults

None

Command Modes

SBE H.323 adjacency

Command History

Release
Modification

Release 3.5.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the tech-prefix command is used to configure RAS Tech Prefix on an H.323 adjacency named H323ToIsp42.

RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# tech-prefix techprefix

timeout

To define the length of time that packets from the source are blocked if the number of authentication requests exceed the set limit, use the timeout command.

The no variant of this command releases the limit duration for blacklisting the source.

timeout time-period

no timeout

Syntax Description

time-period

Duration for which the source is blacklisted after activation of blacklisting.

0 = source not blacklisted

never = blacklisting is permanent

number = integer unit = seconds | minutes | hours | days

Note Period must be less than 23 days.


Defaults

The address-default value defaults to its initial settings. The port-default values default to zero.

If this field is omitted on explicit ports, it defaults to the value given in the port-default for this address.

If this field is omitted on explicit addresses, this field defaults to the value in the address-default for this address.

If this field is omitted for VPN, it defaults to the value for global addresses.

If this field is omitted for the global address space, it defaults to the initial settings.

Command Modes

sbc-sbe-blacklist-reason

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modifications.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command configures a new blacklist on the sbe to affect all packets arriving from address 25.25.25.5 for three minutes.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# timeout 180 seconds
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# commit

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

trigger-period

Defines the period over which events are considered. For details, see the description of the trigger-size command.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.

show services sbc sbe blacklist

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.




tls-idle-timeout

To configure the minimum time that a TLS socket can remain idle before it is closed, use the tls-idle-timeout command in sbe-sip-timer mode. To return to the default value, use the no form of this command.

tls-idle-timeout interval

no tls-idle-timeout

Syntax Description

interval

Specifies the time (in milliseconds) that a TLS socket can remain idle before it is closed. The range is 1 to 4,294,967,295 ms.


Defaults

Default TLS idle timeout interval is 3600000 ms (1 hour).

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to configure the SBC to close TLS connections that have been idle for at least 30 minutes:

RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # tls-idle-timeout 1800000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end

transcode-deny

To forbid transcoding for an entry in the admission control table, use the transcode-deny command in CAC-table configuration mode. To allow transcoding for this entry in the admission control table, use the no form of this command.

transcode-deny

no transcode-deny

Syntax Description

This command has no arguments or keywords.

Defaults

By default, transcoding for this entry in the admission control table is allowed.

Command Modes

CAC-table configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the entry to permit transcoding in the new admission control table MyCacTable:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# transcode-deny

transcoder

To configure that the media gateway is a transcoder, use the transcoder command in Media-gateway configuration mode. To return to the default behavior, use the no form of this command.

transcoder

no transcoder

Syntax Description

This command has no arguments or keywords.

Defaults

By default, this command assumes the media gateway has no transcoding features.

Command Modes

Media-gateway configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to set media gateway 10.0.0.1 to be a transcoder:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1 
RP/0/0/CPU0:router(config-sbc-sbe-media-gateway)# transcoder

transport (h.248)

To configure a DBE to use either UDP or TCP for H.248 control signaling with the specified H.248 controller, use the transport command in controller H.248 configuration mode. To remove this configuration, use the no form of this command.

transport [udp | tcp]

no transport [udp | tcp]

Syntax Description

udp | tcp

udp: Uses UDP transport for H.248 signaling.

tcp: Uses TCP as a transport for H.248 signaling.


Defaults

By default, this command assumes udp signaling.

Command Modes

Controller H.248 configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the H.248 controller with index 1 to use tcp signaling:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248)# transport tcp

transport (vdbe)

To configure an H.248 media gateway controller to use a specified transport controller, use the transport command in the mode for configuring an H.248 media gateway controller.

transport {udp | tcp} [interim-auth-header]

Syntax Description

udp

Specifies UDP as the transport protocol for H.248 signaling.

tcp

Specifies TCP as the transport protocol for H.248 signaling.

interim-auth-header

(Optional) Inserts the interim authentication header into the H.248 messages.


Defaults

None

Command Modes

sbc-dbe-vdbe-h248 mode

Command History

Release
Modification

Release 3.5.0

This command was first introduced on the Cisco CRS-1.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how the transport command is used to configure an H.248 media gateway controller to use a specified transport controller.

RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# controller h248 1
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe-h248)# transport tcp interim-auth-header

trigger-period

To define the period over which events are considered, use the trigger-period command. For more detailed information, see the related trigger-size command description.

The no variant of this command releases the previously configured trigger period in which events should be considered.

trigger-period time

no trigger-period

Syntax Description

time

The number of milliseconds that it takes for the leaky bucket to empty. This can be any value from 0 to 65535.


Defaults

The address-default value defaults to its initial settings. The port-default values default to zero.

If this field is omitted on explicit ports, it defaults to the value given in the port-default for this address.

If this field is omitted on explicit addresses, this field defaults to the value in the address-default for this address.

If this field is omitted for VPN, it defaults to the value for global addresses.

If this field is omitted for the global address space, it defaults to the initial settings.

Command Modes

sbc-sbe-blacklist-reason

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command configures the source to be blacklisted if authentication failures have occurred at a recent steady rate of over 200/s (or 40 in a 100-ms burst).

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# trigger-period 100 milliseconds

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.

show services sbc sbe blacklist

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.



trigger-size

To define the allowable number of events from the specified source before blacklisting is triggered, and to block all packets from reaching the source, use the trigger-size command.

The no variant of this command releases the previously configured number of allowable events before blacklisting is triggered.

trigger-size number

no trigger-size

Syntax Description

number

The minimum number of consecutive events that must occur faster on average than the trigger rate to activate the blacklist. Can be any value from 0 to 65535.


Defaults

The address-default value defaults to its initial settings. The port-default values default to zero.

If this field is omitted on explicit ports, it defaults to the value given in the port-default for the given address.

If this field is omitted on explicit addresses, it defaults to the value given in the address-default for the given address.

If this field is omitted for VPN, it defaults to the values of global addresses.

If this field is omitted for the global address space, it defaults to the initial settings.

Command Modes

sbc-sbe-blacklist-reason

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

The number of events recorded decays linearly to zero to give a leaky bucket average over the trigger period. The steady-state maximum event rate therefore equals this trigger size divided by the trigger period. The maximum number of events in a much shorter period is this trigger size.

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command configures the source to be blacklisted if a burst of more than 20 authentication failures enter within a time period smaller than the trigger period.

RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# trigger-size 20

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).

trigger-period

Defines the period over which events are considered.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.

show services sbc sbe blacklist

Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.



udp-first-retransmit-interval

To configure the time that SBC waits for a UDP response or ACK before sending the first retransmission of the relevant signal, use the udp-first-retransmit-interval command in sbe-sip-timer mode. To return to the default value, use the no form of this command.

udp-first-retransmit-interval <interval>

no udp-first-retransmit-interval

Syntax Description

interval

Specifies the time interval (in milliseconds) that SBC waits for a response or ACK before sending the first retransmission of a UDP signal.

If UDP response failure continues, SBC doubles subsequent retransmission intervals each time until the intervals reach a maximum that you set using the udp-max-retransmit-interval command.


Defaults

Default first UDP retransmission interval is 500 milliseconds.

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command shows how to configure the SBC to send the first UDP retransmission after waiting for 1000 milliseconds:

RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # udp-first-retransmit-interval 1000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end

Related Commands

Command
Description

udp-max-retransmit-
interval

Configures the maximum interval SBC waits before retransmitting a UDP signal.


udp-max-retransmit-interval

To configure the maximum time interval that SBC waits before retransmitting a signal, use the udp-max-retransmit-interval command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.

udp-max-retransmit-interval interval

no udp-max-retransmit-interval

Syntax Description

interval

Specifies the maximum time interval (in milliseconds) that SBC waits before retransmitting a signal.


Defaults

Default maximum UDP retransmission interval is 4 seconds

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following command sets the SBC maximum retransmission interval to 8 seconds:

RP/0/0/CPU0:router(config)# sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr)# udp-max-retransmit-interval 8000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr)# end






Related Commands

Command
Description

udp-first-retransmit-
interval

Configures the time interval SBC waits for a UDP response before the first retransmission of the relevant signal.


udp-response-linger-period

To configure the time period that SBC retains negative UDP responses to invite requests, use the udp-response-linger-period command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.

udp-response-linger-period interval

no udp-response-linger-period

Syntax Description

interval

Specifies the time period (in milliseconds) during which SBC retains negative UDP responses to invite requests. All retransmitted responses received within this time period are answered with a negative ACK. Any further retransmitted responses are ignored.


Defaults

Default UDP response linger period is 32000 milliseconds.

Command Modes

sbe-sip-tmr

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to set SBC to retain negative UDP responses for 10000 milliseconds:

RP/0/0/CPU0:router(config)# sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# udp-response-linger-period 10000
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# end

Related Commands

Command
Description

invite-timeout

Specifies the time, in seconds, that SBC waits before timing out an outbound invite request.


unexpected-source-alerting

To enable alerting when media packets for a call are received from an unexpected source address and port, use the unexpected-source-alerting command. To disable alerting, use the no version of this command.

unexpected-source-alerting

no unexpected-source-alerting

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

vDBE mode

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

You should only enable this configuration option on trusted networks where any single such instance might indicate a threat to network security.

Alerts on the same flow are rate are limited, as are the total number of alerts reported at any one time. This ensures management systems are not flooded with reports. Consequently, there is no one-to-one correspondence between alerts and incorrect packets.

Diagnosing and resolving the issue of rogue packets is beyond the scope of this command; rather, it is simply the messenger in this regard.

All packets from unexpected sources are dropped.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example enables alerting when media packets for a call are received from an unexpected source address and port in the vDBE mode:

RP/0/0/CPU0:router(config)# sbc mySbc dbe 
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# unexpected-source-alerting
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# end

Related Commands

Command
Description

show services sbc dbe media-flow-stats

Displays details about media flow statistics configured on the dbe.

vdbe

Enters a submode, in which you can configure alerts for unexpected source addresses.


use-any-local-port

To configure a DBE to use any available local port when connecting to the default MGC, use the use-any-local-port command in vDBE configuration mode. To remove this configuration, use the no form of this command.

use-any-local-port

no use-any-local-port

Syntax Description

This command has no arguments or keywords.

Defaults

The default behavior is to use any local port.

Command Modes

vDBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to configure the DBE to use any local port:

RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# use-any-local-port

vdbe

To enter the mode for configuring the Virtual Data Border Element (vDBE), use the vdbe command.

vdbe

Syntax Description

This command does not contain keywords or arguments.

Defaults

None

Command Modes

DBE configuration

Command History

Release
Modification

Release 3.4.1

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write


Examples

The following example shows how to enter the vdbe submode:

RP/0/0/CPU0:PE6_C12406(config)# sbc mySbc dbe
RP/0/0/CPU0:PE6_C12406(config-sbc-dbe)# vdbe

Related Commands

Command
Description

unexpected-source-alerting

Enables alerting when media packets for a call are received from an unexpected source address and port.

show services sbc dbe media-flow-stats

Displays details about media flow statistics configured on the dbe.


vrf (interface)

To assign an SBC interface to a VRF, use the vrf command in interface SBC configuration mode. To unassign an SBC interface from a VRF, use the no form of this command.

vrf vrf-name

no vrf

Syntax Description

vrf-name

Specifies the name assigned to a VRF.


Defaults

None

Command Modes

Interface SBC configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to assign interface SBC10 to the VRF vpn3:

RP/0/0/CPU0:router(config)# interface sbc 10
RP/0/0/CPU0:router (config-if-sbc)# vrf vpn3

Related Commands

Command
Description

vrf

Configures an H.323 adjacency as tied to a specific VPN.


vrf

To configure an H.323 or SIP adjacency as tied to a specific VPN, use the vrf command in the appropriate configuration mode. To remove this configuration, use the no form of this command.

vrf vrf_name

no vrf

Syntax Description

vrf_name

Specifies the VRF of this adjacency.


Defaults

None

Command Modes

Adjacency H.323 configuration

Adjacency SIP configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The adjacency will only receive incoming signaling from this VPN. The adjacency's outgoing signaling is routed in the relevant VRF.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to assign the H.323 adjacency h323ToIsp42 to VRF vpn3:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# vrf vpn3

The following example shows how to configure the SIP adjacency SipToIsp42 to VPN using VRF vpn3:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# vrf vpn3

Related Commands

Command
Description

vrf vpn-id

Assigns an SBC interface to a VRF.


vrf vpn-id

To configure a globally unique VPN ID to the given VPN routing and forwarding instance (VRF), use the vrf vpn-id command in SBE configuration mode. To delete the previously assigned VRF name, use the no form of this command.

vrf vrf-name vpn-id vpn-id

no vrf vrf-name vpn-id vpn-id

Syntax Description

vrf-name

Specifies the VRF to which the VPN ID is to be assigned.

vpn-id

A 7-byte, globally unique identifier for the VPN (as defined by RFC 2685).


Defaults

None

Command Modes

SBE configuration

Command History

Release
Modification

Release 3.3.0

This command was introduced on the Cisco XR 12000 Series Router.

Release 3.4.0

No modification.

Release 3.5.0

No modification.

Release 3.6.0

No modification.


Usage Guidelines

To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

This is used by SBC to unambiguously identify VRFs when programming remote DBEs.

For more information about this command, see RFC2685.

Task ID
Task ID
Operations

sbc

read, write

firewall

read, write


Examples

The following example shows how to assign the 7-byte VPN ID 00010203040506 to the VRF named fred:

RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# vrf fred vpn-id 00010203040506

Related Commands

Command
Description

show services sbc sbe vrf

Lists all the currently assigned bindings between VRF name and VPN IDs within SBC.