Cisco Unified Border Element (SP Edition) Configuration Guide: Unified Model

Step 1

configure terminal

Router# configure terminal

Enables the global configuration mode.

Step 2

sbc service-name

Router(config)# sbc MySBC

Creates the SBC service on the Cisco Unified Border Element (SP Edition) and enters the SBC configuration mode.

Use the service-name argument to define the name of the SBC.

Step 3

media-address { ipv4 | ipv6 } { addr } [ nat-mode twice-nat | vrf vrf-name | managed-by { dbe | mgc }]

Router(config-sbc)# media-address ipv4 10.10.10.1

Adds an IPv4 or IPv6 address to the set of addresses that can be used by the DBE as a local media address.

• addr —Local IPv4 or IPv6 address on an SBC interface that can be used for media arriving on the DBE.
• nat-mode twice-nat —(Optional) Allows local addresses to be reserved for Twice-NAT pinholes.
• vrf vrf-name —(Optional) Specifies that the IP address is associated with a specific VPN routing and forwarding (VRF) instance. If the VRF is not specified, the address is assumed to be an address on the global VPN.
• managed-by —(Optional) Specifies whether the DBE or the MGC is allowed to select these addresses as local addresses for flows.
• dbe —(Optional) Specifies that only the DBE is allowed to select these addresses as local addresses for flows.
• mgc —(Optional) Specifies that only the media gateway controller (MGC) is allowed to select these addresses as local addresses for flows.

or

media-address pool { ipv4 | ipv6 } { start-addr } { end-addr } [ nat-mode twice-nat | vrf vrf-name | managed-by { dbe | mgc }]

Router(config-sbc)# media-address pool ipv4 10.10.10.1 10.10.10.20

Creates a pool of sequential IPv4 and IPv6 media addresses that can be used by the SBC as local media addresses, and enters the SBC media address pool configuration mode.

• start-addr —Starting IPv4 and IPv6 media address in a range of addresses.
• end-addr —Ending IPv4 and IPv6 media address in a range of addresses. The ending address must be numerically greater than the starting address.
• nat-mode twice-nat —(Optional) Allows local addresses to be reserved for Twice-NAT pinholes.
• vrf vrf-name —(Optional) Specifies that the IP addresses are associated with a specific VRF instance. If the VRF instance is not specified, the address is assumed to be an address on the global VPN.
• managed-by —(Optional) Specifies whether the DBE or the MGC is allowed to select these addresses as local addresses for flows.
• dbe —(Optional) Specifies that only the DBE is allowed to select these addresses as local addresses for flows.
• mgc —(Optional) Specifies that only the MGC is allowed to select these addresses as local addresses for flows.

Step 4

port-range min-port max-port [ any | voice | video | signaling | fax | tag tag-string ]

Router(config-sbc-media-address-pool)# port-range 16384 30000 video

Creates a pool of sequential IPv4 media addresses that can be used by the SBC as local media addresses, and enters the SBC media address pool configuration mode.

In the SBC media address pool configuration mode, the CoS for the port range is video.

Step 5

end

Router(config-sbc)# end

Returns to the Privileged EXEC mode.

Step 6

show sbc sbe addresses

Router# show sbc dmsbc-node9 sbe addresses

Lists the addresses configured on the SBEs.

Step 1

configure terminal

Router# configure terminal

Enables global configuration mode.

Step 2

sbc service-name

Router(config)# sbc mysbc

Enters the SBC service mode.

• Use the service-name argument to define the name of the service.

Step 3

sbe

Router(config-sbc)# sbe

Enters the SBE entity mode within an SBC service.

Step 4

cac-policy-set policy-set-id

Router(config-sbc-sbe)# cac-policy-set 1

Enters the CAC policy set configuration mode within an SBE entity, creating a new policy set, if necessary.

• policy-set-id —The call policy set number that can range from 1 to 2147483647.

Step 5

cac-table table-name

Router(config-sbc-sbe-cacpolicy)# cac-table StandardListByAccount

Enters the CAC table mode for configuration of an admission control table (creating one if necessary) within the context of an SBE policy set.

Step 6

table-type {policy-set | limit {list of limit tables}}

Router(config-sbc-sbe-cacpolicy-cactable)# table-type policy-set

Configures the table type of a CAC table within the context of an SBE policy set.

When the policy-set keyword is specified, use the cac-scope command to configure the scope in each entry at which limits are applied in a CAC Policy Set table.

Note In Policy Set tables, the event, call, or message is applied to all the entries.

Step 7

entry entry-id

Router(config-sbc-sbe-cacpolicy-
cactable)# entry 1

Enters the CAC table entry mode to create or modify an entry in an admission control table.

Step 8

cac-scope {list of scope options}

Router(config-sbc-sbe-cacpolicy-cactable-entry)# cac-scope category

Configures the scope within each entry at which limits are applied in a policy set table.

• list of scope options —Specifies one of the following strings used to match events:

– account —Events that are from the same account.

– adjacency —Events that are from the same adjacency.

– adj-group —Events that are from members of the same adjacency group.

– call —Scope limits are per single call.

– category —Events that have same category.

– dst-account —Events that are sent to the same account.

– dst-adj-group —Events that are sent to the same adjacency group.

– dst-adjacency —Events that are sent to the same adjacency.

– dst-number —Events that have same destination.

– global —Scope limits are global

– src-account —Events that are from the same account.

– src-adj-group —Events that are from the same adjacency group.

– src-adjacency —Events that are from the same adjacency.

– src-number —Events that have the same source number.

– sub-category —The limits specified in this scope apply to all events sent to or received from members of the same subscriber category.

– sub-category-pfx —The limits specified in this scope apply to all events sent to or received from members of the same subscriber category prefix.

– subscriber —The limits specified in this scope apply to all events sent to or received from individual subscribers (a device that is registered with a Registrar server)

Step 9

caller port-range-tag { adj-name | none | string tag-string }

Router(config-sbc-sbe-cacpolicy-cactable-entry)# caller port-range-tag adj-name

Configures the port range tag for a caller. This tag is used when selecting the media address and port.

• adj-name —Uses the source adjacency name as a port range tag.
• none —Prompts the SBC to not use a port range tag for calls matching the CAC entry, and removes previously found strings, if any.
• string tag-string —Specifies the explicit port range tag string.

Step 10

callee port-range-tag { adj-name | none | string tag-string }

Router(config-sbc-sbe-cacpolicy-cactable-entry)# callee port-range-tag string GenericCorePortRange

Configures the port range tag for a callee. This tag is used when selecting the media address and port.

• adj-name —Uses the destination adjacency name as a port range tag.
• none —Prompts the SBC to not use a port range tag for calls matching the CAC entry, and removes previously found strings, if any.
• string tag-string —Specifies the explicit port range tag string.

Step 11

action [ next-table goto-table-name | cac-complete]

Router(config-sbc-sbe-cacpolicy-cactable-entry)# action cac-complete

Configures the action to perform after this entry in an admission control table. Possible actions are:

• Identify the next CAC table to process using the next-table keyword and the goto-table-name argument.
• Stop processing for this scope using the cac-complete keyword.

Step 12

exit

Router(config-sbc-sbe-cacpolicy-cactable-entry)# exit

Exits the entry mode, and enters the CAC table mode.

Step 13

exit

Router(config-sbc-sbe-cacpolicy-cactable)# exit

Exits the CAC table mode, and enters the CAC policy mode.

Step 14

complete

Router(config-sbc-sbe-cacpolicy)# complete

Completes the CAC policy set after you commit the entire set.

Step 15

exit

Router(config-sbc-sbe-cacpolicy)# exit

Exits the CAC policy mode, and enters the SBE configuration mode.

Step 16

cac-policy-set global policy-set-id

Router(config-sbc-sbe)# cac-policy-set global 23

Activates the global CAC policy set. The CAC policy set must be in a complete state before it can be assigned as the default policy.

• policy-set-id —The call policy set number, ranging from 1 to 2147483647. The policy set must be in a complete state before it can be assigned as the default policy.

Step 17

end

Router(config-sbc-sbe-cacpolicy-cactable)# end

Exits the CAC table mode, and enters the privileged EXEC mode.

Step 18

show sbc sbc-name sbe cac-policy-set id table name entry id

Router# show sbc MySBC sbe cac-policy-set 1 table StandardListByAccount entry 1

Lists detailed information, such as caller and callee port range tags, pertaining to a given entry in a CAC policy table.