> ACS Charging Action Configuration Mode Commands
> The ACS Charging Action Configuration Mode is used configure ACS charging actions.
> Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
> billing-action
> This command configures billing actions for packets that match ruledefs.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> In 12.1 and earlier releases:
> billing-action { edr edr_format_name [ wait-until-flow-ends ] | egcdr | exclude-from-udrs | radius | rf } +
> no billing-action [ edr | egcdr | exclude-from-udrs | radius | rf ] +
> In 12.2 and later releases:
> billing-action { create-edrs { charging-edr charging_edr_format_name | reporting-edr reporting_edr_format_name } + [ wait-until-flow-ends ] | egcdr | exclude-from-udrs | radius | rf } +
> no billing-action [ create-edrs | egcdr | exclude-from-udrs | radius | rf ] +
> no
> Disables billing-action configuration for the charging action.
> Specifying one of the optional keywords disables that functionality. If you want to disable all billing-action functionality, do not specify any of the optional keywords.
> edr edr_format_name [ wait-until-flow-ends ]
> Important: This option is available only in 12.1 and earlier releases. In 12.2 and later releases, it is deprecated and is replaced by the create-edrs charging-edr option.
> Enables EDR billing for packets matching this charging action.
> edr_format_name must be the name of an existing EDR format, and must be a string of 1 through 63 characters in length.
> Important: If the EDR format name supplied here is not configured in the EDR Format Configuration Mode, or has been deleted, the system accepts it without applying any EDR format for the billing action in this ACS service.
> If this option is configured, the system generates an EDR immediately when a packet is received and it matches a ruledef that is associated with this charging action. Other events configured for flow end-condition, flow action, termination, and/or session control also creates the triggers for EDR generation.
> wait-until-flow-ends: By default, the EDR is generated immediately after a ruledef hit results in this charging action. When this keyword is specified, no EDR is generated on a ruledef hit. When the flow ends, an attempt is made to generate an EDR with the format specified.
> create-edrs { charging-edr charging_edr_format_name | reporting-edr reporting_edr_format_name} + [ wait-until-flow-ends ]
> Important: This option is available only in 12.2 and later releases.
> Enables EDR billing for packets matching this charging action.

> • | charging-edr charging_edr_format_name: Specifies name of the charging EDR format to be generated.

> charging_edr_format_name must be an alpha and/or numeric string of 1 through 63 characters in length.

> • | reporting-edr reporting_edr_format_name: Specifies name of the reporting EDR format to be generated.

> reporting_edr_format_name must be an alpha and/or numeric string of 1 through 63 characters in length.
> If the above options are configured, the system generates an EDR immediately when a packet is received and it matches a ruledef that is associated with this charging action. Other events configured for flow end-condition, flow action, termination, and/or session control also creates the triggers for EDR generation.

> • | wait-until-flow-ends: By default, the EDR is generated immediately after a ruledef hit results in this charging action. When this keyword is specified, no EDR is generated on a ruledef hit. When the flow ends, an attempt is made to generate an EDR with the format specified.

> egcdr
> Enables eG-CDRs billing for packets matching this charging action.
> If this option is configured, system generates an eG-CDR when the subscriber session ends or an interim trigger condition occurs. The interim triggers are configurable in the ACS Rulebase Configuration Mode. In addition, whenever there is an SGSN-to-SGSN handoff the system treats that as a trigger.
> To generate an eG-CDR the accounting-mode CLI command in the APN Configuration Mode must be configured with the “none” option.
> The format of enhanced G-CDRs is controlled by the inspector CLI command in the Context Configuration Mode.
> exclude-from-udrs
> By default, statistics are accumulated on a per content ID basis for possible inclusion in UDRs. The exclude-from-udrs keyword causes the system to not include the packet’s statistics in UDRs.
> When this option is disabled, (the default setting) UDRs will be generated based on the udr format declared in the rulebase.
> Default: Disabled.
> radius
> Enables billing action as RADIUS CDRs for packets matching this charging action, and the data packet statistics will be included in the postpaid RADIUS accounting.
> Default: Disabled.
> rf
> Enables Rf accounting.
> Rf accounting is applicable only for dynamic and predefined rules that are marked for it. Dynamic rules have a field offline-enabled to indicate this. To mark a predefined rule as offline-enabled, use this keyword and the billing-records CLI in the ACS Rulebase Configuration Mode.
> Usage
> Use this command to enable an EDR, eG-CDR and/or RADIUS CDR type of billing for content matching this charging action.
> Example
> in 12.1 and earlier releases, the following command enables the EDR billing type with EDR format charge1_format:
> billing-action edr charge1_format
> In 12.2 and later releases, the following command is applied to both charging and reporting EDRs since trigger for both the EDRs is the same:
> billing-action create-edrs charging-edr charging_edr_format_name reporting-edr reporting edr_format_name wait-until-flow-ends
> cca charging credit
> This command enables Credit Control Application and configures RADIUS/Diameter prepaid charging behavior.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> cca charging credit [ rating-group coupon_id ] [ preemptively-request ]
> [ default | no ] cca charging
> no
> Disables RADIUS/Diameter Prepaid Credit Control Charging.
> default
> Disables RADIUS/Diameter Prepaid Credit Control Charging.
> credit
> Specifies RADIUS/Diameter Prepaid Credit Control Charging Credit behavior.
> preemptively-request
> Specifies RADIUS/Diameter prepaid credit preemptively requested charging credit behavior. If this option is used, a quota is requested for the specific type of content during the session initialization.
> rating-group coupon_id
> Specifies the coupon ID used in prepaid charging as rating-group which maps to the coupon ID for prepaid customer.
> coupon_id must be an integer from 0 through 65535.
> This option also assigns different content-types for the same charging action depending upon whether prepaid is enabled or not.
> Important: This rating-group overrides the content ID, if present in the same charging-action for the prepaid customer in DCCA. But only the content IDs will be used in eG-CDRs irrespective of the presence of rating-group in that charging action.
> Usage
> Use this command to configure RADIUS/Diameter Prepaid Credit Control Charging behavior.
> This command selects reservation based credit control. A CCR-Initial is used to reserve quota upon the first traffic, then a series of CCR-updates are issued as the traffic proceeds and quota dwindles. A CCR-Terminate is issued at the end of the session or at the end of the quota-hold-time.
> Example
> The following is an example of this command:
> cca charging credit
> charge-units
> This command configures the unit amount counters for RADIUS/DCCA charging calculation.
> Product
> GGSN
> Privilege
> Security Administrator, Administrator
> Syntax
> charge-units units
> [ default | no ] charge-units
> no
> Disables the charge-units configuration.
> default
> Configures the default setting.
> Default: 0; disables the counter, same as no charge-units
> units
> Sets the service-specific fixed unit counter per content ID for RADIUS/DCCA charging.
> units is the value set for charging unit, and must be an integer from 1 through 65535.
> Usage
> This command configures the unit amount counters for charging calculation on per content ID basis for different protocols and packets regardless of packet direction (uplink or downlink).
> Important: For more information on content ID, refer to the if-protocol command in the ACS Ruledef Configuration Mode Commands chapter.
> Example
> The following command sets the charging unit to 1024:
> charge-units 1024
> charge-volume
> This command configures how the volume amount counter for eG-CDR and DCCA charging are calculated.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> charge-volume { protocol { bytes | packet-length | packets } [ downlink | uplink ] | constant value }
> [ no | default ] charge-volume
> no
> Disables the charge-volume configuration.
> default
> Configures the default setting.
> Default: charge-volume ip bytes
> protocol
> Specifies the charge volume method for the specific rule definition.
> protocol must be one of the following:

> • | dns: Charge volume for DNS

> • | ftp-control: Charge volume for FTP-Control

> • | ftp-data: Charge volume for FTP-Data

> • | http: Charge volume for HTTP

> • | icmp: Charge volume for ICMP

> • | imap: Charge volume for Internet Message Access Protocol (IMAP)

> • | ip: Charge volume for IP

> • | mms: Charge volume for MMS

> • | pop3: Charge volume for POP3

> • | rtp: Charge volume for RTP

> • | rtsp: Charge volume for RTSP

> • | sdp: Charge volume for SDP

> • | secure-http: Charge volume for secure-https

> • | sip: Charge volume for SIP

> • | smtp: Charge volume for SMTP

> • | tcp: Charge volume for TCP

> • | udp: Charge volume for UDP

> • | wsp: Charge volume for WSP

> • | wtp: Charge volume for WTP

> bytes
> Sets charge volume for bytes.
> packet-length
> Sets charge volume for packet length.
> packets
> Sets charge volume for packets.
> constant units
> This sets the fixed increment value for charging.
> units is the value set for charging, and must be an integer from 0 through 65535.
> If constant 3 is configured for every invocation of this Charging Action, the system adds 3 to the downlink/uplink volume counter, depending on the direction of packet.
> Usage
> This command provides the method for charging volume calculation for different protocols and packets.
> For information on supported protocols see the ACS Ruledef Configuration Mode Commands chapter.
> If charge-volume rtp packets is configured, system computes volume amounts for different options for RTP as follows:

> Volume | Description
> Volume amount | Total (downlink and uplink) RTP packets
> Volume amount uplink | Uplink RTP packets
> Volume amount downlink | Downlink RTP packets
> Volume amount uplink packets | Uplink RTP packets
> Volume amount downlink packets | Downlink RTP packets
> Volume amount uplink bytes | Uplink RTP bytes
> Volume amount downlink bytes | Downlink RTP bytes

> ‌
> Important: Whenever service counts volume, it counts all packets that the relevant analyzers accepted.
> Important: If a TCP packet is routed to the HTTP analyzer but there is no HTTP payload, then the TCP statistics will be updated but the HTTP statistics will not be updated (except for the “packets ignored by the HTTP analyzer” statistic).
> Example
> Following command sets the charging volume of downlink packets for RTP:
> charge-volume rtp packets downlink
> content-filtering processing server-group
> This command enables/disables content filtering in the charging action.
> Product
> CF
> Privilege
> Security Administrator, Administrator
> Syntax
> content-filtering processing server-group
> [ default | no ] content-filtering processing
> default
> Configures the default setting.
> Default: content filtering configured for the rulebase is attempted
> no
> Specifies to bypass content filtering.
> This configuration should only be specified for charging actions that are performed when known safe sites are being accessed.
> Usage
> Use this command to enable/disable content filtering in the charging action.
> This command works as second level filter to process the HTTP/WAP GET request with ICAP after ruledef matching. The first level filtering is in the rulebase configuration. This CLI command is only effective when the rulebase is configured with content-filtering mode server-group.
> Example
> The following command enables content filtering in the current charging action:
> content-filtering processing server-group
> content-id
> This command specifies an optional content ID to use in the generated billing records, as well as the AVP used by the credit control application, such as the Rating-Group AVP for use by DCCA.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> content-id content_id
> no content-id
> no
> Removes the content ID configuration from the charging action.
> content_id
> content_id is the content ID specified for credit control service in an active charging service, and must be an integer from 1 through 65535.
> Usage
> This command specifies an optional content ID to use in the generated billing records. This identifier assists the carrier’s billing post processing and also used by credit-control system to use independent quotas for different value of content-id.
> If the specified ruledef uses the if-protocol command to select a value for content ID, then the content_id specified through this command is not used for billing record generation.
> Important: For more information on content-id, refer to the if-protocol command in the ACS Ruledef Configuration Mode Commands chapter.
> Example
> The following command sets the content ID in the current charging action to 23:
> content-id 23
> end
> Exits the current configuration mode and returns to the Exec mode.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> end
> Usage
> Use this command to return to the Exec mode.
> exit
> Exits the current mode and returns to the parent configuration mode.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> exit
> Usage
> Use this command to return to the parent configuration mode.
> fair-usage
> This command enables the fair usage credit system for the Mobile Video Gateway’s dynamic inline transrating feature CAC (Call Admission Control) policy. The fair usage credit system enforces a maximum number of video clips that can be dynamically transrated at the same time by allocating an equal number of transrating credits to all the ACS (Active Charging Service) managers in the system.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ default | no ] fair-usage [ cpu-only | cpu-param { threshold-percent } | deact-margin | memory-only | threshold-percent ]
> default
> Resets the fair usage settings to their default values.
> no
> Disables the fair usage credit system for dynamic inline transrating if previously configured.
> fair-usage
> Enables the fair usage credit system for the CAC policy and applies it to the system CPUs and memory.
> cpu-only
> Enables the fair usage credit system for the CAC policy and applies it to the system CPUs only.
> cpu-param { threshold-percent }
> Specifies the percent of system CPU resources that the dynamic inline transrating feature is allowed to use, which can be between 1 and 100 percent. CPU usage above this threshold percent starts the monitor action, which disallows additional video requests to be transrated. By default, this value is set to 10 percent when fair usage is enabled.
> deact-margin
> Specifies the deactivate margin in percent, below which the monitor action is disabled.
> memory-only
> Enables the fair usage credit system for the CAC policy and applies it to system memory only.
> threshold-percent
> Specifies the percent of system resources that the dynamic inline transrating feature is allowed to use, which can be between 1 and 100 percent. This threshold percent is used to start the monitor action, which disallows additional video requests to be transrated. By default, this value is set to 10 percent when fair usage is enabled.
> Usage
> Use this command to enable the fair usage credit system for the dynamic inline transrating feature CAC policy on the Mobile Video Gateway.
> Example
> The following command enables the fair usage credit system for the dynamic inline transrating feature CAC policy and applies it to the system CPUs only:
> fair-usage cpu-only
> flow action
> This command specifies the actions for packets that match a rule definition. This command also specifies action on packet and flow for Session Control functionality.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> In 12.1 and earlier releases:
> flow action { conditional user-agent end-token end_token_name | discard [ downlink | uplink ] | random-drop interval interval_start to interval_end pkts-to-drop packet_min to packet_max | redirect-url redirect_url [ clear-quota-retry-timer ] | readdress [ server ipv4_address ] [ port port_number ] | terminate-flow | terminate-session }
> no flow action
> In 12.2 and later releases:
> flow action { conditional user-agent end-token end_token_name | discard [ downlink | uplink ] | random-drop interval interval_start to interval_end pkts-to-drop packet_min to packet_max | readdress [ server ipv4_address ] [ port port_number ] | redirect-url redirect_url [ [ encryption { blowfish128 | blowfish64 } [ encrypted ] key key ] clear-quota-retry-timer ] | terminate-flow | terminate-session }
> no flow action
> no
> Disables the flow action configured in this charging action.
> conditional user-agent end-token end_token_name
> Conditionally redirects the HTTP packets matched to a configured user-agent to a specified URL. The user agent is configured using the redirect user-agent command in the ACS Configuration Mode.
> end_token_name must be an alpha and/or numeric string of 1 through 32 characters in length, and is configured with this command to end the redirection condition.
> discard [ downlink | uplink ]
> Discards the packet associated with this charging action.

> • | downlink: Discards only downlink packets.

> • | uplink: Discards only uplink packets.

> random-drop interval interval_start to interval_end pkts-to-drop packet_min to packet_max
> Specifies random drop as a charging action to degrade voice quality.
> interval_start to interval_end: Specifies the random drop interval, in seconds, at which the voice packets will be dropped. interval_start and interval_end must be integers from 1 through 999.
> pkts-to-drop packet_min to packet_max: Specifies the number of voice packets to be dropped at a time in a flow when the packets have to be dropped. packet_min and packet_max must be integers from 1 through 100.
> readdress { server ipv4_address [ port port_number ] | port port_number}
> Specifies the re-address server’s IP address/port number for this charging action. Enables readdressing of packets based on the destination IP address in the packets.
> ipv4_address must be the re-address server’s IPv4 address.
> port_number must be the re-address server’s port number, and must be an integer from 1 through 65535.
> redirect-url redirect_url [ [ encryption { blowfish128 | blowfish64 } [ encrypted ] key key ] clear-quota-retry-timer ]
> Enables URL redirection for packets that match a rule definition.
> Causes a redirect response to be returned to the subscriber, and the TCP connections (to the subscriber and server) terminated. The subscriber's Web browser should automatically send the original HTTP packet to the specified URL. Redirection is only possible for certain types of HTTP packets (for example, GET requests), which typically are only sent in the uplink direction. If the flow is not HTTP, the redirect-url option is ignored, that is the packet is forwarded normally, except for SIP. For SIP, a Contact header with the redirect information is inserted.

> • | redirect_url specifies the redirect URL. redirect_url must be an alpha and/or numeric string of 1 through 511 characters in length. It may include one or more dynamic fields (up to 16 may be specified). For example, http://search.com/subtarg=#HTTP.URL#.

> Dynamic fields must be enclosed in “#” (hash).
> Up to 16 dynamic fields out of the following 23 are allowed:

> • | #BEARER.CALLED-STATION-ID#

> • | #BEARER.CALLING-STATION-ID#

> • | #BEARER.NAS-IP-ADDRESS#

> • | #BEARER.USER-NAME#

> • | #BEARER.ACCT-SESSION-ID#

> • | #BEARER.CORRELATION-ID#

> • | #BEARER.RULEBASE#

> • | #BEARER.SERVED-BSA-ADDR#

> • | #BEARER.SERVICE-NAME#

> • | #BEARER.SUBSCRIBER-ID#

> • | #BEARER.MSISDN#

> • | #HTTP.URL#

> • | #HTTP.URI#

> • | #HTTP.HOST#

> • | #RTSP.URI#

> • | #WSP.URL#

> • | #CONTENT-ID-LABEL#

> • | #CONTENT-ID-LABEL-CAUSING-REDIRECTION#

> • | #BEARER.HWID#

> • | #BEARER.IMSI#

> • | #BEARER.IMEI#

> • | #BEARER.ESN#

> • | #BEARER.MEID#

> Concatenated fields separated by ';' can also be inserted. For example, #BEARER.IMSI;BEARER.IMEI#

> • | encryption: Specifies to enable encryption for dynamic fields of redirect URL.

> • | blowfish128: Specifies to use Blowfish encryption with 28 bit key for encrypting the dynamic fields.

> • | blowfish64: Specifies to use Blowfish encryption with 64 bit key for encrypting the dynamic fields.

> • | encrypted: Specifies to encrypt the key.

> • | key key: Specifies key to use for encryption of dynamic fields.

> key must be a string of 1 through 523 characters in length.

> • | clear-quota-retry-timer: Specifies to reset Credit Control Application (CCA) Quota Retry Timer upon redirection.

> Note that encryption is supported only for the following fields:

> • | #BEARER.MSISDN#

> • | #BEARER.CALLING-STATION-ID#

> • | #BEARER.MSISDN#

> • | #BEARER.IMEI#

> • | #BEARER.MEID#

> • | #BEARER.IMSI#

> • | #BEARER.USERNAME#

> • | #BEARER.ESN#

> Also, concatenated fields having any of the above will be encrypted.
> %3furl= can be used as a delimiter between URL. As in http://search.com/subtarg/%3furl=#HTTP.URL# format.
> terminate-flow
> Specifies the flow action to terminate flow.
> Terminates the TCP connection gracefully between the subscriber and external server and sends a TCP FIN to the subscriber and a TCP RST to the server. If the flow does not use TCP, this option simply discard the packets. This option is used for flows that use TCP only.
> terminate-session
> Specifies the flow action to terminate session.
> When a rule pointing to a charging action configured with the terminate-session keyword is hit, then the corresponding session will be terminated.
> Usage
> Use this command to set the flow actions; e.g. discard, terminate, or conditional redirect.
> When a readdress server is configured for a charging action, the show configuration command will display the readdress related configuration only if server address is configured. The show configuration verbose command will display the readdress sever if configured, else will display “no flow action”.
> The redirect-url option can be used to redirect SIP requests as well. The following is a sample configuration:
> configure
> active-charging service s1
> charging-action ca_sip_redir
> content-id 10
> flow action redirect-url sip:test@sip.org
> exit
> ruledef sip_req
> sip request packet = TRUE
> exit
> rulebase plan1
> action priority 08 ruledef sip_req charging-action ca_sip_redir
> /* other rules, routing rules for sip, etc */
> end
> This would mean any SIP request that hits the sip_req ruledef, would get redirected to the url given in ca_sip_redir. This involves creating a redirection packet with the following response line and “Contact” header in the response.
> SIP/2.0 302 Moved Temporarily
> 302 Moved Temporarily
> Most of the header fields are copied directly from the request, so that the mandatory SIP headers are present. If content-length header was seen in the original message, it is replaced in the reply with “Content-Length: 0”.
> Example
> The following command sets the flow action to terminate:
> flow-action terminate-flow
> The following command resets quota retry timer upon redirection of flow to HTTP URL http://search.com/?url=#http://msn.com#:
> flow action redirect-url http://search.com/%3url=#http://msn.com# clear-quota-retry-timer
> flow idle-timeout
> This command configures the maximum duration a flow can remain idle after which the system automatically terminates the flow.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> flow idle-timeout { idle_timeout | flow-mapping flow_timeout }
> [ no | default ] flow idle-timeout [ flow-mapping ]
> no
> Disables the idle-timeout configuration; sets the idle-timeout to 0 seconds.
> default
> Configures the default setting.
> Default: 300 seconds
> idle-timeout idle_timeout
> Specifies the maximum duration, in seconds, a flow can remain idle.
> idle_timeout must be an integer from 0 through 86400.
> flow-mapping flow_timeout
> Specifies the maximum duration of flow-mapping timeout, in seconds.
> flow_timeout must be an integer from 0 through 86400.
> Usage
> Use this command to configure the maximum duration a flow can remain idle after which the system automatically terminates the flow.
> Example
> The following command configures the idle-timeout setting to 400 seconds:
> flow idle-timeout 400
> flow limit-for-bandwidth
> This command enables and configures bandwidth limits for Session Control functionality to the subscriber. Uplink and downlink limits are configured separately.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> flow limit-for-bandwidth { { direction { downlink | uplink } peak-data-rate bps peak-burst-size bytes violate-action { discard | lower-ip-precedence } [ committed-data-rate bps committed-burst-size bytes [ exceed-action { discard | lower-ip-precedence } ] ] } | { id id } }
> [ default | no ] flow limit-for-bandwidth { direction { downlink | uplink } | id }
> no
> Disable bandwidth control traffic policing for the specified direction for the current subscriber.
> default
> Resets the bandwidth control policy to default mode.
> direction { downlink | uplink }
> Specifies the direction of flow downlink/uplink to apply bandwidth limit.
> downlink: Flow of data towards subscriber.
> uplink: Flow of data from subscriber.
> peak-data-rate bps
> Specifies the peak data-rate for the subscriber, in bps (bits per second).
> bps must be an integer from 1 through 4294967295.
> Default: 256000
> peak burst-size bytes
> The peak burst size allowed, in bytes.
> bytes must be an integer from 1 through 4294967295.
> Default: 3000
> Important: It is recommended that this parameter be configured to at least the greater of the following two values: 1) 3 times greater than packet MTU for the subscriber connection, OR 2) 3 seconds worth of token accumulation within the “bucket” for the configured peak-data-rate.
> violate-action { discard | lower-ip-precedence }
> Specifies the action to take on packets that exceed both the committed-data-rate and the peak-data-rate. The following actions are supported:

> • | discard: Discard the packet

> • | lower-ip-precedence: Transmit the packet after lowering the IP precedence

> Default: discard
> committed-data-rate bps
> The committed data rate (guaranteed-data-rate) in bits per second (bps).
> bps must be an integer from 1 through 4294967295.
> Default: 144000
> committed-burst-size bytes
> The committed burst size allowed, in bytes.
> bytes must be an integer from 1 through 4294967295.
> Default: 3000
> exceed-action { discard | lower-ip-precedence }
> The action to take on the packets that exceed the committed-data-rate but do not violate the peak-data-rate. The following actions are supported:

> • | discard: Discard the packet

> • | lower-ip-precedence: Transmit the packet after lowering the ip-precedence

> If exceed-action is not configured, the packets are forwarded.
> Default: lower-ip-precedence
> id id
> Important: This keyword is only available in 8.1 and later releases.
> Specifies identifier for bandwidth limiting, and must be an integer from 1 through 65535.
> This identifier enables traffic policing based on a separate identifier other than content ID. This identifier will always take priority over content ID. If this identifier is not configured, traffic policing will be based on content ID.
> Usage
> Use this command to limit the bandwidth a subscriber uses in the uplink and downlink directions under Session Control.
> Important: If the exceed/violate action is set to “lower-ip-precedence”, the TOS value for the outer packet becomes “best effort” for packets that exceed/violate the traffic limits regardless of what the ip user-datagram-tos copy command is configured to. In addition, the lower-ip-precedence option may also override the ip qos-dscp command configuration. Therefore, it is recommended that command not be used when specifying this option.
> More information on the QoS feature is available in the QoS Management chapter of the System Administration Guide.
> Example
> The following command sets an uplink peak data rate of 128000 bps and lowers the IP precedence when the committed-data-rate and the peak-data-rate are exceeded:
> flow limit-for-bandwidth uplink peak-data-rate 128000 violate-action lower-ip-precedence
> The following command sets a downlink peak data rate of 256000 bps and discards the packets when the committed-data-rate and the peak-data-rate are exceeded:
> flow limit-for-bandwidth downlink peak-data-rate 256000 violate-action discard
> flow limit-for-flow-type
> This command controls the action in the event of number of flows exceeds for a type of flow under Session Control feature.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> flow limit-for-flow-type limit over-limit-action action_type
> no limit-for-flow-type
> no
> Disables limit for the total number of flow for a type.
> limit
> Sets the maximum number of flows of a type exceeding which action triggers.
> limit must be an integer from 1 through 4000000000.
> over-limit-action action_type
> Triggers the action of action_type on exceeding limit for a flow type.
> action_type must be one of the following:

> • | discard: Discards the packets

> • | redirect-url: Redirects the flow

> • | terminate-flow: Terminates the flow to which this packet belongs

> • | terminate-session: Terminates the session to which this packet belongs

> Usage
> Use this command to control the action for the total number of flow of a type.
> Example
> The following command terminates the flow if total number of flows of a type exceeds 1024:
> flow limit-for-flow-type 1024 over-limit-action terminate-flow
> ip tos
> This command sets the IP Type of Service (ToS) octets being used in the charging action.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> ip tos { af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | be | ef | lower-bits tos_value } [ uplink | downlink ]
> no ip tos [ uplink | downlink ]
> no
> Disables IP ToS being used in the charging action.
> af xx
> Specifies the use of an assured forwarding xx PHB.
> be
> Specifies the use of best effort forwarding PHB.
> ef
> Specifies the use of expedited forwarding PHB.
> lower-bits tos_value
> Important: In 8.1 and later releases, this keyword is “lower-bits tos_value”. In 8.0 release, it is tos_value.
> Sets the least-significant 6 bits in the TOS byte with the specified numeric value.
> tos_value must be an integer from 0 through 63.
> downlink
> Specifies the ToS only for downlink packets.
> uplink
> Specifies the ToS only for uplink packets.
> Usage
> Use this command to set the IP Type of Service (ToS) octets used in the charging action. If one of the enumerated values is set, the DSCP bits which are the six most-significant bits in the TOS byte are marked. If the integer value is set, it will be written into the six least-significant bits of the TOS byte.
> Example
> The following command sets the IP ToS to be with downlink:
> ip tos be downlink
> ip vlan
> This command configures the VLAN identifier to be associated with the IP address for the session.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> ip vlan range
> [ default | no ] ip vlan
> default | no
> These options delete or disable the IP VLAN configuration.
> range
> range must be an integer from 1 through 4094.
> Usage
> This command configures the subscriber VLAN ID which is used with the assigned address for the subscriber session to receive packets. If the IP pool from which the address is assigned is configured with a VLAN ID, then this subscriber configured VLAN ID overrides it.
> Subscriber traffic can be routed to specific VLANs based on the configuration of their user profile. Using this functionality provides a mechanism for routing all traffic from a subscriber over the specified VLAN. All packets destined for the subscriber must also be sent using only IP addresses valid on the VLAN or they will be dropped.
> Example
> The following command sets the IP VLAN range to go up to 500:
> ip vlan 500
> The following command sets the IP VLAN range back to default.
> default ip vlan
> nexthop-forwarding-address
> This command configures the next-hop forwarding address for this charging action.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> nexthop-forwarding-address ipv4_address
> no nexthop-forwarding-address
> no
> Removes the next-hop forwarding address, if previously configured.
> ipv4_address
> ipv4_address must be the next-hop forwarding address for this charging action, and must be an IPv4 address.
> Usage
> Use this command to configure the next-hop forwarding address for a charging action. When an uplink packet matches a rule and a charging action is applied to it this next-hop forwarding address is used.
> There are different methods to configure a next-hop forwarding address, they are prioritized as follows:

> • | The next-hop forwarding address, if configured, in a redirect ACL is used

> • | Else, the next-hop address configured in the charging action is used

> • | Else, the next-hop address, if configured, in the IP pool is used

> Example
> The following command sets the next-hop forwarding address for the current charging action to 1.1.1.1:
> nexthop-forwarding-address 1.1.1.1
> qos-class-identifier
> This command sets the QoS Class Identifier.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> qos-class-identifier identifier
> no qos-class- identifier
> no
> Removes QoS Class Identifier, if previously configured.
> identifier
> Specifies the QoS Class Identifier, which must be an integer from 1 through 9 or 128 through 254 (Operator specific).
> Usage
> Use this command to set the QoS Class Identifier.
> Example
> The following command sets the QoS Class Identifier as 3:
> qos-class-identifier 3
> qos-renegotiate
> This command configures the QoS traffic class for the charging action for the Layer 7 QoS Renegotiation feature, enabling triggering QoS renegotiation from an active-charging rule.
> Important: This command is controlled by the dynamic-qos-renegotiation license.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> qos-renegotiate traffic-class { background | conversational | interactive priority | streaming }
> no qos-renegotiate
> no
> Removes any previously configured traffic class setting.
> background
> Specifies the traffic class as Background.
> For traffic patterns in which the data transfer is not time-critical (for example e-mail exchange).
> conversational
> Specifies the traffic class as Conversational.
> For traffic patterns in which there is a constant flow of packets.
> interactive priority
> Specifies the traffic class as Interactive.
> For traffic patterns in which there is an intermittent flow of packets.
> priority specifies the traffic handling priority, and must be an integer from 1 through 3.
> streaming
> Specifies the traffic class as Streaming.
> For traffic patterns in which there is a constant flow of data in one direction, either upstream or downstream.
> Usage
> Use this command to configure the QoS traffic class for a charging action for the Layer 7 QoS Renegotiation feature, enabling triggering QoS renegotiation from an active-charging rule.
> Layer 7 QoS Renegotiation is an extension of the Dynamic QoS Renegotiation feature. Upon matching a particular layer 7 rule, for example the access of a particular URL, the GGSN triggers the renegotiation of the PDP context.
> Example
> The following command sets the QoS traffic class for the charging action to streaming:
> qos-renegotiate traffic-class streaming
> retransmissions-counted
> This command enables the charging action to count the number of retransmissions.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no | default ] retransmissions-counted
> no | default
> Disables the count retries from the charging action.
> Usage
> Use this command to enable counting of the number of retransmissions.
> Example
> The following is an example of this command:
> retransmissions-counted
> service-identifier
> This command configures the service identifier for a service.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> service-identifier service_id
> no service-identifier
> no
> Removes any previously configured service ID.
> service_id
> Specifies the service identifier, and must be an integer from 1 through 65535.
> Usage
> Use this command to configure the service identifier for a service.
> Example
> The following command sets the service identifier for a service as 99:
> service-identifier 99
> tft packet-filter
> This command configures the packet filter to be sent to the MS.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no ] tft packet-filter packet_filter_name
> no
> Removes the specified packet filter, if previously configured.
> packet_filter_name
> packet_filter_name specifies the packet filter’s name, and must be a string of 1 through 63 characters in length.
> Usage
> Use this command to configure the packet filter to be sent to the MS. Up to eight packet filters can be specified in a charging action.
> Example
> The following command configures the packet filter filter23 to be sent to the MS:
> tft packet-filter filter23
> tos
> This command sets the Type of Service (ToS) octets used in the charging action.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> tos { af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | be | ef | lower-bits tos_value } [ downlink | uplink ]
> no tos [ downlink | uplink ]
> no
> Disables the ToS being used in the charging action.
> af xx
> Specifies the use of an assured forwarding xx Per Hop Behavior (PHB).
> be
> Specifies use of Best Effort forwarding PHB.
> ef
> Specifies use of Expedited Forwarding PHB.
> lower-bits tos_value
> Important: In 8.1 and later releases, this keyword is “lower-bits tos_value”. In 8.0 release, it is tos_value.
> Sets the least-significant 6 bits in the TOS byte with the specified numeric value.
> value must be an integer from 0 through 63.
> downlink
> Specifies the ToS only for downlink packets.
> uplink
> Specifies the ToS only for uplink packets.
> Usage
> Use this command to set the ToS octets used in the charging action. If one of the enumerated values is set, the DSCP bits which are the six most-significant bits in the TOS byte are marked. If the integer value is set, it will be written into the six least-significant bits of the TOS byte.
> Example
> The following command sets the ToS to be for downlink packets:
> tos be downlink
> tpo profile
> This command configures the TPO profile for the charging action.
> Product
> TPO
> Privilege
> Security Administrator, Administrator
> Syntax
> tpo profile tpo_profile_name
> no tpo profile
> no
> Removes the TPO profile configuration from the current charging action.
> tpo_profile_name
> Specifies name of the TPO profile.
> tpo_profile_name must be an alpha and/or numeric string of 1 through 63 characters in length.
> Usage
> Use this command to configure the TPO profile for a charging action.
> When based on rule matching a charging action is selected, the TPO profile configured in it will be applied for the flow. If a TPO profile was applied to a flow through a particular charging action, and subsequently a different charging action that does not have a TPO profile configured in it is applied to the same flow, TPO will not be disabled.
> Example
> The following command configures a TPO profile named tpoprofile10 for the current charging action:
> tpo profile tpoprofile10
> video bitrate
> This command specifies the default target bit rate to use for the video pacing feature on the Mobile Video Gateway. This value is also used as the suggested maximum bit rate for the video optimization policy control feature and the dynamic inline transrating feature.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ default | no ] video bitrate bit_rate_in_bps [ -noconfirm ]
> default
> Sets video bitrate to its default value.
> no
> Deletes the video bit rate if previously configured.
> video bitrate bit_rate_in_bps
> Specifies the bit rate, in bits per second, at which the TCP video flow should be paced during video pacing. This value is also used as the suggested maximum bit rate for the video optimization policy control feature and the dynamic inline transrating feature. For video pacing, this default bit rate is used on each video flow until the rate determination function calculates the optimal bit rate for pacing. This can be an integer from 0 to 256000000. The default value is 0.
> -noconfirm
> Specifies that the command must execute without prompting for confirmation.
> Usage
> Use this command to specify the default bit rate to use for the video pacing feature, and the suggested maximum bit rate for the video optimization policy control feature and the dynamic inline transrating feature.
> Example
> The following command sets the bit rate for the video flow at 300000 (300kbps):
> video bitrate 300000
> video cae-readdressing
> This command enables CAE (Content Adaptation Engine) re-addressing, allowing video traffic to be fetched from the CAEs in the CAE group. The CAE is an optional component of the Mobile Videoscape.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no ] video cae-readdressing [ xheader-format xheader_format_name ]
> no
> Disables CAE re-addressing if previously configured.
> video cae-readdressing
> Enables CAE re-addressing, allowing video traffic to be fetched from the CAEs in the CAE group.
> xheader-format xheader_format_name
> Specifies an HTTP x-header (Extension header) format for readdressing. When specified, the MVG inserts a destination IP address and TCP port number in a proprietary HTTP x-header in the HTTP request to the CAE. The CAE uses this information to connect to the OS (Origin Server) to retrieve selected video clips for adaptation. xheader_format_name can be between 1 and 63 characters.
> Usage
> Use this command to enable CAE re-addressing on the Mobile Video Gateway.
> Example
> The following command enables CAE re-addressing:
> video cae-readdressing xheader-format format_1
> video detailed-statistics
> This command enables the video statistics feature.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ default | no ] video detailed-statistics [ -noconfirm ]
> default
> Sets video detailed-statistics to its default value, which is the same as [ no ].
> no
> Disables the video statistics feature if previously enabled.
> video detailed-statistics
> Enables the video statistics feature. When a flow matches a rule definition for video during DPI (Deep Packet Inspection), the video statistics feature begins collecting detailed statistics for the video flow.
> -noconfirm
> Specifies that the command must execute without prompting for confirmation.
> Usage
> Use this command to enable the video statistics feature.
> Example
> The following command enables the video statistics feature:
> video detailed-statistics
> video optimization-preprocessing all
> This command enables CAE re-addressing by enabling the Acitve Charging Service to re-address video requests to the CAEs in the CAE group and enables transrating by enabling the Enhanced Charging Services to transrate video requests.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no ] video optimization-preprocessing all
> no
> Disables CAE re-addressing and transrating if currently enabled.
> video optimization-preprocessing cae-readdressing
> Enables CAE re-addressing by enabling the Active Charging Service to re-address video requests to the CAEs in the CAE group and enables transrating by enabling the Enhanced Charging Services to transrate video requests.
> Usage
> Use this command to enable CAE re-addressing by enabling the Active Charging Service to re-address video requests to the CAEs in the CAE group and enable transrating by enabling the Enhanced Charging Services to transrate video requests.
> Example
> The following command enables CAE re-addressing and transrating:
> video optimization-preprocessing all
> video optimization-preprocessing cae-readdressing
> This command enables CAE re-addressing by enabling the Acitve Charging Service to re-address video requests to the CAEs in the CAE group.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no ] video optimization-preprocessing cae-readdressing
> no
> Disables CAE re-addressing if currently enabled.
> video optimization-preprocessing cae-readdressing
> Enables CAE re-addressing by enabling the Active Charging Service to re-address video requests to the CAEs in the CAE group.
> Usage
> Use this command to enable CAE re-addressing by enabling the Active Charging Service to re-address video requests to the CAEs in the CAE group.
> Example
> The following command enables CAE re-addressing:
> video optimization-preprocessing cae-readdressing
> video optimization-preprocessing transrating
> This command enables video transrating by enabling the Enhanced Charging Services to transrate video requests.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ no ] video optimization-preprocessing transrating
> no
> Disables transrating if currently enabled.
> video optimization-preprocessing transrating
> Enables video transrating by enabling Enhanced Charging Services to transrate video requests.
> Usage
> Use this command to enable video transrating by enabling the Enhanced Charging Services to transrate video requests.
> Example
> The following command enables video transrating:
> video optimization-preprocessing transrating
> video pacing by-policing
> This command enables the video pacing feature.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> [ default | no ] video pacing by-policing [ initial-burst-duration value | normal-burst-duration value ][ -noconfirm ]
> default
> Sets video pacing by-policing to its default value, which is the same as [ no ].
> no
> Deletes the video pacing by-policing settings and disables video pacing if previously configured.
> video pacing by-policing
> Enables the video pacing feature. When enabled, video pacing is applied per TCP video flow. The command syntax by-policing enables pacing enforcement by the policing method, which is the available method for this software release.
> initial-burst-duration value
> Specifies the duration, in seconds, for the allowed initial burst of video content. Note that the initial burst is configured in terms of time, so that for video files with different encoding bit rates, the amount of bytes allowed without enforcing pacing gets adjusted accordingly. The amount of bytes allowed is calculated by (video encoding rate * initial-burst-duration). value can be an integer between 1 and 30 seconds. The default value is 10 seconds.
> normal-burst-duration value
> Specifies the duration, in seconds, for the allowed normal burst of video content after the initial burst is completed. Like the initial burst, the normal burst is also configured in terms of time, so that for video files with different encoding bit rates, the amount of bytes allowed without enforcing pacing gets adjusted accordingly. The amount of bytes allowed is calculated by (video encoding rate * normal-burst-duration). value can be an integer between 1 and 30 seconds. The default value is 3 seconds.
> -noconfirm
> Specifies that the command must execute without prompting for confirmation.
> Usage
> Use this command to enable video pacing by policing.
> Example
> The following command enables video pacing by policing with an initial burst duration of 15 seconds and a normal burst duration of 3 seconds:
> video pacing by-policing initial-burst-duration 15 normal-burst-duration 3
> video transrating target-rate-reduction
> This command specifies the target bit rate reduction for dynamic inline transrating.
> Product
> MVG
> Privilege
> Security Administrator, Administrator
> Syntax
> video transrating target-rate-reduction percentage_of_input_rate
> video transrating target-rate-reduction percentage_of_input_rate
> This command configures transrating by specifying the target bit rate reduction as a percentage of the input bit rate, which can be between 1 and 50 percent.
> Usage
> Use this command to configure the target bit rate reduction for dynamic inline transrating.
> Example
> The following command specifies the target bit rate reduction as 20 percent of the input bit rate:
> video transrating target-rate-reduction 20
> xheader-insert
> This command specifies the extension-header (x-header) format name whose fields are to be inserted in HTTP GET and POST request packets.
> Important: This command is license dependent. For more information please contact your local sales representative.
> Product
> All
> Privilege
> Security Administrator, Administrator
> Syntax
> xheader-insert xheader-format xheader_format_name [ encryption rc4md5 [ encrypted ] key key ] [ first-request-only ] [ -noconfirm ]
> no xheader-insert
> no
> Removes previously configured x-header format name.
> xheader-format xheader_format_name
> Enables x-header mode configuration, and specifies name of the x-header format whose fields are to be inserted in the packets.
> xheader_format_name must be a string of 1 through 63 characters in length.
> encryption rc4md5 [ encrypted ] key key
> If the x-header format has any encrypted fields defined, specifies to use RC4MD5 encryption.
> After configuring this option, the fields in xheader format having “encrypt” enabled will be encrypted as follows:

> 1. | The MD5 hash of the configure key will be calculated.

> 2. | This MD5 hash will be used as a key for RC4 encryption.

> 3. | This encrypted value will be base64 encoded to get the final X-header value. I.e., the final inserted X-header will be X-alias : base64(RC4(MD5(key),MSISDN)).

> In the default case, i.e. if encryption is not enabled as above, the plain text value of the xheader field will be inserted.
> Note that if the value of the key is changed on the fly, it will take effect only in case of new calls. Also, if the per rulebase RSA encryption is also enabled in the same config, per charging-action RC4MD5 encryption will take precedence over it.
> key specifies the key, and must be a string of 8 through 15 characters in length.
> encryption specifies use of encryption.
> The key can be configured either as plain text or encrypted. However, in the show configuration command’s output it will always be displayed as encrypted. And, in the show configuration showsecrets command’s output it will be displayed as plain text.
> first-request-only
> Specifies x-header insertion only for the first HTTP request in the IP flow. If not configured, the default behavior is insertion for all requests.
> -noconfirm
> Specifies that the command must execute without any prompts and confirmation from the user.
> Usage
> Use this command to enable x-header mode, and specify the x-header format name whose fields are to be inserted in HTTP GET and POST request packets.
> Also, see xheader-format CLI command in the ACS Configuration Mode Commands and ACS X-header Format Configuration Mode Commands chapters.
> Example
> The following command enables x-header mode, and specifies the x-header format name as test12:
> xheader-insert xheader-format test12

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883