Table Of Contents
SBC Commands on Cisco IOS XR Software
account
action (CAC)
action (NA-DST)
action (RTG-SRC)
activate
active-cac-policy-set
active-call-policy-set
address ipv4
adjacency
adjacency timeout
alias
allow private info
attach
attach-controllers
authentication endpoint
authentication-key
authentication mode
authentication nonce timeout
authentication-realm
billing
blacklist (DoS)
blacklist (sip)
blacklist address-default
blacklist default-port-limit
cache
cac-table
callee-dscp
callee-fax-qos-profile
callee-ip-precedence
callee-ip-TOS
callee-privacy
callee-sig-qos-profile
callee-video-qos-profile
callee-voice-qos-profile
caller-dscp
caller-fax-qos-profile
caller-ip-precedence
caller-ip-TOS
caller-privacy
caller-sig-qos-profile
caller-video-qos-profile
caller-voice-qos-profile
call-policy-set
category (NA-DST)
category (NA-SRC)
clear blacklist
clear services
clear services sbc sbe policy-failure-stats dst-account
clear services sbc sbe policy-failure-stats dst-adjacency
clear services sbc sbe policy-failure-stats src-account
clear services sbc sbe policy-failure-stats src-adjacency
codec
codec-list
codec-list description
codec packetization-period
codecs
complete
congestion-cleared
congestion-threshold
control address aaa
control address h248 (SBE)
control-address h248 ipv4 (DBE)
controller h248
critical-alarm-threshold
dbe-location-id
deact-mode
description
disabled
dst-adjacency
dscp
dtmf-duration
dtmf-relay
early-media-deny
early-media-direction
early-media-timeout
edit-cic
edit
entry
fast-register disable
fast-register-interval
first-cac-scope
first-cac-table
first-call-routing-table
first-number-analysis-table
first-reg-routing-table
force-limited-call-hold
group
h225 timeout
h245-tunnel disable
h248 allow-all-mg
h248-association-timeout
h248-max-term-per-context
h248-media-alert-event
h248-napt-package
h248-preserve-gates
h248-profile
h248-profile-version
h248-tmax
h248-version
header
header-profile (adj-sip)
header-profile (sip)
hold-media-timeout
hunting-trigger
hw-module service sbc location
invite-timeout
ip precedence
ip TOS
ipv4 address
ipv4
key
ldr-check
local-address
local-id host
local-port
location-id
major-alarm-threshold
marking
match-account
match-address
match-adjacency
match-cic
match-domain
match-number
match-prefix
match-type
match-value
max-bandwidth
max-call-rate
max-channels
max-num-calls
max-pdu-size
max-regs
max-regs-rate
max-updates
media-address
media-address port range
media-bypass
media-bypass-forbid
media-gateway
media-timeout
method
method-profile (adj-sip)
method-profile (sip)
minor-alarm-threshold
mode
na-dst-prefix-table
na-src-account-table
nat
network-id
overload-time-threshold
package
pass-body
passthrough
pause
port
port-range
prefix
priority
privacy restrict outbound
qos fax
qos sig
qos video
qos voice
radius
ras retry
ras rrq
ras timeout
reason
redirect-limit
redirect-mode
registration rewrite-register
registration target address
registration target port
remote-address ipv4
resend
resource-priority
resource-priority-set
rtg-carrier-id-table
rtg-dst-address-table
rtg-dst-domain-table
rtg-round-robin-table
rtg-src-account-table
rtg-src-address-table
rtg-src-adjacency-table
rtg-src-domain-table
rtp payload-type nte
secure-media
security
server
service-location preferred-active
show services redundancy
show services sbc dbe addresses
show services sbc dbe controllers
show services sbc dbe h248-profile
show services sbc dbe media-flow-stats
show services sbc dbe media-stats
show services sbc dbe signaling-flow-stats
show services sbc sbe adjacencies
show services sbc sbe adjacency all-authentication-realms
show services sbc sbe adjacency authentication-realms
show services sbc sbe billing
show services sbc sbe blacklist
show services sbc sbe blacklist configured-limits
show services sbc sbe blacklist current-blacklisting
show services sbc sbe cac-policy-set
show services sbc sbe call-policy-set
show services sbc sbe call-policy-sets
show services sbc sbe call-policy-set table entries
show services sbc sbe calls
show services sbc sbe call-stats
show services sbc sbe codec-list
show services sbc sbe gates
show services sbc sbe h323 timers
show services sbc sbe hold-media-timeout
show services sbc sbe hunting-trigger
show services sbc sbe media-gateway-associations
show services sbc sbe media-gateways
show services sbc sbe policy-failure-stats
show services sbc sbe policy-failure-stats dst-account
show services sbc sbe policy-failure-stats dst-adjacency
show services sbc sbe policy-failure-stats src-account
show services sbc sbe policy-failure-stats src-adjacency
show services sbc sbe qos-profiles
show services sbc sbe radius-client-stats
show services sbc sbe radius-server-stats
show services sbc sbe redirect-limit
show services sbc sbe sip essential-headers
show services sbc sbe sip essential-methods
show services sbc sbe sip header-profile
show services sbc sbe sip header-profiles
show services sbc sbe sip method-profile
show services sbc sbe sip method-profiles
show services sbc sbe sip timers
show services sbc sbe vrf
signaling-address ipv4
signaling-peer
signaling-peer-port
signaling-port
sip encryption key
sip home network identifier
sipi
sip inherit profile
sip timer
sip visited network identifier
tcp-connect-timeout
tcp-idle-timeout
tech-prefix
timeout
tls-idle-timeout
transcode-deny
transcoder
transport (h.248)
transport (vdbe)
trigger-period
trigger-size
udp-first-retransmit-interval
udp-max-retransmit-interval
udp-response-linger-period
unexpected-source-alerting
use-any-local-port
vdbe
vrf (interface)
vrf
vrf vpn-id
SBC Commands on Cisco IOS XR Software
This section describes session border controller (SBC) commands on Cisco IOS XR software.
Note
The commands documented in this section use complex modes and submodes. Accordingly, you must be in the correct configuration mode and submode to run each command. The "Examples" section provided for each command shows the hierarchy of modes and submodes required to run the command.
account
To define a SIP or H.323 adjacency account on an SBE, use the account command in the appropriate configuration mode. To remove this definition, use the no form of this command.
account account-name
no account account-name
Syntax Description
account-name
|
Specifies the SBE account name.
|
Defaults
No account name is associated with the adjacency
Command Modes
Adjacency SIP configuration
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to account isp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# account isp42
The following example shows how to configure the SIP adjacency SipToIsp42 to account isp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# account isp42
action (CAC)
To configure the action to perform after the entry in an admission control table, use the action (CAC) command in CAC configuration mode. To delete the action, use the no form of this command.
action [cac-complete | next-table goto-table-name | cac-complete]
Syntax Description
cac-complete
|
When an event matches this CAC policy is complete.
|
goto-table-name
|
Specifies the table name identifying the next CAC table to process (or cac-complete, if processing should stop).
|
Defaults
None
Command Modes
CAC configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the action to perform after the entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table)# action cac-complete
Related Commands
Command
|
Description
|
action (RTG-SRC)
|
Configures the action to take if a routing entry is chosen.
|
action (NA-DST)
|
Configures the action to perform after an entry in an admission control table.
|
action (NA-DST)
To configure the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account, use the action (NA-DST) command in the appropriate configuration mode. To delete the action, use the no form of this command.
action [next-table goto-table-name | accept | reject]
no action
Syntax Description
next-table goto-table-name
|
Specifies the next number analysis table to process, if the event matches this entry.
|
accept
|
Configures the call to be accepted if it matches the entry in the table.
|
reject
|
Configures the call to be rejected if it matches the entry in the table.
|
Defaults
None
Command Modes
NA-DST-number-table configuration mode
NA-DST-prefix-table configuration mode
NA-SRC-adjacency-table configuration mode
NA-SRC-account-table configuration mode
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the call to be accepted if it matches the entry in the new number analysis table MyNaTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept
The following example shows how to configure the call to be accepted if it matches the start of the entry in the new number analysis table MyNaTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept
The following example shows how to configure the call to be accepted if it matches the source adjacency entry in the new number analysis table MyNaTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-adjacency-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept
The following example shows how to configure the call to be accepted if it matches the source account entry in the new number analysis table MyNaTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# action accept
Related Commands
Command
|
Description
|
action (RTG-SRC)
|
Configures the action to take if a routing entry is chosen.
|
action (CAC)
|
Configures the action to perform after an entry in an admission control table.
|
action (RTG-SRC)
To configure the action to take if a routing entry is chosen, use the action (RTG-SRC) command in the appropriate configuration mode. To delete the action, use the no form of this command.
action [next-table goto-table-name | complete | reject]
no action
Syntax Description
next-table goto-table-name
|
Specifies the next routing table to process if the event matches the entry.
|
complete
|
Completes the action. This keyword is supported for rtg-round-robin-table routing tables only.
|
reject
|
Rejects the indicated action.
|
Defaults
None
Command Modes
RTG-SRC-address-table configuration
RTG-SRC-adjacency-table configuration
RTG-SRC-account-table configuration
RTG-round-robin-table configuration
RTG-DST-address-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject
The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-adjacency 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject
The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-account 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject
The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject
The following example configures the match-value of an entry in the new routing table MyRtgTable and if any calls match this criterion, they are rejected.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action complete
Related Commands
Command
|
Description
|
action (NA-DST)
|
Configures the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account.
|
action (CAC)
|
Configures the action to perform after an entry in an admission control table.
|
activate
To initiate the SBC service when all SBE or DBE address configuration have been successfully committed, use the activate command in the appropriate configuration mode. To deactivate the SBE service of the SBC, use the no form of this command.
activate
no activate
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
DBE configuration
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to activate the DBE on the service mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router (config-sbc-dbe)# activate
The following example shows how to activate the SBE on the service mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# activate
Related Commands
Command
|
Description
|
deact-mode
|
Indicates how to implement the deactivation of an SBE.
|
active-cac-policy-set
To set the active CAC-policy-set within an SBE entity, use the active-cac-policy-set command in SBE configuration mode. To deconfigure the active policy set, leaving the SBE with no active policy set, use the no form of this command.
active-cac-policy-set policy-set-id
no active-cac-policy-set policy-set-id
Syntax Description
policy-set-id
|
Integer identifying the policy set that should be made active. Range is 1 to 2147483647.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to activate policy set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# active-cac-policy-set 1
active-call-policy-set
To set the active routing policy set within an SBE entity, use the active-call-policy-set command in SBE configuration mode. To deconfigure the active routing policy set, leaving the SBE with no active routing policy set, use the no form of this command.
active-call-policy-set policy-set-id
no active-call-policy-set
Syntax Description
policy-set-id
|
Integer that identifies the policy set that should be made active. Range is 1 to 2147483647.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
If another policy set was previously active, it is made inactive by executing this command. The SBE is created with no active routing policy set; an active routing policy set must be explicitly configured using this command.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to activate policy set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# active-call-policy-set 1
address ipv4
To configure the address of the authentication server, use the address ipv4 command in server configuration mode. To remove the address configuration for the authentication server, use the no form of this command.
address ipv4 server-name
no address ipv4 server-name
Syntax Description
server-name
|
Specifies the DNS name or IP address of the authentication server.
|
Defaults
None
Command Modes
Server configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure authentication servers acctsvr and acctsvr2 on mySbc for the authentication RADIUS client:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# address acctsvr2
adjacency
To configure an adjacency for an SBC service, use the adjacency command in SBE mode. To deconfigure the adjacency, use the no form of this command.
adjacency {sip | h323} adjacency name
no adjacency {sip | h323} adjacency name
Syntax Description
sip
|
Enters the mode of an SBE SIP adjacency.
|
h323
|
Enters the mode of an SBE H.323 adjacency.
|
adjacency name
|
Specifies the name of the SBE SIP or H.323 adjacency.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section below shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the adjacency command configures a SIP adjacency named sipGW.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip sipGW
The following example shows how the adjacency command configures an H.323 adjacency named
H323ToIsp42.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
adjacency timeout
To configure the adjacency retry timeout interval, use the adjacency timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.
adjacency timeout value
no adjacency timeout value
Syntax Description
value
|
Specifies the timeout period in milliseconds. Valid values are from 10000 to 30000. The default value is 30 seconds.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the adjacency timeout command configures adjacency retry timeout in Adjacency H.323 configuration mode.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# adjacency timeout 10000
The following example shows how the adjacency timeout command configures adjacency retry timeout in H.323 configuration mode.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# adjacency timeout 10000
alias
To configure the endpoint alias of an H.323 adjacency, use the alias command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.
alias alias-name
no alias
Syntax Description
alias-name
|
Specifies the alias of the H.323 adjacency endpoint.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 endpoint alias to end1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# alias end1
Related Commands
allow private info
To configure an H.323 adjacency to allow private information on messages sent out by the adjacency, use the allow private info command in the H.323 adjacency mode. To disallow private information on messages sent out by the adjacency, use the no form of this command.
allow private info
no allow private info
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command. Please note that if you configure the H.323 adjacency to allow private information, then it will allow private information on messages even if the CAC policy is configured to apply privacy service or the user requests privacy service.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the allow private info command is used to configure an H.323 adjacency to allow private information on messages sent by the adjacency.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323ToIsp422
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# allow private info
Related Commands
Command
|
Description
|
privacy restrict outbound
|
Configures an H.323 adjacency to apply privacy restriction on outbound messages if the user requests it.
|
attach
To attach an adjacency to an account on an SBE, use the attach command in the appropriate configuration mode. To detach the adjacency from an account on an SBE, use the no form of this command.
attach
no attach force
Syntax Description
force
|
Executes a forced detach.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Use the force argument to tear all SBE calls down.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to attach the H.323 adjacency to h323ToIsp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# attach
attach-controllers
To configure a DBE to attach to a controller, use the attach-controllers command in vDBE configuration mode. To detach from a controller, use the no form of this command.
attach-controllers
no attach-controllers force
Syntax Description
force
|
Executes a forced detach. In such cases, all calls through this vDBE are immediately torn down.
|
Defaults
None
Command Modes
vDBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure a DBE to attach to a controller:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# attach-controllers
authentication endpoint
To configure the H.323 adjacency to use endpoint authentication, use the authentication endpoint command in Adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.
authentication endpoint
no authentication endpoint
Syntax Description
This command has no arguments or keywords.
Defaults
By default, no authentication procedures are performed.
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to use endpoint authentication:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication endpoint
Related Commands
authentication-key
To configure the H.323 adjacency authentication key, use the authentication-key command in Adjacency H.323 configuration mode. To deconfigure the H.323 adjacency authentication key, use the no form of this command.
authentication-key key
no authentication-key
Syntax Description
key
|
Specifies the authentication key. (This is valid only when authentication is turned on.)
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure H.323 adjacency h323ToIsp42 to use authentication key FG56KJ:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# authentication-key FG56KJ
Related Commands
authentication mode
To configure the authentication mode for a SIP adjacency, use the authentication mode command in the SIP adjacency mode. To deconfigure the authentication mode, use the no form of this command.
authentication mode {local | remote}
no authentication mode {local | remote}
Syntax Description
local
|
Configures the Sip adjacency for local authentication.
|
remote
|
Configures the SIP adjacency for remote authentication.
|
Defaults
None
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the authentication mode command is used to configure the SIP adjacency for local authentication:
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# authentication mode local
Related Commands
Command
|
Description
|
authentication nonce timeout
|
Configures the authentication nonce timeout for a SIP adjacency.
|
authentication nonce timeout
To configure the authentication nonce timeout for a SIP adjacency, use the authentication nonce timeout command in the SIP adjacency mode. To deconfigure the authentication nonce timeout, use the no form of this command.
authentication nonce timeout value
no authentication nonce timeout
Syntax Description
value
|
Specifies the timeout value in seconds. The range of values is 0 to 65535 seconds.
|
Defaults
The default timeout value is 300 seconds.
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the authentication nonce timeout command is used to configure the authentication nonce timeout in seconds for a SIP adjacency:
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# authentication nonce timeout 10
Related Commands
Command
|
Description
|
authentication mode
|
Configures the authentication mode for a SIP adjacency.
|
authentication-realm
To configure a set of authentication credentials for a specified domain on the specified SIP adjacency, use the authentication-realm command in SIP adjacency configuration mode. To deconfigure the authentication realm on the specified adjacency, use the no form of this command.
authentication-realm {inbound domain | outbound domain username password}
no authentication-realm {inbound domain | outbound domain}
Syntax Description
inbound
|
Specifies inbound authentication-realm.
|
outbound
|
Specifies outbound authentication-realm.
|
domain
|
Name of the domain for which the authentication credentials are valid.
|
username
|
Username that identifies the SBC in the specified domain.
|
password
|
Password to authenticate the username in the specified domain.
|
Defaults
None
Command Modes
SIP adjacency configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the authentication-realm command configures an authentication realm for the domain example.com on SIP adjacency SipToIsp42:
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SiptoISP42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# authentication-realm outbound example.com
usersbc passwordsbc
billing
To configure local and remote billing policies, use the billing command in SBE configuration mode. To reset all parameters to their default values, use the no form of this command.
billing {local | remote}
no billing {local | remote}
Syntax Description
local
|
Configures local billing policies.
|
remote
|
Configures remote billing policies.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to enter the local billing mode for mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)#
Related Commands
Command
|
Description
|
blacklist address-default
|
Configures the name of the local or remote directory where to store the billing information.
|
critical-alarm-threshold
|
Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.
|
ldr-check
|
Configures the time of day to run the long duration check.
|
local-address
|
Configures the local IPv4 address.
|
major-alarm-threshold
|
Configures the threshold at which a major alarm is generated if the CDR file reaches that size.
|
minor-alarm-threshold
|
Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.
|
blacklist (DoS)
To enter the mode for configuring the event limits of a given source, use the blacklist command in the SBE mode. To return the event limits to the default values, use the no form of this command.
blacklist source
no blacklist source
Syntax Description
source
|
Specifies the VPN ID, an IP address, or port of a given address.
The following values are valid:
• global—for all global addresses
• VRF name—for all addresses within a given VPN
• {ipv4 IP address}—for a global IP address
• {VRF name ipv4 IP address}—for a specific VPN IP address
• {ipv4 IP address {UDP | TCP} port number}—for a global port
• {VRF name ipv4 IP address {UDP | TCP} port number} for a VPN port
|
Defaults
This field must be configured in one of the forms specified above.
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the blacklist command is used to enter the mode for configuring the event limits for the IP address 25.25.25.5:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 25.25.25.5
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
trigger-period
|
Defines the period over which events are considered.
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
blacklist (sip)
To configure SIP header or method blacklist profiles on a Session Initiation Protocol (SIP) message, use the blacklist command in the appropriate configuration mode. To configure the profile as a whitelist, use the no form of this command.
blacklist
no blacklist
Syntax Description
This command has no arguments or keywords.
Defaults
The profile is a whitelist.
Command Modes
SIP header-profile configuration
SIP method-profile configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to use the blacklist command to configure the SIP header profile test1 as a blacklist:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr)# blacklist
The following example shows how to use the blacklist command to configure the SIP method profile test1 as a blacklist:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# blacklist
blacklist address-default
To enter the mode for configuring the default event limits for the source addresses in a given VPN, use the blacklist command in the SBE mode. To set the values for the VPN to the same as global addresses, use the no form of this command.
blacklist VRF name address-default
no blacklist VRF name address-default
Syntax Description
VRF name
|
Specifies the VRF of the VPN. To use the default value, this argument is omitted.
|
Defaults
Event limits are set to the same value for all VPNs.
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the blacklist address-default command is used to enter the mode for configuring the default event limits for all addresses:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist address-default
Related Commands
Command
|
Description
|
blacklist default-port-limit
|
Enters a submode for configuring the default even limits for the ports of a given address.
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
trigger-period
|
Defines the period over which events are considered.
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
blacklist default-port-limit
To enter the mode for configuring the default event limits for the ports of a given address, use the blacklist default-port-limit command in the SBE mode. To remove the event limits set, use the no form of this command.
blacklist {ipv4 IP address | VRF name ipv4 IP address} default-port-limit
no blacklist {ipv4 IP address | VRF name ipv4 IP address} default-port-limit
Syntax Description
ipv4
|
Specifies IPv4.
|
IP address
|
Specifies the IPv4 address.
|
VRF name
|
Specifies the VRF of the VPN. To use the default value, this argument is omitted.
|
Defaults
No event limits are defined for ports.
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the blacklist default-port-limit command is used to enter the mode for configuring the default event limits for the ports of the source address 123.123.2.2:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 123.123.2.2 default-port-limit
Related Commands
Command
|
Description
|
blacklist address-default
|
Enters the mode for configuring the default event limits for the source addresses in a given VPN.
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
trigger-period
|
Defines the period over which events are considered.
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
cache
To configure the local or remote billing directory where to store the billing records, use the cache command in the appropriate configuration mode. The billing directory is created under the default billing path. To unset the local or remote billing directory, use the no form of this command.
cache name
no cache
Syntax Description
name
|
Specifies the local or remote billing directory under the default billing path. See Usage Guidelines.
|
Defaults
The default drives for billing are:
•
harddisk: for local billing
•
disk0: for remote billing
After an SBC instance is created:
•
A predefined billing directory is mounted onto the Replication Data Service File System (RDSFS).
•
The billing directory name contains a prefix followed by _instance-name.
•
The billing directory prefix is sbcl for local billing and sbcr for remote billing.
For example, if an SBC instance mysbc is created, the two new RDSFS-mounted billing directories are:
•
harddisk:/sbcl_mysbc for local billing
•
disk0:/sbcr_mysbc for remote billing
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.3.1
|
The path parameter was changed to the name parameter.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure a cache named mybillingrecords:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# cache mybillingrecords
cac-table
To create or configure an admission control table, use the cac-table command in CAC-policy-set configuration mode. To delete the admission control table, use the no form of this command.
cac-table table-name
no cac-table table-name
Syntax Description
table-name
|
Specifies the admission control table.
|
Defaults
None
Command Modes
CAC-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create the admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)#
Related Commands
Command
|
Description
|
description
|
Configures the descriptive text describing an admission control table within the context of an SBE policy set.
|
match-type
|
Configures the match-type of an admission control table within the context of an SBE policy set.
|
callee-dscp
To configure the DSCP to apply to signaling packets sent to the original callee, use the callee-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.
callee-dscp dscp
no callee-dscp
Syntax Description
dscp
|
Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.
|
Defaults
dscp: 0
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use DSCP AF41 for packets sent from the SBC to the original callee:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-dscp 34
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#
callee-fax-qos-profile
To configure the QoS profile to use for media packets sent to the original callee, use the callee-fax-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.
callee-fax-qos-profile profile-name
no callee-fax-qos-profile
Syntax Description
profile-name
|
Specifies a QoS profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls to the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original callee:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-fax-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#
callee-ip-precedence
To configure the IP precedence to apply to signaling packets sent to the original callee, use the callee-ip-precedence command in CAC table configuration mode. To remove this configuration and set the IP precedence to its default (which is 0), use the no form of this command.
callee-ip-precedence value
no callee-ip-precedence
Syntax Description
value
|
Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.
|
Defaults
The default value is 0.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use IP precedence 4 for packets sent from the SBC to the original callee:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-precedence 4
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
callee-ip-TOS
To configure the IP ToS to apply to signaling packets sent to the original callee, use the callee-ip-TOS command in CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.
callee-ip-TOS value
no callee-ip-TOS
Syntax Description
value
|
Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:
• 8: Minimize delay.
• 4: Maximize throughput.
• 2: Maximize reliability.
• 1: Minimize monetary cost.
|
Defaults
The default value is 0 (normal service).
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use IP ToS 3 for packets sent from the SBC to the original callee:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-ip-TOS 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
callee-privacy
To configure the level of privacy processing to perform on messages sent from callee to caller, use the callee-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.
callee-privacy [callee_priv_setting]
no callee-privacy
Syntax Description
callee_priv_setting
|
Indicates specific callee privacy setting. Values are:
• never: Never hides the identity.
• account-boundary: Hides the identity if caller is different account from callee.
• always: Always hides the identity.
|
Defaults
callee_priv_setting=never
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the entry to always hide callee identity in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# callee-privacy always
callee-sig-qos-profile
To configure the QoS profile to be used for signaling packets sent to the original callee, use the callee-sig-qos-profile command in the CAC policy Admission control table mode. To deconfigure the QoS profile, use the no form of this command.
callee-sig-qos-profile profile-name
no callee-sig-qos-profile profile-name
Syntax Description
profile-name
|
Specifies the name of the QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
CAC policy admission control table entry configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the callee-sig-qos-profile command is used to configure the QoS profile named enterprise to be used for signaling packets sent to the original callee.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-sig-qos-profile
enterprise
callee-video-qos-profile
To configure the QoS profile to use for media packets sent to the original callee, use the callee-video-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.
callee-video-qos-profile profile-name
no callee-video-qos-profile
Syntax Description
profile-name
|
Specifies the QoS profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
The callee-video-qos-profile can be executed only at the per-call scope. CAC policy does not activate if configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original callee:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-video-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
callee-voice-qos-profile
To configure the QoS profile to use for media packets sent to the original callee, use the callee-voice-qos-profile command in CAC table configuration mode. To return to the default behavior, use the no form of this command.
callee-voice-qos-profile profile-name
no callee-voice-qos-profile
Syntax Description
profile-name
|
Specifies the QoS profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original callee.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# callee-voice-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-dscp
To configure the DSCP to apply to signaling packets sent to the original caller, use the caller-dscp command in CAC table configuration mode. To deconfigure the DSCP and set the DSCP value to 0, use the no form of this command.
caller-dscp dscp
no caller-dscp
Syntax Description
dscp
|
Specifies the DSCP value with which to mark signaling packets. Range is 0 to 63.
|
Defaults
The default value is 0.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use DSCP AF31 for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-dscp 26
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-fax-qos-profile
To configure the QoS profile to use for media packets sent to the original caller, use the caller-fax-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.
caller-fax-qos-profile profile-name
no caller-fax-qos-profile
Syntax Description
profile-name
|
Specifies the QoS profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use the fax QoS profile enterprise for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-fax-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-ip-precedence
To configure the IP precedence to apply to signaling packets sent to the original caller, use the caller-ip-precedence command in CAC table configuration mode. To return the configuration to the default IP precedence (which is 0), use the no form of this command.
caller-ip-precedence value
no caller-ip-precedence
Syntax Description
value
|
Specifies the IP precedence with which to mark signaling packets. Range is 0 to 7.
|
Defaults
The default value is 0.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The IP precedence is not be applied until you run the CAC decision process. This means that some initial signaling packets sent to the caller do not receive any particular IP precedence marking. If a DSCP has been configured in this submode, the DSCP value takes precedence, and the IP precedence value is not used.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use IP precedence 3 for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-precedence 3
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-ip-TOS
To configure the IP ToS to apply to signaling packets sent to the original caller, use the caller-ip-TOS command in CAC table configuration mode. To return to the default IP ToS (which is 0), use the no form of this command.
caller-ip-TOS value
no caller-ip-TOS
Syntax Description
value
|
Specifies the IP ToS with which to mark signaling packets. This may be a value of 0 (normal service) or a bitfield consisting of one or more of the following bits OR'ed together:
8: Minimize delay.
4: Maximize throughput.
2: Maximize reliability.
1: Minimize monetary cost.
|
Defaults
The default value is 0 (normal service).
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use IP ToS 12 for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-ip-TOS 12
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-privacy
To configure the level of privacy processing to perform on messages sent from caller to callee, use the caller-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.
caller-privacy [privacy-setting]
no caller-privacy
Syntax Description
privacy_setting
|
Indicates specific caller privacy setting. Possible values include:
• never: Never hides the identity.
• account-boundary: Hides the identity if caller is different account from callee.
• always: Always hides the identity.
|
Defaults
The privacy_setting value is set to never.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the entry to always hide caller identity in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-privacy always
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-sig-qos-profile
To configure the QoS profile to be used for signaling packets sent to the original caller, use the caller-sig-qos-profile command in the CAC policy Admission control table mode. To deconfigure the QoS profile, use the no form of this command.
caller-sig-qos-profile profile-name
no caller-sig-qos-profile profile-name
Syntax Description
profile-name
|
Specifies the name of the QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
CAC policy admission control table entry configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the caller-sig-qos-profile command configures the QoS profile named enterprise to be used for signaling packets sent to the original caller.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-sig-qos-profile
enterprise
caller-video-qos-profile
To configure the QoS profile to use for media packets sent to the original caller, use the caller-video-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.
caller-video-qos-profile profile-name
no caller-video-qos-profile
Syntax Description
profile-name
|
Specifies the Qos profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
The caller-video-qos-profile command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# caller-video-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
caller-voice-qos-profile
To configure the QoS profile to use for media packets sent to the original caller, use the caller-voice-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.
caller-voice-qos-profile profile-name
no caller-voice-qos-profile
Syntax Description
profile-name
|
Specifies the QoS profile.
|
Defaults
None
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original caller:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# caller-voice-qos-profile
enterprise
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
call-policy-set
To create a new policy set, use the call-policy-set command in SBE configuration mode. To delete the policy set, use the no form of this command.
call-policy-set policy-set-id
no call-policy-set policy-set-id
Syntax Description
policy-set-id
|
Specifies the integer that identifies the policy set.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an empty policy set, identified by number 1, on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#
Related Commands
Command
|
Description
|
first-call-routing-table
|
Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.
|
first-number-analysis-table
|
Configures the name of the first policy table to process when performing the number analysis stage of policy.
|
first-reg-routing-table
|
Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.
|
category (NA-DST)
To configure the entry category in the number analysis table with entries of the table matching a part of or the whole dialed number, use the category command in the appropriate configuration mode. To deconfigure the category of an entry, use the no form of this command.
category category-name
no category category-name
Syntax Description
category-name
|
Specifies a category to assign to the event.
|
Defaults
None
Command Modes
NA-DST number configuration
NA-DST prefix configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the category of entry 1 in the new number analysis table MyNaTable matching the whole number:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#
category (NA-SRC)
To configure the entry category in the number analysis table with entries of the table matching the source account or adjacency, use the category command in NA-SRC configuration mode. To deconfigure the entry category in the number analysis table, use the no form of this command.
category category-name
no category category-name
Syntax Description
category-name
|
Specifies a category to assign to the event.
|
Defaults
None
Command Modes
NA-SRC account configuration
NA-SRC adjacency configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the category of entry 1 in the new NA table MyNaTable matching the source account:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# category external
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# exit
RP/0/0/CPU0:router(config-sbc-sbe)#
clear blacklist
To remove the given source from a blacklist, use the clear blacklist command in the SBE mode.
clear blacklist source
Syntax Description
source
|
Specifies the source VPN, address, or port to stop blacklisting.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the clear blacklist command is used to remove the specified source address from the blacklist.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# clear blacklist ipv4 123.124.1.2
Related Commands
Command
|
Description
|
show services sbc sbe blacklist
|
Lists the limits in force for a specified source.
|
clear services
To clear call statistics, calls, billing recorded, and cached information, use the clear services command in EXEC mode.
clear services [call-destroy call-index | media-stats | call-stats | flush-cdr-file | radius-client
radius-server-stats [client-name | server-name] | radius-client-stats client-name]
Syntax Description
call destroy client-index
|
Clears the indentified call. (SBE only.)
|
media-stats
|
Clears all statistics collected by the media gateway manager of the DBE.
|
call-stats
|
Clears all recorded call stats. (SBE only.)
|
flush-cdr-file
|
Writes all cached local billing records to disk. (SBE only.)
|
radius-client radius-server-stats [client-name | server-name]
|
Clears all statistics for the specified RADIUS server or client. (SBE only.)
|
radius-client-stats client-name
|
Clears all statistics fro the specified local RADIUS client. (SBE only.)
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The media-stats keyword is related to DBE. All other keywords apply to SBE.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to destroy call 5:
RP/0/0/CPU0:router# show services sbc mySbc sbe calls
-------------------------------------
RP/0/0/CPU0:router# show services sbc mySbc sbe call 5 branches
Branch Calling Number Called Number
RP/0/0/CPU0:router# clear services sbc mySbc sbe call-destroy 5
The following example shows how to clear all the statistics collected by the media gateway manager of the DBE:
RP/0/0/CPU0:router# clear services sbc mySbc dbe media-stats
The following example shows how to clear all the call statistics by the SBE:
RP/0/0/CPU0:router# clear services sbc mySbc sbe call-stats
The following example shows how to write all cached local billing records to disk:
RP/0/0/CPU0:router# clear services sbc mySbc sbe flush-cdr-file
The following example shows how to clear all the statistics for the specified RADIUS server:
RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client radius1 radius-server-stats
acctsvr
The following example shows how to clear all the statistics for the local RADIUS clients:
RP/0/0/CPU0:router# clear services sbc mySbc sbe radius-client-stats readius1
clear services sbc sbe policy-failure-stats dst-account
To clear all of the call setup policy failure statistics for a specified target account, use the clear services sbc sbe policy-failure-stats dst-account command in EXEC mode.
clear services sbc sbc-name sbe policy-failure-stats dst-account name
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the target account name from which you want to clear statistics.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to clear all of the call setup policy failure statistics for an account named AA:
RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats dst-account AA
Related Commands
Command
|
Description
|
clear services sbc sbe policy-failure-stats dst-adjacency
|
Clears call setup policy failure statistics for the specified target adjacency.
|
clear services sbc sbe policy-failure-stats src-account
|
Clears call setup policy failure statistics for the specified source account.
|
clear services sbc sbe policy-failure-stats src-adjacency
|
Clears call setup policy failure statistics for the specified source adjacency.
|
clear services sbc sbe policy-failure-stats dst-adjacency
To clear all of the call setup failure statistics for a specified target adjacency, use the clear services sbc sbe policy-failure-stats dst-adjacency command in EXEC mode.
clear services sbc sbc-name sbe policy-failure-stats dst-adjacency name
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the target adjacency name from which you want statistics cleared.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to clear all of the policy failure statistics for an adjacency named ZZ:
RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats dst-adjacency ZZ
Related Commands
Command
|
Description
|
clear services sbc sbe policy-failure-stats dst-account
|
Clears policy failure statistics for the specified target account.
|
clear services sbc sbe policy-failure-stats src-account
|
Clears policy failure statistics for the specified source account.
|
clear services sbc sbe policy-failure-stats src-adjacency
|
Clears policy failure statistics for the specified source adjacency.
|
clear services sbc sbe policy-failure-stats src-account
To clear all the call setup policy failure statistics for a specified source account, use the clear services sbc sbe policy-failure-stats src-account command in EXEC mode.
clear services sbc sbc-name sbe policy-failure-stats src-account name
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the source account name from which you want statistics cleared.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to clear all of the policy failure statistics for a source account named BB:
RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats src-account BB
RP/0/0/CPU0:router#
Related Commands
Command
|
Description
|
clear services sbc sbe policy-failure-stats dst-adjacency
|
Clears policy failure statistics for the specified target adjacency.
|
clear services sbc sbe policy-failure-stats dst-account
|
Clears policy failure statistics for the specified target account.
|
clear services sbc sbe policy-failure-stats src-adjacency
|
Clears policy failure statistics for the specified source adjacency.
|
clear services sbc sbe policy-failure-stats src-adjacency
To clear all of the call setup failure statistics for a specified source adjacency, use the clear services sbc sbe policy-failure-stats src-adjacency command in EXEC mode.
clear services sbc sbc-name sbe policy-failure-stats src-adjacency name
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the source adjacency name from which you want to clear statistics.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to clear all of the policy failure statistics for an adjacency named YY:
RP/0/0/CPU0:router# clear services sbc mysbc sbe policy-failure-stats src-adjacency YY
RP/0/0/CPU0:router#
Related Commands
Command
|
Description
|
clear services sbc sbe policy-failure-stats dst-adjacency
|
Clears policy failure statistics for the specified target adjacency.
|
clear services sbc sbe policy-failure-stats dst-account
|
Clears policy failure statistics for the specified target account.
|
clear services sbc sbe policy-failure-stats src-account
|
Clears policy failure statistics for the specified source account.
|
codec
To add a codec to a codec list, use the codec command in the sbe-codec-list mode. To remove a named codec from a codec list, use the no form of this command.
codec codec-name
no codec codec-name
Syntax Description
codec-name
|
Specifies the name of a codec. This value must be one of the list of codecs that the SBE is hard-coded to recognize. Otherwise, when you execute this command, the SBE displays an error.
The format of the codec name is the same as the string used to represent it in SDP. For example, PCMU or VDVI. A codec can only be added to each list one time.
|
Defaults
None
Command Modes
sbe-codec-list
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to assign the PCMU codec to the my_codecs codec list.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec PCMU
codec-list
To create a codec list, use the codec-list command in the sbe mode. To delete a codec list, use the no form of this command.
codec-list list-name
no codec-list list-name
Syntax Description
list-name
|
Specifies the name of the codec list.
|
Defaults
None
Command Modes
sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enter a submode to create a codec list using the name my_codecs.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
codec-list description
To provide a description of a codec list, use the codec-list description command in sbe mode. To delete the description for the codec list, use the no form of this command.
codec-list description text
no description
Syntax Description
text
|
An arbitrary text string that describes the codec list.
|
Defaults
None
Command Modes
sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to provide the my_codecs codec list with a description (Legitimate codecs).
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# description Legitimate codecs
codec packetization-period
To set a minimum packetization period for a codec, use the codec packetization-period command in the sbe-codec-list mode. To remove a packetization-period from a codec, use the no form of this command.
codec codec-name packetization-period packet-period
no codec codec-name packetization-period packet-period
Syntax Description
codec-name
|
Specifies the name of a codec. This value must be one of the list of codecs that the SBE is hard-coded to recognize. Otherwise, when you execute this command, the SBE displays an error.
The format of the codec name is the same as the string used to represent it in SDP (for example, PCMU or VDVI).
|
packet-period
|
The codec can optionally be followed by a minimum acceptable packetization period in milliseconds as indicated by packetization-period.
For example, codec PCMU packetization-period 20 adds the codec PCMU to the list with a minimum acceptable packetization period of 20 ms. The range of packetization period is limited to 0 to 1000 ms.
|
Note
For each minimum packetization period, only one codec is allowed to be added to each list, one time only.
Defaults
None
Command Modes
sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to set a minimum packetization period for the PCMU and G729 codecs that are in the my_codecs codec list.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# codec-list my_codecs
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec PCMU packetization-period 20
RP/0/0/CPU0:router(config-sbc-sbe-codec-list)# codec G729 packetization-period 10
codecs
To configure the codecs supported by the media gateway, use the codecs command in Media-gateway configuration mode. To set the codec support to nothing, use the no form of this command.
codecs codec-list
no codecs
Syntax Description
codec-list
|
Specifies the supported codecs.
|
Defaults
None
Command Modes
Media-gateway configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set media gateway 10.0.0.1's supported codecs to m=audio 6000 RTP/AVP 4 and a=rtpmap:0 PCMU/8000 (as defined in RFC 1890):
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-media-gateway)# codecs "m=audio 6000 RTP/AVP
4,a=rtpmap:0 PCMU/8000"
complete
To complete the CAC- or call-policy set after committing the full set, use the complete command in the appropriate configuration mode. To change entries, use the no form of this command.
complete
no complete
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
CAC-policy-set configuration
Call-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The SBC checks that the routing-policy is self-consistent and can be set as the active policy set. When this command is issued, you cannot alter the CAC-policy-set.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to complete a cac-policy set, identified by number 1, on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# complete
RP/0/0/CPU0:router(config-sbc-sbe)# exit
congestion-cleared
To configure the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE, use the congestion-cleared command in vDBE configuration mode. To remove this configuration, use the no form of this command.
congestion-cleared percentage
no congestion-cleared
Syntax Description
percentage
|
Specifies the percentage of system resources to signal congestion that has passed to the SBE.
|
Defaults
percentage=60
Command Modes
vDBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the DBE to signal congestion that has passed to the SBE at 90 percent of system resources consumed:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-cleared 90
Related Commands
Command
|
Description
|
congestion-threshold
|
Configures the percentage of system resources used such that the DBE signals a congestion event to the SBE.
|
congestion-threshold
To configure the percentage of system resources used such that the DBE signals a congestion event to the SBE, use the congestion-threshold command in vDBE configuration mode. To remove this configuration, use the no form of this command.
congestion-threshold percentage
no congestion-threshold
Syntax Description
percentage
|
Specifies the percentage value of system resources to signal congestion to the SBE. Range is 0 to 100.
|
Defaults
By default, this command assumes that percentage is 60 percent.
Command Modes
vDBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The DBE tracks service card capacity as a function of number of calls (against a maximum of 2,500 per DBE instance in R0) and bandwidth (where the service card has a maximum forwarding rate of 500,000 packets per second in R0).
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the DBE to signal a congestion event to the SBE at 95 percent of maximum capacity:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# congestion-threshold 95
Related Commands
Command
|
Description
|
congestion-cleared
|
Configures the percentage of system resources used such that the DBE can signal a congestion event has cleared to the SBE.
|
control address aaa
To configure an SBE to use a given IPv4 AAA control address when contacting an authentication or billing server, use the control address aaa ipv4 command in sbe configuration mode. To deconfigure the IPv4 AAA control address, use the no form of this command.
control address aaa ipv4 ip_address [vrf vrf-name]
no control address aaa ipv4 ip_address
Syntax Description
ipv4 ip_address
|
Specifies the IPv4 AAA control address.
|
vrf
|
(Optional) Specifies VRF.
|
vrf-name
|
(Optional) Specifies the VRF name.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.5.1
|
This command was modified on the Cisco XR 12000 Series Router to add the VRF keyword option.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the SBE to use address 10.1.0.1 as its AAA control address:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address aaa ipv4 10.1.0.1 vrf myvrf
Related Commands
control address h248 (SBE)
To configure an SBE to use a given IPv4 H.248 control address, port, or transport for H.248 communications when acting as a media gateway controller, use the control address h248 command in SBE configuration mode. To deconfigure the given IPv4 H.248 control address when acting as a media gateway controller, use the no form of this command.
control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport
transport-type]
no control address h248 [index value | ipv4 ipv4_ip_address | port port-number | transport
transport-type]
Syntax Description
index value
|
Specifies the unique identifier of the H.248 control address to set. Range is 0 to 4294967295.
|
ipv4 ip_address
|
Specifies the IPv4 H.248 control address.
|
port port-number
|
Specifies the port number.
|
transport transport-type
|
Specifies the transport type. Possible values include udp or tcp for underlying transport.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the SBE to use address 10.1.0.1 as its H.248 control address:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# control address h248 ipv4 10.1.0.1
Related Commands
control-address h248 ipv4 (DBE)
To configure the control address for vDBE with a specific IPv4 address, use the control-address h248 ipv4 command in the vDBE mode. To return to the default value, use the no form of this command.
control-address h248 ipv4 ipv4_address
no control-address h248 ipv4
Syntax Description
ipv4_address
|
Specifies the IPv4 address assigned to this H.248 association.
|
Defaults
None
Command Modes
vDBE
Command History
Release
|
Modification
|
Release 3.5.1
|
The control address h248 command was enhanced to include support for the DBE module on the Cisco XR 12000 Series Router. Only the ipv4_address argument is supported in the vDBE submode.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the local vDBE IPv4 address:
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# control-address h248 ipv4 10.2.0.10
Related Commands
Command
|
Description
|
controller h248 [vrf] remote-address ipv4
|
Configures the remote address for vDBE H.248 controller.
|
controller h248
To enter the mode for configuring an H.248 controller for a DBE, use the controller h248 command in DBE mode.
controller h248 controller-index
Syntax Description
controller-index
|
Specifies the index of the media controller. Range is 0 to 4294967295.
|
Defaults
None
Command Modes
dbe-vdbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enter the mode for configuring an H.248 controller for a DBE.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1
critical-alarm-threshold
To configure the threshold at which a critical alarm is generated if the CDR file reaches that size, use the critical-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
critical-alarm-threshold threshold
no critical-alarm-threshold
Syntax Description
threshold
|
Specifies the threshold (in MBs) when the alarm is generated.
|
Defaults
None
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the critical alarm threshold to 1000 MB:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# critical-alarm-threshold 1000
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# exit
dbe-location-id
To configure an H.323 adjacency to use a given media gateway DBE location when routing media, use the dbe-location-id command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
dbe-location-id dbe-location-id
no dbe-location-id
Syntax Description
dbe-location-id
|
Specifies the DBE location ID of the DBE. A value of 0 denotes that the adjacency is within the local network.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure H.323 adjacency h323ToIsp42 to use DBE location ID 1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dbe-location-id 1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# exit
deact-mode
To specify the action to take upon DBE or SBE deactivation, use the deact-mode command in the appropriate configuration mode. To revert to the default value, use the no form of this command.
deact-mode deact-type
no deact-mode
Syntax Description
deact-type
|
Specifies the action to take upon DBE deactivation:
• abort: All calls dropped with no signaling.
• normal: Service change signalled to SBE, and all calls immediately terminated.
• quiesce: No new calls accepted. Deactivation occurs only after existing calls have terminated naturally.
Specifies the action to take upon SBE deactivation:
• abort: All calls dropped with no signaling.
• normal: Existing calls are torn down gracefully.
• quiesce: No new calls accepted. Existing calls are allowed to terminate.
|
Defaults
By default, this command assumes the normal parameter.
Command Modes
DBE configuration
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the DBE to deactivate in quiesce mode to prepare the device for hardware maintenance:
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# deact-mode quiesce
description
To configure descriptive text for a policy set, an adjacency, source and its event limits, or a number analysis table, use the description command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
description description
no description description
Syntax Description
description
|
Specifies the object you are describing.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Call-policy-set configuration
CAC-policy-set configuration
CAC-table configuration
NA-DST configuration
NA-DST-prefix-table configuration
NA-SRC-account-table configuration
NA-SRC-adjacency-table configuration
RTG-DST-address-table configuration
RTG-SRC-address-table configuration
RTG-SRC-adjacency-table configuration
RTG-SRC-account-table configuration
RTG-round-robin-table configuration
SBE blacklist configuration
SIP header-profile configuration
SIP method-profile configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.4.1
|
This command was modified on the Cisco XR 12000 Series Router to add the following configuration modes:
• SIP header-profile configuration
• SIP method-profile configuration
|
Release 3.5.0
|
This command was modified on the Cisco XR 12000 Series Router to add the SBE-blacklist configuration.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to use the description test adjacency:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# description test adjacency
The following example shows how to set the SIP adjacency SipToIsp42 to use the description test adjacency:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# description test adjacency
The following example shows how to create a description for number analysis table MyNaTable with entries that match the whole dialed number:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number
analysis table"
The following example shows how to create an empty policy set, identified by number 1, on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# description "empty set"
The following example shows how to set the description of an admission control table, MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# description "My first CAC table"
The following example shows how to create a description for number analysis table MyNaTable with entries that match the start of the dialed number:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# description "My first number
analysis table"
The following example shows how to add a description for a specific source IP address:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# description "test"
The following example shows how to create an empty policy set, identified by number 1, on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# description "empty set"
The following example shows how to add description text "myheaderprofile" for SIP header profile Profile1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe sip header-profile Profile1
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# description "myheaderprofile"
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# commit
The following example shows how to add description text "mymethodprofile" for SIP method profile Profile1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe sip method-profile Profile1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# description "mymethodprofile"
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# commit
disabled
To disable the caching and sending of messages for a RADIUS account, use the disabled command in RADIUS accounting configuration mode.
disabled
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
RADIUS accounting mode (config-sbc-sbe-acc)
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to stop the sending of messages from the cache for RADIUS client instance radius1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# disabled
Related Commands
Command
|
Description
|
radius
|
Configures a RADIUS client for accounting purposes.
|
dst-adjacency
To configure the destination adjacency of an entry in a routing table, use the dst-adjacency command in the appropriate configuration mode. To delete the destination adjacency, use the no form of this command.
dst-adjacency target-adjacency
no dst-adjacency target-adjacency
Syntax Description
target-adjacency
|
Specifies the string that identifies the destination adjacency to use.
|
Defaults
None
Command Modes
RTG-DST-address-table configuration
RTG-SRC-address-table configuration
RTG-SRC-adjacency-table configuration
RTG-SRC-account-table configuration
RTG-round-robin-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The target-adjacency argument is mandatory for routing tables entries with match-type round-robin.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1
The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1
The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1
The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1
The following example shows how to configure the destination adjacency of an entry in the new routing table MyRtgTable to softswitch1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# dst-adjacency softswitch1
dscp
To configure a DSCP with which to mark IP packets belonging to a given QoS profile, use the dscp command in the appropriate configuration mode. To return to the default, use the no form of this command.
dscp value
no dscp
Syntax Description
value
|
Specifies the DSCP value with which to mark packets. Range is 0 to 63.
|
Defaults
The default DSCP value is 0.
Command Modes
QOS fax configuration
QOS video configuration
QOS voice configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# dscp 10
The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos video residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-video)# dscp 10
The following example shows how to configure the QoS profile to mark IP packets with a DSCP of 10:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos voice residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-voice)# dscp 10
dtmf-duration
To configure the default duration of a DTMF event (in milliseconds), use the dtmf-duration command in vDBE configuration mode. To remove this configuration, use the no form of this command.
dtmf-duration duration
no dtmf-duration
Syntax Description
duration
|
Specifies the time for a DTMF event (in milliseconds). Range is 1 to 1000.
|
Defaults
duration: 200ms
Command Modes
DBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the default duration of a DTMF event to 250 ms:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# dtmf-duration 250
dtmf-relay
To configure DTMF relay for an adjacency, use the dtmf-relay command in Adjacency H.323 configuration mode. To deconfigure DTMF relay for an adjacency, use the no form of this command.
dtmf-relay rtp-nte
no dtmf-relay
Syntax Description
rtp-nte
|
(Optional) Enables rtp-nte support.
|
Defaults
By default, rtp-nte is assumed to be specified.
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note the following points:
•
All adjacencies support passing DTMF as H.245 UserInputIndication (alphanumeric), or in-band
•
By default, H.323 negotiates support for RFC 2833 RTP Named Telephone Events (rtp-nte) with the signaling peer, as well as the above two methods.
•
When a call is routed between two adjacencies, one of which is configured to support rtp-nte and one of which is not, DTMF interworking is enabled.
•
In DTMF interworking, H.245 UserInputIndications are converted to RFC 2833 packets and vice versa. When DTMF interworking is enabled for a call, the rtp-nte adjacency must be configured with the dynamic RTP payload type that the remote endpoint uses for RFC 2833.
•
The simplest configuration is to use the same value for all H.323 adjacencies. For mixed configurations, the requirements apply to all rtp-nte adjacencies.
•
All endpoints on that adjacency that support RFC 2833 use the same receive RTP dynamic payload type.
•
This dynamic payload type is configured on the adjacency in advance of call setup.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to disable rtp-nte support on the H.323 adjacency h323ToIsp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# dtmf-relay
early-media-deny
To configure whether to disallow early-media for an entry in an admission control table, use the early-media-deny command in CAC table configuration mode. To return to the default value, use the no form of this command.
early-media-deny
no early-media-deny
Syntax Description
This command has no arguments or keywords.
Defaults
By default, early-media is allowed.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to disallow early-media for an existing entry in the admission control table MyCacTable.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-deny
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
Related Commands
Command
|
Description
|
early-media-direction
|
Configures the direction of early-media to allow for an entry in an admission control table.
|
early-media-timeout
|
Configures the time to allow early-media before a call is established.
|
early-media-direction
To configure the direction of early-media to allow for an entry in an admission control table, use the early-media-direction command in CAC table configuration mode. To remove this configuration and return to the default setting, use the no form of this command.
early-media-direction [backward-half-duplex | forward-half-duplex | full-duplex]
no early-media-direction
Syntax Description
backward-half-duplex
|
Allows early-media in the backwards direction only.
|
forward-half-duplex
|
Allows early-media in the forwards direction only.
|
full-duplex
|
Allows early-media in both directions.
|
Defaults
The default direction is full-duplex.
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the early-media-direction for an existing entry in the admission control table MyCacTable.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# early-media-direction
full-duplex
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
Related Commands
Command
|
Description
|
early-media-deny
|
Configures you to disallow early-media for an entry in an admission control table.
|
early-media-timeout
|
Configures the time to allow early-media before a call is established.
|
early-media-timeout
To configure the amount of time for which to allow early-media before a call is established, use the early-media-timeout command in CAC table configuration mode. To return to the default value, use the no form of this command.
early-media-timeout value
no early-media-timeout
Syntax Description
value
|
Specifies the timeout period (in seconds). A value of 0 means that calls are not timed out.
|
Defaults
value: 0
Command Modes
CAC table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the early-media-timeout for an existing entry in the admission control table MyCacTable.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# early-media-timeout 90
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
Related Commands
Command
|
Description
|
early-media-deny
|
Configures you to disallow early-media for an entry in an admission control table.
|
early-media-direction
|
Configures the direction of early-media to allow for an entry in an admission control table.
|
edit-cic
To manipulate a carrier identification code in any number analysis table, use the edit-cic command.
The no version of the command undoes the edit.
edit-cic [del-prefix pd] | [del-suffix sd] | [add-prefix pa] | [replace ds]
Syntax Description
add-prefix pa
|
A string of digits to add to the front of the carrier ID string.
|
del-prefix pd
|
A positive integer specifying the number of digits to delete from the front of the carrier ID string.
|
del-suffix sd
|
A positive integer specifying the number of digits to delete from the end of the carrier ID string.
|
replace ds
|
A string of digits with which to replace the carrier ID string.
|
Defaults
None
Command Modes
sbe-callpolicy-natable
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
If you want to remove the carrier ID entirely from outgoing messages, specify a replacement string of 0 or a prefix deletion string of 4. For example:
edit-cic del-prefix 4
or
edit-cic replace 0
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command sets entry 1 to delete the first digit of the carrier ID in NA table MyNaTable.
RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router#(config-sbc-sbe-callpolicy-natable)# entry 1 edit-cic del-prefix 1
Related Commands
Command
|
Description
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
entry
|
Enters the mode for configuring an entry in a number analysis table, creating the table, if necessary.
|
na-src-account-table
|
Enters the mode for configuring a number analysis table within an SBE policy set, with entries that match the source account.
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
edit
To configure a dial-string manipulation action for a number analysis table with entries of the table matching the whole dialed number, use the edit command in the appropriate configuration mode. To return to the default value, use the no form of this command.
edit [del-prefix pd] | [del-suffix sd] | [add-prefix pa] | [replace ds]
no edit
Syntax Description
del-prefix pd
|
Positive integer specifying a number of digits to delete from the front of the dialed digit string.
|
del-suffix sd
|
Positive integer specifying a number of digits to delete from the end of the dialed digit string.
|
add-prefix pa
|
String of digits to add to the front of the dialed string.
|
replace ds
|
String of digits to with which to replace the dialed.
|
Defaults
None
Command Modes
NA-DST-number-table configuration
NA-DST-prefix-table configuration
NA-SRC-account-table configuration
NA-SRC-adjacency-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure entry 1 to delete one digit from the first beginning of the dialed string in the new number analysis table MyNaTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-ent)# edit del-prefix 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable-ent)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-natable)# exit
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# exit
Related Commands
Command
|
Description
|
match-number
|
Configures the match value of an entry in a number analysis table.
|
entry
To create or modify an entry in a table, use the entry command in the appropriate configuration mode. To destroy the given entry in the admission control table, use the no form of this command.
entry entry-id
no entry entry-id
Syntax Description
entry-id
|
Specifies the table entry.
|
Defaults
None
Command Modes
CAC table configuration
NA-DST-number-table configuration
NA-DST-prefix-table configuration
NA-SRC-adjacency-table configuration
NA-SRC-account-table configuration
RTG-DST-address-table configuration
RTG-SRC-address-table configuration
RTG-SRC-adjacency-table configuration
RTG-SRC-account-table configuration
RTG-round-robin-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Note
You cannot change the configuration of tables in the context of the active policy set. An entry may not be destroyed if the table is a part of the active policy set.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new admission control table, MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)#
fast-register disable
To disable fast-path register support on the SIP adjacency, use the fast-register disable command in Adjacency SIP configuration mode. To enable fast-path register support, use the no form of this command.
fast-register disable
no fast-register disable
Syntax Description
This command has no arguments or keywords.
Defaults
By default, the fast-path register feature is enabled.
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Fast-path register is used to prevent the SBC from forwarding all SIP register messages to the softswitch, thus reducing the load on the softswitch. This is enabled by default and can be disabled using this command. When active, a SIP register message received from the same host and port as an existing registration, and with a nonzero expires interval, is immediately responded to without further parsing or other processing performed.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to disable fast-path register support on the SIP adjacency SipToIsp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register disable
Related Commands
fast-register-interval
To configure the fast-path register interval (in seconds), use the fast-register-interval command in Adjacency SIP configuration mode. To deconfigure the fast-path register interval, use the no form of this command.
fast-register-interval interval
no fast-register-interval
Syntax Description
interval
|
Specifies the interval value in seconds. Range is 1 to 2000000.
|
Defaults
None
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
If fast-path register support is enabled on this adjacency, this is the minimum expiry period accepted on a subscriber registration. The interval at which registrations are forwarded on to the softswitch is governed by the reg-min-expiry value.
Note
The interval must be less than the min-expiry value.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to enable the fast-register interval on the SIP adjacency SipToIsp42 to 10s:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# fast-register-interval 10
Related Commands
first-cac-scope
To configure the scope at which to begin defining limits when performing the Admission Control stage of policy, use the first-cac-scope command in CAC-policy-set configuration mode.
first-cac-scope scope-name
Syntax Description
scope-name
|
Specifies the scope at which limits should be initially defined when performing the admission control stage of policy. Possible values are:
• global
• call
One or more of the following scopes can be defined in a comma-separated list:
• src-adjacency
• dst-adjacency
• src-number
• dst-number
• src-account
• dst-account
• category
|
Defaults
None
Command Modes
CAC-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the scope category as the first scope at which to define an admission control policy in configuration set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope src-adjacency
first-cac-table
To configure the name of the first policy table to process when performing the Admission Control stage of policy, use the first-cac-table command in CAC-policy-set configuration mode. To remove this configuration, use the no form of this command.
first-cac-table table-name
no first-cac-table
Syntax Description
table-name
|
Specifies the admission control table that should be processed first.
|
Defaults
None
Command Modes
CAC-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the table RootCacTable as the first admission control table in configuration set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table RootCacTable
first-call-routing-table
To configure the name of the first policy table to process when performing the routing stage of policy for new-call events, use the first-call-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.
first-call-routing-table table-name
no first-call-routing-table
Syntax Description
table-name
|
Specifies the routing table that should be processed first.
|
Defaults
None
Command Modes
Call-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the table RootCallRtgTable as the first routing table for new-call events in configuration set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-call-routing-table RootCallRtgTable
first-number-analysis-table
To configure the name of the first policy table to process when performing the number analysis stage of policy, use the first-number-analysis-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.
first-number-analysis-table table-name
no first-number-analysis-table
Syntax Description
table-name
|
Specifies the number analysis table that should be processed first.
|
Defaults
None
Command Modes
Call-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the table RootNaTable as the first number analysis table in configuration set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-number-analysis-table RootNaTable
first-reg-routing-table
To configure the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events, use the first-reg-routing-table command in Call-policy-set configuration mode. To deconfigure the name of the first policy table, use the no form of this command.
first-reg-routing-table table-name
no first-reg-routing-table
Syntax Description
table-name
|
Specifies the routing table that should be processed first.
|
Defaults
None
Command Modes
Call-policy-set configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the table RootRegRtgTable as the first routing table for subscriber-registration events in configuration set 1 on mySbc:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# first-reg-routing-table RootRegRtgTable
force-limited-call-hold
To prevent SBC from changing media address or port by suppressing media format changes when a call is put on hold, use the force-limited-call-hold command in the cac-policy configuration mode.
force-limited-call-hold
no force-limited-call-hold
Syntax Description
This command has no arguments or keywords.
Defaults
This command is not enabled. SBC automatically changes the media address port when a call is put on hold.
Command Modes
cac-policy
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Only use this command with endpoints that do not support media address or port changes.
If you apply this command to endpoints that do support media address or port changes, this command might break application features, for example, music on hold. Calls that invoke these features might fail.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enable the force limited call hold feature:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# service-location preferred-active 0/1/CPU0
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# activate
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 7200-1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# cac-policy-set 234
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-scope call
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# first-cac-table root
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table root
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# match-type policy-set
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table-ent)# force-limited-call-hold
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cac-table-ent)
group
To configure an adjacency to an adjacency group, use the group command in the adjacency mode. To remove the adjacency from the specified group, use the no form of this command.
group adjacency-group name
no group adjacency-group name
Syntax Description
adjacency-group name
|
Defines the adjacency group to the which the specified adjacency is assigned.
|
Defaults
None
Command Modes
SBE SIP or H.323 adjacency mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the group command assigns a SIP adjacency named sipGW to adjacency group named InternetEth0:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip sipGW
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# group InternetEth0
The following example shows how the group command assigns an H.323 adjacency named H323ToIsp42 to an adjacency group named Isp42.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# group Isp42
h225 timeout
To configure the H.225 timeout interval, use the h225 timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.
h225 timeout {setup | proceeding | establishment} value
no h225 timeout {setup | proceeding | establishment} value
Syntax Description
setup
|
Specifies the setup state. Default value for this state is 4 seconds.
|
proceeding
|
Specifies the proceeding state. Default value for this state is 10 seconds.
|
establishment
|
Specifies the establishment state. Default value for this state is 180 seconds.
|
value
|
Specifies the timeout period in seconds. For setup and proceeding timeout periods, valid values are from 1 to 30 seconds. For establishment timeout, valid values are from 30 to 300 seconds.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the h225 timeout command configures an H.225 timeout interval in Adjacency H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout setup 30
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout proceeding 30
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h225 timeout establishment 30
The following example shows how the h225 timeout command configures an H.225 timeout interval in H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout setup 30
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout proceeding 30
RP/0/0/CPU0:router(config-sbc-sbe-h323)# h225 timeout establishment 30
h245-tunnel disable
To disable H.245 tunneling on a per-adjacency basis, use the h245-tunnel disable command in SBE H.323 adjacency mode. To enable tunneling, use the no form of this command.
h245-tunnel disable
no h245-tunnel disable
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
SBE H.323 adjacency
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the h245-tunnel disable command disables H.245 tunneling on an H.323 adjacency named H323ToIsp42.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# h245-tunnel disable
h248 allow-all-mg
To configure the H.248 signaling stack to allow connections from all media gateways, use the h248 allow-all-mg command in SBE configuration mode. To deconfigure the H.248 signaling stack from allowing connections from all media gateways, use the no form of this command.
h248 allow-all-mg
no h248 allow-all-mg
Syntax Description
This command has no arguments or keywords.
Defaults
By default, connections are allowed from all media gateways.
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.248 signaling stack to allow any media gateway to connect to the SBE:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h248 allow-all-mg
h248-association-timeout
To configure the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications, use the h248-association-timeout command in the vdbe mode. To return to the default value, use the no form of this command.
h248-association-timeout
no h248-association-timeout
Syntax Description
This command has no arguments or keywords.
Defaults
Default is the no form of this command
Command Modes
vdbe
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to reset associations with an H.248 controller:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-association-timeout
Related Commands
Command
|
Description
|
h248-preserve-gates
|
Configures the DBE not to delete the media terminations or contexts when there is a media timeout and the association with the controller is down.
|
h248-max-term-per-context
To configure the H.248 maximum terminations per context for the DBE using the base root package, use the h248-max-term-per-context command in the vDBE mode. To return to the default value, use the no form of this command.
h248-max-term-per-context max-contexts
no h248-max-term-per-context
Syntax Description
max-contexts
|
Specifies the maximum number of terminations per context. Range is 2-32.
|
Defaults
Default value is 32.
Command Modes
vDBE
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure eight maximum terminations per context:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-max-terms-per-context 8
Related Commands
Command
|
Description
|
h248-association-timeout
|
Configures the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications
|
h248-media-alert-event
To define a Middlebox Pin-Hole Timer Expired Event to generate when the VDBE detects lost media, use the h248-media-alert-event command in VDBE mode. To disable the generation of the Middlebox Pin-Hole Timer Expired Event when lost media is detected, use the no form of this command.
h248-media-alert-event
no h248-media-alert-event
Syntax Description
This command has no arguments or keywords.
Defaults
The Middlebox Pin-Hole Timer Expired Event is generated
Command Modes
sbc-dbe-vdbe mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the h248-inactivity-duration command disables the generation of Middlebox Pin-Hole Timer Expired Event.
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-media-alert-event
h248-napt-package
To configure which H.248 package a VDBE to use for signaling NAT features, use the h248-napt-package command in VDBE mode. To deconfigure the H.248 package, use the no form of this command.
h248-napt-package {napt | ntr}
no h248-napt-package {napt | ntr}
Syntax Description
napt
|
Uses the IP NAPT package defined in H.248.37.
|
ntr
|
Uses the NAT package defined in ETSI TS 102 333.
|
Defaults
The NAT package is used.
Command Modes
sbc-dbe-vdbe mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the h248-napt-package command configures the VDBE to use the IP NAPT package.
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-napt-package napt
h248-preserve-gates
To configure the DBE to preserve the media terminations or contexts when there is a media timeout and the association with the controller is down, use the h248-preserve-gates command in the vDBE mode. To return to the default value, use the no form of this command.
h248-preserve-gates
no h248-preserve-gates
Syntax Description
This command has no arguments or keywords.
Defaults
The DBE deletes the media terminations or contexts when there is a timeout and the association with the controller is down.
Command Modes
vDBE
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to preserve the media terminations or contexts:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-preserve-gates
Related Commands
Command
|
Description
|
h248-association-timeout
|
Configures the DBE to reset associations with an H.248 controller when the controller does not respond to observed event notifications
|
h248-profile
To configure the vDBE H.248 profile name to interoperate with media gateway controller (SBE), use the h248-profile command in the vdbe mode. To return to the default value, use the no form of this command.
h248-profile profile-name
no h248-profile
Syntax Description
profile-name
|
Specifies the name of the H.248 profile. Only two profiles are supported: Cisco profile: SBC_GateControl (value: gatecontrol), and Ia profile: ESSI_BGF (value: etsi-bgf). After the DBE is configured to use the H.248 profile name, the profile name is advertised with the Service Change messages.
|
Defaults
Default value is gatecontrol.
Command Modes
vDBE
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the vDBE H.248 Ia profile to interoperate with the media gateway controller (SBE).
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-profile etsi-bgf
Related Commands
Command
|
Description
|
h248-profile-version
|
Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.
|
package enable | disable
|
Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).
|
show services sbc dbe vdbe h248-profile
|
Displays the information on the specified profile, including transport, H.248 version, and active packages.
|
h248-profile-version
To configure the vDBE H.248 profile version to interoperate with media gateway controller (SBE), use the h248-profile-version command in the vdbe-h248-profile mode. Use this command after you have defined the name of the profile using the h248-profile command. To return to the default value, use the no form of this command.
h248-profile-version profile-version
no h248-profile-version
Syntax Description
profile-version
|
Specifies the version number of the H.248 profile. Values are 1-3. 3 stands for gatecontrol, 1 for etsi-bgf.
|
Defaults
Default value is 3.
Command Modes
vdbe-h248-profile
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the vDBE H.248 profile version to interoperate with the media gateway controller (SBE).
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-profile etsi-bgf
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248-profile)# h248-profile-version 1
Related Commands
Command
|
Description
|
h248-profile
|
Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).
|
package
|
Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).
|
show services sbc dbe vdbe h248-profile
|
Displays the information on the specified profile, including transport, H.248 version, and active packages.
|
h248-tmax
To configure the value of the T-Max timer which defines the maximum retransmission time that can pass after the H.248 stack on the DBE sent the initial message over the unreliable transport media, never received a response from the MGC, and kept retransmitting the message, use the h248-tmax command in the vDBE mode. To return to the default value, use the no form of this command.
h248-tmax timer-value
no h248-tmax
Syntax Description
timer-value
|
Specifies the T-Max time, in milliseconds, that the DBE can use to retransmit the message. After this time elapses, the DBE concludes that the MGC has failed and begun its recovery process. Range is 5000-50000.
|
Defaults
Default value is 10000 milliseconds
Command Modes
vDBE
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the T-max retransmission time for 20000 ms:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# h248-tmax 20000
h248-version
To configure the version of an H.248 protocol for a VDBE when forming associations with an H.248 controller, use the h248-version command in VDBE mode. To leave the default as version 2 of the H.248 protocol, use the no form of this command.
h248-version version number
no h248-version version number
Syntax Description
version number
|
Specifies the version number. The default version is 2.
|
Defaults
h248 version 2 is used.
Command Modes
sbc-dbe-vdbe mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the h248-version command configures the vDBE to use version 3 of the H.248 protocol.
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# h248-version 3
header
To add a header with a specified name to a SIP message profile, use the header command in header-profile mode. To remove the method from the profile, use the no form of this command.
header header name
no header header name
Syntax Description
header name
|
Specifies the name of the header added to the header profile. Valid names are 1 to 32 characters in length (inclusive) and are case-sensitive.
|
Defaults
None
Command Modes
SIP header-profile configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the header command adds a header test to the header profile MyProfile.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile MyProfile
RP/0/0/CPU0:router(config-sbc-sbe-sip-hdr-prf)# header test
Related Commands
Command
|
Description
|
blacklist
|
Configures SIP header or method blacklist profiles on a Session Inititation Protocol (SIP) message.
|
description
|
Configures descriptive text for a SIP header.
|
header-profile (adj-sip)
To set a specified header profile for inbound and outbound signaling on a specified SBE SIP adjacency, use the header-profile command in SBE SIP adjacency mode.
header-profile inbound | outbound profile name
Syntax Description
inbound | outbound
|
Sets the inbound and outbound SIP header profiles.
|
profile name
|
Specifies the name of the header profile to be set for inbound or outbound signaling on a specified adjacency. If you enter the name default, the default header profile is set for inbound or outbound signaling.
|
Defaults
None
Command Modes
sbc-sbc-adj-sip
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the header-profile command sets header profiles for inbound and outbound signaling on an SBE SIP adjacency test.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# header-profile inbound Profile1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# header-profile outbound Profile2
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)#commit
header-profile (sip)
To configure a header profile in the mode of an SBE entity, use the header-profile command in SBE SIP mode. To remove the header profile, use the no form of this command.
header-profile profile-name
no header-profile
Syntax Description
profile name
|
Specifies the name of the header profile. If you enter the name default, the default profile is configured. This profile is used for all adjacencies which do not have a specific profile configured.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the header-profile command configures a header profile with the name of test1:
RP/0/0/CPU0:router(config)# sbc umsbc-node3 sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip header-profile test1
hold-media-timeout
To configure the length of time SBE waits after receiving a media timeout notification from the DBE for an on-hold call before tearing down that call, use the hold-media-timeout command in sbc-sbe mode. To return to the default value, use the no form of this command.
hold-media-timeout timeout
no hold-media-timeout
Syntax Description
timeout
|
Specifies the time, in seconds, that the SBE waits before ending an on hold call. Range is 1 to 2000000 seconds. Unless you set a specific duration, on-hold calls never time out.
|
Defaults
This command is not enabled.
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the SBE on-hold timeout value to 200 seconds:
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# hold-media-timeout 200
RP/0/0/CPU0:router(config-sbc-sbe)# commit
hunting-trigger
To configure failure return codes to trigger hunting, use the hunting-trigger command in one of its supported modes: sip (global SIP scope), h323 (global h323 scope), adjacency sip (destination SIP adjacency), and adjacency h323 (destination h323 adjacency).
The no version of the command clears all error codes.
If you enter no hunting-trigger x y, then just codes x and y are removed from the configured list.
hunting-trigger error-codes
no hunting-trigger error-codes
Syntax Description
error-codes (SIP and adjacency modes)
|
Signifies a space-separated list of SIP numeric error codes.
|
error-codes (h323 and adjacency h323 modes)
|
Specifies one of the following values:
• noBandwidth
• unreachableDestination
• destinationRejection
• noPermission
• gatewayResources
• badFormatAddress
• securityDenied
• connectFailed (internally defined)
• noRetry value—Specifies that routing should never be retired for this adjacency no matter what failure return code is received.
|
Defaults
None
Command Modes
sbc-sbe-sip
sbc-sbe-h323
sbc-sbe-adj-sip
sbc-sbe-adj-h323
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
If you enter hunting-trigger x followed by hunting-trigger y, the value of x is replaced with y.
To set both x and y to be hunting triggers, you must enter hunting-trigger x y.
To use this command, you must be in the correct configuration mode and submode.
The "Examples" section shows the hierarchy of modes and submodes required to run the command.
In the adjacency sip or h323 adjacency modes, if you specify the special hunting-trigger value of disable, routes are never retried to this adjacency, even if the error code is on the global retry list.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
SIP mode
The following example shows how to configure SIP to retry routing if it receives a 415 (media unsupported) or 480 (temporarily unavailable) error.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# sip
RP/0/0/CPU0:router(config-sbc-sbe-sip)# hunting trigger 416 480
H.323 mode
The following example shows how to configure H.323 to retry routing if it receives a noBandwidth or securityDenied error.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router (config-sbc-sbe)# h323
RP/0/0/CPU0:router (config-sbc-sbe-h323)# hunting-trigger noBandwidth securityDenied
SIP adjacency mode
The following example shows how to configure SIP to retry routing to the sip adjacency SipAdj1 if it receives a 415 (media unsupported) or 480 (temporarily unavailable) error.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipAdj1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# hunting-trigger 415 480
adjacency H.323
The following command configures H323 to retry routing to the adjacency H323Adj1 if it receives a noBandwidth or securityDenied error.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323Adj1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# hunting-trigger noBandwidth securityDenied
Related Commands
Command
|
Description
|
adjacency h323
|
Configures the failure return codes at destination h323 adjacency that cause hunting to occur.
|
adjacency sip
|
Configures the failure return codes at a destination SIP adjacency that cause hunting to occur.
|
h323
|
Configures the failure return codes to cause hunting to occur globally at H323.
|
hunting-mode
|
Configures a search for alternative routes or destination adjacencies, while in either the h323 or h323 adjacency mode, in case of a failure.
|
show services sbc sbe {h323|sip} hunting-trigger
|
Shows the H.323 or SIP hunting triggers.
|
sip
|
Configures the failure return codes at a global SIP scope that cause hunting to occur.
|
hw-module service sbc location
To configure the SBC service as the role of the node, use the hw-module service sbc location command in the configure mode.
hw-module service sbc location <location>
Syntax Description
location
|
Specifies the location of the SBC.
|
Defaults
None
Command Modes
config
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to assign 0/1/CPU as the SBC service:
RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# hw-module service sbc location 0/1/CPU
invite-timeout
To configure the time that SBC waits for a final response to an outbound SIP invite request, use the invite-timeout command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.
invite-timeout <interval>
no invite-timeout
Syntax Description
interval
|
Specifies the time, in seconds, that SBC waits before timing out an outbound invite request.
|
Defaults
The default wait interval is 180 seconds. If no response is received during that time, an internal 408 Request Timeout response generates and is sent to the caller.
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following command configures the SBC to time out invite transactions after 60 seconds:
RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # invite-timeout 60
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end
ip precedence
To configure an IP precedence with which to mark IP packets belonging to the given QoS profile, use the ip precedence command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.
ip precedence value
no ip precedence
Syntax Description
value
|
Specifies the IP precedence with which to mark packets. Range is 0 to 7.
|
Defaults
value: 0
Command Modes
QOS fax configuration
QOS video configuration
QOS voice configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the QoS profile to mark IP packets with a precedence of 1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip precedence 1
ip TOS
To configure an IP ToS (type of service) with which to mark IP packets belonging to the QoS profile, use the ip TOS command in the appropriate configuration mode. To return the QoS profile to setting the default IP ToS, use the no form of this command.
ip TOS value
no ip TOS
Syntax Description
value
|
Specifies the IP ToS with which to mark packets. This may be a value of 0 (normal service) or a bit field consisting of one or more of the following bits OR'ed together:
• 8: Minimize delay.
• 4: Maximize throughput.
• 2: Maximize reliability.
• 1: Minimize monetary cost.
|
Defaults
The default IP ToS is 0 (normal service).
Command Modes
QOS fax configuration
QOS video configuration
QOS voice configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the QoS profile to mark IP packets with a TOS to minimize delay and maximize throughput:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# ip TOS 12
ipv4 address
To assign an IPv4 address to a particular SBC interface, use the ipv4 address command in interface SBC configuration mode. To remove the IPv4 address, use the no form of this command.
ipv4 address ipv4_address/prefix
no ipv4 address ipv4_address/prefix
Syntax Description
ipv4_address/prefix
|
Specifies the IPv4 media address and prefix assign.
|
Defaults
None
Command Modes
Interface SBC configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to assign address 10.0.0.1/32 to interface 999:
RP/0/0/CPU0:router(config)# interface sbc 999
RP/0/0/CPU0:router (config-if-sbc)# ipv4 address 10.0.0.1/32
ipv4
To create an IPv4 address within a DBE media address pool, use the ipv4 command in Media-address configuration mode. To delete an IPv4 address within a DBE media address pool, use the no form of this command.
ipv4 ipv4_address [vrf vrf-name]
no ipv4 ipv4_address [vrf vrf-name]
Syntax Description
ipv4_address
|
Specifies the IPv4 media address.
|
vrf vrf-name
|
(Optional) Specifies the VRF name.
|
Defaults
None
Command Modes
Media-address configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure address 10.0.1.1 for use both for non-VPN media and for media to or from vpn3:
RP/0/0/CPU0:router(config)# sbc mySbc dbe media-address
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4
10.0.1.1
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# sbc mySbc dbe media-address ipv4
10.0.1.1 vrf vpn3
Related Commands
Command
|
Description
|
media-address
|
Configures a DBE media address pool and an address pool for use in a VRF.
|
key
To configure the authentication key of the accounting and authentication servers, use the key command in the appropriate server configuration mode. To disable any previously set authentication key, use the no form of this command.
key key
no key
Syntax Description
key
|
Specifies the authentication key. This is only valid if authentication is turned on.
|
Defaults
None
Command Modes
Server configuration (accounting or authentication)
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure accounting servers acctsvr with the authentication key HJ5689 and acctsvr2 with the authentication key cisco on mySbc for RADIUS client instance radius1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key HJ5689
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# key cisco
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# exit
RP/0/0/CPU0:router(config-sbc-sbe)# exit
ldr-check
To configure the time of day to run the long duration check, tearing down calls over 24 hours long, use the ldr-check command in the appropriate configuration mode. To return to the default, use the no form of this command.
ldr-check HH:MM
no ldr-check
Syntax Description
HH:MM
|
Specifies the time (in hours and minutes using a 24-hour clock). Range is 0 to 23.
|
Defaults
HH:MM: 0
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the local long duration check to occur at 10.30 p.m.:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# ldr-check 22:30
local-address
To configure the local IPv4 addresses, use the local-address ipv4 command in the appropriate configuration mode. To deconfigure the local IPV4 address, use the no form of this command.
local-address ipv4 ipv4_IP_address
no local-address
Syntax Description
ipv4_IP_address
|
Specifies the local IPv4 address to be configured.
|
Defaults
None
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the local-address to 10.20.1.1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# local-address ipv4 10.20.1.1
RP/0/0/CPU0:router(config-sbc-sbe)# exit
local-id host
To configure the local identify name on a SIP adjacency, use the local-id command in Adjacency SIP configuration mode. To remove this configuration, use the no form of this command.
local-id host name
no local-id host
Syntax Description
name
|
Specifies the local identity name to present on outbound SIP messages. This may be a DNS name. This must not contain the port.
|
Defaults
When the name field is not set, the local signaling address is used in SIP messages.
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the SIP local identity of SIP adjacency SipToIsp42 to mcarthur:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# local-id host mcarthur
local-port
To configure a DBE to use a given local port when connecting to the default MGC, use the local-port command in vDBE configuration mode. To return to the default value, use the no form of this command.
local-port abcd
no local-port abcd
Syntax Description
abcd
|
Specifies the local port. Range is 0 to 4294967295.
|
Defaults
None
Command Modes
vDBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the DBE to use local port 5090:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# local-port 5090
location-id
To configure the location ID for a DBE, use the location-id command in DBE configuration mode.
location-id location-id
Syntax Description
location-id
|
Specifies the location ID of the DBE. Range is 0 to 4294967295.
|
Defaults
None
Command Modes
DBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the location ID for a DBE to be 1:
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# location-id 1
major-alarm-threshold
To configure the threshold (in MB) at which a major alarm is generated if the CDR file reaches that size, use the major-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
major-alarm-threshold threshold
no major-alarm-threshold
Syntax Description
threshold
|
Specifies the threshold (in MB) at which an alarm is generated.
|
Defaults
None
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the major alarm threshold to 500 MB:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# major-alarm-threshold 500
Related Commands
Command
|
Description
|
billing
|
Configures local and remote billing policies on the SBE.
|
critical-alarm-threshold
|
Configures the threshold at which a critical alarm is generated if the CDR file reaches that size.
|
minor-alarm-threshold
|
Configures the threshold at which a minor alarm is generated if the CDR file reaches that size.
|
marking
To config whether the QoS profile will mark packets with a DSCP value or an IP precedence and TOS value, use the marking command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.
marking type
no marking
Syntax Description
type
|
Specifies the type of marking. Possible values are:
• dscp: Marks packets with a DSCP value.
• ip-precedence: Marks packets with an IP precedence and TOS value.
|
Defaults
None
Command Modes
QOS fax configuration
QOS video configuration
QOS voice configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the QoS profile to mark IP packets with DSCPs:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-qos-fax)# marking dscp
match-account
To configure the match account of an entry in the number analysis or routing table whose entries match against the source account, use the match-account command in the appropriate configuration mode. To delete the match value, use the no form of this command.
match-account key
no match-account key
Syntax Description
key
|
Specifies the account to match.
|
Defaults
None
Command Modes
NA-SCR-account-table configuration
RTG-SRC-account-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new number analysis table MyNaTable and sets the source account it matches against:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-src-account-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-account router_eastern
Related Commands
Command
|
Description
|
entry
|
Configures an entry in a number analysis table.
|
match-address
To configure the match value of an entry in a routing table whose entries match against the destination or source dialed number, use the match-address command in the appropriate configuration mode. To delete the match value, use the no form of this command.
match-address key
no match-address key
Syntax Description
key
|
Specifies the string used to match the address.
|
Defaults
None
Command Modes
RTG-DST-address-table configuration
RTG-SRC-address-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new routing table MyRtgTable and sets the dialed number (destination address) it matches against:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)# match-address 999
Related Commands
Command
|
Description
|
entry
|
Configures an entry in a routing table.
|
action (RTG-SRC)
|
Configures the action of an entry a routing table.
|
match-adjacency
To configure the match value of an entry in a number analysis or routing table whose entries match against the source adjacency, use the match-adjacency command in the appropriate configuration mode. To delete the match value of the given entry in the routing table, use the no form of this command.
match-adjacency key
no match-adjacency key
Syntax Description
key
|
Specifies the match adjacency. Use an asterisk to match all adjacencies.
|
Defaults
None
Command Modes
RTG-SRC-adjacency-table configuration
NA-SRC-adjacency-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new routing table MyRtgTable and sets the source adjacency it matches against:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-adjacency ADJ1
Related Commands
Command
|
Description
|
action (RTG-SRC)
|
Configures the action of an entry a routing table.
|
match-cic
To create or modify the carrier ID code in a routing table, use the match-cic command.
The no version of the command deletes the precedence of the given entry in the routing table.
match-cic cic
no match-cic cic
Syntax Description
cic
|
Carrier ID, on which to match.
|
Defaults
The default precedence of an entry is 0, meaning, "Never match with this entry."
Command Modes
sbc-sbe-rtgpolicy-rtg-carrier-id-table-entry
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command configures the match-domain of an entry in the new routing table MyRtgTable to be cisco.com
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-carrier-id-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# entry 2
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable-entry)# match-cic 0234
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-carrier-id-table
|
Enters the configuration mode for creation or configuration of a routing table, whose entries match the carrier ID of an SBE call policy set.
|
entry
|
Enters the configuration submode for creation or configuration of a routing table, whose entries match the source domain name of an SBE call policy set.
|
match-domain
To create or modify the match value of an entry in a routing table, with entries that match the destination domain, use the match-domain command.
Note
You cannot issue this command if the table is part of the active policy set.
The no version of the command deletes the match value of the given entry in the routing table.
match-domain <domain name>
no match-domain <domain name>
Syntax Description
domain name
|
Name of the domain.
|
Defaults
None
Command Modes
sbc-sbe-callpolicy-rtgtable-entry
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
A match-domain is a regular expression, not just a string.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command modifies the matching domain in a routing table to cisco.com.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-dst-domain-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable-entr)# match-domain cisco.com
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-dst-domain-table
|
Enters the configuration mode for creation of a routing table, with entries that match the destination domain name of an SBE call policy set.
|
rtg-src-domain-table
|
Enters the configuration submode for creation or configuration of a routing table, with entries that match the source domain name of an SBE call policy set.
|
match-number
To configure the match value of an entry in the number analysis table whose entries match against the whole dialed number, use the match-number command in NA-DST-number-table configuration mode. To delete the match value, use the no form of this command.
match-number key
no match-number key
Syntax Description
key
|
Specifies the string used to match the dialed number.
|
Defaults
None
Command Modes
NA-DST-number-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new NA table MyNaTable and sets the dialed number it matches against:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-number 9XXX
Related Commands
Command
|
Description
|
category (NA-DST)
|
Configures the action of an entry in a number analysis table.
|
match-prefix
To configure the match value of an entry in the number analysis table whose entries match against the start of the dialed number, use the match-prefix command in NA-DST-prefix-table configuration configuration mode. To delete the match value, use the no form of this command.
match-prefix key
no match-prefix key
Syntax Description
key
|
Specifies the string used to match the start of the dialed number.
|
Defaults
None
Command Modes
NA-DST-prefix-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create an entry in the new NA table MyNaTable and sets the dialed number prefix it matches against:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable-entry)# match-prefix *X*
Related Commands
Command
|
Description
|
action (NA-DST)
|
Configures the action of an entry in a number analysis table.
|
match-type
To configure the match-type of an admission control table within the context of an SBE policy set, use the match-type command in CAC-table configuration mode. To delete the match-type of the admission control table, use the no form of this command.
match-type table-type
no match-type table-type
Syntax Description
table-type
|
Specifies the table type. This parameter controls the syntax of the match-value fields of the entries in the table. The table types available are:
• policy-set
• dst-prefix
• src-prefix
• src-adjacency
• src-account
• dst-adjacency
• dst-account
• category
• event-type
• adj-group
• src-adj-group
• dst-adj-group
• all
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
This command was modified on the Cisco XR 12000 Series Router to add the following table type values for adjacency groups:
• adj-group
• src-adj-group
• dst-adj-group
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the match-type of the admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# match-type call-priority
Related Commands
Command
|
Description
|
cac-table
|
Configures admission control tables.
|
match-value
|
Configures the match-value of an entry in an admission control table.
|
match-value
To configure the match-value of an entry in an admission control table, use the match-value command in CAC-table configuration mode. To delete the match value in the given entry in the admission control table, use the no form of this command.
match-value key
no match-value key
Syntax Description
key
|
Specifies the string used to match events. The format of the key is determined by the match-type of the enclosing table.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the match-value for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# match-value 0208366
Related Commands
Command
|
Description
|
match-type
|
Configures the match-type of an admission control table within the context of an SBE policy set.
|
max-bandwidth
To configure the maximum bandwidth for an entry in an admission control table, use the max-bandwidth command CAC-table configuration mode. To delete the maximum bandwidth in the given entry in the admission control table, use the no form of this command.
max-bandwidth mbw
no max-bandwidth mbw
Syntax Description
mbw
|
Positive integer specifying the maximum rate at which call media should be admitted (in bytes per second) at the relevant scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum bandwidth for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-bandwidth 6000000
Related Commands
Command
|
Description
|
entry
|
Configures an admission control table.
|
max-call-rate
To configure the maximum call rate for an entry in an admission control table, use the max-call-rate command in CAC-table configuration mode. To delete the maximum call rate in the given entry in the admission control table, use the no form of this command.
max-call-rate mcr
no max-call-rate mcr
Syntax Description
mcr
|
Positive integer specifying the maximum number of calls per minute to permit at the given scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum call rate for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-call-rate 30
max-channels
To configure the maximum number of channels for an entry in an admission control table, use the max-channels command in CAC-table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.
max-channels mc
no max-channels mc
Syntax Description
mc
|
Positive integer specifying the maximum number of media channels to permit at the relevant scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum number of channels for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-channels 50
max-num-calls
To configure the maximum number of calls of an entry in an admission control table, use the max-num-calls command in CAC-table configuration mode. To delete the maximum number of calls in the given entry in the admission control table, use the no form of this command.
max-num-calls mnc
no max-num-calls mnc
Syntax Description
mnc
|
Positive integer specifying the maximum number of calls to permit at the relevant scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum number of calls for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-num-calls 50
max-pdu-size
To specify H.248 maximum PDU size in bytes that the User Datagram Protocol (UDP) must use for H.248 control signaling, use the max-pdu-size command in vDBE mode. To disable the segmentation package, use the no form of this command.
max-pdu-size size
no max-pdu-size
Syntax Description
size
|
Size in bytes of the H.248 segmentation package. Valid values are from 0 to 4294967295 bytes. A value of 0 disables the segmentation package.
|
Defaults
The segmentation package is disabled.
Command Modes
DBE-vDBE configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the max-pdu-size command sets the PDU size that the UDP must use for H.248 signaling.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# max-pdu-size 64000
Related Commands
Command
|
Description
|
show services dbe controllers
|
Lists the statistics of theH.248 controller on the DBE.
|
max-regs
To configure the maximum call number of subscriber registrations for an entry in an admission control table, use the max-regs command in CAC-table configuration mode. To delete the maximum number of subscriber registrations in the given entry in the admission control table, use the no form of this command.
max-regs mrr
no max-regs mrr
Syntax Description
mrr
|
Positive integer specifying the maximum number of subscriber registrations to permit at the relevant scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum number of subscriber registrations for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-regs 500
max-regs-rate
To configure the maximum rate of subscriber registrations for an entry in an admission control table, use the max-regs-rate command in entry configuration mode. To delete the maximum rate of subscriber registrations in the given entry in the admission control table, use the no form of this command.
max-regs-rate mrr
no max-regs-rate mrr
Syntax Description
mrr
|
Positive integer specifying the maximum number of subscriber registrations per minute to permit at the relevant scope. Only one parameter may be supplied for each command.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum registration rate for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-regs-rate 150
max-updates
To configure the maximum call updates for an entry in an admission control table, use the max-updates command in CAC-table configuration mode. To delete the maximum call updates in the given entry in the admission control table, use the no form of this command.
max-updates mu
no max-updates mu
Syntax Description
mu
|
Positive integer specifying the maximum number of updates to call media to permit at the relevant scope.
|
Defaults
None
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the maximum number of call updates for an entry in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# max-updates 500
media-address
To configure a DBE IPv4 or IPv6 media address or media address pool, use the media-address command in the DBE mode. To deconfigure the media address or media address pool, use the no version of this command.
media-address {ipv4 ipv4_address | ipv6 ipv6_address | pool [ ipv4 ipv4_starting_address
ipv4_ending_address | ipv6 ipv6_starting_address ipv6_ending_address]} [vrf vrf_name]
[nat-mode [twice-nat | twice-napt]] [managed-by [dbe | mgc]]
no media-address {ipv4 ipv4_address | ipv6 ipv6_address | pool [ ipv4 ipv4_starting_address
ipv4_ending_address | ipv6 ipv6_starting_address ipv6_ending_address]} [vrf vrf_name]
[nat-mode [twice-nat | twice-napt]] [managed-by [dbe | mgc]]
Syntax Description
ipv4
|
Specifies IPv4.
|
ipv4_address
|
Specifies the IPv4 address.
|
ipv6
|
Specifies IPv6.
|
ipv6_address
|
Specifies the IPv6 address.
|
pool
|
Specifies media address pool.
|
ipv4_starting_address
|
Specifies the starting IPv4 media address of the range.
|
ipv4_ending_address
|
Specifies the ending IPv4 media address of the range.
|
ipv6_starting_address
|
Specifies the IPv6 media pool starting address of the range.
|
ipv6_ending_address
|
Specifies the IPv6 media pool ending address of the range.
|
vrf
|
(Optional) Specifies VRF.
|
vrf_name
|
Specifies the VRF name.
|
nat-mode
|
(Optional) Specifies NAT mode.
|
twice-nat
|
Specifies the address to be used for twice-NAT flows.
|
twice-napt
|
Specifies the address to be used for twice-NAPT flows.
|
managed-by
|
(Optional) Specifies Managed-By.
|
dbe
|
Specifies the address that DBE is allowed to select as the local address for flows.
|
mgc
|
Specifies the address that MGC is allowed to specify as the local address for flows
|
Defaults
None
Command Modes
sbc-dbe mode
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.4.1
|
This command was modified to add the pool option to support the media address pools feature.
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the media-address command configures a DBE IPv4 media address.
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4 10.0.1.4 managed by mgc
The following example shows how to add addresses (from 10.10.10.1 through 10.10.10.20 and also 10.20.10.1 through 10.20.10.20) to the address pool.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#media-address pool ipv4 10.10.10.1 10.10.10.20
RP/0/0/CPU0:router(config-sbc-dbe-media-address-pool)#exit
RP/0/0/CPU0:router(config-sbc-dbe)#media-address pool ipv4 10.20.10.1 10.20.10.20
The following example shows how to configure an address pool for use in VRF vpn3:
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address vrf vpn3
RP/0/0/CPU0:router(config-sbc-dbe-media-address)#
media-address port range
To create a port range associated with a media address or range of addresses, use the media-address port range command in dbe mode. To remove a port range associated with a media address or range of addresses, use the no form of this command.
media-address port range min-port max-port class-of-service
no media-address port range min-port max-port class-of-service
Syntax Description
min-port
|
Specifies the starting port number of the range. Value starts at 1 and must be less than or equal to the max-port value.
|
max-port
|
Specifies the ending port number of the range. Value must be less than or equal to 65535 and greater than or equal to the min-port value.
|
class-of-service
|
Specifies the class of service affinity for the port range. Class-of-service is one of [any | voice | video].
|
Defaults
min-port = 16384
max-port = 32767
class-of-service = any
Command Modes
dbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to create a new port range for a media address range. The range runs from 10000 to 20000. It also specifies voice as the class of service.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4
RP/0/0/CPU0:router(config-sbc-dbe-media-address-ipv4)# port-range 10000 20000 voice
media-bypass
To configure the H.323 or SIP adjacency to allow media traffic to bypass the DBE, use the media-bypass command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.
media-bypass
no media-bypass
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Adjacency SIP configuration
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
When configured, media traffic for calls originating and terminating on this adjacency flows direct between the endpoints and does not pass through the DBE. When deconfigured, media traffic must always pass through a gateway.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to allow media traffic for the SIP adjacency SipToIsp42 to bypass a gateway:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# media-bypass
media-bypass-forbid
To configure the H.323 or SIP adjacency to forbid media traffic to bypass the DBE, use the media-bypass-forbid command in the appropriate configuration mode. To return to the default state, use the no form of this command.
media-bypass-forbid
no media-bypass-forbid
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Adjacency SIP configuration
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to set media traffic for the SIP adjacency SipToIsp42 to bypass a gateway:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# media-bypass-forbid
media-gateway
To configure a media gateway, use the media-gateway command in SBE mode. To remove a media gateway configuration, use the no form of this command.
media-gateway ipv4 A.B.C.D
no media-gateway ipv4 A.B.C.D
Syntax Description
ipv4
|
Specifies IPv4.
|
A.B.C.D
|
Specifies the IPv4 media gateway address.
|
Defaults
None
Command Modes
sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to access media gateway submode from where you configure a media gateway.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#media-gateway ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-mg)#
media-timeout
To configure the time that the DBE should wait since the last media packet has been received on a call, before determining that the call has ceased and clearing up the call resources and signaling the SBE to do the same, use the media-timeout command in DBE media-address configuration mode.
media-timeout timeout
Syntax Description
timeout
|
Specifies the maximum time a DBE should wait since the last media packet has been received on a call, before determining that the call has ceased and before clearing up the call resources and signaling the SBE to do the same.
|
Defaults
timeout: 30seconds
Command Modes
DBE media-address configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the DBE to wait 10 seconds after receiving the last media packet before cleaning up the call resources:
RP/0/0/CPU0:router(config)# sbc mySbc dbe media-address
RP/0/0/CPU0:router(config-sbc-dbe-media-address)# media-timeout 10
Related Commands
Command
|
Description
|
media-address
|
Configures a DBE media address pool and an address pool for use in a VRF.
|
method
To add a method with a specified name to a SIP message profile, use the method command in the method-profile mode. To remove the method from the profile, use the no form of this command.
method method name
no method method name
Syntax Description
method name
|
Specifies the name of the method added to the method profile. Valid names are 1 to 32 characters in length (inclusive) and are case-sensitive.
|
Defaults
None
Command Modes
SIP method-profile configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the method command adds a method test to the method profile MyProfile.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile MyProfile
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# method test
method-profile (adj-sip)
To set a specified method profile for inbound and outbound signaling on a specified SBE SIP adjacency, use the method-profile command in SBE SIP adjacency mode.
method-profile inbound | outbound profile name
Syntax Description
inbound | outbound
|
Sets the inbound and outbound SIP method profiles.
|
profile name
|
Specifies the name of the method profile to be set for inbound signaling on a specified adjacency. If you enter the name default, the default method profile is set for inbound signaling.
|
Defaults
None
Command Modes
sbc-sbe-adj-sip
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the method-profile command sets method profile Profile1 for inbound and outbound signaling on an SBE SIP adjacency test.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# method-profile inbound Profile1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# method-profile outbound Profile2
method-profile (sip)
To configure a method profile in the mode of an SBE entity, use the method-profile command in sbe-sip mode. To remove the method profile, use the no form of this command.
method-profile profile-name
no method-profile
Syntax Description
profile name
|
Specifies the name of the method profile. If you enter the name default, the default profile is configured. This profile is used for all adjacencies which do not have a specific profile configured.
|
Defaults
None
Command Modes
sbe-sip
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the method-profile command configures a method profile with the name of test1.
RP/0/0/CPU0:node3(config)# sbc umsbc-node3 sbe
RP/0/0/CPU0:node3(config-sbc-sbe)# sip method-profile test1
minor-alarm-threshold
To configure the threshold (in MB) at which a minor alarm is generated if the CDR file reaches that size, use the minor-alarm-threshold command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
minor-alarm-threshold threshold
no minor-alarm-threshold
Syntax Description
threshold
|
Specifies the threshold (in MB) at which an alarm is generated.
|
Defaults
None
Command Modes
Billing local configuration
Billing remote configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the minor alarm threshold to 50 MB:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# billing local
RP/0/0/CPU0:router(config-sbc-sbe-lclbill)# minor-alarm-threshold 50
mode
To configure the mode for a RADIUS authentication server, use the mode command in the SIP adjacency mode. To deconfigure the mode, use the no form of this command.
mode {local | remote}
no mode {local | remote}
Syntax Description
local
|
Configures the RADIUS authentication server for local authentication.
|
remote
|
Configures the RADIUS authentication server for remote authentication.
|
Defaults
None
Command Modes
RADIUS authentication server mode
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the mode command is used to configure the RADIUS authentication server for local authentication.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbe-adj-auth)# server authserv
RP/0/0/CPU0:router(config-sbe-adj-auth-ser)# mode local
na-dst-prefix-table
To enter the mode in which to configure a number analysis table, with numbers that match the prefix of the dialed number within an SBE policy set, use the na-dst-prefix-table command.
na-dst-prefix-table table-name
Syntax Description
table-name
|
Name of the number analysis table you are creating or of an existing table you are configuring.
|
Defaults
None
Command Modes
sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example illustrates the use of the na-dst-prefix-table command to create a number analysis table called MyNaTable.
RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-dst-prefix-table MyNaTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-natable)#
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
na-src-account-table
To enter the mode for configuring a number analysis table within an SBE policy set, with entries that match the source account, use the na-src-account-table command.
na-src-account-table table-name
Syntax Description
table-name
|
Name of the number analysis table within an SBE policy set, with entries matching the source account.
|
Defaults
None
Command Modes
sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following commands enter the submode for the NA table MyNaTable, or if it does not already exist, it creates it.
RP/0/0/CPU0:router#config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# na-src-account-table MyNaTable
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
edit-cic
|
Allows you to manipulate a carrier identification code in any number analysis table.
|
entry
|
Enters the mode for configuring an entry in a number analysis table, creating the table, if necessary.
|
nat
To configure a SIP adjacency to assume that all endpoints are behind a NAT device, use the nat command in the SIP adjacency mode. To deconfigure this feature on the SIP adjacency, use the no form of this command.
nat {force-on | force-off}
no nat {force-on | force-off}
Syntax Description
force-on
|
Sets the SIP adjacency to assume that all endpoints are behind a NAT device.
|
force-off
|
Sets the SIP adjacency to assume that the endpoints are not behind a NAT device.
|
Defaults
The SBC autodetects whether all the endpoints are behind a NAT device.
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the nat force-on command is used to configure the SIP adjacency to assumes that all endpoints are behind a NAT device.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# nat force-on
network-id
To configure the network ID, use the network-id command in SBE configuration mode. To deconfigure the network ID, use the no form of this command.
network-id id
no network-id
Syntax Description
id
|
Specifies the eight-digit network ID. Range is 0 to 99999.
|
Defaults
None
Command Modes
SBE configuration mode
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the network ID to 0x56878905:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# network-id 0x56878905
overload-time-threshold
To the threshold time (in milliseconds) for Media Gateway (MG) overload control detection, use the overload-time-threshold command in DBE mode. To remove the threshold time, use the no form of this command.
overload-time-threshold time
no overload-time-threshold time
Syntax Description
time
|
Specifies the threshold time (in milliseconds) for MG overload control detection. The range is 0 to 2000000000.
|
Defaults
time = 100
Command Modes
dbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the threshold time (in milliseconds) for MG overload control detection.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#overload-time-threshold 200
package
To enable or disable the vDBE H.248 profile optional packages to interoperate with media gateway controller (SBE), use the package command in the vdbe-h248-profile mode. Use this command after you have defined the name of the profile using the h248-profile command. To return to the default value, use the no form of this command.
package package-name enable | disable
no package enable | disable
Syntax Description
package-name
|
Specifies the names of the packages that should be enabled or disabled. Values are:
• aud-cap—Audit Capability package
• chp—Congestion Handling H248 package
• dtmfd—DTMF Detection H248 package
• dtmfg—DTMF Generation H248 package
• emp—Middlebox (emp) H248 package
• epstat—End Point Statistics H248 package
• eroot—Enhanced Root H248 package
• evpnd—Extended VPN Discrimination H248 package
• ginfo—GINFO H248 package
• mgcinfo—MGC Info H248 package
• ocp—Overlord Control H248 package
• rtp—RTP H248 package
• sfr—Session Failure Reaction H248 package
• tsc—Termination State Control H248 package
For the Ia profile the following packages are disabled by default: epstats, rtp, emp, chp, ocp, sfr, tsc, dtmfd, dtmfg, mgcinfo, evpnd, and eroot packages.
|
Defaults
None
Command Modes
vdbe-h248-profile
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enable the MGC information package for vDBE to interoperate with the media gateway controller (SBE).
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#dbe
RP/0/0/CPU0:router(config-sbc-dbe)#vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)#h248-profile etsi-bgf
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248-profile)#package mgcinfo enable
Related Commands
Command
|
Description
|
h248-profile
|
Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).
|
h248-profile-version
|
Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.
|
show services sbc dbe vdbe h248-profile
|
Displays the information on the specified profile, including transport, H.248 version, and active packages.
|
pass-body
To permit SIP message bodies to pass through [for non-vital SIP methods accepted by a method profile] in the SIP method profile mode of an SBE entity, use the pass-body command in SBE-SIP mode. To remove the message bodies out of non-vital SIP messages accepted by the method profile, use the no form of this command.
pass-body
no pass-body
Syntax Description
This command has no arguments or keywords.
Defaults
By default, the message bodies are removed out of non-vital SIP messages.
Command Modes
SIP method-profile configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the pass-body command permits SIP message bodies to pass through for non-vital SIP methods accepted by method profile test1.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip method-profile test1
RP/0/0/CPU0:router(config-sbc-sbe-sip-mth-prf)# pass-body
passthrough
To configure the passthrough header in non-REGISTER requests, use the passthrough command in the SIP adjacency mode. To deconfigure the passthrough header in non-REGISTER requests, use the no form of this command.
passthrough {from | to} header
no passthrough {from | to} header
Syntax Description
from
|
Configures the from header.
|
to
|
Configures the to header.
|
Defaults
None
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the passthrough command is used to configure the passthrough header for non-REGISTER requests.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# passthrough from header
RP/0/0/CPU0:router(config-sbe-adj-sip)# passthrough to header
pause
To pause resending the cache of messages to the RADIUS server, use the pause command in RADIUS accounting configuration mode.
pause
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
RADIUS accounting configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
When the sending of messages is stopped, new records are added to the cache, rather than being sent.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to stop the sending of messages from the cache for RADIUS client instance radius1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# pause
Related Commands
Command
|
Description
|
radius
|
Configures a RADIUS client for accounting purposes.
|
resend
|
Begins resending cached messages for the RADIUS client.
|
port
To configure the port that the RADIUS server will use to receive Access-Request or Accounting-Request packets, use the port command in server configuration mode.
port port-num
no port
Syntax Description
port-num
|
Specifies the port where the RADIUS server receives access-request packets. Range is 1 to 65535.
|
Defaults
Access-Request packets use default port 1812.
Accounting-Request packets use default port 1813.
Command Modes
RADIUS accounting configuration
RADIUS authentication configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure authentication server acctsvr to use port 1009 on mySbc for the authentication RADIUS client instance:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-auth-ser)# port 1009
port-range
To create a port range associated with a media address or range of addresses, use the port-range command in either media-address or media-address configuration mode. To deconfigure port ranges, use the no form of this command.
port-range starting-port ending-port {any | signaling | video | voice}
no port-range starting-port ending-port {any | signaling | video | voice}
Syntax Description
starting-port
|
Specifies the starting port number of the range. Valid values begin at 10000 and must be less than the ending port number. Default value is 16384.
|
ending-port
|
Specifies the ending port number of the range, which must be greater than the starting port number. Maximum value is 65535. Default value is 32767.
|
any
|
(Optional) Specifies the port range applies to any class of service.
|
signaling
|
(Optional) Specifies the port range applies to signaling class of service.
|
video
|
(Optional) Specifies the port range applies to video class of service.
|
voice
|
(Optional) Specifies the port range applies to voice class of service.
|
Defaults
None
Command Modes
sbc-dbe-media-address-ipv4
sbc-dbe-media-address-ipv6
sbc-dbe-media-address-pool
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the port-range command creates a port range associated with an IPv4 media address.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# media-address ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-dbe-media-address-ipv4)# port-range 10000 20000 voice
prefix
To configure whether the match-address of this entry matches the start of the source or destination address, use the prefix command in the appropriate configuration mode. To delete the match-type in the routing table, use the no form of this command.
prefix
no prefix
Syntax Description
This command has no arguments or keywords.
Defaults
By default, the match-address is not to be denoted as a prefix.
Command Modes
RTG-DST-address-table configuration
RTG-SRC-address-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure an entry to match dialed numbers starting with 9:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 9
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# prefix
priority
To configure the priority of the accounting or authentication server, use the priority command in RADIUS accounting configuration mode. To disable any previously set priority, use the no form of this command.
priority pri
no priority
Syntax Description
pri
|
Specifies the priority. Range is 1 to 10.
|
Defaults
By default, this command assumes that pri is 1.
Command Modes
RADIUS accounting configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The priority determines which of the configured servers is selected as the default server and where all requests are sent. A RADIUS client contacts the RADIUS servers sequentially, in order of priority, to establish an active RADIUS session. Each RADIUS client sends call detail records to the currently active RADIUS server.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure accounting servers acctsvr as priority 1 and acctsvr2 as priority 2 on mySbc for RADIUS client instance radius1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# priority 1
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# exit
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server acctsvr2
RP/0/0/CPU0:router(config-sbc-sbe-acc-ser)# priority 2
privacy restrict outbound
To configure an H.323 adjacency to apply privacy restriction on outbound messages if the user requests it, use the privacy restrict outbound command in the H.323 adjacency mode. To disallow privacy restriction on outbound messages sent out by the adjacency, use the no form of this command.
privacy restrict outbound
no privacy restrict outbound
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the privacy restrict outbound command is used to configure an H.323 adjacency to apply privacy restriction on outbound messages if a user requests it.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323ToIsp422
RP/0/0/CPU0:router(config-sbe-adj-h323)# privacy restrict outbound
Related Commands
Command
|
Description
|
allow private info
|
Configures an H.323 adjacency to allow private information on messages sent out by the H.323 adjacency.
|
qos fax
To configure a fax QoS profile, use the qos fax command in SBE configuration mode. To delete the given profile, use the no form of this command.
qos fax qos-name
no qos fax qos-name
Syntax Description
qos-name
|
Specifies the QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to enter the submode for configuring a fax QoS profile named residential:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos fax residential
RP/0/0/CPU0:router(config-sbc-sbe-fax)# exit
qos sig
To configure a signaling QoS profile, use the qos sig command in SBE configuration mode. To destroy the given profile, use the no form of this command.
qos sig qos-name
no qos sig qos-name
Syntax Description
qos-name
|
Specifies the name of an existing QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how qos sig command enters the submode for configuring a signaling QoS profile residential:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos sig residential
RP/0/0/CPU0:router(config-sbc-sbe-sig)# exit
qos video
To configure a video QoS profile, use the qos video command in the SBE configuration mode. To delete the given profile, use the no form of this command
qos video qos-name
no qos video qos-name
Syntax Description
qos-name
|
Specifies the QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to enter the submode for configuring a video QoS profile named residential:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos video residential
RP/0/0/CPU0:router(config-sbc-sbe-video)# exit
qos voice
To configure a voice QoS profile, use the qos voice command in SBE configuration mode. To delete the given profile, use the no form of this command.
qos voice qos-name
no qos voice qos-name
Syntax Description
qos-name
|
Specifies the QoS profile. The string default is reserved.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to enter the submode for configuring a voice QoS profile named residential:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# qos voice residential
RP/0/0/CPU0:router(config-sbc-sbe-voice)# exit
radius
To create and configuring a RADIUS client for accounting or authentication purposes, use the radius accounting command in SBE configuration mode. To delete the RADIUS client, use the no form of this command.
radius [accounting client-name | authentication]
no radius [accounting client-name | authentication]
Syntax Description
accounting client-name
|
Specifies the name to assign to the accounting RADIUS client.
|
authentication
|
Enables client authentication.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Each named client maintains a list of servers consisting of one active server and a set of standby servers. The list is traversed by the client in order of configured priority. An SBC instance can be configured with multiple clients (each with its own ordered set of servers) if call detail reports (CDRs) must be sent to multiple RADIUS servers simultaneously. CDRs are sent by the client to the currently active server. If the active server cannot be contacted, a standby server is used.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to create a RADIUS client instance called radius1:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# exit
Related Commands
Command
|
Description
|
disabled
|
Disables the caching and sending of messages for a RADIUS account.
|
pause
|
Pauses resending the cache of messages to the RADIUS server.
|
resend
|
Begins resending cached messages for the RADIUS client.
|
ras retry
To configure an H.323 RAS retry count for an RAS transaction type, use the ras retry command in the appropriate configuration mode. To return to the default value for the specified RAS transaction type, use the no form of this command.
ras retry {arq | brq | drq | grq | lrq | rrq | urq} value
no ras retry {arq | brq | drq | grq | lrq | rrq | urq} value
Syntax Description
arq
|
Specifies an ARQ transaction.
|
brq
|
Specifies a BRQ transaction.
|
drq
|
Specifies a DRQ transaction.
|
grq
|
Specifies a GRQ transaction.
|
lrq
|
Specifies an LRQ transaction.
|
rrq
|
Specifies an RRQ transaction.
|
urq
|
Specifies a URQ transaction.
|
value
|
Specifies the retry count value. Valid values are 0 to 30.
|
Defaults
The default values vary depending on the transaction type.
Command Modes
Adjacency H.323 configuration
H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the ras retry command configures an H.323 RAS retry count in Adjacency H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras retry arq 5
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras retry lrq 5
The following example shows how the ras retry command configures an H.323 RAS retry count in H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras retry arq 5
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras retry lrq 5
ras rrq
To configure the registration request (RRQ), use the ras rrq command in the appropriate configuration mode. To return to the default value, use the no form of this command.
ras rrq {keepalive | ttl} value
no ras rrq {keepalive | ttl} value
Syntax Description
keepalive
|
Specifies keepalive messages used to refresh an H.323 adjacency.
|
ttl
|
Specifies time to live (TTL) for an RRQ request.
|
value
|
Specifies the keepalive or ttl value in seconds. Valid values for keepalive are from 15 to 150. Valid values for ttl are from 16 to 300.
The ttl value must be higher than the keepalive value.
|
Defaults
The default keepalive and ttl values are 45 and 60 respectively.
Command Modes
Adjacency H.323 configuration
H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the ras rrq command configures H.323 RAS RRQ in Adjacency H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras rrq ttl 100
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras rrq keepalive 60
The following example shows how the ras rrq command configures RAS RRQ in H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras rrq ttl 100
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras rrq keepalive 60
ras timeout
To configure an H.323 RAS timeout interval, use the ras timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.
ras timeout {arq | brq | drq | grq | lrq | rrq | urq} value
no ras timeout {arq | brq | drq | grq | lrq | rrq | urq} value
Syntax Description
arq
|
Specifies ARQ transaction.
|
brq
|
Specifies BRQ transaction.
|
drq
|
Specifies DRQ transaction.
|
grq
|
Specifies GRQ transaction.
|
lrq
|
Specifies LRQ transaction.
|
rrq
|
Specifies RRQ transaction.
|
urq
|
Specifies URQ transaction.
|
value
|
Specifies timeout value (seconds). Valid values are from 1 to 45 seconds.
|
Defaults
The default values vary depending on the transaction type.
Command Modes
Adjacency H.323 configuration
H.323 configuration
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the ras timeout command configures an H.323 RAS timeout interval in Adjacency H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras timeout arq 1
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# ras timeout lrq 1
The following example shows how the ras timeout command configures an H.323 RAS timeout interval in H.323 configuration mode.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# h323
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras timeout arq 1
RP/0/0/CPU0:router(config-sbc-sbe-h323)# ras timeout lrq 1
reason
To enter a submode for configuring a limit to a specific event type on the source (a port, IP address, VPN, global address space), use the reason command. The no version of this command, returns the event to its previous values.
reason event | description
no reason
Syntax Description
event
|
The event type that should trigger the limit can be defined as any of the following:
• authentication-failure—Requests that fail to be authenticated.
• bad-address—Packets from unexpected addresses.
• corrupt-message—Signaling packets that are corrupt and cannot be decoded.
• endpoint-registration—Endpoint-registrations.
• policy-rejection—Requests that are rejected by configured policy.
• routing-failure—Requests that fail to be routed onward by SBC.
|
description
|
Helpful description of an event that should trigger blacklisting.
|
Defaults
This event argument is mandatory.
Command Modes
sbc-sbe-blacklist
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
This field can only take the explicit strings described in the "Syntax Description."
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows the use of the reason command in context.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
Related Commands
Command
|
Description
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
trigger-period
|
Defines the period over which events are considered. For details, see the description of the trigger-size command.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe blacklist source
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
redirect-limit
To configure the maximum number of redirections that SBC performs on a call, use the redirect-limit command in config-sbc-sbe mode. The no version of this command returns the adjacency to the default behavior.
redirect-limit limit
no redirect-limit limit
Syntax Description
limit
|
Specifies the maximum number of SIP 3xx retry attempts. The range is 0 to 200.
|
Defaults
The default number of redirections is 2.
Command Modes
config-sbc-sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the maximum number of SIP 3xx retries as 4:
RP/0/0/CPU0:router(config)sbc mysbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)#redirect-limit 4
redirect-mode
To configure the behavior of SBC on receipt of a 3xx response to an invite from the SIP adjacency, use the redirect-mode command in config-sbc-sbe-adj-sip mode. The no version of this command returns the adjacency to the default behavior.
redirect-mode pass-through | recurse
no redirect-mode pass-through | recurse
Syntax Description
pass-through
|
Passes all 3xx responses back to the caller.
|
recurse
|
On 300, 301, 302 and 305 invite responses, SBC resends the invite to the first listed contact address, or else passes the 3xx responses back.
|
Defaults
pass-through
Command Modes
config-sbc-sbe-adj-sip
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to resend an invite to the first listed contact address or else pass the 3xx responses back to the sender:
RP/0/0/CPU0:router(config)sbc mysbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)#adjacency sip test1
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)#redirect-mode recurse
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)commit
Related Commands
Command
|
Description
|
redirect-limit
|
Configures the maximum number of redirections SBC performs on a call.
|
registration rewrite-register
To configure the SIP register request rewriting, use the registration rewrite-register command in SIP adjacency mode. To deconfigure the register request rewriting, use the no form of this command.
registration rewrite-register
no registration rewrite-register
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
SBE SIP adjacency configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the registration rewrite-register command configures the SIP register request rewriting on SIP adjacency SipToIsp42.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration rewrite-register
registration target address
To set the address to be used when an outbound SIP register request rewriting occurs, use the registration target address command in the SIP adjacency mode. To remove the address, use the no form of this command.
registration target address host address
no registration target address host address
Syntax Description
host address
|
Specifies the host address to use when an outbound SIP register request rewriting occurs. This parameter can be a DNS name or an IPv4 address in dotted decimal format. Valid strings are from 1 to 255 characters in length.
|
Defaults
None
Command Modes
SBE SIP adjacency mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the registration target address command sets the target address for SIP adjacency SipToIsp42 as example.com.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration target address example.com
registration target port
To set the port to be used when an outbound SIP REGISTER request rewriting occurs, use the registration target port command in SIP adjacency mode. To remove the port, use the no form of this command.
registration target port port number
no registration target port port number
Syntax Description
port number
|
Specifies the port number to use when an outbound SIP REGISTER request rewriting occurs. Valid values can be from 1 to 65535. If you enter the default value of 0, no port address is set.
|
Defaults
None
Command Modes
SBE SIP adjacency mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the registration target port command sets the port number for SIP adjacency SipToIsp42 as 5070.
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# registration target port 5070
remote-address ipv4
To configure an H.323 or SIP adjacency to restrict the set of remote signaling peers that can be contacted over the adjacency to those with the given IP address prefix, use the remote-address ipv4 command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
To configure the remote address for vDBE H.248 controller, use the controller h248 remote-address ipv4 command in the vDBE mode. To return to the default value, use the no form of this command.
remote-address ipv4 ipv4_IP_address/prefix
no remote-address
Syntax Description
ipv4_IP_address/prefix
|
Specifies the IPv4 address and prefix length for the remote address.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
dbe-vdbe-h248 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.5.1
|
Support was added for the DBE module in the H.248 submode on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the SIP adjacency SipToIsp42 to match calls from 1.2.3.0/24 to this adjacency:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# remote-address ipv4 1.2.3.0/24
The following example shows how to configure the remote address for the vDBE H.248 controller:
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1
RP/0/0/CPU0:router(config-sbc-dbe-h248)# remote-address ipv4 34.34.34.34
RP/0/0/CPU0:router(config-sbc-dbe-h248)#
resend
To begin resending cached messages for the RADIUS client, use the resend command in the services mode.
resend
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
services
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.5.1
|
This command was modified to be supported in the services mode.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure record resending for RADIUS client instance radius1:
RP/0/0/CPU0:router# services sbc mysbc sbe radius accounting radius1 resend
Related Commands
Command
|
Description
|
radius
|
Configures a RADIUS client for accounting purposes.
|
pause
|
Pauses resending the cache of messages to the RADIUS server.
|
resource-priority
To configure the priority of a resource-priority header string, use the resource-priority command in resource-priority-set mode. To deconfigure the priority, use the no form of this command.
resource-priority value
no resource-priority value
Syntax Description
value
|
Specifies the string value to be assigned the priority. The value must be followed by the priority as shown: value.priority
|
Defaults
None
Command Modes
Resource Priority set mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modifications.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the resource-priority command configures the priority for resource-priority header string dsn.
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# resource-priority-set dsn
RP/0/0/CPU0:router(config-sbc-sbe-rsrc-pri)# resource-priority dsn.flash
resource-priority-set
To establish the resource priority set to be used with the specified SIP adjacency in the mode of an SBE entity, use the resource-priority-set command in SIP adjacency mode. To remove the priority-set, use the no form of this command.
resource-priority-set resource-priority-set name
no resource-priority-set resource-priority-set name
Syntax Description
resource-priority-set name
|
Specifies the name of the resource priority set.
|
Defaults
No default behavior or values
Command Modes
SBE SIP adjacency mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the resource-priority-set command sets the SIP adjacency SipToIsp42 with the resource-priority-set named dsn.
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# resource-priority-set dsn
rtg-carrier-id-table
To enter the configuration mode of or to create a new routing table, whose events match the carrier ID of an SBE policy set, use the rtg-carrier-id-table command.
The no version of the command destroys the routing table. However, a routing table may not be destroyed if it is in the context of the active policy set.
rtg-carrier-id-table table-name
no rtg-carrier-id-table table-name
Syntax Description
table-name
|
Name of the routing table to be configured.
|
Defaults
None
Command Modes
sbc-sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
The actions of this command are restricted to setting destination adjacency. A group of adjacencies is chosen for an event if an entry in a routing table matches that event and points to a round-robin adjacency table in the next table action.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to add the carrier ID table MyCarrierIDTable.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-carrier-id-table MyCarrierIDTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#
Related Commands
Command
|
Description
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-round-robin-table
|
Enters the configuration mode of a policy table, with events that have no match-value parameters or next-table actions.
|
rtg-src-account-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source account.
|
rtg-src-adjacency-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
rtg-dst-address-table
To access a destination address routing policy table where you can then configure or edit an entry in the routing table, use the rtg-dst-address-table command in the sbe mode. To remove the table entry, use the no form of this command.
rtg-dst-address-table table-id
no rtg-dst-adress-table table-id
Syntax Description
table-id
|
Specifies the name of the table.
|
Defaults
No default behavior or values
Command Modes
sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to access a destination address routing policy table where you can then configure or edit an entry in the routing table.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)#rtg-dst-address-table desttable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)#
rtg-dst-domain-table
To enter the configuration submode of a routing table with entries that match the destination domain name of an SBE policy set, use the rtg-dst-domain-table command. If no table exists, the command creates a new routing table.
The no version of the command deletes the routing table.
rtg-dst-domain-table table-name
no rtg-dst-domain-table table-name
Syntax Description
table-name
|
Name of the routing table to be configured.
|
Defaults
None
Command Modes
sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command. You cannot delete a routing table if it is in the active policy set. You cannot enter the submode of a routing table configuration in the active policy set.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command creates the routing policy table MyRtgTable.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-dst-domain-table MyRtgTable
(RP/0/0/CPU0:routerconfig-sbc-sbe-callpolicy-rtgtable)#
Related Commands
Command
|
Description
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-carrier-id-table
|
Enters the configuration mode for creation or configuration of a routing table, with entries that match the carrier ID of an SBE call policy set.
|
rtg-src-domain-table
|
Enters the configuration submode for creation or configuration of a routing table, with entries that match the source domain name of an SBE call policy set.
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
rtg-round-robin-table
To enter the configuration mode of a policy table, whose events have no match-value parameters or next-table actions, use the rtg-round-robin-table command.
rtg-round-robin-table table-name
Syntax Description
table-name
|
Name of the routing table to be configured.
|
Defaults
None
Command Modes
sbc-sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
The actions of this command are restricted to setting destination adjacency. A group of adjacencies is chosen for an event if an entry in a routing table matches that event and points to a round-robin adjacency table in the next table action.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example show how to add the round robin routing table MyRoundRobinTable.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-round-robin-table MyRoundRobinTable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-src-adjacency-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.
|
rtg-carrier-id-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the carrier ID of an SBE policy set.
|
rtg-src-account-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source account.
|
rtg-src-account-table
To enter the configuration mode of an existing routing table or to create a new one, with entries that match the source account, use the rtg-src-account-table command.
Note
You cannot issue this command if the table is part of the active policy set.
The no version of the command deletes the match value of the given entry in the routing table.
rtg-src-account-table table-id
no rtg-src-account-table table-id
Syntax Description
table-id
|
ID of the routing table to be configured.
|
Defaults
None
Command Modes
sbc-sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command modifies the matching domain in a routing table to cisco.com.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-adjacency-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)#
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtg-src-adjacency-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the source adjacency.
|
rtg-round-robin-table
|
Enters the configuration mode of a policy table, with events that have no match-value parameters or next-table actions.
|
rtg-carrier-id-table
|
Enters the configuration mode of an existing routing table or creates a new one, with entries that match the carrier ID of an SBE policy set.
|
rtg-src-address-table
To access a source address routing policy table to configure or edit an entry in the routing table, use the rtg-src-address-table command in SBE mode. To remove the table entry, use the no form of this command.
rtg-src-address-table table-id
no rtg-src-adress-table table-id
Syntax Description
table-id
|
Specifies the name of the table.
|
Defaults
None
Command Modes
sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to access a source address routing policy table to configure or edit an entry in the routing table.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)#rtg-src-address-table mytable
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
RP/0/0/CPU0:router(config-sbc-sbe-rtgpolicy-rtgtable-entr)#
Related Commands
Command
|
Description
|
call-policy-set
|
Configures a dial-string manipulation action.
|
rtg-dst-address-table
|
Configures a dial-string manipulation action in the routing table.
|
rtg-src-adjacency-table
To enter the configuration mode of an existing routing table or to create a new table whose entries match the source adjacency, use the rtg-src-adjacency-table command.
The no version of the command deletes the match value of the entry in the routing table.
rtg-src-adjacency-table table-id
no rtg-src-adjacency-table table-id
Syntax Description
table-id
|
ID of the routing table to be configured.
|
Defaults
None
Command Modes
sbc-sbe-rtgpolicy-rtgtable
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command modifies the matching domain in a routing table to cisco.com.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-adjacency-table MyRtgTable
Related Commands
Command
|
Description
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
rtg-src-account-table
|
Enters the configuration mode of an existing routing table or creates a new table whose entries match the source account
|
rtg-round-robin-table
|
Enters the configuration mode of a policy table whose events have no match-value parameters or next-table actions.
|
rtg-src-domain-table
To enter the submode of a routing table configuration, with entries that match the source domain name, use the rtg-src-domain table command. If no table exists, the command creates a new routing table.
Note
You cannot enter the submode of a routing table configuration in the active policy set.
The no version of the command destroys the routing table.
Note
You cannot destroy a routing table if it is in the active policy set.
rtg-src-domain-table table-name
no rtg-src-domain-table table-name
Syntax Description
table-name
|
Name of the number analysis table within an SBE policy set, with entries matching the source account.
|
Defaults
None
Command Modes
sbe-callpolicy
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command creates the routing policy table MyRtgTable.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# call-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy)# rtg-src-domain-table MyRtgTable
RP/0/0/CPU0:router(config-sbc-sbe-callpolicy-rtgtable)#
Related Commands
Command
|
Description
|
sbc
|
Creates a new SBC service and enters a new SBC configuration mode. Alternatively, it enters the configuration mode of an existing service.
|
sbe
|
Enters the mode of an SBE entity within an SBC service.
|
call-policy-set
|
Enters the mode of a routing policy configuration within an SBE entity.
|
rtp payload-type nte
To configure the dynamic RTP payload type for RFC 2833 Named Telephone Event (rtp-nte) packets for DTMF interworking, use the rtp payload-type nte command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.
rtp payload-type nte number
no rtp payload-type nte
Syntax Description
number
|
Payload value. Range is 96 to 127.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The payload type is used both for transmitting and receiving. Therefore, it must be the same value that is used on the peer.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set the RTP payload type to 111 on the H.323 adjacency h323ToIsp42:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# rtp payload-type nte 111
secure-media
To configure the DBE to enable a DTLS or SRTP media passthrough, use the secure-media command in the DBE mode. To disable the media passthrough, use the no form of this command.
secure-media
no secure-media
Defaults
The media passthrough is disabled.
Command Modes
DBE configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the secure-media command is used to configure the DBE to enable DTLS or SRTP media passthrough.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# dbe
RP/0/0/CPU0:router(config-sbc-dbe)# secure-media
security
To implement transport-level security on a SIP adjacency, use the security command in the SIP adjacency mode. To indicate that the adjacency cannot be secured, use the no form of this command.
security type
no security type
Syntax Description
type
|
Specifies the type of security to be implemented on the adjacency. Possible values are:
• untrusted—The adjacency is not secured.
• trusted-encrypted—The adjacency is secured by means of encryption.
• trusted-unencrypted—The adjacency is assumed to be secure by other means (for example, a single dedicated link)
|
Defaults
None
Command Modes
SBE SIP adjacency mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the security command is used to set to trusted—encrypted for SIP adjacency test.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip test
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# security trusted-encrypted
server
To configure an accounting server or an authentication server for a RADIUS client instance on an SBC service, use the server command in the configuration mode of the RADIUS client for accounting purposes and in the SBE RADIUS authentication configuration mode respectively. To deconfigure the accounting server or authentication server, use the no form of this command.
server server name
no server server name
Syntax Description
server name
|
Specifies the name of the server.
|
Defaults
None
Command Modes
SBE RADIUS client mode
SBE RADIUS authentication mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.1
|
This command was modified on the Cisco XR 12000 Series Router to add the SBE RADIUS authentication mode.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the server command configures accounting server test1 for RADIUS client instance radius1.
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius accounting radius1
RP/0/0/CPU0:router(config-sbc-sbe-acc)# server test1
The following example shows how the server command enters the mode to configure the RADIUS
authentication server test2 for local authentication.
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# radius authentication
RP/0/0/CPU0:router(config-sbc-sbe-auth)# server test2
service-location preferred-active
To enable a service card to run the SBC function as a primary, use the service-location preferred-active command in sbc mode.
service-location preferred-active <location>
Syntax Description
location
|
Specifies the preferred active location of the SBC.
|
Defaults
None
Command Modes
sbc
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to assign 0/0/CPU as preferred active location of the SBC:
RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# service-location preferred-active 0/0/CPU0
show services redundancy
To show information related to all services, use the show services redundancy command in the EXEC mode.
show services redundancy
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows sample data for all services:
RP/0/0/CPU0:router# show services redundancy
Service type Name Pref. Active Pref. Standby
--------------------------------------------------------------------------------
SBC service-1 0/1/CPU0 Active
show services sbc dbe addresses
To list all the addresses configured on the DBEs, use the show services sbc dbe addresses command in EXEC mode.
show services sbc sbc-name dbe addresses
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows a list of all the addresses configured on the DBEs.
RP/0/0/CPU0:PE6_C12406#show services sbc mySbc dbe addresses
H.248 control address: 10.0.0.1
Media Address VRF Port range Service Class
10.10.10.1 Global 16384-20000 voice
10.10.10.1 Global 20001-65535 video
10.10.11.1-10.10.11.10 Global 16384-30000 voice
10.10.11.1-10.10.11.10 Global 30001-40000 video
10.10.11.21-10.10.11.30 Global 20000-40000
Related Commands
Command
|
Description
|
sbc dbe media-address ipv4
|
Configures a DBE media address pool and an address pool.
|
sbc dbe media-address pool ipv4
|
Creates an IPv4 address range within a DBE media address pool.
|
sbc dbe media-address port range
|
Creates a port range associated with a media address or range of addresses,
|
show services sbc dbe media-flow-stats
|
Lists the statistics about one or more media flows collected on the DBE.
|
show services sbc dbe controllers
To display the statistics of the H.248 controller on the DBE, use the show services sbc dbe controllers command in the EXEC mode.
show services sbc sbc-name dbe controllers
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc dbe controllers command is used to display statistics about the H.248 controller on the DBE.
RP/0/0/CPU0:router# show services sbc mySbc dbe controllers
Media gateway controller in use:
Sent Received Failed Retried
MG Segmentation Timer 0 ms
MGC Segmentation Timer 0 ms
MG Segmentation Max PDU Size 4294967295 bytes
MGC Segmentation Max PDU Size 512 bytes
Segmentation Packets Sent 0
Segmentation Packets Received 0
Remote address: 192.11.2.1.2944 (using default port)
Transport: UDP (with IAH)
Related Commands
Command
|
Description
|
show services sbc dbe addresses
|
Displays the addresses configured on DBEs.
|
show services sbc dbe media-flow-stats
|
Displays the statistics about one or more media flows collected on the DBE.
|
show services sbc dbe signaling-flow-stats
|
Displays statistics of one or more signaling flows.
|
show services sbc dbe h248-profile
To list theinformation on the specified H.248 profile, including transport, H.248 version, and active packages, use the show services sbc dbe h248-profile command in the EXEC mode.
show services sbc sbc-name dbe h248-profile
Syntax Description
sbc-name
|
Defines the name of the service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router and Cisco CRS-1.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows the defaults and configured options for the H.248 profile:
RP/0/0/CPU0:router#show services sbc mysbc dbe h248-profile
Base Root(root): Max Terminations per context 10
Segment(seg): Max PDU Size 4096 bytes
Related Commands
Command
|
Description
|
h248-profile
|
Configures the vDBE H.248 profile name to interoperate with the media gateway controller (SBE).
|
h248-profile-version
|
Configures the vDBE H.248 profile version to interoperate with the media gateway controller (SBE). This command is used after you have defined the name of the profile using the h248-profile command.
|
package
|
Enables or disables the optional packages for vDBE to interoperate with the media gateway controller (SBE).
|
show services sbc dbe media-flow-stats
To list statistics about one or more media flows collected on the DBE, use the show services sbc dbe media-flow-stats command in EXEC mode.
show services sbc sbc-name dbe media-flow-stats vrf vrf-name ipv4 A.B.C.D port port-number
Syntax Description
vrf-name
|
(Optional) Displays media flows only to or from the specific VPN.
|
A.B.C.D
|
(Optional) Displays media flows only to or from the specific IPv4 media address.
|
port-number
|
(Optional) Displays media flows only to or from the specific port.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows media flows to/from port 24000 at the 10.1.1.1 IPv4 address and through VPN3.
RP/0/0/CPU0:PE6_C12406#show services sbc mySbc dbe media-flow-stats vrf vpn3 ipv4 10.1.1.1
port 24000
CallPriority Routine (CD5)
RemoteAddress 192.168.1.1
Unexpected SrcAddr Packets Yes (CD6)
BillingId 12AB3C4D567124C7124C12DE
RemoteAddress 172.192.2.3
Unexpected SrcAddr Packets No (CD6)
BillingId 5DAB3C4D153624C7124E1234
Related Commands
Command
|
Description
|
sbc dbe media-address ipv4
|
Configures a DBE media address pool and an address pool.
|
sbc dbe media-address pool ipv4
|
Creates an IPv4 address range within a DBE media address pool.
|
sbc dbe media-address port range
|
Creates a port range associated with a media address or range of addresses.
|
showservices sbc dbe addresses
|
Lists the addresses configured on DBEs.
|
show services sbc dbe media-stats
To display general DBE statistics that do not include contributions from active calls, use the show services sbc dbe media-stats command in the EXEC mode.
show services sbc sbc-name dbe media-stats
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc dbe media-stats command is used to display DBE statistics for the specified SBC service.
RP/0/0/CPU0:router# show services sbc mySbc dbe media-stats
Available Bandwidth = 40 Mbps
Available Packet Rate = 500 (packets/second)
Active Signaling Flows = 108
Peak Signaling Flows = 186
Total Signaling Flows = 244
Unclassified Packets = 100
RTP Packets Reveived = 1009
RTP Octets Received = 20000
RTP Packets Discarded = 0
Related Commands
Command
|
Description
|
show services sbc dbe signaling-flow-stats
|
Displays statistics of one or more signaling flows.
|
show services sbc dbe signaling-flow-stats
To display statistics of one or more signaling flows collected on the DBE, use the show services sbc dbe signaling-flow-stats command in the EXEC mode.
show services sbc sbc-name dbe signaling-flow-stats vrf vrf-name {ipv4 ipv4 media address | ipv6
ipv6 media address} port port number
Syntax Description
vrf
|
Specifies vrf
|
vrf-name
|
Displays media flows to and from the specified VRF
|
ipv4
|
Specifies IPv4
|
ipv4 media address
|
Displays media flows to and from the specified IPV4 media address
|
ipv6
|
Specifies IPv6
|
ipv6 media address
|
Displays media flows to and from the specified IPV6 media address
|
port
|
Specifies port
|
port number
|
Displays media flows to and from the specified port
|
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the show services sbc dbe signaling-flow-stats command is used to display statistics of the signaling flow for the specified SBC service.
RP/0/0/CPU0:router# show services sbc mySbc dbe signaling-flow-stats vrf vpn3 ipv4
10.1.1.1 port 24000
RemoteAddress 192.168.1.1
RemoteAddress 172.192.2.3
Related Commands
Command
|
Description
|
show services sbc dbe media-stats
|
Displays general DBE statistics.
|
show services sbc sbe adjacencies
To list the adjacencies configured on SBEs, use the show services sbc sbe adjacencies command in the EXEC mode.
show services sbc sbc-name sbe adjacencies
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows the adjacencies that are configured on SBEs:
RP/0/0/CPU0:router#show services sbc mysbc sbe adjacencies
Signaling address: 88.88.141.3:5060
Signaling-peer: 10.10.121.10:5060
In header profile: Default
Out header profile: Default
In method profile: Default
Out method profile: Default
In UA option prof: Default
Out UA option prof: Default
In proxy opt prof: Default
Out proxy opt prof: Default
Hunting Triggers: Global Triggers
Redirect mode: Pass-through
Signaling address: 88.88.141.11:5060
Signaling-peer: 200.200.200.98:5060
In header profile: Default
Out header profile: Default
In method profile: Default
Out method profile: Default
In UA option prof: Default
Out UA option prof: Default
In proxy opt prof: Default
Out proxy opt prof: Default
target address: 200.200.200.98:5060
Hunting Triggers: Global Triggers
Redirect mode: Pass-through
show services sbc sbe adjacency all-authentication-realms
To view all currently configured authentication-realms for all SIP adjacencies, use the show services sbc sbe all-authentication-realms command in EXEC mode.
show services sbc sbc-name sbe all-authentication-realms
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how to display all currently configured authentication-realms for all SIP adjacencies using the show services sbc sbe all-authentication-realms command.
RP/0/0/CPU0:router# show services sbc mySbc sbe all-authentication-realms
Configured authentication realms
---------------------------------------
Example.com usersbc password1sbc
Example.com user2sbc password2sbc
Other.com sbcuser password3sbc
Related Commands
Command
|
Description
|
show services sbc sbe adjacency-name authentication-realms
|
Displays all currently configured authentication-realms for the SIP adjacency.
|
show services sbc sbe adjacency authentication-realms
To view all currently configured authentication-realms for the specified SIP adjacency, use the show services sbc sbe adjacency authentication-realms command in EXEC mode.
show services sbc sbc-name sbe adjacency adjacency-name authentication-realms
Syntax Description
adjacency-name
|
Specifies the name of the SIP adjacency.
|
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe adjacency authentication-realms command displays all currently configured authentication-realms for a specified SIP adjacency.
RP/0/0/CPU0:router# show services sbc mySbc sbe adjacency SipToISP42 authentication-realms
Configured authentication realms"mysbc"
---------------------------------------
Example.com usersbc passwordsbc
Related Commands
Command
|
Description
|
show services sbc sbe all-authentication-realms
|
Displays all currently configured authentication-realms for all SIP adjacencies.
|
show services sbc sbe billing
To display the local and remote billing configurations, use the show services sbc sbe billing command in the EXEC mode.
show services sbc sbc-name sbe billing local | remote
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe billing command is used to display the local billing configuration.
RP/0/0/CPU0:router# show services sbc mySbc sbe billing local
====================================
Local IP address: 10.21.20.1
Cache path: disk0:/billing
Minor alarm threshold: 500 MB
Major alarm threshold: 900 MB
Critical alarm threshold: 950 MB
Activating status: Activated
show services sbc sbe blacklist
To list the limits in force for a particular source—whether from defaults or explicitly configured—in a form in which they can be entered into the CLI, use the show services sbc sbe blacklist command in EXEC mode. Also listed are any defaults for a smaller scope configured at this address.
Values not explicitly configured and, therefore, inherited from other defaults, are bracketed.
show services sbc sbc-name sbe blacklist source
Syntax Description
sbc-name
|
Specifies the name of the SBC.
|
source
|
Specifies the source for which you want to display blacklisting information. This source is one of the following values:
• VPN ID
• VPN ID and IP address
• VPN ID, IP address, and port.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to list blacklisting information for a specific VPN with a valid IPv4 address:
RP/0/0/CPU0:PE6_C12406(config-sbc-sbe)# show services sbc mySbc sbe blacklist vpn3 ipv4
172.19.12.12
SBC Service mySbc SBE dynamic blacklist vpn3 172.19.12.12
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication (20) 10 ms (1 hour)
Bad address (20) 10 ms (1 hour)
Routing (20) 10 ms (1 hour)
Registration (5) 100 ms (10 hours)
Policy (20) 10 ms (1 day)
Corrupt 40 10 ms (1 hour)
Default for ports of vpn3 172.19.12.12
======================================
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication 20 1 sec 1 hour
Bad address 20 1 sec 1 hour
Registration 5 30 sec 10 hours
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
trigger-period
|
Defines the period over which events are considered. For details, see the description of the trigger-size command.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
show services sbc sbe blacklist configured-limits
To list the explicitly configured limits, showing only the sources configured, use the show services sbc sbe blacklist configured-limits command in EXEC mode.
Values not explicitly configured and, therefore, inherited from other defaults, are bracketed.
show services sbc sbc-name sbe blacklist configured-limits
Syntax Description
sbc-name
|
Specifies the name of the SBC.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command lists the limits that you explicitly configured, showing only the sources. Non-explicitly configured values appear in brackets.
RP/0/0/CPU0:PE6_C12406(config-sbc-sbe)# show services sbc mySbc sbe blacklist
configured-limits
SBC Service mySbc SBE dynamic blacklist configured limits
Default for all addresses
=========================
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication 20 1 sec 1 hour
Bad address 20 1 sec 1 hour
Registration 5 30 sec 10 hours
Default for addresses on vpn3
=============================
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication 20 1 sec 1 day
Bad address 20 1 sec 1 day
Registration 5 30 sec 1 day
Corrupt 50 100 ms 12 hours
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication 2000 (1 sec) (1 hour)
Bad address 2000 (1 sec) (1 hour)
Routing 2000 (1 sec) (1 hour)
Registration 500 (30 sec) (10 hours)
Policy 2000 (1 sec) (1 day)
Corrupt 2000 (100 ms) (1 hour)
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication (20) (1 sec) (1 hour)
Bad address (20) (1 sec) (1 hour)
Routing (20) (1 sec) (1 hour)
Registration (5) (30 sec) (10 hours)
Policy (20) (1 sec) (1 day)
Corrupt 40 10 ms (1 hour)
Default for ports of vpn3 172.19.12.12
======================================
Reason Trigger Trigger Blacklisting
------ ------- ------- ------------
Authentication 20 1 sec 1 hour
Bad address 20 1 sec 1 hour
Registration 5 30 sec 10 hours
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
trigger-period
|
Defines the period over which events are considered. For details, see the description of the trigger-size command.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
show services sbc sbe blacklist current-blacklisting
To list the limit causing sources to be blacklisted, use the show services sbc sbe blacklist current-blacklisting command in the EXEC mode.
show services sbc sbc-name sbe blacklist current-blacklisting
Syntax Description
sbc-name
|
Defines the name of the service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows the current blacklisting information for the SBC:
RP/0/0/CPU0:router# show sbc mySbc sbe blacklist current-blacklisting
SBC Service mySbc SBE dynamic blacklist current members
Source Source Blacklist Time
Address Port Reason Remaining
------- ------ --------- ---------
125.125.111.123 All Authentication 15 mins
125.125.111.253 UDP 85 Registration 10 secs
144.12.12.4 TCP 80 Corruption Never ends
Source Source Blacklist Time
Address Port Reason Remaining
------- ------ --------- ---------
132.15.1.2 TCP 285 Registration 112 secs
172.23.22.2 All Policy 10 hours
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
trigger-period
|
Defines the period over which events are considered. For details, see the description of the trigger-size command.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe cac-policy-set
To list detailed information for a given entry in a connection admission control (CAC) policy table, use the show services sbc sbe cac-policy-set command in the EXEC mode.
show services sbc sbc-name sbe cac-policy-set set-id {table name entry entry-id} {tables}
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
set-id
|
Specifies the numeric identifier of the CAC policy set to which the table belongs.
|
table name
|
Specifies the name of the table.
|
entry entry-id
|
Specifies the numeric identifier of the entry that you want to display.
|
tables
|
Shows all tables in the specified CAC policy set.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example lists detailed information for entry 1 of the standard_policy_list CAC table which is part of CAC policy set 1:
RP/0/0/CPU0:router# show services sbc mysbc sbe cac-policy-set 1 table
standard_policy_list entry 1
Policy set 1 table standard_policy_list entry 1
Action CAC policy complete
Max registrations Unlimited
Caller privacy setting Never hide
Caller privacy setting Always hide
Early media direction Both
Total failures in this entry 2
Related Commands
Command
|
Description
|
show services sbc sbe call-policy-set table entry
|
Displays a summary of the entries associated with the given routing table.
|
show services sbc sbe call-policy-set
To show the properties associated with a given routing policy set or policy table, use the show services sbc sbe call-policy-set command in EXEC mode.
show services sbc sbc-name sbe call-policy-set id table name entry entry
Syntax Description
id
|
Specifies the numeric identifier of the routing policy set or table.
|
name
|
Specifies the routing policy table whose entry is to be displayed.
|
entry
|
Specifies table entry.
|
entry
|
Specifies the numeric identifier of the entry.
|
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to display the properties associated with the given routing policy set:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1
Description Master policy set
First Number Analysis table myFirstNATable
First call routing table myFirstCallRoutingTable
First registration routing table myFirstRegRoutingTable
The following example shows how to display a summary of the routing policy tables associated with the given policy set:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 tables
Table name Match type Description
-----------------------------------------------
NaSrcAdj src-adjacency First NA table
NaEuropeEmergency dst-prefix Euro emergency no. table
NaUKEmergency dst-prefix UK emergency no. table
startRouting dst-prefix Master routing table
internalRouting src-adjacency Routes internal calls
externalRouting dst-prefix Routes external calls
softswitchRoundRobin round-robin Choose a softswitch
The following example shows how to display a summary of the entries associated with the given table:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 table NaSrcAdj entry 1
Policy set 1 table NaSrcAdj entry 1
Match value porscheStuttgart
Next table NaEuropeEmergency
Related Commands
Command
|
Description
|
description
|
Configures descriptive text for the CAC-policy-set.
|
first-number-analysis-table
|
Configures the name of the first policy table to process when performing the number analysis stage of policy.
|
first-call-routing-table
|
Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.
|
first-reg-routing-table
|
Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.
|
show services sbc sbe call-policy-sets
To list all of the routing policy sets on the SBE, use the show services sbc sbe call-policy-sets command in EXEC mode.
show services sbc sbc-name sbe call-policy-sets
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list all of the routing policy sets on the SBE:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-sets
----------------------------------------------------------
2 Temporary policy set for editing
3 Night-time policy set, used from 10pm-6am
show services sbc sbe call-policy-set table entries
To display a summary of the entries associated with a given table, use the show services sbc sbe call-policy-set table entries command in EXEC mode.
show services sbc sbc-name sbe call-policy-set id table name entries
Syntax Description
id
|
Specifies the numeric identifier of the routing policy set to which the table belongs.
|
name
|
Specifies the table whose entries are to be displayed.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to display a summary of the entries associated with the given table:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-policy-set 1 table NaSrcAdj entries
Policy set 1 table NaSrcAdj entries
-----------------------------
show services sbc sbe calls
To list all the calls on the SBEs, use the show services sbc sbe calls command in EXEC mode.
show services sbc sbc-name sbe calls
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the complete call statistics for the current hour:
RP/0/0/CPU0:router# show services sbc mySbc sbe calls
--------------------------------------
show services sbc sbe call-stats
To list the statistics for all the calls on the specified SBE, use the show services sbc sbe call-stats command in EXEC mode.
show services sbc sbc-name sbe call-stats period
Syntax Description
period
|
Specifies the interval when the statistics display:
• current5mins
• previous5mins
• current15mins
• previous15mins
• currenthour
• previoushour
• currentday
• previousday
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Readings are taken at 5-minute intervals past the hour (that is, 05, 10, 15, and so on). Current readings apply to the statistics since the last appropriate readings were taken.
If the time is now 12:34, currenthour will apply to the statistics collected since 11:35 and current15mins will be since 12:20. In this example, previoushour would be 10:35-11:35 and previous15mins would be 12:05-12:20.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the complete call statistics for the current hour:
RP/0/0/CPU0:router# show services sbc mySbc sbe call-stats currenthour
Call statistics for the current hour:
Total call attempts: 100000
Unconnected emergency calls in progress: 6
Connected emergency calls in progress: 24
Note
The Deactivating calls statistic displays the number of calls that are undergoing deactivation internally in the SBC. This statistic does not include the number of calls for which the SBC is waiting for a response from an endpoint to signal call teardown.
Related Commands
show services sbc sbe codec-list
To show information about the codec lists that are configured on the SBE, use the show services sbc sbe codec-list command in EXEC mode.
show services sbc sbc-name sbe codec-list list-name
Syntax Description
list-name
|
Specifies the name of the codec list.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how to display information about the codec list (my_codecs).
RP/0/0/CPU0:router#show services sbc mySbc sbe codec-list my_codecs
Codec list "my_codecs" (Legitimate codecs)
Codec Name Min Packetization Period
========== ========================
Related Commands
show services sbc sbe gates
To list the gates created on the SBE, use the show services sbc sbe gates command in EXEC mode.
show services sbc sbc-name sbe gates
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the gates created on the SBE:
RP/0/0/CPU0:router# show services sbc mySbc sbe gates
Billing Correlator = value
Media Gateway IP address = 1.2.3.4
show services sbc sbe h323 timers
To display a list of H.323 timer configuration, use the show services sbc sbe h323 command in the EXEC mode.
show services sbc sbc-name sbe h323 timers
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe h323 timers command is used to display a list of H.323 timer configuration.
RP/0/0/CPU0:router# show services sbc mySbc sbe h323 timers
h225 timeout establishment 250
Adjacency Retry Timeout 20
show services sbc sbe hold-media-timeout
To show the configured duration of the media timeout timer for on-hold calls, use the show services sbc sbe hold-media-timeout command in the EXEC mode.
show services sbc sbc-name sbe hold-media-timeout
Syntax Description
sbc-name
|
Specifies the SBC service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows sample data for the media timeout timer for on-hold calls:
RP/0/0/CPU0:router#show services sbc mysbc sbe hold-media-timeout
SBE On-hold media timeout duration is: 10 seconds
show services sbc sbe hunting-trigger
To show the H.323 or SIP hunting triggers, use the show services sbc sbe hunting-trigger command in the EXEC mode.
show services sbc sbc-name sbe {h323 | sip} hunting-trigger
Syntax Description
sbc-name
|
Specifies the SBC service.
|
h323
|
Specifies the H.323 submode.
|
sip
|
Specifies the SIP submode
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows sample data for the media timeout timer for on-hold calls:
RP/0/0/CPU0:router#show services sbc mysbc sbe sip hunting-trigger
show services sbc sbe media-gateway-associations
To list all the media gateways associated with this SBE and statistics associated with the media gateway, use the show services sbc sbe media-gateway-associations command in EXEC mode.
show services sbc sbc-name sbe media-gateway-associations
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list all the media gateways associated with this SBE and statistics associated with the media gateway:
RP/0/0/CPU0:router# show services sbc mySbc sbe media-gateway-associations
SBC Service "mySbc" Media Gateway Associations
Media gateway 10.0.0.1:653
Gateway Protocol = megaco
Local address = a.b.c.d:e
Sent Received Failed Retried
Media gateway 10.0.0.2:34
Gateway Protocol = megaco
Transport Protocol = udpip
Local address = a.b.c.d:e
Sent Received Failed Retried
Requests 500 1000 500 200
show services sbc sbe media-gateways
To list the gateway configuration and attachment status on SBE, use the show services sbc sbe media-gateways command in EXEC mode.
show services sbc sbc-name sbe media-gateways
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the gateway configuration and attachment status on SBEs:
RP/0/0/CPU0:router# show services sbc mySbc sbe media-gateways
Configured Gateway 10.0.0.1
Configured Gateway 100.1.0.1
Configured Gateway 172.3.4.9
show services sbc sbe policy-failure-stats
To list the statistics for all of the policy failures on a specific SBE, use the show services sbc sbe policy-failure-stats command in EXEC mode.
show services sbc sbc-name sbe policy-failure-stats period
Syntax Description
period
|
Specifies the time period for the statistics that you want to display. The time period can be one of the following:
• current5mins
• previous5mins
• current15mins
• previous15mins
• currenthour
• previoushour
• currentday
• previousday
Readings are taken at five-minute intervals past the hour (for example, 05, 10, 15 and so on). Current readings apply to the statistics since the last appropriate readings were taken.
If the time is now 12:34 then "currenthour" applies to the statistics collected since 11:35 and "current15mins" is since 12:20. Also, in this example, "previoushour" indicates 10:35-11:35 and "previous15mins" indicates 12:05-12:20.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The statistics track how many calls, associated with the given adjacency or account, have failed. A single call failure increments the statistics for more than one call attribute.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows the complete policy failure stats for the current hour.
RP/0/0/CPU0:router# show services sbc mySbc sbe policy-failure-stats currenthour
Policy failure statistics for the current hour:
Total call setup failures: 97
Total call update failures: 28
Call setups failed due to NA: 15
Call setups failed due to rtg: 34
Call setups failed due to CAC: 48
CAC fails due to num call lim: 17
CAC fails due to rate call lim: 11
CAC fails due to num channels lim: 11
CAC fails due to num media updates: 4
CAC fails due to bandwidth lim: 5
Related Commands
Command
|
Description
|
clear services sbc sbe policy-rejection-stats
|
Clears all the policy rejection statistics by the SBE.
|
show services sbc sbe policy-failure-stats src-adjacency
|
Lists the statistics for all the policy failures on the specified SBE.
|
show services sbc sbe policy-failure-stats dst-adjacency
|
Lists the statistics for the policy failures for calls with the adjacency.
|
show services sbc sbe policy-failure-stats src-account
|
Lists the statistics for the policy failures for calls with the account.
|
show services sbc sbe policy-failure-stats dst-account
|
Lists the statistics for the policy failures for calls with the account.
|
show services sbc sbe policy-failure-stats dst-account
To list policy failure statistics for a specified target account for a specified time period, use the show services sbc sbe policy-failure-stats dst-account command in the EXEC mode.
show services sbc sbc-name sbe policy-failure-stats dst-account name period time period
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the name of the account for which you would like to display statistics. The maximum length of this value is 30 characters.
|
period time period
|
Specifies the time period to which the statistics apply. Choose one of the following time intervals:
• current15mins—Displays statistics in 15 minute intervals starting from the current minute.
• current5mins—Displays statistics in 5 minute intervals starting from the current minute.
• currentday—Displays statistics for the current day starting midnight of the same day.
• currenthour—Displays statistics for the current hour.
• previous15mins—Displays statistics from previous 15 minute intervals.
• previous5mins—Displays statistics from previous 5 minute intervals.
• previousday—Displays statistics from the previous day.
• previoushour—Displays statistics from the previous hour.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example lists the policy failure statistics for an adjacent account named AA for the current hour:
RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure-stats dst-account AA
currenthour
Policy failure statistics for the current hour for source adjacency AA
Policy failure statistics for the current hour
Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1
Related Commands
Command
|
Description
|
show services sbc sbe policy-failure-stats dst-adjacency
|
Lists policy failure statistics for calls within the specified target adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats src-account
|
Lists policy failure statistics for calls within the specified source account for the specified time period.
|
show services sbc sbe policy-failure-stats src-adjacency
|
Lists policy failure statistics for calls within the specified source adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats dst-adjacency
To list policy failure statistics for a specified target adjacency for a specified time period use the show services sbc sbe policy-failure-stats dst-adjacency command in the EXEC mode.
show services sbc sbc-name sbe policy-failure-stats dst-adjacency name period time period
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the name of the adjacency for which you would like to display statistics. The maximum length of this value is 30 characters.
|
period time period
|
Specifies the time period to which the statistics apply. Choose one of the following time intervals:
• current15mins—Displays statistics in 15 minute intervals starting from the current minute.
• current5mins—Displays statistics in 5 minute intervals starting from the current minute.
• currentday—Displays statistics for the current day starting midnight of the same day.
• currenthour—Displays statistics for the current hour.
• previous15mins—Displays statistics from previous 15 minute intervals.
• previous5mins—Displays statistics from previous 5 minute intervals.
• previousday—Displays statistics from the previous day.
• previoushour—Displays statistics from the previous hour.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows the policy failure statistics for an adjacency named ZZ for the current hour:
RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure-stats dst-adjacency ZZ
currenthour
Policy failure statistics for the current hour for source adjacency ZZ
Policy failure statistics for the current hour
Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1
Related Commands
Command
|
Description
|
show services sbc sbe policy-failure-stats dst-account
|
Lists policy failure statistics for calls within the specified target account for the specified time period.
|
show services sbc sbe policy-failure-stats src-account
|
Lists policy failure statistics for calls within the specified source account for the specified time period.
|
show services sbc sbe policy-failure-stats src-adjacency
|
Lists policy failure statistics for calls within the specified source adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats src-account
To list policy failure statistics for a specified source account for a specified time period use the show services sbc sbe policy-failure-stats src-account command in the EXEC mode.
show services sbc sbc-name sbe policy-failure-stats src-account name period time period
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the name of the account for which you would like to display statistics. The maximum length of this value is 30 characters.
|
period time period
|
Specifies the time period to which the statistics apply. Choose one of the following time intervals:
• current15mins—Displays statistics in 15 minute intervals starting from the current minute.
• current5mins—Displays statistics in 5 minute intervals starting from the current minute.
• currentday—Displays statistics for the current day starting midnight of the same day.
• currenthour—Displays statistics for the current hour.
• previous15mins—Displays statistics from previous 15 minute intervals.
• previous5mins—Displays statistics from previous 5 minute intervals.
• previousday—Displays statistics from the previous day.
• previoushour—Displays statistics from the previous hour.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows the policy failure statistics for a source account named BB for the current hour:
RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure stats src-account BB
currenthour
Policy failure statistics for the current hour for source adjacency BB
Policy failure statistics for the current hour
Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1
Related Commands
Command
|
Description
|
show services sbc sbe policy-failure-stats dst-adjacency
|
Lists policy failure statistics for calls within the specified target adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats dst-account
|
Lists policy failure statistics for calls within the specified target account for the specified time period.
|
show services sbc sbe policy-failure-stats src-adjacency
|
Lists policy failure statistics for calls within the specified source adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats src-adjacency
To list policy failure statistics for a specified source adjacency for a specified time period use the show services sbc sbe policy-failure-stats src-adjacency command in the EXEC mode.
show services sbc sbc-name sbe policy-failure-stats src-adjacency name period time period
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
name
|
Specifies the name of the adjacency for which you would like to display statistics. The maximum name length is 30 characters.
|
period time period
|
Specifies the time period to which the statistics apply. Choose one of the following time intervals:
• current15mins—Displays statistics in 15 minute intervals starting from the current minute.
• current5mins—Displays statistics in 5 minute intervals starting from the current minute.
• currentday—Displays statistics for the current day starting midnight of the same day.
• currenthour—Displays statistics for the current hour.
• previous15mins—Displays statistics from previous 15 minute intervals.
• previous5mins—Displays statistics from previous 5 minute intervals.
• previousday—Displays statistics from the previous day.
• previoushour—Displays statistics from the previous hour.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example displays policy failure statistics for a source adjacency named YY for the current hour:
RP/0/0/CPU0:router# show services sbc mysbc sbe policy-failure stats src-adjacency YY
currenthour
Policy failure statistics for the current hour for source adjacency YY
Policy failure statistics for the current hour
Total call setup failures: 10
Call setups failed due to NA: 5
Call setups failed due to rtg: 3
Call setups failed due to CAC: 2
CAC fails due to num call lim: 1
CAC fails due to rate call lim: 0
CAC fails due to num channels lim: 0
CAC fails due to bandwidth lim: 1
Related Commands
Command
|
Description
|
show services sbc sbe policy-failure-stats dst-adjacency
|
Lists policy failure statistics for calls within the specified target adjacency for the specified time period.
|
show services sbc sbe policy-failure-stats src-account
|
Lists policy failure statistics for calls within the specified source account for the specified time period.
|
show services sbc sbe policy-failure-stats dst-account
|
Lists policy failure statistics for calls within the specified target account for the specified time period.
|
show services sbc sbe qos-profiles
To list all QoS profiles, use the show services sbc sbe qos-profiles command in EXEC mode. If you specify a QoS profile, the details of that profile are shown.
show services sbc sbc-name sbe qos-profiles [profile-name]
Syntax Description
profile-name
|
(Optional) Specifies the profile name.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list all of the QoS profiles on the SBE:
RP/0/0/CPU0:router# show services sbc mySbc sbe qos-profiles
---------------------------------------------------------
# show services sbc mySbc sbe qos-profiles Profile1
show services sbc sbe radius-client-stats
To list the RADIUS accounting client statistics for all accounting clients configured on an SBE, use the show services sbc sbe radius-client-stats command in EXEC mode.
show services sbc sbc-name sbe radius-client-stats radius-client
Syntax Description
radius-client
|
Specifies the RADIUS client to show.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the RADIUS accounting server statistics for all accounting servers configured on an SBE:
RP/0/0/CPU0:router# show services sbc mySbc sbe radius-client-stats
show services sbc sbe radius-server-stats
To list the RADIUS server statistics for all accounting servers configured on a RADIUS client on an SBE, use the show services sbc sbe radius-server-stats command in EXEC mode.
show services sbc sbc-name sbe radius-server-stats radius-client
Syntax Description
radius-client
|
Specifies the RADIUS client name.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the RADIUS server statistics for all accounting servers configured on a radius client on an SBE:
RP/0/0/CPU0:router# show services sbc mySbc sbe radius-server-stats radius1
Access-request retransmitted: 6
Access-accept received: 12
Access-rejects received: 0
Access-Challenge received: 13
Accounting-request sent: 1000
Accounting-request retransmitted: 2
Accounting-response received: 1000
Malformed packets received: 0
Invalid authenticators received: 2
Access-request retransmitted: 0
Access-accept received: 13
Access-rejects received: 0
Access-Challenge received: 16
Accounting-request sent: 0
Accounting-request retransmitted: 0
Accounting-response received: 0
Malformed packets received: 0
Invalid authenticators received: 0
show services sbc sbe redirect-limit
To display the current limit on the maximum number of redirections that a call can undergo, use the show services sbc sbe redirect-limit command in EXEC mode.
show services sbc sbc-name sbe redirect-limit
Syntax Description
sbc-name
|
Specifies the name of the SBC service.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example displays the limit on the maximum number of redirections that a call can undergo:
RP/0/0/CPU0:router# show service sbc mysbc sbe redirect-limit
show services sbc sbe sip essential-headers
To display a list of the essential SIP headers, use the show services sbc sbe sip essential-headers command in the EXEC mode.
show services sbc sbc-name sbe sip essential-headers
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip essential-headers command is used to display a list of all essential headers.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip essential-headers
Essential SIP headers for SBC service "mysbc"
Related Commands
Command
|
Description
|
show services sbc sbe sip header-profiles
|
Displays a list of all configured SIP header profiles.
|
show services sbc sbe sip essential-methods
To display a list of the essential SIP methods, use the show services sbc sbe sip essential-methods command in the EXEC mode.
show services sbc sbc-name sbe sip essential-methods
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip essential-methods command is used to display a list of all essential methods.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip essential-methods
Essential SIP methods for SBC service "mysbc"
Related Commands
Command
|
Description
|
show services sbc sbe sip method-profiles
|
Displays a list of all configured SIP method profiles.
|
show services sbc sbe sip header-profile
To display details of the specified SIP header profile, use the show services sbc sbe sip header-profile command in the EXEC mode.
show services sbc sbc-name sbe sip header-profile profile-name
Syntax Description
profile-name
|
Specifies the name of the header profile. If you enter the name default, the details of the default header profile are displayed.
|
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip header-profile command is used to display details of the specified header profile.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip header-profile Profile1
Header profile "Profile1"
Related Commands
Command
|
Description
|
show services sbc sbe sip header-profiles
|
Displays a list of all configured SIP header profiles.
|
show services sbc sbe sip header-profiles
To display a list of all configured SIP header profiles, use the show services sbc sbe sip header-profiles command in the EXEC mode.
show services sbc sbc-name sbe sip header-profiles
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip header-profiles command is used to display a list of all configured header profiles.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip header-profiles
Header profile for SBC service "mysbc"
====================================
Related Commands
Command
|
Description
|
show services sbc sbe sip header-profile
|
Displays details of the specified SIP header profile.
|
show services sbc sbe sip method-profile
To display details of the specified SIP method profile, use the show services sbc sbe sip method-profile command in EXEC mode.
show services sbc sbc-name sbe sip method-profile profile-name
Syntax Description
profile-name
|
Specifies the name of the method profile. If you enter the name default, the details of the default method profile are displayed.
|
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip method-profile command is used to display details of the specified method profile.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip method-profile Profile1
Method profile "Profile1"
Not in use with any adjacencies
Related Commands
Command
|
Description
|
show services sbc sbe sip method-profiles
|
Displays a list of all configured SIP method profiles.
|
show services sbc sbe sip method-profiles
To display a list of all SIP method profiles, use the show services sbc sbe sip method-profiles command in EXEC mode.
show services sbc sbc-name sbe sip method-profiles
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
Examples
The following example shows how the show services sbc sbe sip method-profiles command is used to display a list of all configured method profiles.
RP/0/0/CPU0:router# show services sbc mySbc sbe sip method-profiles
Method profile for SBC service "mysbc"
====================================
Related Commands
Command
|
Description
|
show services sbc sbe sip method-profile
|
Displays details of the specified SIP method profile.
|
show services sbc sbe sip timers
To show the current configuration of SIP-related timers, use the show services sbc sbe sip timers command in the EXEC mode. To return to the default value, use the no form of this command.
show services sbc service-name sbe sip timers
Syntax Description
service-name
|
Specifies the name of the SBC.
|
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to list the configurations of SIP-related timers:
RP/0/0/CPU0:router# show services sbc mysbc sbe sip timers
TCP connect timeout: 0 ms
TCP idle timeout: 120000 ms
TLS idle timeout: 3600000 ms
UDP first retransmit interval: 500 ms
UDP max retransmit interval: 4000 ms
UDP response linger period: 5000 ms
show services sbc sbe vrf
To list all the currently assigned bindings between VRF name and VPN IDs within SBC, use the show services sbc sbe vrf command in EXEC mode.
show services sbc sbc-name sbe vrf
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
sbc
|
read
|
firewall
|
read
|
Examples
The following example shows how to list the assigned bindings between VRF name and VPN IDs:
RP/0/0/CPU0:router# show services sbc mySbc sbe vrf
SBC Service "mySbc" VRF name to VPN id bindings
VRF name VPN id (per RFC2685)
Isp1Vpn1 00 05 01 : 01 11 11 11
Isp1Vpn2 00 05 01 : 01 22 22 22
Isp1Vpn3 00 05 01 : 01 33 33 33
Isp2Vpn1 01 43 02 : 00 00 00 01
Isp2Vpn2 01 43 02 : 00 00 00 02
signaling-address ipv4
To define the local IPv4 signaling address of an H.323 or SIP adjacency, use the signaling-address ipv4 command in the appropriate configuration mode. To return to the default behavior, use the no form of this command.
signaling-address ipv4 ipv4_IP_address
no signaling-address
Syntax Description
ipv4_IP_address
|
Specifies the IPv4 address for the signaling address of the SIP or H.323 adjacency.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
When defined, the SBE listens on this address for inbound call signaling from the adjacency. If two adjacencies share the same signaling address, a different remote domain name must be specified for each one.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to listen on signaling address 10.1.0.2:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-address ipv4 10.1.0.2
signaling-peer
To configure an H.323 or SIP adjacency to use the given remote signaling-peer, use the signaling-peer command in adjacency sip configuration mode. To remove this configuration, use the no form of this command.
signaling-peer peer-name gk
no signaling-peer
Syntax Description
peer-name
|
Specifies the IPv4 address in dotted decimal format.
|
gk
|
Specifies the H.323 gatekeeper.
|
Defaults
No default behavior or values
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to use gatekeeper 10.10.10.10:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-peer gk 10.10.10.10
The following example shows how to configure the SIP adjacency SipToIsp42 to use call agent athene:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-peer athene
Related Commands
Command
|
Description
|
signaling-peer-port
|
Configures an H.323 or SIP adjacency to use the given remote signaling-peer's port.
|
signaling-peer-port
To configure an H.323 or SIP adjacency to use the given remote signaling-peer's port, use the signaling-peer-port command in adjacency sip configuration mode. To remove this configuration, use the no form of this command.
signaling-peer-port port-num
no signaling-peer-port
Syntax Description
port-num
|
Specifies the number of the signaling port. Range is 1 to 65535.
|
Defaults
By default, this command assumes that port-num is 5060.
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.323 adjacency h323ToIsp42 to use port 123 on the signaling peer:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# signaling-peer-port 123
The following example shows how to configure the SIP adjacency SipToIsp42 to port 123 as the signaling peer's port:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-peer-port 123
signaling-port
To define the local port of signaling address of an H.323 or SIP adjacency, use the signaling-port command in the appropriate configuration mode. To return to the default value, use the no form of this command.
signaling-port port-num
no signaling-port
Syntax Description
port-num
|
Specifies the number of the signaling peer. Range is 1 to 65535.
|
Defaults
port-num: 5060
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The SBE will listen on this port for inbound call signaling from the adjacency. The port will also be appended to the SBE's contact header on outbound SIP requests and responses.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the SIP adjacency SipToIsp42 to listen on signaling port 5000:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# signaling-port 5000
Related Commands
Command
|
Description
|
signaling-peer
|
Configures a SIP adjacency to use the given remote signaling-peer.
|
sip encryption key
To configure a global encryption key on a SIP IBCF adjacency, use the sip encryption key command in the SIP adjacency mode. To deconfigure the global encryption key, use the no form of this command.
sip encryption key key
no sip encryption key key
Syntax Description
key
|
Specifies the encryption key.
|
Defaults
None
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the sip encryption key command is used to configure a global encryption key on a SIP IBCF adjacency.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# encryption key mykey
Related Commands
Command
|
Description
|
sip inherit profile
|
Configures a global inherit profile in the SIP adjacency mode.
|
sip home network identifier
To configure a home network identifier on all IBCF adjacencies, use the sip home network identifier command in the SBE mode. To deconfigure the home network identifier, use the no form of this command.
sip home network identifier network-name
no sip home network identifier
Syntax Description
network-name
|
Specifies the name of the home network identifier.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the home network identifier command is used to configure a home network identifier on all IBCF adjacencies.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip home network identifier myhome.com
Related Commands
Command
|
Description
|
sip visited network identifier
|
Configures a visited network identifier on a SIP P-CSCF adjacency.
|
sipi
To configure the SIP-I commands on a SIP adjacency, use the sipi command in SIP adjacency mode. To deconfigure the SIP-I commands, use the no form of this command.
sipi passthrough
no sipi passthrough
Syntax Description
passthrough
|
Configures a SIP adjacency for SIP-I passthrough.
|
Defaults
None
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the sipi command is used to configure a SIP adjacency for SIP-I passthrough.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# sipi passthrough
Related Commands
Command
|
Description
|
show services sbcs sbe adjacencies
|
Lists the adjacencies configured on the SBE.
|
sip inherit profile
To configure a global inherit profile, use the sip inherit command in SIP adjacency mode. To deconfigure the global inherit profile, use the no form of this command.
sip inherit profile {preset -ibcf-ext-untrusted | preset -ibcf-external | preset -ibcf-internal |
preset-p-cscf-access | preset-p-cscf-core | preset-standard-non-ims}
no sip inherit profile
Syntax Description
preset-ibcf-ext-untrusted
|
Specifies a preset IBCF untrusted profile
|
preset-ibcf-external
|
Specifies a preset IBCF external profile
|
preset-ibcf-internal
|
Specifies a presetIBCF internal profile
|
preset-p-cscf-access
|
Specifies a preset P-CSCF-access profile
|
preset-p-cscf-core
|
Specifies a preset P-CSCF-core profile
|
preset-standard-non-ims
|
Specified a preset standard-non-IMS profile
|
Defaults
No default behavior or values
Command Modes
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the sip inherit profile command is used to configure a P-CSCF-access inherit profile on a SIP adjacency.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbe-adj-sip)# inherit profile preset-p-cscf-access
Related Commands
Command
|
Description
|
sip timer
|
Enters the mode of a SIP timer function.
|
sip timer
To enter the mode of the SIP timer function, use the sip timer command in config-sbc-sbe mode. To return to the default value, use the no form of this command.
sip timer
no sip timer
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
config-sbc-sbe
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enter the SIP timer submode:
RP/0/0/CPU0:router# config
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)
sip visited network identifier
To configure a visited network identifier on a SIP Proxy Call Session Controller Function (P-CSCF) adjacency, use the sip visited network identifier command in SBE configuration mode. To deconfigure the visited network identifier, use the no form of this command.
sip visited network identifier network-name
no sip visited network identifier
Syntax Description
network-name
|
Specifies the name of the visited network identifier.
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.5.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to use the sip visited network identifier command to configure a visited network identifier on a P-CSCF-access adjacency.
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip visited network identifier cisco.com2
Related Commands
Command
|
Description
|
sip home network identifier
|
Configures a home network identifier on all IBCF adjacencies.
|
tcp-connect-timeout
To configure the time that SBC waits for a SIP TCP connection to a remote peer to complete before failing that connection, use the tcp-connect-timeout command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.
tcp-connect-timeout interval
no tcp-connect-timeout
Syntax Description
interval
|
Specifies the time, in milliseconds, that the SIP TCP connection to a remote peer stays alive before timing out.
|
Defaults
Default interval is 30000 milliseconds.
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to set the TCP connection timeout to 30 seconds.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mysbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# tcp-connect-timeout 30000
tcp-idle-timeout
To configure the length of time that the TCP connection should stay active when in the idle state, use the tcp-idle-timeout command in the sbe-sip-tmr mode. To return to the default value, use the no form of this command.
tcp-idle-timeout <interval>
no tcp-idle-timeout
Syntax Description
interval
|
Specifies the minimum time, in milliseconds, that the TCP connection stays active when it is not processing any traffic. After this time, the TCP connection closes. Range is 1-4294967295 ms.
Note The value for this command might not be precise since the idle timers are checked every 12 seconds.
|
Defaults
Default value is 120000 ms (2 minutes).
Command Modes
sbe-sip-tmr mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the minimum TCP idle timeout value to 10000 ms.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)#sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)#tcp-idle-timeout 10000
tech-prefix
To configure RAS Tech Prefix on an H.323 adjacency, use the tech-prefix command in SBE H.323 adjacency mode. To deconfigure RAS Tech Prefix, use the no form of this command.
tech-prefix tech-prefix name
no tech-prefix tech-prefix name
Syntax Description
tech-prefix name
|
Specifies the name of the tech-prefix.
|
Defaults
None
Command Modes
SBE H.323 adjacency
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the tech-prefix command is used to configure RAS Tech Prefix on an H.323 adjacency named H323ToIsp42.
RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# sbc mySbc
RP/0/0/CPU0:router(config-sbc)# sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 H323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# tech-prefix techprefix
timeout
To define the length of time that packets from the source are blocked if the number of authentication requests exceed the set limit, use the timeout command.
The no variant of this command releases the limit duration for blacklisting the source.
timeout time-period
no timeout
Syntax Description
time-period
|
Duration for which the source is blacklisted after activation of blacklisting.
0 = source not blacklisted
never = blacklisting is permanent
number = integer unit = seconds | minutes | hours | days
Note Period must be less than 23 days.
|
Defaults
•
The address-default value defaults to its initial settings. The port-default values default to zero.
•
If this field is omitted on explicit ports, it defaults to the value given in the port-default for this address.
•
If this field is omitted on explicit addresses, this field defaults to the value in the address-default for this address.
•
If this field is omitted for VPN, it defaults to the value for global addresses.
•
If this field is omitted for the global address space, it defaults to the initial settings.
Command Modes
sbc-sbe-blacklist-reason
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modifications.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command configures a new blacklist on the sbe to affect all packets arriving from address 25.25.25.5 for three minutes.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# timeout 180 seconds
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# commit
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
trigger-period
|
Defines the period over which events are considered. For details, see the description of the trigger-size command.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe blacklist
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
tls-idle-timeout
To configure the minimum time that a TLS socket can remain idle before it is closed, use the tls-idle-timeout command in sbe-sip-timer mode. To return to the default value, use the no form of this command.
tls-idle-timeout interval
no tls-idle-timeout
Syntax Description
interval
|
Specifies the time (in milliseconds) that a TLS socket can remain idle before it is closed. The range is 1 to 4,294,967,295 ms.
|
Defaults
Default TLS idle timeout interval is 3600000 ms (1 hour).
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to configure the SBC to close TLS connections that have been idle for at least 30 minutes:
RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # tls-idle-timeout 1800000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end
transcode-deny
To forbid transcoding for an entry in the admission control table, use the transcode-deny command in CAC-table configuration mode. To allow transcoding for this entry in the admission control table, use the no form of this command.
transcode-deny
no transcode-deny
Syntax Description
This command has no arguments or keywords.
Defaults
By default, transcoding for this entry in the admission control table is allowed.
Command Modes
CAC-table configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the entry to permit transcoding in the new admission control table MyCacTable:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# cac-policy-set 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type dst-prefix
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable)# entry 1
RP/0/0/CPU0:router(config-sbc-sbe-cacpolicy-cactable-entry)# transcode-deny
transcoder
To configure that the media gateway is a transcoder, use the transcoder command in Media-gateway configuration mode. To return to the default behavior, use the no form of this command.
transcoder
no transcoder
Syntax Description
This command has no arguments or keywords.
Defaults
By default, this command assumes the media gateway has no transcoding features.
Command Modes
Media-gateway configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to set media gateway 10.0.0.1 to be a transcoder:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# media-gateway ipv4 10.0.0.1
RP/0/0/CPU0:router(config-sbc-sbe-media-gateway)# transcoder
transport (h.248)
To configure a DBE to use either UDP or TCP for H.248 control signaling with the specified H.248 controller, use the transport command in controller H.248 configuration mode. To remove this configuration, use the no form of this command.
transport [udp | tcp]
no transport [udp | tcp]
Syntax Description
udp | tcp
|
• udp: Uses UDP transport for H.248 signaling.
• tcp: Uses TCP as a transport for H.248 signaling.
|
Defaults
By default, this command assumes udp signaling.
Command Modes
Controller H.248 configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the H.248 controller with index 1 to use tcp signaling:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# controller h248 1
RP/0/0/CPU0:router(config-sbc-dbe-vdbe-h248)# transport tcp
transport (vdbe)
To configure an H.248 media gateway controller to use a specified transport controller, use the transport command in the mode for configuring an H.248 media gateway controller.
transport {udp | tcp} [interim-auth-header]
Syntax Description
udp
|
Specifies UDP as the transport protocol for H.248 signaling.
|
tcp
|
Specifies TCP as the transport protocol for H.248 signaling.
|
interim-auth-header
|
(Optional) Inserts the interim authentication header into the H.248 messages.
|
Defaults
None
Command Modes
sbc-dbe-vdbe-h248 mode
Command History
Release
|
Modification
|
Release 3.5.0
|
This command was first introduced on the Cisco CRS-1.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how the transport command is used to configure an H.248 media gateway controller to use a specified transport controller.
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe)# controller h248 1
RP/0/0/CPU0:router(config-sbc-sbe-dbe-vdbe-h248)# transport tcp interim-auth-header
trigger-period
To define the period over which events are considered, use the trigger-period command. For more detailed information, see the related trigger-size command description.
The no variant of this command releases the previously configured trigger period in which events should be considered.
trigger-period time
no trigger-period
Syntax Description
time
|
The number of milliseconds that it takes for the leaky bucket to empty. This can be any value from 0 to 65535.
|
Defaults
•
The address-default value defaults to its initial settings. The port-default values default to zero.
•
If this field is omitted on explicit ports, it defaults to the value given in the port-default for this address.
•
If this field is omitted on explicit addresses, this field defaults to the value in the address-default for this address.
•
If this field is omitted for VPN, it defaults to the value for global addresses.
•
If this field is omitted for the global address space, it defaults to the initial settings.
Command Modes
sbc-sbe-blacklist-reason
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command configures the source to be blacklisted if authentication failures have occurred at a recent steady rate of over 200/s (or 40 in a 100-ms burst).
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# trigger-period 100 milliseconds
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-size
|
Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe blacklist
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
trigger-size
To define the allowable number of events from the specified source before blacklisting is triggered, and to block all packets from reaching the source, use the trigger-size command.
The no variant of this command releases the previously configured number of allowable events before blacklisting is triggered.
trigger-size number
no trigger-size
Syntax Description
number
|
The minimum number of consecutive events that must occur faster on average than the trigger rate to activate the blacklist. Can be any value from 0 to 65535.
|
Defaults
•
The address-default value defaults to its initial settings. The port-default values default to zero.
•
If this field is omitted on explicit ports, it defaults to the value given in the port-default for the given address.
•
If this field is omitted on explicit addresses, it defaults to the value given in the address-default for the given address.
•
If this field is omitted for VPN, it defaults to the values of global addresses.
•
If this field is omitted for the global address space, it defaults to the initial settings.
Command Modes
sbc-sbe-blacklist-reason
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
The number of events recorded decays linearly to zero to give a leaky bucket average over the trigger period. The steady-state maximum event rate therefore equals this trigger size divided by the trigger period. The maximum number of events in a much shorter period is this trigger size.
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command configures the source to be blacklisted if a burst of more than 20 authentication failures enter within a time period smaller than the trigger period.
RP/0/0/CPU0:router#configure
RP/0/0/CPU0:router(config)#sbc mysbc
RP/0/0/CPU0:router(config-sbc)#sbe
RP/0/0/CPU0:router(config-sbc-sbe)# blacklist ipv4 125.12.12.15
RP/0/0/CPU0:router(config-sbc-sbe-blacklist)# reason authentication-failure
RP/0/0/CPU0:router(config-sbc-sbe-blacklist-reason)# trigger-size 20
Related Commands
Command
|
Description
|
reason
|
Enters a submode for configuring a limit to a specific event type on the source (in other words, a port, IP address, VPN, global address space).
|
trigger-period
|
Defines the period over which events are considered.
|
timeout
|
Defines the length of time that packets from the source are blocked, should the limit be exceeded.
|
show services sbc sbe blacklist configured-limits
|
Lists the explicitly configured limits, showing only the sources configured. Any values not explicitly defined for each source are in brackets.
|
show services sbc sbe blacklist
|
Lists the limits in force for a particular source (whether they are from defaults or explicitly configured) in a form in which they can be entered into the CLI. Also listed are any defaults for a smaller scope configured at this address. Values not explicitly configured (and therefore inherited from other defaults) are bracketed.
|
show services sbc sbe blacklist current-blacklisting
|
Lists the limits causing sources to be blacklisted.
|
udp-first-retransmit-interval
To configure the time that SBC waits for a UDP response or ACK before sending the first retransmission of the relevant signal, use the udp-first-retransmit-interval command in sbe-sip-timer mode. To return to the default value, use the no form of this command.
udp-first-retransmit-interval <interval>
no udp-first-retransmit-interval
Syntax Description
interval
|
Specifies the time interval (in milliseconds) that SBC waits for a response or ACK before sending the first retransmission of a UDP signal.
If UDP response failure continues, SBC doubles subsequent retransmission intervals each time until the intervals reach a maximum that you set using the udp-max-retransmit-interval command.
|
Defaults
Default first UDP retransmission interval is 500 milliseconds.
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command shows how to configure the SBC to send the first UDP retransmission after waiting for 1000 milliseconds:
RP/0/0/CPU0:router(config) # sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # udp-first-retransmit-interval 1000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr) # end
Related Commands
Command
|
Description
|
udp-max-retransmit- interval
|
Configures the maximum interval SBC waits before retransmitting a UDP signal.
|
udp-max-retransmit-interval
To configure the maximum time interval that SBC waits before retransmitting a signal, use the udp-max-retransmit-interval command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.
udp-max-retransmit-interval interval
no udp-max-retransmit-interval
Syntax Description
interval
|
Specifies the maximum time interval (in milliseconds) that SBC waits before retransmitting a signal.
|
Defaults
Default maximum UDP retransmission interval is 4 seconds
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following command sets the SBC maximum retransmission interval to 8 seconds:
RP/0/0/CPU0:router(config)# sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr)# udp-max-retransmit-interval 8000
RP/0/0/CPU0:router(config-sbc-sbe-sip-timr)# end
Related Commands
Command
|
Description
|
udp-first-retransmit- interval
|
Configures the time interval SBC waits for a UDP response before the first retransmission of the relevant signal.
|
udp-response-linger-period
To configure the time period that SBC retains negative UDP responses to invite requests, use the udp-response-linger-period command in sbe-sip-tmr mode. To return to the default value, use the no form of this command.
udp-response-linger-period interval
no udp-response-linger-period
Syntax Description
interval
|
Specifies the time period (in milliseconds) during which SBC retains negative UDP responses to invite requests. All retransmitted responses received within this time period are answered with a negative ACK. Any further retransmitted responses are ignored.
|
Defaults
Default UDP response linger period is 32000 milliseconds.
Command Modes
sbe-sip-tmr
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to set SBC to retain negative UDP responses for 10000 milliseconds:
RP/0/0/CPU0:router(config)# sbc mysbc sbe sip timer
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# udp-response-linger-period 10000
RP/0/0/CPU0:router(config-sbc-sbe-sip-tmr)# end
Related Commands
Command
|
Description
|
invite-timeout
|
Specifies the time, in seconds, that SBC waits before timing out an outbound invite request.
|
unexpected-source-alerting
To enable alerting when media packets for a call are received from an unexpected source address and port, use the unexpected-source-alerting command. To disable alerting, use the no version of this command.
unexpected-source-alerting
no unexpected-source-alerting
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
vDBE mode
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
You should only enable this configuration option on trusted networks where any single such instance might indicate a threat to network security.
Alerts on the same flow are rate are limited, as are the total number of alerts reported at any one time. This ensures management systems are not flooded with reports. Consequently, there is no one-to-one correspondence between alerts and incorrect packets.
Diagnosing and resolving the issue of rogue packets is beyond the scope of this command; rather, it is simply the messenger in this regard.
All packets from unexpected sources are dropped.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example enables alerting when media packets for a call are received from an unexpected source address and port in the vDBE mode:
RP/0/0/CPU0:router(config)# sbc mySbc dbe
RP/0/0/CPU0:router(config-sbc-dbe)# vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# unexpected-source-alerting
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# end
Related Commands
Command
|
Description
|
show services sbc dbe media-flow-stats
|
Displays details about media flow statistics configured on the dbe.
|
vdbe
|
Enters a submode, in which you can configure alerts for unexpected source addresses.
|
use-any-local-port
To configure a DBE to use any available local port when connecting to the default MGC, use the use-any-local-port command in vDBE configuration mode. To remove this configuration, use the no form of this command.
use-any-local-port
no use-any-local-port
Syntax Description
This command has no arguments or keywords.
Defaults
The default behavior is to use any local port.
Command Modes
vDBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to configure the DBE to use any local port:
RP/0/0/CPU0:router(config)# sbc mySbc dbe vdbe
RP/0/0/CPU0:router(config-sbc-dbe-vdbe)# use-any-local-port
vdbe
To enter the mode for configuring the Virtual Data Border Element (vDBE), use the vdbe command.
vdbe
Syntax Description
This command does not contain keywords or arguments.
Defaults
None
Command Modes
DBE configuration
Command History
Release
|
Modification
|
Release 3.4.1
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
Examples
The following example shows how to enter the vdbe submode:
RP/0/0/CPU0:PE6_C12406(config)# sbc mySbc dbe
RP/0/0/CPU0:PE6_C12406(config-sbc-dbe)# vdbe
Related Commands
Command
|
Description
|
unexpected-source-alerting
|
Enables alerting when media packets for a call are received from an unexpected source address and port.
|
show services sbc dbe media-flow-stats
|
Displays details about media flow statistics configured on the dbe.
|
vrf (interface)
To assign an SBC interface to a VRF, use the vrf command in interface SBC configuration mode. To unassign an SBC interface from a VRF, use the no form of this command.
vrf vrf-name
no vrf
Syntax Description
vrf-name
|
Specifies the name assigned to a VRF.
|
Defaults
None
Command Modes
Interface SBC configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to assign interface SBC10 to the VRF vpn3:
RP/0/0/CPU0:router(config)# interface sbc 10
RP/0/0/CPU0:router (config-if-sbc)# vrf vpn3
Related Commands
Command
|
Description
|
vrf
|
Configures an H.323 adjacency as tied to a specific VPN.
|
vrf
To configure an H.323 or SIP adjacency as tied to a specific VPN, use the vrf command in the appropriate configuration mode. To remove this configuration, use the no form of this command.
vrf vrf_name
no vrf
Syntax Description
vrf_name
|
Specifies the VRF of this adjacency.
|
Defaults
None
Command Modes
Adjacency H.323 configuration
Adjacency SIP configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
The adjacency will only receive incoming signaling from this VPN. The adjacency's outgoing signaling is routed in the relevant VRF.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to assign the H.323 adjacency h323ToIsp42 to VRF vpn3:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency h323 h323ToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-h323)# vrf vpn3
The following example shows how to configure the SIP adjacency SipToIsp42 to VPN using VRF vpn3:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# adjacency sip SipToIsp42
RP/0/0/CPU0:router(config-sbc-sbe-adj-sip)# vrf vpn3
Related Commands
Command
|
Description
|
vrf vpn-id
|
Assigns an SBC interface to a VRF.
|
vrf vpn-id
To configure a globally unique VPN ID to the given VPN routing and forwarding instance (VRF), use the vrf vpn-id command in SBE configuration mode. To delete the previously assigned VRF name, use the no form of this command.
vrf vrf-name vpn-id vpn-id
no vrf vrf-name vpn-id vpn-id
Syntax Description
vrf-name
|
Specifies the VRF to which the VPN ID is to be assigned.
|
vpn-id
|
A 7-byte, globally unique identifier for the VPN (as defined by RFC 2685).
|
Defaults
None
Command Modes
SBE configuration
Command History
Release
|
Modification
|
Release 3.3.0
|
This command was introduced on the Cisco XR 12000 Series Router.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.
This is used by SBC to unambiguously identify VRFs when programming remote DBEs.
For more information about this command, see RFC2685.
Task ID
Task ID
|
Operations
|
sbc
|
read, write
|
firewall
|
read, write
|
Examples
The following example shows how to assign the 7-byte VPN ID 00010203040506 to the VRF named fred:
RP/0/0/CPU0:router(config)# sbc mySbc sbe
RP/0/0/CPU0:router(config-sbc-sbe)# vrf fred vpn-id 00010203040506
Related Commands
Command
|
Description
|
show services sbc sbe vrf
|
Lists all the currently assigned bindings between VRF name and VPN IDs within SBC.
|