> CSCF ACL Configuration Mode Commands
> The CSCF ACL (Access Control List) Configuration Mode is used to configure session permissions (permit/deny access) within the system.
> Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
> after
> Places the CSCF ACL entry at the bottom or end of the ACL. Use this command in conjunction with the permit and/or deny commands.
> Product
> SCM
> Privilege
> Administrator
> Syntax
> after
> Usage
> Add this command before the permit and/or deny commands to place the entry at the end of the ACL.
> before
> Places the CSCF ACL entry at the beginning or top of the ACL. Use this command in conjunction with the permit and/or deny commands.
> Product
> SCM
> Privilege
> Administrator
> Syntax
> before
> Usage
> Add this command before the permit and/or deny commands to place the entry at the beginning of the ACL.
> deny
> Configures the system to deny subscriber sessions based on criteria matching the received packet.
> Product
> SCM
> Privilege
> Administrator
> Syntax
> deny { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> no deny { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> any
> Filters all CSCF sessions.
> destination aor aor
> Filters sessions based on the destination AoR. aor must be an existing AoR from 1 to 79 characters in length.
> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
> log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Enables logging for CSCF sessions meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
> Specifies the criteria that packets will be compared against. The following criteria are supported:

> • | any

> • | destination aor aor

> • | source address ip_address

> • | source aor aor

> • | subscriber-capability audio

> • | subscriber-capability text

> • | subscriber-capability video

> source { address ip_address | aor aor }
> Filters session based on the source IP address or AoR.

> • | ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.

> • | aor must be an existing AoR from 1 to 79 characters in length.

> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Cisco ASR 5000 Series Session Control Manager Administration Guide for more information about regular expressions.
> subscriber-capability { audio | text | video }
> Filters session based on one of the following subscriber capability types:

> • | audio

> • | text

> • | video

> no deny { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Removes specified filter criteria.
> Usage
> Specifies the subscriber sessions to deny based on the criteria specified.
> Example
> The following command denies access to subscribers with a source address of 1.2.3.4:
> deny source address 1.2.3.4
> end
> Exits the current mode and returns to the Exec Mode.
> Product
> All
> Privilege
> Administrator
> Syntax
> end
> Usage
> Change the mode back to the Exec mode.
> exit
> Exits the current mode and returns to the previous mode.
> Product
> All
> Privilege
> Administrator
> Syntax
> exit
> Usage
> Return to the previous mode.
> permit
> Configures the system to allow subscriber sessions based on criteria matching the received packet.
> Product
> SCM
> Privilege
> Administrator
> Syntax
> permit { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> no permit { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> any
> Filters all CSCF sessions.
> destination aor aor
> Filters sessions based on the destination AoR.
> aor must be an existing AoR from 1 to 79 characters in length.
> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Cisco ASR 5000 Series Session Control Manager Administration Guide for more information about regular expressions.
> log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Enables logging for CSCF sessions meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
> Specifies the criteria that packets will be compared against. The following criteria are supported:

> • | any

> • | destination aor aor

> • | source address ip_address

> • | source aor aor

> • | subscriber-capability audio

> • | subscriber-capability text

> • | subscriber-capability video

> source { address ip_address | aor aor }
> Filters session based on the source IP address or AoR.

> • | ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.

> • | aor must be an existing AoR from 1 to 79 characters in length.

> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
> subscriber-capability { audio | text | video }
> Filters session based on one of the following subscriber capability types:

> • | audio

> • | text

> • | video

> no permit { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Removes specified filter criteria.
> Usage
> Specifies the subscriber sessions to permit based on the criteria specified.
> Example
> The following command permits access to subscribers with a destination AoR of $.@abc123.com:
> permit destination aor $.@abc123.com
> redirect
> Configures the system to redirect subscriber sessions to another CSCF based on criteria matching the received packet.
> Product
> SCM
> Privilege
> Administrator
> Syntax
> redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> no redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> address ip_address
> The address to which UE should be redirected.
> ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.
> host host_name
> The host to which UE should be redirected.
> host_name must be an existing name from 1 to 79 characters in length.
> port port_number
> The port at which request should be redirected.
> port_number must be an integer from 1 to 65535.
> any
> Redirect UE to address/host.
> destination aor aor
> Redirect UE to address/host if destination AoR matches.
> aor must be an existing AoR from 1 to 79 characters in length.
> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
> log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Enables logging for redirect ed UE meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
> Specifies the criteria that packets will be compared against. The following criteria are supported:

> • | any

> • | destination aor aor

> • | source address ip_address

> • | source aor aor

> • | subscriber-capability audio

> • | subscriber-capability text

> • | subscriber-capability video

> source { address ip_address | aor aor }
> Redirect UE to address/host if source IP address or AoR matches.

> • | ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.

> • | aor must be an existing AoR from 1 to 79 characters in length.

> Important: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
> subscriber-capability { audio | text | video }
> Redirect UE to address/host if contact has one of the following subscriber capability types:

> • | audio

> • | text

> • | video

> no redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
> Removes specified redirect location and filter criteria.
> Usage
> Specifies the subscriber sessions to permit based on the criteria specified.
> Example
> The following command permits access to subscribers with a destination AoR of $.@abc123.com:
> permit destination aor $.@abc123.com

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883