Cisco 7600 Series Routers Session Border Controller Configuration Guide
Cisco IOS Session Border Controller Commands

Table Of Contents

Cisco Session Border Controller Commands

Command Reference

account

action (CAC)

action drop-msg

action (NA)

action (RTG)

action (SDP)

action (SIP)

action (parameter)

activate (dbe, sbe)

activate (billing)

activate (radius)

active-cac-policy-set

active-call-policy-set

address-default

address ipv4

adjacency

adjacency timeout

alias

allow private info

attach (adjacency)

attach (billing)

attach-controllers

authentication

authentication endpoint

authentication-key

authentication mode

authentication nonce timeout

authentication-realm

averaging-period

batch-size

batch-time

billing

blacklist (sbe)

blacklist (sip-opt)

cache-lifetime

cache-limit

cac-policy-set

cac-table

callee-codec-list

callee-hold-setting

callee-inbound-policy

callee-outbound-policy

callee-privacy

callee-sig-qos-profile

callee-video-qos-profile

callee-voice-qos-profile

caller-codec-list

caller-hold-setting

caller-inbound-policy

caller-outbound-policy

caller-privacy

caller-sig-qos-profile

caller-video-qos-profile

caller-voice-qos-profile

call-policy-set

category

clear services sbc

clear services sbc sbe blacklist

clear services sbc blacklist all

clear services sbc sbe blacklist all

clear services sbc sbe blacklist ipv4

clear services sbc dbe media-stats

clear services sbc sbe cac-rejection-stats

clear services sbc sbe call

clear services sbc sbe call-rate-stats

clear services sbc sbe call-rejection-stats

clear services sbc sbe call-stats

clear services sbc sbe policy-failure-stats

clear services sbc sbe policy-rejection-stats

clear services sbc sbe radius-client

clear services sbc sbe radius-client-stats

clear services sbc sbe statistics

codec

codec-list

codec-list description

codec packetization-period

codec-restrict-to-list

codecs

complete

concurrent-requests

condition

congestion-cleared

congestion-threshold

control address aaa

control address h248 index

control-address h248 ipv4

control address h248 port

control address h248 transport

controller h248

copy logs

cost

dbe

dbe-location-id

deact-mode abort

deact-mode (billing)

deact-mode normal

deact-mode quiesce

deact-mode (dbe, sbe)

debug services sbc errors

debug services sbc events

debug services sbc ha

debug services sbc info

debug services sbc ips

debug services sbc logging

debug services sbc mem-trace dump

debug services sbc off

debug services sbc pd filter component

debug services sbc pd filter context

debug services sbc pd filter product

debug services sbc pd log-level

debug services sbc rsrcmon

default-port-limit

description

description (sip-opt)

dscp

dst-adjacency

dtmf-duration

early-media-deny

early-media-timeout

early-media-type

edit

edit-cic

edit-src

entry (profile)

entry (table)

fast-register disable

fast-register-interval

first-cac-prefix-len

first-cac-scope

first-cac-table

first-call-routing-table

first-number-analysis-table

first-reg-routing-table

force-signaling-peer

global

group

h225 timeout

h245-address-pass

h245-tunnel disable

h248 allow-all-mg

h248-profile

h248-profile-version

h248-version

h323

header

header-profile

hold-media-timeout

hunting-trigger

inherit profile

invite-timeout

ip host

ip precedence

ip TOS

ipv4 (blacklist)

ipv4 (SBE H.248)

key

ldr-check

local-address ipv4 (packet-cable)

local-address ipv4

local-id host

local-port

location-id

mandatory-transport

map-status-code

marking

match-account

match-address

match-adjacency

match-category

match-cic

match-domain

match-number

match-prefix

match-prefix len

match-type

match-string

match-table

match-time

match-value

max-bandwidth

max-call-rate

max-channels

max-in-call-rate

max-num-calls

max-out-call-rate

max-regs

max-regs-rate

max-updates

media-address ipv4

media-address ipv4 port-range

media-address ipv4 vrf port-range

media-address pool ipv4

media-address pool ipv4 port-range

media-address pool ipv4 vrf

media-address pool ipv4 vrf port-range

media-bypass

media-bypass-forbid

media-gateway

media-late-to-early-iw

media-timeout

method

method packetcable-em

na-dst-number-table

na-dst-number-attr-table

na-dst-prefix-table

na-src-account-table

na-src-adjacency-table

nat

network-id

option

option-profile

outbound-flood-rate

overload-time-threshold

packetcable-em transport radius

parameter

parameter-profile

pass-body

passthrough

ping-enable

ping-fail-count

ping-interval

ping-lifetime

port (server)

port (SBE H.248)

preferred-transport

precedence

prefix

priority

priority (rsrc-pri)

privacy restrict outbound

qos sig

qos video

qos voice

radius

range value

ras retry

ras rrq

ras timeout

reason

record-media-create-info

redirect-limit

redirect-mode

registration rewrite-register

registration target address

registration target port

reg-min-expiry

remote-address ipv4

remote-port

resource-priority

resource-priority-set

retry-interval

retry-limit (radius)

retry-limit (routing table)

rtg-carrier-id-table

rtg-category-table

rtg-dst-address-table

rtg-dst-domain-table

rtg-least-cost-table

rtg-round-robin-table

rtg-src-account-table

rtg-src-address-table

rtg-src-adjacency-table

rtg-src-domain-table

rtg-time-table

sbc

sbe

sdp-attribute-table

sdp-match-table

sdp origin-user-name

sdp-policy-table

secure-media

security

server

server mode

server-retry disable

service sbc sbe call-destroy

service sbc sbe radius accounting

show services sbc dbe addresses

show services sbc dbe controllers

show services sbc dbe h248-profile

show services sbc dbe media-flow-stats

show services sbc dbe media-flow-stats vrf

show services sbc dbe media-flow-stats vrf ipv4

show services sbc dbe media-flow-stats vrf ipv4 port

show services sbc dbe media-stats

show services sbc dbe signaling-flow-stats

show services sbc rsrcmon

show services sbc sbe aaa

show services sbc sbe addresses

show services sbc sbe adjacencies

show services sbc sbe adjacencies detail

show services sbc sbe adjacencies authentication-realms

show services sbc sbe all-authentication-realms

services sbc sbe billing instance

services sbc sbe billing instances

show services sbc sbe billing remote

show services sbc sbe blacklist configured-limits

show services sbc sbe blacklist current-blacklisting

show services sbc sbe blacklist ipv4

show services sbc sbe cac-policy-set

show services sbc sbe cac-policy-sets

show services sbc sbe cac-policy-set tables

show services sbc sbe cac-policy-set table entries

show services sbc sbe cac-policy-set table entry

show services sbc sbe call branches

show services sbc sbe call-policy-set

show services sbc sbe call-policy-set table entry

show services sbc sbe call-rate-stats

show services sbc sbe calls

show services sbc sbe call-stats

show services sbc sbe codec-list

show services sbc sbe gates

show services sbc sbe h323 timers

show services sbc sbe hold-media-timeout

show services sbc sbe hunting-trigger

show services sbc sbe media-gateway-associations

show services sbc sbe media-gateways

show services sbc sbe policy-failure-stats

show services sbc sbe policy-failure-stats dst-account

show services sbc sbe policy-failure-stats dst-adjacency

show services sbc sbe policy-failure-stats src-account

show services sbc sbe policy-failure-stats src-adjacency

show services sbc sbe qos-profiles

show services sbc sbe radius-client-accounting acounting

show services sbc sbe radius-client-accounting authentication

show services sbc sbe radius-client-stats

show services sbc sbe radius-server-stats

show services sbc sbe redirect-limit

show services sbc sbe resource-priority-sets

show services sbc sbe sdp-h245-mapping

show services sbc sbe sdp-match-table

show services sbc sbe sdp-policy-table

show services sbc sbe sip essential-headers

show services sbc sbe sip essential-methods

show services sbc sbe sip essential-options

show services sbc sbe sip fast-register-stats

show services sbc sbe sip header-profile

show services sbc sbe sip header-profiles

show services sbc sbe sip method-profile

show services sbc sbe sip method-profiles

show services sbc sbe sip option-profile

show services sbc sbe sip-method-stats

show services sbc sbe sip option-profiles

show services sbc sbc sbe sip parameter-profile

show services sbc sbe sip subscribers

show services sbc sbe sip timers

show services sbc services

signaling-address ipv4

signaling-peer

signaling-peer-port

signaling-port

sip

sip dns

sip encryption key

sip header-profile

sip home network identifier

sip hunting-trigger

sipi

sip inherit profile

sip max-connections

sip method-profile

sip option-profile

sip parameter-profile

sip ping-support

sip timer

sip visited network identifier

snmp-server enable traps sbc

statistics-setting

tcp (blacklist)

tcp-connect-timeout

tcp-idle-timeout

tech-prefix

time-offset

timeout

transcode-deny

transcoder

transport (SBE H.248)

transport tcp

transport udp

trigger-period

trigger-size

udp (blacklist)

udp-first-retransmit-interval

udp-max-retransmit-interval

udp-response-linger-period

unexpected-source-alerting

use-any-local-port

use-time-offset

vdbe

vpn

vrf

weight


Cisco Session Border Controller Commands


Command Reference

This section describes the following session border controller (SBC) and data border element (DBE) commands:

account

action (CAC)

action drop-msg

action (NA)

action (RTG)

action (SDP)

action (SIP)

action (parameter)

activate (dbe, sbe)

activate (billing)

activate (radius)

active-cac-policy-set

active-call-policy-set

address-default

address ipv4

adjacency

adjacency timeout

alias

allow private info

attach (adjacency)

attach (billing)

attach-controllers

authentication

authentication endpoint

authentication-key

authentication mode

authentication nonce timeout

authentication-realm

averaging-period

batch-size

batch-time

billing

blacklist (sbe)

blacklist (sip-opt)

cache-lifetime

cache-limit

cac-policy-set

cac-table

callee-codec-list

callee-hold-setting

callee-inbound-policy

callee-outbound-policy

callee-privacy

callee-sig-qos-profile

callee-video-qos-profile

callee-voice-qos-profile

caller-codec-list

caller-hold-setting

caller-inbound-policy

caller-outbound-policy

caller-privacy

caller-sig-qos-profile

caller-video-qos-profile

caller-voice-qos-profile

call-policy-set

category

clear services sbc

clear services sbc sbe blacklist

clear services sbc blacklist all

clear services sbc sbe blacklist all

clear services sbc sbe blacklist ipv4

clear services sbc dbe media-stats

clear services sbc sbe cac-rejection-stats

clear services sbc sbe call

clear services sbc sbe call-rejection-stats

clear services sbc sbe call-stats

clear services sbc sbe policy-failure-stats

clear services sbc sbe policy-rejection-stats

clear services sbc sbe radius-client

clear services sbc sbe radius-client-stats

clear services sbc sbe statistics

codec

codec-list

codec-list description

codec packetization-period

codec-restrict-to-list

codecs

complete

concurrent-requests

condition

congestion-cleared

congestion-threshold

control address aaa

control address h248 index

control-address h248 ipv4

control address h248 port

control address h248 transport

controller h248

copy logs

cost

dbe

dbe-location-id

deact-mode abort

deact-mode (billing)

deact-mode normal

deact-mode quiesce

deact-mode (dbe, sbe)

debug services sbc errors

debug services sbc events

debug services sbc ha

debug services sbc info

debug services sbc ips

debug services sbc logging

debug services sbc mem-trace dump

debug services sbc off

debug services sbc pd filter component

debug services sbc pd filter context

debug services sbc pd filter product

debug services sbc pd log-level

debug services sbc rsrcmon

default-port-limit

description

description (sip-opt)

dscp

dst-adjacency

dtmf-duration

early-media-deny

early-media-timeout

early-media-type

edit

edit-cic

edit-src

entry (profile)

entry (table)

fast-register disable

fast-register-interval

first-cac-prefix-len

first-cac-scope

first-cac-table

first-call-routing-table

first-number-analysis-table

first-reg-routing-table

force-signaling-peer

global

group

h225 timeout

h245-address-pass

h245-tunnel disable

h248 allow-all-mg

h248-profile

h248-profile-version

h248-version

h323

header

header-profile

hold-media-timeout

hunting-trigger

inherit profile

invite-timeout

ip host

ip precedence

ip TOS

ipv4 (blacklist)

ipv4 (SBE H.248)

key

ldr-check

local-address ipv4 (packet-cable)

local-address ipv4

local-id host

local-port

location-id

mandatory-transport

map-status-code

marking

match-account

match-address

match-adjacency

match-category

match-cic

match-domain

match-number

match-prefix

match-prefix len

match-type

match-string

match-table

match-time

match-value

max-bandwidth

max-call-rate

max-channels

max-in-call-rate

max-num-calls

max-out-call-rate

max-regs

max-regs-rate

max-updates

media-address ipv4

media-address ipv4 port-range

media-address ipv4 vrf port-range

media-address pool ipv4

media-address pool ipv4 port-range

media-address pool ipv4 vrf

media-address pool ipv4 vrf port-range

media-bypass

media-bypass-forbid

media-gateway

media-late-to-early-iw

media-timeout

method

method packetcable-em

na-dst-number-table

na-dst-number-attr-table

na-dst-prefix-table

na-src-account-table

na-src-adjacency-table

nat

network-id

option

option-profile

outbound-flood-rate

overload-time-threshold

packetcable-em transport radius

parameter

parameter-profile

pass-body

passthrough

ping-enable

ping-fail-count

ping-interval

ping-lifetime

port (server)

port (SBE H.248)

preferred-transport

precedence

prefix

priority

priority (rsrc-pri)

privacy restrict outbound

qos sig

qos video

qos voice

radius

range value

ras retry

ras rrq

ras timeout

reason

record-media-create-info

redirect-limit

redirect-mode

registration rewrite-register

registration target address

registration target port

reg-min-expiry

remote-address ipv4

remote-port

resource-priority

resource-priority-set

retry-interval

retry-limit (radius)

retry-limit (routing table)

rtg-carrier-id-table

rtg-category-table

rtg-dst-address-table

rtg-dst-domain-table

rtg-least-cost-table

rtg-round-robin-table

rtg-src-account-table

rtg-src-address-table

rtg-src-adjacency-table

rtg-src-domain-table

rtg-time-table

sbc

sbe

sdp-attribute-table

sdp-match-table

sdp origin-user-name

sdp-policy-table

secure-media

security

server

server mode

server-retry disable

service sbc sbe call-destroy

service sbc sbe radius accounting

show services sbc dbe addresses

show services sbc dbe controllers

show services sbc dbe h248-profile

show services sbc dbe media-flow-stats

show services sbc dbe media-flow-stats vrf

show services sbc dbe media-flow-stats vrf ipv4

show services sbc dbe media-flow-stats vrf ipv4 port

show services sbc dbe media-stats

show services sbc dbe signaling-flow-stats

show services sbc rsrcmon

show services sbc sbe aaa

show services sbc sbe addresses

show services sbc sbe adjacencies

show services sbc sbe adjacencies detail

show services sbc sbe adjacencies authentication-realms

show services sbc sbe all-authentication-realms

services sbc sbe billing instance

services sbc sbe billing instances

show services sbc sbe billing remote

show services sbc sbe blacklist configured-limits

show services sbc sbe blacklist current-blacklisting

show services sbc sbe blacklist ipv4

show services sbc sbe cac-policy-set

show services sbc sbe cac-policy-sets

show services sbc sbe cac-policy-set tables

show services sbc sbe cac-policy-set table entries

show services sbc sbe cac-policy-set table entry

show services sbc sbe call branches

show services sbc sbe call-policy-set

show services sbc sbe call-policy-set table entry

show services sbc sbe call-rate-stats

show services sbc sbe calls

show services sbc sbe call-stats

show services sbc sbe codec-list

show services sbc sbe gates

show services sbc sbe h323 timers

show services sbc sbe hold-media-timeout

show services sbc sbe hunting-trigger

show services sbc sbe media-gateway-associations

show services sbc sbe media-gateways

show services sbc sbe policy-failure-stats dst-account

show services sbc sbe policy-failure-stats dst-adjacency

show services sbc sbe policy-failure-stats src-account

show services sbc sbe policy-failure-stats src-adjacency

show services sbc sbe qos-profiles

show services sbc sbe radius-client-accounting acounting

show services sbc sbe radius-client-accounting authentication

show services sbc sbe radius-client-stats

show services sbc sbe radius-server-stats

show services sbc sbe redirect-limit

show services sbc sbe resource-priority-sets

show services sbc sbe sdp-h245-mapping

show services sbc sbe sdp-match-table

show services sbc sbe sdp-policy-table

show services sbc sbe sip essential-headers

show services sbc sbe sip essential-methods

show services sbc sbe sip essential-options

show services sbc sbe sip fast-register-stats

show services sbc sbe sip header-profile

show services sbc sbe sip header-profiles

show services sbc sbe sip method-profile

show services sbc sbe sip method-profiles

show services sbc sbe sip option-profile

show services sbc sbe sip-method-stats

show services sbc sbe sip option-profiles

show services sbc sbe sip parameter-profile access-param

show services sbc sbc sbe sip parameter-profile

show services sbc sbe sip timers

show services sbc services

signaling-address ipv4

signaling-peer

signaling-peer-port

signaling-port

sip

sip dns

sip encryption key

sip header-profile

sip home network identifier

sip hunting-trigger

sipi

sip inherit profile

sip max-connections

sip method-profile

sip option-profile

sip parameter-profile

sip ping-support

sip visited network identifier

snmp-server enable traps sbc

statistics-setting

tcp (blacklist)

tcp-connect-timeout

tcp-idle-timeout

tech-prefix

time-offset

timeout

transcode-deny

transcoder

transport (SBE H.248)

transport tcp

transport udp

trigger-period

trigger-size

udp (blacklist)

udp-first-retransmit-interval

udp-max-retransmit-interval

udp-response-linger-period

unexpected-source-alerting

use-any-local-port

use-time-offset

vdbe

vpn

vrf

weight

account

To define a SIP or H.323 adjacency account on an SBE, use the account command in the appropriate configuration mode. To remove this definition, use the no form of this command.

account account-name

no account account-name

Syntax Description

account-name

Specifies the SBE account name.


Command Default

No account name is associated with the adjacency.

Command Modes

Adjacency SIP configuration (config-sbc-sbe-adj-sip)

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to account isp42:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency h323 SipToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# account isp42

The following example shows how to configure the SIP adjacency SipToIsp42 to account isp42:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency sip SipToIsp42
host1/Admin(config-sbc-sbe-adj-sip)# account isp42

Related Commands

Command
Description

adjacency

Configures an adjacency for an SBC.


action (CAC)

To specify the action to take if this routing entry is chosen, use the action command in the CAC table entry configuration mode.

action [cac-complete | next-table goto-table-name ]

no action [cac-complete | next-table goto-table-name ]

Syntax Description

cac-complete

When an event matches, this CAC policy is complete.

next-table

Specifies the name of the next CAC table. The maximum number of characters is 80.

goto-table-name

Specifies the table name identifying the next CAC table to process (or cac-complete, if processing should stop).


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the next table to process for the entry in the new admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable match-type src-account
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# action cac-complete

Related Commands

Command
Description

action (NA-)

Configures the action to perform after an entry in an admission control table.

action (RTG-SRC)

Configures the action to take if a routing entry is chosen.



action drop-msg

To add an action of dropping the message to a SIP message profile, use the action drop-msg command in SIP header-profile configuration mode. To remove the method from the profile, use the no form of this command.

action drop-msg

no action drop-msg

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values

Command Modes

SIP header configuration (config-sbc-sbe-sip-hdr)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows action of dropping the message to a SIP message profile to the header profile MyProfile:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip header-profile MyProfile
host1/Admin(config-sbc-sbe-sip-hdr)# action drop-msg

Related Commands

Command
Description

sip header-profile

Configures a header profile.


action (NA)

To configure the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account, use the action (NA-) command in the number analysis table configuration mode. To deconfigure the action, use the no form of this command.

action [next-table goto-table-name | accept | reject]

no action [next-table goto-table-name | accept | reject]

Syntax Description

next-table goto-table-name

Specifies the next number analysis table to process, if the event matches this

entry.

accept

Configures the call to be accepted if it matches the entry in the table.

reject

Configures the call to be rejected if it matches the entry in the table.


Command Default

No default behavior or values

Command Modes

Number analysis table configuration (config-sbc-sbe-rtgpolicy-natable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the call to be accepted if it matches the source adjacency entry in the new number analysis table MyNaTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# na-src-adjacency-table MyNaTable
host1/Admin(config-sbc-sbe-rtgpolicy-natable)# entry 1
host1/Admin(config-sbc-sbe-rtgpolicy-natable-entry)# action accept

Related Commands

Command
Description

action (NA-)

Configures the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account.

action (CAC)

Configures the action to perform after an entry in an admission control table.


action (RTG)

To specify the action to take if this routing entry is chosen, use the action command in the RTG routing table configuration mode.

action [next-table goto-table-name | complete | reject ]

no action [next-table goto-table-name | complete | reject ]

Syntax Description

next-table goto-table-name

Specifies the next number analysis table to process, if the event matches this

entry.

complete

Routing is complete when an entry matches this policy.

reject

Configures the call to be rejected if it matches the entry in the table.


Command Default

No default behavior or values

Command Modes

RTG routing table configuration (config-sbc-sbe-rtgpolicy-rtgtable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable so that if any calls match this criterion, they are rejected.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# rtg-src-account-table MyRtgTable
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-account 1471
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable so that if any calls match this criterion, they are rejected.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# rtg-round-robin-table MyRtgTable
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action reject

The following example shows how to configure the match-value of an entry in the new routing table MyRtgTable so that if any calls match this criterion, they are rejected.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# rtg-dst-address-table MyRtgTable
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable)# entry 1
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# match-address 1471
host1/Admin(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action complete

Related Commands

Command
Description

action (NA)

Configures the action of an entry in the number analysis table with entries of the table matching a dialed number (prefix or whole number) or the source adjacency or account.

action (CAC)

Configures the action to perform after an entry in an admission control table.


action (SDP)

To configure an SDP policy table action, use the action command in the SDP attribute table configuration mode. To remove the method from the profile, use the no form of this command.

action {whitelist | blacklist)

no action {whitelist | blacklist}

Syntax Description

whitelist

Allows the defined set of attributes and blocks the rest.

blacklist

Blocks the defined set of attributes and allows the rest.


Command Default

No default behavior or values

Command Modes

SDP attribute table configuration (config-sbc-sbe- sdpmatchtable-sdpattributetable)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows the action of dropping the message to a SIP message profile to the header profile MyProfile:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sdp-match-table 1
host1/Admin(config-sbc-sbe-sdp-match-tbl)# action blacklist

Related Commands

Command
Description

match-string

Configures an SDP attribute matching string.

sdp-attribute-table

Configures an SDP attribute table that lists the attributes to add or remove.

sdp-match-table

Creates an SDP match table.

sdp-policy-table

Configures an SDP policy table.


action (SIP)

To configure the action to take on an element type in a header or parameter profile, use the action command in the appropriate configuration mode. To remove an action from the element type, use the no form of this command.

action {add-first-header| add-header | as-profile | drop-msg | pass | replace-name | replace-value | strip}

no action {add-first-header| add-header | as-profile | drop-msg | pass | replace-name | replace-value | strip}

Syntax Description

add-first-header

Adds the first occurrence of a header (no action if a header exists).

add-header

Adds a header whether on not one already exists.

as-profile

Selects default profile action (whilelist/blacklist).

drop-msg

Drops the message.

pass

Passes on the header.

replace-name

Replaces the header name.

replace-value

Replaces the header content (value).

strip

Unconditionally strips the matched body, header, or parameter element.


Command Default

The default body action is strip.

The default parameter action is strip.

The default header action is strip.

Command Modes

SBE header profile header configuration

SBE parameter profile parameter configuration

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

If a configuration is loaded on top of an active configuration, warnings are generated to notify that the configuration cannot be modified. If you must modify the entire configuration by loading a new one, please remove the existing configuration first.

Examples

The following example shows how to set the action for parameter element type user in parameter profile paramprof1 to add-not-present:

host1/Admin# config
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip parameter-profile paramprof1
host1/Admin(config-sbc-sbe-sip-prm)# parameter user

host1/Admin(config-sbc-sbe-sip-prm-ele)# action add-not-present value phone

The following example shows how to set the action for header element type To in parameter profile headerprof1 to as-profile:

host1/Admin# config
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip header-profile headerprof1
host1/Admin(config-sbc-sbe-sip-hdr)# header To

host1/Admin(config-sbc-sbe-sip-hdr-ele)# action as-profile

Related Commands

Command
Description

header

Configures a header element in a header profile.

parameter-profile

Configures aparameter element in a parameter profile.


action (parameter)

To configure the action to take on a parameter, use the action command in the appropriate configuration mode. To remove an action from the element type, use the no form of this command.

action {add-not-present [value] {private-ip-address | public-ip-address | access-user-data}| add-or-replace [value] {private-ip-address | public-ip-address | access-user-data}| strip}

no action {add-not-present [value] {private-ip-address | public-ip-address | access-user-data}| add-or-replace [value] {private-ip-address | public-ip-address | access-user-data}| strip}

Syntax Description

add-not-present

Adds the parameter if it is not present.

value

The value of the parameter to be added or replaced.

add-or-replace

Adds the parameter if it is not present or replace the paramter if it is present.

private-ip-address

Update parameter as private IP address.

public-ip-address

Update parameter as public IP address.

access-user-data

Update parameter as access user data.

strip

Strips out the parameter if it is present.


Command Default

The default parameter action is strip.

The default header action is strip.

Command Modes

SBE header profile header configuration

SBE parameter profile parameter configuration(config-sbc-sbe-sip-prm-ele)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

If a configuration is loaded on top of an active configuration, warnings are generated to notify that the configuration cannot be modified. If you must modify the entire configuration by loading a new one, please remove the existing configuration first.

Examples

The following example shows how to set the action for parameter element type user in parameter profile paramprof1 to add-not-present:

host1/Admin# config
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip parameter-profile paramprof1
host1/Admin(config-sbc-sbe-sip-prm)# parameter user

host1/Admin(config-sbc-sbe-sip-prm-ele)# action add-not-present value phone

The following example shows how to set the action for header element type To in parameter profile headerprof1 to as-profile:

host1/Admin# config
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip header-profile headerprof1
host1/Admin(config-sbc-sbe-sip-hdr)# header To

host1/Admin(config-sbc-sbe-sip-hdr-ele)# action as-profile

Related Commands

Command
Description

header

Configures a header element in a header profile.

parameter

Configures aparameter element in a parameter profile.


activate (dbe, sbe)

To initiate the Session Border Controller (SBC) service when all SBE or data border element (DBE) address configuration have been successfully committed, use the activate command in the appropriate configuration mode. To deactivate the SBE service of the SBC, use the no form of this command.

activate

no activate

Syntax Description

This command has no arguments or keywords.

Command Default

Default is the no form of the command.

Command Modes

DBE configuration (config-sbc-dbe)

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 2.0.00

This command was introduced on the Cisco 7600 series routers.

Release 3.0.00

SBE support added.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

The command is not completed even when the CLI returns; there is an asynchronous process (activation or deactivation) going on and the new instruction is not actioned until the last one completes.

Examples

The following example shows how to activate the DBE on the service mySbc:

host1/Admin# configur
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc)# dbe 

host1/Admin (config-sbc-dbe)# activate


The following example shows how to activate the SBE on the service mySbc:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin (config-sbc-sbe)# activate

Related Commands

Command
Description

deact-mode

Indicates how to implement the deactivation of an SBE.


activate (billing)

To activate billing when it is configured, use the activate command in SBE billing configuration mode.

activate

Syntax Description

This command has no arguments or keywords.

Command Default

By default, billing is not activated.

Command Modes

SBE billing configuration (config-sbc-sbe-billing)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

If a configuration is loaded on top of an active configuration, warnings are generated to notify that the configuration cannot be modified. If you must modify the entire configuration by loading a new one, please remove the existing configuration first.

You can activate billing only after the RADIUS configuration has been activated.

Examples

The following example shows how to activate the billing functionality after configuration is committed:

host1/Admin/Admin# configure
host1/Admin/Admin(config)# sbc mySbc
host1/Admin/Admin(config-sbc)# sbe
host1/Admin/Admin(config-sbc-sbe)# billing

host1/Admin/Admin(config-sbc-sbe-billing)# activate

Related Commands

Command
Description

billing

Configures billing.

ldr-check

Configures the time of day (local time) to run the Long Duration Check (LDR).

local-address ipv4

Configures the local IPv4 address that appears in the CDR.

method packetcable-em

Enables the packet-cable billing method.

packetcable-em transport radius

Configures a packet-cable billing instance.

show services sbc sbe billing remote

Displays the local and billing configurations.


activate (radius)

To activate the RADIUS client, use the activate command in the appropriate configuration mode. To disable this command, use the no form of this command.

activate

no activate

Syntax Description

This command has no arguments or keywords.

Command Default

Default is the no form of the command.

Command Modes

Server accounting (config-sbc-sbe-acc)

Server authentication (config-sbc-sbe-auth)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to activate the RADIUS client.

host1/Admin# configure
host1/Admin(config)# sbc uut105-1
host1/Admin/Admin(config-sbc)# sbe
host1/Admin/Admin(config-sbc-sbe)# radius accounting SBC1-account-1
host1/Admin/Admin(config-sbc-sbe-acc)# activate

Related Commands

retry-interval

Sets the retry interval to connect to the RADIUS server.

retry-limit

Sets the retry interval to the RADIUS server.

concurrent-requests

Sets the maximum number of concurrent requests to the RADIUS server.


active-cac-policy-set

To set the active CAC-policy-set within an SBE entity, use the active-cac-policy-set command in SBE configuration mode. To deconfigure the active policy set, leaving the SBE with no active policy set, use the no form of this command.

active-cac-policy-set policy-set-id

no active-cac-policy-set policy-set-id

Syntax Description

policy-set-id

Integer identifying the policy set that should be made active. Range is 1 to 2147483647.


Command Default

No default behavior or values

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to activate policy set 1 on mySbc:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin (config-sbc-sbe)# active-cac-policy-set 1

Related Commands

Command
Description

active-call-policy

Sets the active routing policy set within an SBE entity.


active-call-policy-set

To set the active routing policy set within an SBE entity, use the active-call-policy-set command in SBE configuration mode. To deconfigure the active routing policy set, leaving the SBE with no active routing policy set, use the no form of this command.

active-call-policy-set policy-set-id

no active-call-policy-set

Syntax Description

policy-set-id

Integer that identifies the policy set that should be made active.
Range is 1 to 2147483647.


Command Default

No default behavior or values

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

If another policy set was previously active, it is made inactive by executing this command. The SBE is created with no active routing policy set; an active routing policy set must be explicitly configured using this command.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to activate policy set 1 on mySbc:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin (config-sbc-sbe)# active-call-policy-set 1

Related Commands

Command
Description

active-cac-policy-set

Sets the active CAC-policy-set within an SBE entity.


address-default

To enter the mode for configuring the default event limits for the source addresses in a given VPN, use the blacklist command in the SBE blacklist configuration mode. To set the values for the VPN to the same as global addresses, use the no form of this command.

address-default

no address-default

Syntax Description

This command has no arguments or keywords.

Command Default

Event limits are set to the same value for all VPNs.

Command Modes

SBE blacklist configuration (config-sbc-sbe-blacklist)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the address-default command is used to enter the mode for configuring the default event limits for all addresses:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# address-default

VRF-name is optional for the blacklist. However, if a VRF-name is entered, a vpn token is required as shown in the following example:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# address-default ? 
<cr> Carriage return. 
host1/Admin(config-sbc-sbe-blacklist)# address-default 
host1/Admin(config-sbc-sbe-blacklist-addr-default)# exit 
host1/Admin(config-sbc-sbe-blacklist)# vpn vpnname 
host1/Admin(config-sbc-sbe-blacklist-vpn)# address-default ? 
<cr> Carriage return. 
host1/Admin(config-sbc-sbe-blacklist-vpn)# address-default 
host1/Admin(config-sbc-sbe-blacklist-vpn-addr-default)# 

Related Commands

Command
Description

reason

Enters a submode for configuring a limit to a specific event type on the source.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

trigger-period

Defines the period over which events are considered.

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.


address ipv4

To configure the address of the RADIUS server, use the address command in command in SBE configuration mode. To deconfigure the active accounting server address, use the no form of this command.

address ipv4 A.B.C.D.

no address ipv4 A.B.C.D.

Syntax Description

A.B.C.D.

IP address of the RADIUS server.


Command Default

No default behavior or values

Command Modes

Server accounting (config-sbc-sbe-acc-ser)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

Any number of accounting servers can be specified. Call Detail Reports are sent to the accounting server with the highest priority upon call termination.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following command configures accounting servers castor and pollux on mySbc for Remote Authentication Dial-In User Service (RADIUS) client instance radius1:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe
host1/Admin (config-sbc-sbe)# radius accounting radius1
(config-sbc-sbe-acc)# server castor
(config-sbc-sbe-acc-ser)# address ipv4 10.0.0.1
(config-sbc-sbe-acc-ser)# exit
(config-sbc-sbe-acc)# server pollux
(config-sbc-sbe-acc-ser)# address pollux
(config-sbc-sbe-acc-ser)# exit

Related Commands

Command
Description

radius

Configures a RADIUS client for accounting or authentication purposes.


adjacency

To configure an adjacency for a Session Border Controller (SBC) service, use the adjacency command in SBE configuration mode. To deconfigure the adjacency, use the no form of this command.

adjacency {sip | h323} adjacency-name

no adjacency {sip | h323} adjacency-name

Syntax Description

sip

Enters the mode of an SBE SIP adjacency.

h323

Enters the mode of an SBE H.323 adjacency.

adjacency-name

Specifies the name of the SBE SIP or H.323 adjacency.


Command Default

No default behavior or values

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section below shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the adjacency command configures a SIP adjacency named sipGW.

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency sip sipGW
host1/Admin(config-sbc-sbe-adj-sip)#

The following example shows how the adjacency command configures an H.323 adjacency named 
H323ToIsp42.

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency h323 H323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)#

Related Commands

Command
Description

show services sbc sbe adjacencies

Displays all adjacencies.


adjacency timeout

To configure the adjacency retry timeout interval, use the adjacency timeout command in the appropriate configuration mode. To return to the default value, use the no form of this command.

adjacency timeout value

no adjacency timeout value

Syntax Description

value

Specifies the timeout period in milliseconds. Valid values are from 10000 to 30000. The default value is 30 seconds.


Command Default

The default value is 30 seconds.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

H.323 configuration (config-sbc-sbe-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the adjacency timeout command configures adjacency retry timeout in adjacency H.323 configuration mode:

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# adjacency timeout 10000

The following example shows how the adjacency timeout command configures adjacency retry timeout in H.323 configuration mode.

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# h323
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-h323)# adjacency timeout 10000

Related Commands

Command
Description

adjacency

Configures an adjacency for an SBC.


alias

To configure the endpoint alias of an H.323 adjacency, use the alias command in adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

alias alias-name

no alias

Syntax Description

alias-name

Specifies the alias of the H.323 adjacency endpoint.


Command Default

No default behavior or values

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 endpoint alias to end1:


host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# alias end1

Related Commands

Command
Description

attach-controller

Configures a DBE to attach to a controller.


allow private info

To configure an H.323 adjacency to allow private information on messages sent out by the adjacency, use the allow private info command in the adjacencyH.323 configuration mode. To disallow private information on messages sent out by the adjacency, use the no form of this command.

allow private info

no allow private info

Syntax Description

This command has no arguments or keywords.

Command Default

Default is the no form of the command.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Please note that if you configure the H.323 adjacency to allow private information, then it will allow private information on messages even if the CAC policy is configured to apply privacy service or the user requests privacy service.

Examples

The following example shows how the allow private info command is used to configure an H.323 adjacency to allow private information on messages sent by the adjacency.

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency h323ToIsp422
host1/Admin(config-sbc-sbe-adj-h323)# allow private info

Related Commands

Command
Description

privacy restrict outbound

Configures an H.323 adjacency to apply privacy restriction on outbound messages if the user requests it.



attach (adjacency)

To attach an adjacency to an account on an SBE, use the attach command in the appropriate configuration mode. To detach the adjacency from an account on an SBE, use the no form of this command.

attach force [abort | normal]

no attach force [abort | normal]

Syntax Description

force

Executes a forced detach.

abort

Tears down calls without signaling an end.

normal

Tears down calls gracefully.


Command Default

Default is the no form of the command.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Adjacency SIP configuration (config-sbc-sbe-adj-sip)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Use the force argument to tear all SBE calls down.

Examples

The following example shows how to attach the H.323 adjacency to h323ToIsp42:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# attach

Related Commands

Command
Description

adjacency

Configures an adjacency for an SBC.


attach (billing)

To activate the billing for a RADIUS client, use the attach command in packetcable-em configuration mode. To disable the billing for a RADIUS client, use the no form of this command.

attach

no attach

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

Packet-cable em configuration (config-sbc-sbe-billing-packetcable-em)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to activate the billingfunctionality for a RADIUS client:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# billing 
(config-sbc-sbe-billing)# method packetcable-em
(config-sbc-sbe-billing)# packetcable-em 4 transport radius test
(config-sbc-sbe-billing-packetcable-em)# batch-size 256
(config-sbc-sbe-billing-packetcable-em)# batch-time 22
(config-sbc-sbe-billing-packetcable-em)# attach


Related Commands

Command
Description

activate (radius)

Activates the billing functionality after configuration is committed.

attach

Activates the billing for a RADIUS client.

batch-size

Configures the batching or grouping of RADIUS messages sent to a RADIUS server.

batch-time

Configures the maximum number of milliseconds for which any record is held in the batch before the batch is sent.

deact-mode

Configures the deactivate mode for the billing method.

ldr-check

Configures the time of day (local time) to run the Long Duration Check (LDR).

local-address ipv4

Configures the local IPv4 address that appears in the CDR.

local-address ipv4 (packet-cable)

Configures the local address of the packet-cable billing instance.

method packetcable-em

Enables the packet-cable billing method.

packetcable-em transport radius

Configures a packet-cable billing instance.

show services sbc sbe billing remote

Displays the local and billing configurations.


attach-controllers

To configure a DBE to attach to an H.248 controller, use the attach-controllers command in VDBE configuration mode. To detach the DBE from its controller, use the no form of this command.

attach-controllers

no attach-controllers

Syntax Description

This command has no arguments or keywords.

Command Default

The default is that no controllers are attached.

Command Modes

VDBE configuration mode (config-sbc-dbe-vdbe)

Command History

Release
Modification

Release 2.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

The attachment and detachment of the DBE from its controller does not always complete immediately. To view the current attachment status, use the show sbc dbe controllers command.

Examples

In a configuration where the DBE has been created and controllers have been configured, the following example shows how to attach the DBE to a controller in VDBE configuration mode:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc)# dbe 
host1/Admin(config-sbc-dbe)# vdbe
host1/Admin(config-sbc-dbe-vdbe)# attach-controllers

Related Commands

Command
Description

vdbe

Configures a virtual data border element (vDBE) and enters the VDBE configuration mode.

show sbc dbe controllers

Lists the media gateway controllers configured on each vDBE and its controller address.


authentication

To configure the H.323 adjacency authentication, use the authentication command in the adjacency H.323 configuration mode. To deconfigure the H.323 adjacency authentication mode, use the no form of this command.

authentication auth-type

no authentication

Syntax Description

auth-type

The authentication type; currently this can only be endpoint.


Command Default

Default is the no form of the command.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

This command causes the SBC to authenticate itself with a Gatekeeper. The gatekeeper is responsible for performing the endpoint authentication.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following command sets H.323 adjacency "h323ToIsp42" to use endpoint authentication.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# isp42 adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# authentication endpoint
host1/Admin(config-sbc-sbe-adj-h323)# exit

Related Commands

Command
Description

adjacency

Configures an adjacency for an SBC.


authentication endpoint

To configure the H.323 adjacency to use endpoint authentication, use the authentication endpoint command in Adjacency H.323 configuration mode. To remove this configuration, use the no form of this command.

authentication endpoint

no authentication endpoint

Syntax Description

This command has no arguments or keywords.

Command Default

By default, no authentication procedures are performed.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the H.323 adjacency h323ToIsp42 to use endpoint authentication:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# authentication endpoint

Related Commands

Command
Description

sipi

Configures the H.323 adjacency authentication key.


authentication-key

To configure the H.323 adjacency authentication key, use the authentication-key command in adjacency H.323 configuration mode. To deconfigure the H.323 adjacency authentication key, use the no form of this command.

authentication-key key

no authentication-key

Syntax Description

key

Specifies the authentication key. (This is valid only when authentication is turned on.)


Command Default

Default is the no form of the command.

Command Modes

Adjacency H.323 configuration (config-sbc-sbe-adj-h323)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure H.323 adjacency h323ToIsp42 to use authentication key FG56KJ:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# adjacency h323 h323ToIsp42
host1/Admin(config-sbc-sbe-adj-h323)# authentication-key FG56KJ

Related Commands

Command
Description

authentication endpoint

Configures an H.323 adjacency to use endpoint authentication.


authentication mode

To configure the authentication mode for a SIP adjacency, use the authentication mode command in the adjacency SIP configurationmode. To deconfigure the authentication mode, use the no form of this command.

authentication mode {local | remote}

no authentication mode {local | remote}

Syntax Description

local

Configures the SIP adjacency for local authentication.

remote

Configures the SIP adjacency for remote authentication.


Command Default

No default behavior or values

Command Modes

Adjacency SIP configuration (config-sbc-sbe-adj-sip)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the authentication mode command is used to configure the SIP adjacency for local authentication:

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency sip SipToIsp42
host1/Admin(config-sbe-adj-sip)# authentication mode local

Related Commands

Command
Description

authentication nonce timeout

Configures the authentication nonce timeout for a SIP adjacency.



authentication nonce timeout

To configure the authentication nonce timeout for a SIP adjacency, use the authentication nonce timeout command in the adjacency SIP configuration mode. To deconfigure the authentication nonce timeout, use the no form of this command.

authentication nonce timeout value

no authentication nonce timeout

Syntax Description

value

Specifies the timeout value in seconds. The range of values is 0 to 65535.


Command Default

The default timeout value is 300 seconds.

Command Modes

Adjacency SIP configuration (config-sbc-sbe-adj-sip)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the authentication nonce timeout command is used to configure the authentication nonce timeout in seconds for a SIP adjacency:


host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency sip SipToIsp42
host1/Admin(config-sbe-adj-sip)# authentication nonce timeout 10

Related Commands

Command
Description

authentication mode

Configures the authentication mode for a SIP adjacency.



authentication-realm

To configure a set of authentication credentials for a specified domain on the specified SIP adjacency, use the authentication-realm command in SIP adjacency configuration mode. To deconfigure the authentication realm on the specified adjacency, use the no form of this command.

authentication-realm {inbound domain | outbound domain username password}

no authentication-realm {inbound domain | outbound domain}

Syntax Description

inbound

Specifies inbound authentication-realm.

outbound

Specifies outbound authentication-realm.

domain

Name of the domain for which the authentication credentials are valid.

username

Username that identifies the SBC in the specified domain.

password

Password to authenticate the username in the specified domain.


Command Default

No default behavior or values

Command Modes

Adjacency SIP configuration (config-sbc-sbe-adj-sip)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the authentication-realm command configures an authentication realm for the domain example.com on SIP adjacency SipToISP42:

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# adjacency sip SiptoISP42
host1/Admin(config-sbc-sbe-adj-sip)# authentication-realm outbound example.com usersbc 
passwordsbc

Related Commands

Command
Description

adjacency

Configures an adjacency for an SBC.


averaging-period

To configure the size of the averaging period used by CAC for its rate calculations, use the averaging period command in the CAC-policy-set configuration mode. To return the averaging period to its default, use the no form of this command.

averaging-period duration

no averaging-period

Syntax Description

duration

The size of the averaging window to use, in seconds. Default is 60 seconds.


Command Default

The default is 60 seconds.

Command Modes

CAC-policy-set configuration (config-sbc-sbe-cacpolicy)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following command sets the averaging period to 5 seconds in configuration set 1 on "mySbc".

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# averaging-period 5
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

cac-policy-set

Enters the submode of CAC policy set configuration.


batch-size

To configure the batching or grouping of RADIUS messages sent to a RADIUS server, use the batch command in the packetcable-em configuration mode. To disable the batch, use the no form of this command.

batch-size number

no batch-size

Syntax Description

number

Specifies the batch size in bytes. The range is 0 through 4096.


Command Default

The default is 0.

Command Modes

Packet-cable em configuration (config-sbc-sbe-billing-packetcable-em)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

A value of 0 indicates no batching. A platform may choose to set a nonzero default value (this may increase performance.)

Examples

The following example shows how to configure the maximum size of a batch of CDRs:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# billing 
(config-sbc-sbe-billing)# packetcable-em 4 transport radius test
(config-sbc-sbe-billing-packetcable-em)# batch-size 256

Related Commands

Command
Description

activate (radius)

Activates the billing functionality after configuration is committed.

attach

Activates the billing for a RADIUS client.

batch-size

Configures the batching or grouping of RADIUS messages sent to a RADIUS server.

batch-time

Configures the maximum number of milliseconds for which any record is held in the batch before the batch is sent.

deact-mode

Configures the deactivate mode for the billing method.

ldr-check

Configures the time of day (local time) to run the Long Duration Check (LDR).

local-address ipv4

Configures the local IPv4 address that appears in the CDR.

local-address ipv4 (packet-cable)

Configures the local address of the packet-cable billing instance.

method packetcable-em

Enables the packet-cable billing method.

packetcable-em transport radius

Configures a packet-cable billing instance.

show services sbc sbe billing remote

Displays the local and billing configurations.



batch-time

To configure the maximum number of milliseconds for which any record is held before the batch is sent, use the batch-time command in the packetcable-em configuration mode. To disable the waiting period, use the no form of this command.

batch-time number

no batch-time

Syntax Description

number

Specifies the batch time in milliseconds. The range is 1 through 3600000.


Command Default

The default is 1000 milliseconds.

Command Modes

Packetcable em configuration (config-sbc-sbe-billing-packetcable-em)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the maximum number of milliseconds for which any record is held before the batch is sent:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# billing 
(config-sbc-sbe-billing)# packetcable-em 4 transport radius test
(config-sbc-sbe-billing-packetcable-em)# batch-size 256
(config-sbc-sbe-billing-packetcable-em)# batch-time 22

Related Commands

Command
Description

activate (radius)

Activates the billing functionality after configuration is committed.

attach

Activates the billing for a RADIUS client.

batch-size

Configures the batching or grouping of RADIUS messages sent to a RADIUS server.

batch-time

Configures the maximum number of milliseconds for which any record is held in the batch before the batch is sent.

deact-mode

Configures the deactivate mode for the billing method.

ldr-check

Configures the time of day (local time) to run the Long Duration Check (LDR).

local-address ipv4

Configures the local IPv4 address that appears in the CDR.

local-address ipv4 (packet-cable)

Configures the local address of the packet-cable billing instance.

method packetcable-em

Enables the packet-cable billing method.

packetcable-em transport radius

Configures a packet-cable billing instance.

show services sbc sbe billing remote

Displays the local and billing configurations.


billing

To configure billing, use the billing command in SBE configuration mode. Use the no form of this command to remove all of the billing configuration.

billing

no billing

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.

Release 3.1.00

The remote keyword was removed.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

There is only one billing per SBC.

Examples

The following example shows how to enter the billing mode for mySbc:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# billing 
host1/Admin(config-sbc-sbe-billng)#


Related Commands

Command
Description

activate (radius)

Activates the billing functionality after configuration is committed.

ldr-check

Configures the time of day (local time) to run the Long Duration Check (LDR).

local-address ipv4

Configures the local IPv4 address that appears in the CDR.

method packetcable-em

Enables the packet-cable billing method.

packetcable-em transport radius

Configures a packet-cable billing instance.

show services sbc sbe billing remote

Displays the local and billing configurations.



blacklist (sbe)

To enter the mode for configuring the event limits of a given source, use the blacklist command in the SBE configuration mode. To return the event limits to the default values, use the no form of this command.

blacklist

no blacklist

Syntax Description

This command has no arguments or keywords.

Command Default

No default behavior or values.

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to enter the mode for configuring the default event limits for all addresses:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# address-default

VRF-name is optional for the blacklist. However, if a VRF-name is entered, a vpn token is required as shown in the following example:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# address-default ? 
<cr> Carriage return. 
host1/Admin(config-sbc-sbe-blacklist)# address-default 
host1/Admin(config-sbc-sbe-blacklist-addr-default)# exit 
host1/Admin(config-sbc-sbe-blacklist)# vpn vpnname 
host1/Admin(config-sbc-sbe-blacklist-vpn)# address-default ? 
<cr> Carriage return. 
host1/Admin(config-sbc-sbe-blacklist-vpn)# address-default 
host1/Admin(config-sbc-sbe-blacklist-vpn-addr-default)# 

The following example shows how the vpn command is used to enter the mode for configuring the event limits for a given VPN:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# vpn test
host1/Admin(config-sbc-sbe-blacklist-vpn)#

The following example shows how to enter the mode for configuring blacklisting to apply to all addresses:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist 
host1/Admin(config-sbc-sbe-blacklist)# global

The following example shows how to enter the mode for applying blacklisting options to a single IP address:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# blacklist
host1/Admin(config-sbc-sbe-blacklist)# ipv4 1.1.1.1
host1/Admin(config-sbc-sbe-blacklist-ipv4)#

Related Commands

Command
Description

address-default

Enters the mode for configuring the default event limits for the source addresses in a given VPN.

clear services sbc sbe blacklist

Clears the blacklist for the specified SBC service.

global

Enters the mode for configuring blacklisting to apply to all addresse.

ipv4 (blacklist)

Enters the mode for applying blacklisting options to a single IP address.

vpn

Enters the mode for configuring the event limits for a given VPN.

reason

Enters a submode for configuring a limit to a specific event type on the source.

show services sbc sbe blacklist configured-limits

Lists the explicitly configured limits, showing only the sources configured.

show services sbc sbe blacklist current-blacklisting

Lists the limits causing sources to be blacklisted.

tcp

Enters the mode for configuring blacklisting for TCP protocol only.

timeout

Defines the length of time that packets from the source are blocked, should the limit be exceeded.

trigger-period

Defines the period over which events are considered.

default-port-limit

Enters a submode for configuring the default even limits for the ports of a given address.

trigger-size

Defines the number of the specified events from the specified source that are allowed before the blacklisting is triggered, and blocks all packets from the source.

udp

Enters the mode for configuring blacklisting for UDP protocol only.

vpn

Enters the mode for configuring the event limits for a given VPN.


blacklist (sip-opt)

To set profile to be blacklisted, use the blacklist command in SIP option mode. Use the no form of this command to remove blacklist from this profile.

blacklist

no blacklist

Syntax Description

This command has no arguments or keywords.

Command Default

The global default is used.

Command Modes

SIP option (sip-opt)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command:

Examples

The following example shows how to add an option to the profile.

host1/Admin# configure
host1/Admin(config)# sbc sanity 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# sip option-profile optpr1 
host1/Admin(config-sbc-sbe-sip-opt)# blacklist 

Related Commands

Command
Description

sip-option-profile

Configures an option profile in the mode of an SBE entity for a SIP option whitelist or blacklist profile.


cache-lifetime

To configure the lifetime of any DNS entry, use the cache-lifetime command in the DNS configuration mode. To disable the lifetime, use the no form of this command.

cache-lifetime 0-1879048

no cache-lifetime

Syntax Description

0-1879048

Lfetime of any DNS entry, in seconds.


Command Default

No default behavior or values

Command Modes

DNS configuration (config-sbc-sbe-dns)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the lifetime of any DNS entry:

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# sip dns
host1/Admin(config-sbe-dns)# cache-lifetime 444

Related Commands

Command
Description

cache-limit

Configures the maximum number of entries that are permitted in the DNS cache.

sip dns

Enters the SIP DNS configuration mode.


cache-limit

To configure the maximum number of entries that are permitted in the DNS cache, use the cache-limit command in the DNS configuration mode. To set the limit to 100, use the no form of this command.

cache-limit 0-4294967295

no cache-lifetime

Syntax Description

0-4294967295

Maximum number of DNS entries.


Command Default

The default is 100.

Command Modes

DNS configuration (config-sbc-sbe-dns)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure limits on DNS entries:

host1/Admin# configure
host1/Admin(config)# sbc mySbc
host1/Admin(config-sbc)# sbe
host1/Admin(config-sbc-sbe)# sip dns
host1/Admin(config-sbe-dns)# cache-limit 14

Related Commands

Command
Description

cache-lifetime

Configures the lifetime of any DNS entry.

sip dns

Enters the SIP DNS configuration mode.


cac-policy-set

Use the cac-policy-set command in the SBE configuration mode to enter the submode of CAC policy set configuration within an SBE entity. If necessary, a new policy set is created. Changes are not be permitted to the configuration of the active policy set.

Use the no form of the command to destroy the policy set. A policy set may not be destroyed if it is the active policy set.

cac-policy-set policy-set-id

no cac-policy-set policy-set-id

Syntax Description

policy-set-id

An integer chosen by the user to identify the policy set. The range is 1 - 2147483647.


Command Default

No default behavior or values.

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following command creates an empty policy set, identified by number 1, on mySbc.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1 
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

active-cac-policy-set

Sets the active CAC-policy-set within an SBE entity.


cac-table

To create or configure an admission control table, use the cac-table command in CAC-policy-set configuration mode. To delete the admission control table, use the no form of this command.

cac-table table-name

no cac-table table-name

Syntax Description

table-name

Specifies the admission control table.


Command Default

No default behavior or values

Command Modes

CAC-policy-set configuration (config-sbc-sbe-cacpolicy)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to create the admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# 

Related Commands

Command
Description

first-cac-table

Configures the name of the first policy table to process when performing the admission control stage of policy.

first-cac-scope

Configures the scope at which to begin defining limits when performing the admission control stage of policy.


callee-codec-list

To list the codecs that the callee leg of a call is allowed to use, use the callee-codec-list command in the CAC table entry configuration mode. To delete a codec list, use the no form of this command.

callee-codec-list list-name

no callee-codec-list list-name

Syntax Description

list-name

Name of the codec list. The maximum size is 30 characters.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to enter a submode to create a codec list using the name my_codecs:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-codec-list test

callee-hold-setting

To configure the callee hold settings that are supported, use the callee-hold-setting command in CAC table entry configuration mode. To disable the settings, use the no form of this command.

callee-hold-setting {hold-c0 | hold-c0-inactive | hold-c0-sendonly | hold-sendonly | standard}

no callee-hold-setting {hold-c0 | hold-c0-inactive | hold-c0-sendonly | hold-sendonly | standard}

Syntax Description

hold-c0

Callee supports or requires c=I 0.0.0.0.

hold-c0-inactive

Callee supports or requires c=I 0.0.0.0 or a=inactive.

hold-c0-sendonly

Callee supports or requires c= 0.0.0.0 or a=sendonly

hold-sendonly

Callee supports or requires a=sendonly.

standard

Callee supports or requires c= 0.0.0.0 and either a=forward-direction capability.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the callee hold settings:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value fairchild
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-hold-setting hold-sendonly
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# action cac-complete
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# complete

Related Commands

Command
Description

callee-inbound-policy

Configures a callee inbound SDP policy table.

callee-outbound-policy

Configures a callee outbound SDP policy table.


callee-inbound-policy

To configure a callee inbound SDP policy table, use the callee-inbound-policy command in CAC table entry configuration mode. To disable a callee inbound SDP policy table, use the no form of this command.

callee-inbound-policy WORD

no callee-inbound-policy WORD

Syntax Description

WORD

Name of the SDP policy table. The maximum size is 30 characters.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to create the admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-inbound-policy test

Related Commands

Command
Description

callee-hold-setting

Configures the callee hold settings that are supported.

callee-outbound-policy

Configures a callee outbound SDP policy table.


callee-outbound-policy

To configure a callee outbound SDP policy table, use the callee-outbound-policy command in CAC table entry configuration mode. To disable the settings, use the no form of this command.

callee-outbound-policy WORD

no callee-outbound-policy WORD

Syntax Description

WORD

Name of the SDP policy table. The maximum size is 30 characters.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to create the admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-inbound-policy test

Related Commands

Command
Description

callee-hold-setting

Configures the callee hold settings that are supported.

callee-inbound-policy

Configures a callee inbound SDP policy table.


callee-privacy

To configure the level of privacy processing to perform on messages sent from callee to caller, use the callee-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

callee-privacy [callee_priv_setting]

no callee-privacy

Syntax Description

callee_priv_setting

Indicates specific callee privacy setting. Values are:

never: Never hides the identity.

account-boundary: Hides the identity if caller is different account from callee.

always: Always hides the identity.


Command Default

The default for callee_priv_setting=never.

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the entry to always hide callee identity in the new admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-prefix
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-privacy always

Related Commands

Command
Description

cac-table

Configures an admission control table.


callee-sig-qos-profile

To configure the QoS profile to be used for signaling packets sent to the original callee, use the callee-sig-qos-profile command in the CAC table entry configuration mode. To deconfigure the QoS profile, use the no form of this command.

callee-sig-qos-profile profile-name

no callee-sig-qos-profile profile-name

Syntax Description

profile-name

Specifies the name of the QoS profile. The string "default" is reserved.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how the callee-sig-qos-profile command is used to configure the QoS profile named enterprise to be used for signaling packets sent to the original callee:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-sig-qos-profile enterprise

Related Commands

Command
Description

callee-video-qos-profile

Configures the QoS profile to use for video media packets sent to the original callee.

callee-voice-qos-profile

Configures the QoS profile to use for voice media packets sent to the original callee.


callee-video-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-video-qos-profile command in CAC table entry configuration mode. To return to the default behavior, use the no form of this command.

callee-video-qos-profile profile-name

no callee-video-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The callee-video-qos-profile can be executed only at the per-call scope. CAC policy does not activate if configured at any other scope.


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original callee:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-video-qos-profile enterprise
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

callee-sig-qos-profile

Configures the QoS profile to be used for signaling packets sent to the original callee.

callee-voice-qos-profile

Configures the QoS profile to use for voice media packets sent to the original callee.


callee-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original callee, use the callee-voice-qos-profile command in CAC table entry configuration mode. To return to the default behavior, use the no form of this command.

callee-voice-qos-profile profile-name

no callee-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original callee.

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# callee-voice-qos-profile enterprise
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

callee-sig-qos-profile

Configures the QoS profile to be used for signaling packets sent to the original callee.

callee-video-qos-profile

Configures the QoS profile to use for video media packets sent to the original callee.


caller-codec-list

To list the codecs that the caller leg of a call is allowed to use, use the caller-codec-list command in the CAC table entry configuration mode. To delete a codec list, use the no form of this command.

caller-codec-list list-name

no caller-codec-list list-name

Syntax Description

list-name

Name of the codec list. The maximum size is 30 characters.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to enter a submode to create a codec list using the name my_codecs:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-codec-list test

caller-hold-setting

To configure the caller hold settings that are supported, use the caller-hold-setting command in CAC table entry configuration mode. To delete caller hold setting, use the no form of this command.

caller-hold-setting {hold-c0 | hold-c0-inactive | hold-c0-sendonly | hold-sendonly | standard}

no caller-hold-setting {hold-c0 | hold-c0-inactive | hold-c0-sendonly | hold-sendonly | standard}

Syntax Description

hold-c0

Callee supports or requires c=I 0.0.0.0.

hold-c0-inactive

Callee supports or requires c=I 0.0.0.0 or a=inactive.

hold-c0-sendonly

Callee supports or requires c= 0.0.0.0 or a=sendonly.

hold-sendonly

Callee supports or requires a=sendonly.

standard

Callee supports or requires c= 0.0.0.0 and either a=forward-direction capability.


Command Default

The default is standard.

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)#

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the caller hold settings:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value fairchild
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-hold-setting hold-sendonly
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# action cac-complete

host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# complete

Related Commands

Command
Description

caller-outbound-policy

Configures a caller outbound SDP policy table.

caller-inbound-policy

Configures a caller inbound SDP policy table.


caller-inbound-policy

To configure a caller inbound SDP policy table, use the caller-inbound-policy command in CAC table entry configuration mode. To delete a caller inbound SDP policy table, use the no form of this command.

caller-inbound-policy WORD

no caller-inbound-policy WORD

Syntax Description

WORD

Name of the SDP policy table. The maximum size is 30 characters.


Command Default

No default behavior or value

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)#

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure a caller inbound SDP policy table:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1

host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-inbound-policy test

Related Commands

Command
Description

caller-hold-setting

Configures the caller hold settings.

caller-outbound-policy

Configure a caller outbound SDP policy table.


caller-outbound-policy

To configure a caller outbound SDP policy table, use the caller-outbound-policy command in CAC table entry configuration mode. To delete , use the no form of this command.

caller-outbound-policy table_name

no caller-outbound-policy table_name

Syntax Description

WORD

Specifies the name of the SDP policy table. The maximum size is 30 characters.


Command Default

No default behavior or value

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)#

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure a caller outbound SDP policy table:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope global
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table callhold-dst-settings
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-account 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1

host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-outbound-policy test

Related Commands

Command
Description

caller-hold-setting

Configures the caller hold settings.

caller-inbound-policy

Configures a caller inbound SDP policy table.


caller-privacy

To configure the level of privacy processing to perform on messages sent from caller to callee, use the caller-privacy command in CAC table configuration mode. To delete the maximum number of channels in the given entry in the admission control table, use the no form of this command.

caller-privacy [privacy-setting]

no caller-privacy

Syntax Description

privacy_setting

Indicates specific caller privacy setting. Possible values include:

never: Never hides the identity.

account-boundary: Hides the identity if caller is on a different account from callee.

always: Always hides the identity.


Command Default

The privacy_setting value is set to never.

Command Modes

CAC table configuration (config-sbc-sbe-cacpolicy-cactable)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the entry to always hide caller identity in the new admission control table MyCacTable:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type dst-prefix
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-privacy always
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

cac-table

Configures an admission control table.


caller-sig-qos-profile

To configure the QoS profile to use for signaling packets sent to the original caller, use the caller-sig-qos-profile command in the CAC table entry configuration mode. To deconfigure the QoS profile, use the no form of this command.

caller-sig-qos-profile profile-name

no caller-sig-qos-profile profile-name

Syntax Description

profile-name

Specifies the name of the QoS profile. The string "default" is reserved.


Command Default

No default behavior or values

Command Modes

CAC table entry configuration (config-sbc-sbe-cacpolicy-cactable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

This command can only be executed at the per-call scope. CAC policy will not activate if this command is configured at any other scope.

Packet marking will not be applied until the CAC decision process is run. This means that some initial signaling packets sent to the caller (for example, the SIP 100 provisional response) will not receive any particular DSCP marking.

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following command configures calls from the acme account to use the voice QoS profile enterprise for signaling packets sent from the SBC to the original caller:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type src-account
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-sig-qos-profile enterprise
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

caller-video-cos-profile

Configures the QoS profile to use for video media packets sent to the original caller.

caller-voice-cos-profile

Configures the QoS profile to use for voice media packets sent to the original caller.


caller-video-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-video-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-video-qos-profile profile-name

no caller-video-qos-profile profile-name

Syntax Description

profile-name

Specifies the Qos profile.


Command Default

No default behavior or values

Command Modes

CAC table configuration (config-sbc-sbe-cacpolicy-cactable)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note The caller-video-qos-profile command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Examples

The following example shows how to configure calls from the acme account to use the video QoS profile enterprise for packets sent from the SBC to the original caller:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type src-account
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-video-qos-profile enterprise
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

caller-sig-cos-profile

Configures the QoS profile to use for signaling packets sent to the original caller.

caller-voice-cos-profile

Configures the QoS profile to use for voice media packets sent to the original caller.


caller-voice-qos-profile

To configure the QoS profile to use for media packets sent to the original caller, use the caller-voice-qos-profile command in CAC table configuration mode. To remove this configuration, use the no form of this command.

caller-voice-qos-profile profile-name

no caller-voice-qos-profile

Syntax Description

profile-name

Specifies the QoS profile.


Command Default

No default behavior or values

Command Modes

CAC table configuration (config-sbc-sbe-cacpolicy-cactable)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.


Note This command can be executed only at the per-call scope. CAC policy does not activate if this command is configured at any other scope.


Examples

The following example shows how to configure calls from the acme account to use the voice QoS profile enterprise for packets sent from the SBC to the original caller:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# cac-policy-set 1
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-scope call
host1/Admin(config-sbc-sbe-cacpolicy)# first-cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy)# cac-table MyCacTable 
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# match-type src-account
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# cac-table MyCacTable
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# entry 1
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# match-value acme
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# caller-voice-qos-profile enterprise
host1/Admin(config-sbc-sbe-cacpolicy-cactable-entry)# exit
host1/Admin(config-sbc-sbe-cacpolicy-cactable)# exit
host1/Admin(config-sbc-sbe-cacpolicy)# exit

Related Commands

Command
Description

caller-sig-cos-profile

Configures the QoS profile to use for signaling packets sent to the original caller.

caller-video-cos-profile

Configures the QoS profile to use for video media packets sent to the original caller.


call-policy-set

To create a new policy set, use the call-policy-set command in SBE configuration mode. To delete the policy set, use the no form of this command.

call-policy-set policy-set-id

no call-policy-set policy-set-id

Syntax Description

policy-set-id

Specifies the integer that identifies the policy set.


Command Default

No default behavior or values

Command Modes

SBE configuration (config-sbc-sbe)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to create an empty policy set, identified by number 1, on mySbc:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# exit
host1/Admin(config-sbc-sbe)#

Related Commands

Command
Description

first-call-routing-table

Configures the name of the first policy table to process when performing the routing stage of policy for new-call events.

first-number-analysis-table

Configures the name of the first policy table to process when performing the routing stage of policy for subscriber-registration events.


category

To configure the entry category in the number analysis table with entries of the table matching a part of or the whole dialed number, use the category command in the NA routing table configuration mode. To deconfigure the category of an entry, use the no form of this command.

category category-name

no category category-name

Syntax Description

category-name

Specifies a category to assign to the event.


Command Default

No default behavior or values

Command Modes

NA routing table configuration (config-sbc-sbe-rtgpolicy-natable-entry)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Usage Guidelines

To use this command, you must be in the correct configuration mode and submode. The "Examples" section shows the hierarchy of modes and submodes required to run the command.

Examples

The following example shows how to configure the category of entry 1 in the new number analysis table MyNaTable matching the whole number:

host1/Admin# configure
host1/Admin(config)# sbc mySbc 
host1/Admin(config-sbc)# sbe 
host1/Admin(config-sbc-sbe)# call-policy-set 1
host1/Admin(config-sbc-sbe-rtgpolicy)# na-dst-number-table MyNaTable
host1/Admin(config-sbc-sbe-rtgpolicy-natable)# entry 1
host1/Admin(config-sbc-sbe-rtgpolicy-natable-entry)# category external
host1/Admin(config-sbc-sbe-rtgpolicy-natable-entry)# exit
host1/Admin(config-sbc-sbe-rtgpolicy-natable)# exit
host1/Admin(config-sbc-sbe-rtgpolicy)# exit
host1/Admin(config-sbc-sbe)#

Related Commands

Command
Description

na-dst-number-table

Enters the submode of configuration of a number analysis table within the context of an SBE policy set.


clear services sbc

To clear the DBE or SBE configurations, use the clear services sbc command in EXEC mode.

clear services sbc sbc-name {dbe | sbe}

Syntax Description

sbc-name

Specifies the name of the Session Border Controller (SBC) service.

dbe

Clears DBE configuration.

sbe

Clears SBE configuration.


Command Default

No default behavior or values

Command Modes

EXEC (#)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Examples

The following example shows how to clear the DBE configuration.

host1/Admin# clear services sbc mySbc dbe 

Related Commands

Command
Description

dbe

Creates the DBE service on an SBC and enters into the SBC-DBE configuration mode.

sbe

Creates the SBE service on an SBC and enters into the SBC-SBE configuration mode.


clear services sbc sbe blacklist

To clear the blacklist for the specified Session Border Controller (SBC) service, use the clear services sbc sbe blacklist command in EXEC mode.

clear services sbc sbc-name sbe blacklist [vrfname] [ipv4 addr [{udp | tcp} A.B.C.D]]

Syntax Description

sbc-name

Name of the Session Border Controller (SBC) service.

vrfname

VRF for which to clear blacklisted entries.

ipv4 address

IPv4 address.

tcp

Clears blacklisting for TCP protocol only.

udp

Clears blacklisting for UDP protocol only.

A.B.C.D

IPv4 subnet mask.


Command Default

No default behavior or values

Command Modes

EXEC (#)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Examples

The following example clears all the blacklists for the TCP port 1 for VRF test for the ipv4 address of 2.2.2.2:

host1/Admin# clear services sbc aa sbe blacklist test ipv4 2.2.2.2 tcp 1 

Related Commands

Command
Description

blacklist

Enters the mode for configuring the event limits of a given source.


clear services sbc blacklist all

To clear all the currently blacklisted entries for the specified Session Border Controller (SBC) service, use the clear services sbc sbe blacklist all command in EXEC mode.

clear services sbc sbc-name sbe blacklist all

Syntax Description

sbc-name

Name of the Session Border Controller (SBC) service.


Command Default

No default behavior or values

Command Modes

EXEC (#)

Command History

Release
Modification

Release 3.1.00

This command was introduced on the Cisco 7600 series routers.


Examples

The following example clears all the blacklist entries for the SBC test:

host1/Admin# clear services sbc test sbe blacklist all 
Command Accepted
host1/Admin# 

Related Commands

Command
Description

blacklist

Enters the mode for configuring the event limits of a given source.


clear services sbc sbe blacklist all

To clear all the currently blacklisted entries of a given VPN, use the clear services sbc sbe blacklist all command in EXEC mode.

clear services sbc sbc-name sbe blacklist [vrfname] [ipv4 addr [{udp | tcp} port]]

Syntax Description

sbc-name

Name of the Session Border Controller (SBC) service.

vrfname

Specifies the VRF for which to clear blacklisted entries.

ipv4 address

Specifies the IPv4 address.

tcp

Clear blacklisting for TCP protocol only.

udp

Clear blacklisting for UDP protocol only.

port

Port number to clear blacklisting for. Range is 0-65535.


Command Default

No default behavior or values

Command Modes

EXEC (#)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Examples

The following example clears all the blacklists for the TCP port 1 for VRF test for the ipv4 address of 2.2.2.2:

host1/Admin# clear services sbc aa sbe blacklist test ipv4 2.2.2.2 tcp 1 

Related Commands

Command
Description

blacklist

Enters the mode for configuring the event limits of a given source.


clear services sbc sbe blacklist ipv4

To clear all the currently blacklisted entries of a given subset, use the clear services sbc sbe blacklist ipv4 command in EXEC mode.

clear services sbc sbc-name sbe blacklist [vrfname] [ipv4 addr [{udp | tcp} port]]

Syntax Description

sbc-name

Name of the Session Border Controller (SBC) service.

vrfname

Specifies the VRF for which to clear blacklisted entries.

ipv4 address

Specifies the IPv4 address.

tcp

Clear blacklisting for TCP protocol only.

udp

Clear blacklisting for UDP protocol only.

port

Port number to clear blacklisting for. Range is 0-65535.


Command Default

No default behavior or values

Command Modes

EXEC (#)

Command History

Release
Modification

Release 3.0.00

This command was introduced on the Cisco 7600 series routers.


Examples

The following example clears all the blacklists for the TCP port 1 for VRF test for the IPv4 address of 2.2.2.2:

host1/Admin# clear services sbc aa sbe blacklist test ipv4 2.2.2.2 tcp 1 

Related Commands

Command
Description

blacklist

Enters the mode for configuring the event limits of a given sourc