The following example activates two processing cards, placing one in active mode and labeling the other as redundant:

configure
   card slot_number
      redundancy card-mode
      exit
   card slot_number
      mode active pac
      end

The following example sets the default subscriber in the local context:

configure
   context local 
      interface local_ctx_iface_name
         ip address ip_address ip_mask
         exit
      server ftpd
         exit
      server telnetd
         exit
      subscriber default
         exit
      administrator name encrypted password password ftp
      ip route ip_addr ip_mask next_hop_addr local_ctx_iface_name 
      exit
   port ethernet slot#/port#
      no shutdown
      bind interface local_ctx_iface_name local
      exit
   end

The following example creates the VPN context and interface and binds the VPN interface to a configured Ethernet port:

configure
   context vpn_context_name -noconfirm
      interface vpn_interface_name
         ip address ip_address ip_mask
         exit
     subscriber default
         exit
      ip route 0.0.0.0 0.0.0.0 next_hop_address vpn_interface_name
      exit
   port ethernet slot_number/port_number
      no shutdown
      bind interface vpn_interface_name vpn_context_name
      end

Use the following configuration to enable the Active Charging Service subsystem for URL Blacklisting:

configure
   require active-charging
   end

Use the following configuration to configure URL Blacklisting database parameters:

configure
   url-blacklisting database directory path directory_path
   url-blacklisting database max-versions max_versions
   url-blacklisting database override file file.extension
   end

Use the following configuration to create the Active Charging Service and set URL Blacklisting match:

configure
  active-charging service service_name [ -noconfirm ]
      url-blacklisting match-method { exact | generic } 
      end

Use the following configuration to enable URL Blacklisting in a rulebase and configure the blacklisting action:

configure
   active-charging service service_name
      rulebase rulebase_name [ -noconfirm ]
         url-blacklisting action { discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code }
         end

Use the following command to load/upgrade the URL Blacklisting database:

upgrade url-blacklisting database [ -noconfirm ]

The URL Blacklisting functionality can be tested by appending test URLs/URIs to the blacklist file. The test URLs/URIs must be added to the testurldb.pub file in the <WEM_Install_Dir>/flash/blacklist/testurldb directory.

The testurldb.pub file must have one URL per line without space. If space is included in the URL entries, the WEM ignores the URLs with space.

Use the following configuration to enable the Active Charging Service subsystem:

configure
   require active-charging content-filtering category
   end

Notes:

A reboot is essential when enabling/disabling Category-based Content Filtering using the require active-charging content-filtering category command.

Use the following configuration to configure Content Rating Rule database parameters:

configure
   content-filtering category database directory path directory_path
   content-filtering category database max-versions max_versions
   content-filtering category database override file file.extension
   end
upgrade content-filtering category { database | rater-pkg }

Use the following configuration to create the Active Charging Service and Content Filtering Policy:

configure
   active-charging service service_name [ -noconfirm ]
      content-filtering category policy-id cf_policy_id [ description description ] [ -noconfirm ]
      end

configure
   active-charging service service_name
      content-filtering category policy-id cf_policy_id
         analyze priority priority { all | category category | x-category x-category } action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]
         failure-action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]
         end

Notes

• To configure runtime categories not present in the CLI, use the following command: analyze priority priority x-category x-category action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]
• To configure the action to take for any match, and the default action to take when the category returned after rating is not configured in the subscriber’s content filtering policy, use the following command: analyze priority priority all action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]

Use the following configuration to configure the rulebase:

configure
   active-charging service service_name
      rulebase rulebase_name
         route priority route_priority ruledef ruledef_name analyzer analyzer_name [ description description ]
         action priority priority { { group-of-ruledefs group_name | ruledef ruledef_name } charging-action charging_action_name [ description description ] }
         flow end-condition content-filtering edr edr_format_name
         billing-records { egcdr | radius | udr udr-format format_name } +
         content-filtering category policy-id cf_policy_id
         content-filtering mode category { static-only }
         end

This section describes how to configure Category-based Content Filtering EDR settings. The system does not generate URL Blacklisting specific EDRs.

To configure Category-based Content Filtering EDR settings: