CSCF ACL Configuration Mode Commands

CSCF ACL Configuration Mode Commands
 
 
The CSCF ACL (Access Control List) Configuration Mode is used to configure session permissions (permit/deny access) within the system.
 
note_smallImportant: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
 
after
Places the CSCF ACL entry at the bottom or end of the ACL. Use this command in conjunction with the permit and/or deny commands.
Product
SCM
Privilege
Administrator
Syntax
after
Usage
Add this command before the permit and/or deny commands to place the entry at the end of the ACL.
 
before
Places the CSCF ACL entry at the beginning or top of the ACL. Use this command in conjunction with the permit and/or deny commands.
Product
SCM
Privilege
Administrator
Syntax
before
Usage
Add this command before the permit and/or deny commands to place the entry at the beginning of the ACL.
 
deny
Configures the system to deny subscriber sessions based on criteria matching the received packet.
Product
SCM
Privilege
Administrator
Syntax
deny { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
no deny { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
any
Filters all CSCF sessions.
destination aor aor
Filters sessions based on the destination AoR. aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Enables logging for CSCF sessions meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
Specifies the criteria that packets will be compared against. The following criteria are supported:
source address ip_address
source { address ip_address | aor aor }
Filters session based on the source IP address or AoR.
ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.
aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Cisco ASR 5000 Series Session Control Manager Administration Guide for more information about regular expressions.
subscriber-capability { audio | text | video }
Filters session based on one of the following subscriber capability types:
no deny { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Removes specified filter criteria.
Usage
Specifies the subscriber sessions to deny based on the criteria specified.
Example
The following command denies access to subscribers with a source address of 1.2.3.4:
deny source address 1.2.3.4
 
end
Exits the current mode and returns to the Exec Mode.
Product
All
Privilege
Administrator
Syntax
end
Usage
Change the mode back to the Exec mode.
 
exit
Exits the current mode and returns to the previous mode.
Product
All
Privilege
Administrator
Syntax
exit
Usage
Return to the previous mode.
 
permit
Configures the system to allow subscriber sessions based on criteria matching the received packet.
Product
SCM
Privilege
Administrator
Syntax
permit { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
no permit { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
any
Filters all CSCF sessions.
destination aor aor
Filters sessions based on the destination AoR.
aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Cisco ASR 5000 Series Session Control Manager Administration Guide for more information about regular expressions.
log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Enables logging for CSCF sessions meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
Specifies the criteria that packets will be compared against. The following criteria are supported:
source address ip_address
source { address ip_address | aor aor }
Filters session based on the source IP address or AoR.
ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.
aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
subscriber-capability { audio | text | video }
Filters session based on one of the following subscriber capability types:
no permit { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Removes specified filter criteria.
Usage
Specifies the subscriber sessions to permit based on the criteria specified.
Example
The following command permits access to subscribers with a destination AoR of $.@abc123.com:
permit destination aor $.@abc123.com
 
redirect
Configures the system to redirect subscriber sessions to another CSCF based on criteria matching the received packet.
Product
SCM
Privilege
Administrator
Syntax
redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } } | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
no redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
address ip_address
The address to which UE should be redirected.
ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.
host host_name
The host to which UE should be redirected.
host_name must be an existing name from 1 to 79 characters in length.
port port_number
The port at which request should be redirected.
port_number must be an integer from 1 to 65535.
any
Redirect UE to address/host.
destination aor aor
Redirect UE to address/host if destination AoR matches.
aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
log { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Enables logging for redirect ed UE meeting the criteria specified in the ACL. The logs can be viewed by executing the logging filter active facility acl-log command in the Exec mode.
Specifies the criteria that packets will be compared against. The following criteria are supported:
source address ip_address
source { address ip_address | aor aor }
Redirect UE to address/host if source IP address or AoR matches.
ip_address must be expressed in dotted decimal notation for IPv4 or colon notation for IPv6.
aor must be an existing AoR from 1 to 79 characters in length.
note_smallImportant: AoR regular expressions are supported. Refer to the SCM Engineering Rules Appendix in the Session Control Manager Administration Guide for more information about regular expressions.
subscriber-capability { audio | text | video }
Redirect UE to address/host if contact has one of the following subscriber capability types:
no redirect { address ip_address | host host_name } [ port port_number ] { any | destination aor aor | source { address ip_address | aor aor } | subscriber-capability { audio | text | video } }
Removes specified redirect location and filter criteria.
Usage
Specifies the subscriber sessions to permit based on the criteria specified.
Example
The following command permits access to subscribers with a destination AoR of $.@abc123.com:
permit destination aor $.@abc123.com
 
 

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883