Configures PDSN service policies.
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration > Context Configuration > PDSN
Service Configuration
configure > context
context_name
> pdsn-service
service_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-pdsn-service)#
Syntax
policy msid-match msid_with_wildcards redirect address [ weight weight_num ] [ address2 [ weight weight_num ]... address16 [ weight weight_num ] ] [ weight weight_num ]
no policy msid-match msid_with_wildcards
policy overload { redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ] | reject [ use-reject-code { admin-prohibited | insufficient-resources } ] }
no policy overload [ redirect address [ address2 ... address16 ] ]
default policy overload
policy pcf-zone-match zone_number redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ] | restricted [ redirect address [ weight weight_num ] [ address2 [ weight weight_num ] ... address16 [ weight weight_num ] ]
no policy pcf-zone-match zone_number
[ default | no ] policy rrq mei-from-current-pcf suppress-ppp-restart
policy service-option enforce
[ default | no ] policy service-option
policy unknown-cvse enforce
[ default | no ] policy unknown-cvse
no
Enables/Disables the PDSN service policies.
default
Sets / Restores default value assigned for specified PDSN service
policies.
policy
msid-match
msid_with_wildcards
redirect
address [
weight
weight_num ] [
address2 [
weight
weight_num ]...
address16 [
weight
weight_num ] ] [
weight
weight_num ]
Specifies how a PDSN service should handle an incoming call that
matches a list of wildcard MSIDs.
msid_with_wildcards: An MSID in which up to
16 digits have been replaced with the wildcard '$'. This defines the list of
possible matches for incoming calls.
redirect : This option enables a redirect
policy for overloading conditions. When a redirect policy is invoked, the PDSN
service rejects new sessions with an A11 Registration Reply Code of 88H
(unknown PDSN address) and provides the IP address of an alternate PDSN. This
command can be issued multiple times.
address: The IP address of an alternate PDSN
expressed in IP v4 dotted decimal notation. Up to 16 IP addresses can be
specified either in one command or by issuing the redirect command multiple
times. If you try to add more than 16 IP addresses to the redirect policy the
CLI issues an error message. If you specify an IP address and weight that
already exists in the redirect policy the new values override the existing
values.
weight
weight_num : When multiple addresses are
specified, they are selected in a weighted round-robin scheme. Entries with
higher weights are more likely to be chosen. If a weight is not specified the
entry is automatically assigned a weight of 1.
weight_num must be an integer from 1 through
10.
policy
overload {
redirect
address [
weight
weight_num ] [
address2 [
weight
weight_num ] ...
address16 [
weight
weight_num ] ] |
reject [
use-reject-code {
admin-prohibited |
insufficient-resources } ] }
Specifies how a PDSN service should handle an overload condition.
redirect : This option enables a redirect
policy for overloading conditions. When a redirect policy is invoked, the PDSN
service rejects new sessions with an A11 Registration Reply Code of 88H
(unknown PDSN address) and provides the IP address of an alternate PDSN. This
command can be issued multiple times.
address: The IP address of an alternate PDSN expressed in IP v4 dotted
decimal notation. Up to 16 IP addresses can be specified either in one command
or by issuing the redirect command multiple times. If you try to add more than
16 IP addresses to the redirect policy the CLI issues an error message. If you
specify an IP address and weight that already exists in the redirect policy the
new values override the existing values.
weight
weight_num : When multiple addresses are
specified, they are selected in a weighted round-robin scheme. Entries with
higher weights are more likely to be chosen. If a weight is not specified the
entry is automatically assigned a weight of 1.
weight_num must be an integer from 1 through
10.
reject : This option will cause any overload
traffic to be rejected. The PDSN will send an A11 Registration Reply Code of
82H (insufficient resources).
use-reject-code admin-prohibited :
When this keyword is specified and traffic is rejected, the error code admin
prohibited is returned instead of the error code insufficient resources. This
is the default behavior.
use-reject-code insufficient-resources :
When this keyword is specified and traffic is rejected, the error code
insufficient resources is returned instead of the error code admin prohibited.
policy
pcf-zone-match
zone_number
redirect
address [
weight
weight_num ] [
address2 [
weight weight_num ]
... address16 [
weight
weight_num ] ] |
restricted [
redirect
address [
weight
weight_num ] [
address2 [
weight
weight_num ]
... address16 [
weight
weight_num ] ]
Specifies how a PDSN service should handle an incoming call that
matches a predefined zone number.
zone_number: An integer between 1 and 32
that defines the zone incoming calls must match for redirection.
redirect : This option enables a redirect
policy for overloading conditions. When a redirect policy is invoked, the PDSN
service rejects new sessions with an A11 Registration Reply Code of 88H
(unknown PDSN address) and provides the IP address of an alternate PDSN. This
command can be issued multiple times.
address : The IP address of an alternate PDSN
expressed in IP v4 dotted decimal notation. Up to 16 IP addresses can be
specified either in one command or by issuing the redirect command multiple
times. If you try to add more than 16 IP addresses to the redirect policy the
CLI issues an error message. If you specify an IP address and weight that
already exists in the redirect policy the new values override the existing
values.
weight
weight_num : When multiple addresses are
specified, they are selected in a weighted round-robin scheme. Entries with
higher weights are more likely to be chosen. If a weight is not specified the
entry is automatically assigned a weight of 1.
weight_num must be an integer from 1 through
10.
restricted : This is
an optional keyword which means the zone is restricted. Restricted zone is
meaningful only if enhanced PCF redirection feature is enabled, otherwise the
zone follows the default behavior.
policy
rrq
mei-from-current-pcf
suppress-ppp-restart
rrq configures policy for PPP restart after
getting mei in rrq.
mei-from-current-pcf mei is received in rrq
from current pcf.
suppress-ppp-restart
suppresses ppp restart when mei is received in rrq
from current pcf
policy
service-option
enforce
service-option configures R-P service-option
to use for specific PDSN service. Must be followed by valid service-option
number, ranging from 0 to 1000.
enforce designates enforcement of R-P
service-option number.
policy
unknown-cvse
enforce
unknown-cvse configures PDSN service unknown
cvse policy.
enforce enforces unknown cvse policy where
unknown CVSEs in RRQs will cause Deny
Usage Guidelines
Policies can be implemented to dictate PDSN service behavior for
various conditions such as overloading.
The system invokes the overload policy if the number of calls
currently being processed exceeds the licensed limit for the maximum number of
sessions supported by the system.
The system automatically invokes the overload policy when an on-line
software upgrade is started.
Use the
no policy {
overload |
service-option } command to delete a
previously configured policy. If after deleting the policy setting you desire
to return the policy parameter to its default setting, use the
default policy command.
The chassis is shipped from the factory with the policy options set as
follows:
Caution |
Incorrect configuration of the
policy msid-match and
policy pcf-zone-match keywords could result
in sessions failing to be established. For example, if PDSN1 is configured to
redirect sessions to PDSN2 while PDSN2 is configured to redirect sessions to
PDSN1, a loop is created in which all sessions would fail to be connected. In
addition, sessions will not be established if the PDSN to which the sessions
are being redirected is unavailable.
|
Example
The following command configures the PDSN service to redirect traffic
to two different destinations with weights of
1 and
10 respectively:
policy overload redirect 192.168.1.100 weight 1 192.168.1.200 weight 10