Installation guide

ManualsBrandsAcme ManualsAcousticsSA-104

Oracle® Communications Session

Border Controller

ACLI Reference Guide

Release S-C6.1.0

Formerly Net-Net Session Director

October 2013

Summary of content (278 pages)

PAGE 1
Oracle® Communications Session Border Controller ACLI Reference Guide Release S-C6.1.
PAGE 2
Copyright ©2013, year, Oracle and/or its affiliates. All rights reserved. This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means.
PAGE 3
About this Guide Overview The Oracle Communications Session Border Controller ACLI Reference Guide provides a comprehensive explanation of all commands and configuration parameters available to you in the Acme Command Line Interface (ACLI). This programming interface is used for configuring your Net-Net family of products. This document does not explain configurations and the logic involved in their creation. Document Organization • About this Guide—This chapter.
PAGE 4
ABOUT THIS GUIDE STYLE • Description—Describes each command, its purpose, and use. • Syntax—Describes the proper syntax needed to execute the command. Syntax also includes syntax-specific explanation of the command. • Arguments—Describes the argument place holders that are typed after a command. For commands only. • Parameters—Describes the parameters available in a configuration element. For configuration elements only.
PAGE 5
STYLE ABOUT THIS GUIDE Style Definition user-entered-text Text in Lucida Console BOLD style depicts data that the user enters. You can identify it as the Lucida Console fixed-width font. command This style depicts a command or pre-determined text to be typed into the ACLI. You can identify it as text set in bold style. Supported Platforms Release Version S-C6.1.0 is supported on the Net-Net 4500 and Net-Net 4250 platforms.
PAGE 6
ABOUT THIS GUIDE Document Revision History STYLE This section provides a chronological overview of the changes made to this document starting with the first revision after the GA posting (rev. 1.00) Date Revision Number Description December 18, 2009 1.01 • Changes the default value of the sipmanipulation>header-rules>element-rule type parameter October 30 2013 1.
PAGE 7
Contents About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii Document Organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
Viewing Summaries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27 Data Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28 ACLI Field Formats. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28 Preset Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 9
delete-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46 delete-status-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47 display-alarms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47 display-backups . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 10
request collection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64 reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65 restore-backup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66 save-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 11
show packet-trace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94 show power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95 show privilege . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95 show processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 12
verify-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124 watchdog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125 4 Configuration Elements A-M . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127 access-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 13
media-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176 media-policy > tos-settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .176 media-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177 mgcp-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 14
sip-response-map > entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251 snmp-community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252 static-flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252 steering-pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 15
1 How to Use the ACLI The ACLI The ACLI is an administrative interface that communicates with other components of the Net-Net SBC. The ACLI is a single DOS-like, line-by-line entry interface. The ACLI is modeled after industry standard CLIs. Users familiar with this type of interface should quickly become accustomed to the ACLI. Using the ACLI You can access the ACLI either through a direct console connection, a Telnet connection, or an SSH connection.
PAGE 16
HOW TO USE THE ACLI USING THE ACLI Password: [Your password does not echo on the display.] ACMEPACKET# If your entry is incorrect, the system issues an error message and you can try again. You are allowed three failed attempts before the system issues an error message telling you that there are excess failures. If this occurs, you will be returned to User mode where you can start again. System Access You can access the ACLI using the different means described in this section.
PAGE 17
USING THE ACLI HOW TO USE THE ACLI prompts you for the action you want to take: view the displays’s next line or next page, show the entire display at once, or quit the display. You cannot change setting persistently, and need to change them every time you log in. • Configurable page size—The page size defaults to 24 X 80. You can change the terminal screen size by using the new cli terminal height and cli terminal width commands. The settings for terminal size are not preserved across ACLI sessions.
PAGE 18
HOW TO USE THE ACLI COMMAND ABBREVIATION AND COMPLETION Category Moving the Cursor Deleting Characters Displaying Previous Command Lines Hotkey Description Moves the cursor back one character. Moves the cursor back one word. Moves the cursor forward one character. Moves the cursor forward one word. Moves the cursor to the beginning of the command line. Moves the cursor to the end of the command line. Redraws the screen.
PAGE 19
ACLI MENUS HOW TO USE THE ACLI generate-certificate-request generate-key ACMEPACKET# generate-key ACLI Menus The ACLI provides menus for system commands and for configuration elements in the Net-Net SBC. To access these menus, enter a question mark (?) at the system prompt. This action displays the entire menu for the system command or configuration element. Configuration Element and System Command Menus Command menus and configuration element menus display similarly in the ACLI.
PAGE 20
HOW TO USE THE ACLI CONTEXT-SENSITIVE HELP Context-Sensitive Help In addition to the information that ACLI menus offer, context-sensitive help can assist you with navigation and configuration. Within this one-line entry, you have access to context-sensitive help that tells you what values are valid for a given field and when you have completed an entry. When the no further known parameters line appears, the ACLI is informing you that there is no subsequent information to enter.
PAGE 21
CONTEXT-SENSITIVE HELP HOW TO USE THE ACLI mbcd MBCD status media show media interface information memory memory statistics mgcp ALG MGCP status nat show NAT table net-management-control Network Management Controls Statistics packet-trace displays the current packet trace addresses privilege show current privilege level processes active process statistics prom-info show prom information radius radius accounting redundancy redundancy status registration SIP Registration Cache statu
PAGE 22
HOW TO USE THE ACLI CONFIGURING USING THE ACLI • —Displays the rest of the output in its entirety ACMEPACKET# show ? about credit information for acli acl show host access table algd ALG MGCP status arp ARP table buffers show memory buffer statistics clock system clock configuration show current configuration dns DNS information enum ENUM information ext-band-mgr External Bandwidth Manager status ext-clf-svr External CLF Server status features currently enabled features h248d
PAGE 23
WORKING WITH CONFIGURATION ELEMENTS HOW TO USE THE ACLI ACMEPACKET(trap-receiver)# community-name acme ACMEPACKET(trap-receiver)# show trap-receiver ip-address 10.0.0.1 filter-level Major community-name acme ACMEPACKET(trap-receiver)# done Working with Configuration Elements Configuring elements involves entering the ACLI path to the configuration element you want to configure, and then entering the parameter name followed by a space and proper data in accordance with the required format.
PAGE 24
HOW TO USE THE ACLI WORKING WITH CONFIGURATION ELEMENTS payload-type transport rtp req-bandwidth 100 frames-per-packet 500 parameters Using Done to Save Elements average-rate-limit 50 peak-rate-limit 55 max-burst-size 100 sdp-rate-limit-headroom 10 sdp-bandwidth disabled We strongly recommend that you save your configuration information as you work. This ensures that your configurations have been written to the system database. Every menu contains the done command.
PAGE 25
WORKING WITH CONFIGURATION ELEMENTS Editing HOW TO USE THE ACLI Editing individual configurations in the ACLI involves finding the element or field you need to update, entering the new information, and then saving the element. Besides configuring parameters with no value in them, you can also overwrite existing values. To edit an element: 1. Enter the configuration path of the element for which you want to edit. 2. Use the select command to choose an element to update.
PAGE 26
HOW TO USE THE ACLI Deleting WORKING WITH CONFIGURATION ELEMENTS There are two methods of deleting configurations. • You can delete the information for elements while you are still working with them. • You can delete all configuration information for a previously configured element. For either method, use the no command to clear configurations. Only Multiple Instance Elements can be deleted from the system. Single Instance Elements can not be deleted; they can only be edited.
PAGE 27
ACLI CONFIGURATION SUMMARIES HOW TO USE THE ACLI ACLI Configuration Summaries The ACLI offers several ways for you to view configuration summaries. While the most straightforward and commonly used method is the show command, the ACLI also provides summary information every time you execute the done command. Viewing Summaries The show command that appears for each ACLI configuration element allows you to view the configured information for a given element.
PAGE 28
HOW TO USE THE ACLI DATA ENTRY Data Entry To enter data using the ACLI, your entries must conform to required field formats. This section describes these formats, gives information about preset values, default values, and error messages. The final part of this section covers information about using quotation marks (“”) and parentheses (()) to enhance your data entry options and capabilities. ACLI Field Formats This section describes required data entry formats.
PAGE 29
DATA ENTRY HOW TO USE THE ACLI This field format cannot accept spaces. For example, U-S and M,W,F are valid day of week field entries. Enumerated Format Enumerated parameters allow you to choose from a preset list of values. To access the list of choices from within the ACLI, use the help function for the appropriate parameter. Hostname (or FQDN) Format Hostname (FQDN) entries consist of any number of Domain Labels, separated by periods, and one Top Label.
PAGE 30
HOW TO USE THE ACLI DATA ENTRY Text Format Text entries (e.g., description fields) do not need to follow a particular format. Text fields can accommodate any combination of printable numerical and alphabetical characters, spaces, and most symbols. Noted exceptions are the ampersand (&), the apostrophe (‘), and the less than symbol (<). Entries with spaces must be entered fully within quotation marks. For example, “This is the official Acme Packet Net-Net SBC configuration” is a valid text entry.
PAGE 31
DATA ENTRY HOW TO USE THE ACLI Message Description invalid number of arguments You either have entered too many arguments (or commands) on one line or you may not have quotation marks (“”) around your multi-word entry. error 500 saving ... The system could not save the data you entered to the system database. Special Entry Types: Quotation Marks and Parentheses The ACLI uses certain syntax in order to increase ease of use.
PAGE 32
HOW TO USE THE ACLI DATA ENTRY To enter a multi-word text value, surround that value either with quotation marks (“”) or parentheses (()). Generally, quotation marks are most commonly used to configure text fields. The example below shows how quotation marks (“”) surround a multi-word value.
PAGE 33
DATA ENTRY HOW TO USE THE ACLI ACMEPACKET(h323)# show h323-config state enabled log-level INFO response-tmo 4 connect-tmo 32 options noAliasInRCF ACMEPACKET(h323)# Version S-C6.1.
PAGE 34
HOW TO USE THE ACLI 34 Oracle Communications Session Border Controller ACLI Reference Guide DATA ENTRY Version S-C6.1.
PAGE 35
2 ACLI Commands A - M acl-show The acl-show command shows a list of denied ACL entries. Syntax acl-show Mode Superuser Release First appearance: 2.
PAGE 36
ACLI COMMANDS A - M ACTIVATE-CONFIG activate-config The activate-config command activates the current configuration on the Net-Net SBC to make it the running configuration. Syntax activate-config Mode Superuser Release First appearance: 1.2.1 Notes Before executing this command, be aware of the real time configuration (RTC) consequences on the operation of the Net-Net SBC.
PAGE 37
ARCHIVES ACLI COMMANDS A - M archives > delete Syntax delete LOGS Arguments Enter the filename of the log archive to delete The archives > delete command deletes the specified archive file from the Net-Net SBC. You must append “.tar.gz” to the filename when using this command. Use the archives > display command to list the available log archives to delete. Example ACMEPACKET(archives)# delete LOGS july_16.
PAGE 38
ACLI COMMANDS A - M ARP-ADD Notes Enter the password on remote host This command retrieves an archived log. If you do not include all the necessary arguments, the get command will prompt you for the arguments you omitted. The get command writes the retrieved file to the /code/logs/ path. Example ACMEPACKET(archives)# get LOGS may_31.
PAGE 39
ARP-CHECK Arguments ACLI COMMANDS A - M Select the media interface slot Values • 0—Left slot • 1—Right slot Select the media interface port Values • 0—Leftmost port • 1—Second from left port • 2—Third from left port (not applicable for GigE cards) • Enter the 3—Rightmost port (not applicable for GigE cards) VLAN identifier Enter the IP address Enter the MAC address in hexadecimal notation Mode Superuser Release First appearance: 1.
PAGE 40
ACLI COMMANDS A - M ARP-DELETE arp-delete The arp-delete command manually removes ARP entries from the ARP table.
PAGE 41
CHECK-SPACE-REMAINING ACLI COMMANDS A - M check-space-remaining The check-space-remaining command displays the remaining amount of space in the boot directory, code (or flash memory), and ramdrv devices. Syntax check-space-remaining Argument Select where to check the remaining space Values • boot • code • ramdrv Mode Superuser Release First appearance: 1.1 Notes The output of this command is in bytes.
PAGE 42
ACLI COMMANDS A - M CLEAR-ALARM clear-alarm The clear-alarm command clears a specified alarm. Syntax clear-alarm Arguments Enter a unique 32-bit integer that contains a 16-bit category name or number and a unique 16-bit identifier for the error or failure within that category Enter the task ID of the task that sent the alarm Release First appearance: 1.0 Notes For alarm identification and task codes for specific alarms, use the display-alarms command.
PAGE 43
CLEAR-CACHE ACLI COMMANDS A - M Syntax clear-cache enum [cache entry key | “all”] Arguments Enter the name of the specific EnumConfig for which you want to clear the cache Enter the cache key of the specific EnumConfig for which you want to clear the cache Enter all to clear all caches. In order for this command to work the DNS cache needs to be cleared.
PAGE 44
ACLI COMMANDS A - M CLEAR-DENY Example ACMEPACKET# clear-cache tls Mode Superuser Release First appearance: 5.0 clear-deny The clear-deny command deletes a denied ACL entry. Syntax clear-deny [ | “all”] Arguments Enter the index number of the ACL entry to delete <“all”> Delete all denied ACL entries Mode Superuser Release First appearance: 4.0 Notes Use the acl-show command to identify the index of a specific ACL entry.
PAGE 45
CLEAR-TRUSTED ACLI COMMANDS A - M clear-trusted The clear-trusted command deletes a trusted ACL entry. Syntax clear-trusted [ | “all”] Arguments Enter the index number of ACL entry to delete <“all”> Delete all trusted ACL entries Mode Superuser Release First appearance: 4.0 Notes Use the acl-show command to identify the index of a specific ACL entry. Use the clear-trusted all command to delete all of the trusted entries.
PAGE 46
ACLI COMMANDS A - M Example DELETE REALM-SPECIFICS ACMEPACKET# configure terminal delete realm-specifics The delete realm-specifics command used with a realm identifier deletes the specified realm, and the configurations and parameters associated with it. This command should be used ith the utmost care. Syntax delete realm-specifics Arguments —Enter the identifier for the realm you want to delete Mode Superuser Release First appearance: S-C6.1.
PAGE 47
DELETE-STATUS-FILE ACLI COMMANDS A - M Mode Superuser Release First appearance: 1.1 / Most recent update: 2.0 Example ACMEPACKET# delete-config Notes When the delete-config command is entered, the system gives the warning asking if you really want to erase either the current config or the current cached config. Enter a y to complete the deletion. delete-status-file The delete-status-file deletes the reboot status file. Syntax delete-status-file Mode Superuser Release First appearance: 1.
PAGE 48
ACLI COMMANDS A - M DISPLAY-CURRENT-CFG-VERSION Arguments Sort the output of the display-backups command output. This is an optional command. Mode User Release First appearance: 2.0 Example ACMEPACKET# display-backups display-current-cfg-version The display-current-cfg-version command displays the current configuration version. Syntax display-current-cfg-version Mode User Release First appearance: 1.2.
PAGE 49
ENABLE ACLI COMMANDS A - M Notes This command displays the version number of the running configuration, and integer value that is incremented by one for each new configuration version. Example ACMEPACKET# display-running-cfg-version enable The enable command changes the current ACLI session from User mode to Superuser mode. Syntax enable Mode User Release First appearance: 1.0 Notes Observing the command prompt can tell you if the Net-Net SBC is in user or superuser mode.
PAGE 50
ACLI COMMANDS A - M GENERATE-KEY Release First appearance: 4.1 Example ACMEPACKET# generate-certificate-request acmepacket generate-key The generate-key command allows you to generate a security key. Syntax generate-key Arguments Select the type of key you want to generate. The following is a list of valid security keys.
PAGE 51
LOAD IMAGE ACLI COMMANDS A - M Syntax kill Arguments Mode Superuser Release First appearance: 2.0 Notes You can use the show users command to view all active Telnet sessions and the index number associated with each session. You cannot use this command to terminate SSH or console sessions.
PAGE 52
ACLI COMMANDS A - M MANAGEMENT Values • emergency (1) • critical (2) • major (3) • minor (4) • warning (5) • notice (6) • info (7) • trace (8) • debug (9) • detail Enter the task name for the log level being set Change the log level for all Net-Net SBC tasks Mode Superuser Release First appearance: 1.0 / Most recent update: 1.1 Notes The log setting changes made by the log-level command are not persistent after a reboot.
PAGE 53
MONITOR ACLI COMMANDS A - M monitor The monitor command displays real-time media or signaling statistics. Syntax monitor Arguments Enter the media you want to monitor Enter the session you want to monitor Mode User Release First appearance: 1.0 Notes This command outputs real-time media and signaling statistics to the ACLI. Pressing a numerical digit (0-9) changes the refresh rate to that interval in seconds. By default, there is a 2 second refresh rate.
PAGE 54
ACLI COMMANDS A - M 54 Oracle Communications Session Border Controller ACLI Reference Guide MONITOR Version S-C6.1.
PAGE 55
3 ACLI Commands N - Z notify The notify command notifies a specific task or process of a condition that it should act.
PAGE 56
ACLI COMMANDS N - Z NOTIFY notify algd mgcp-endpoint Syntax notify algd mgcp-endpoint Arguments Example ACMEPACKET# notify algd mgcp-endpoint 1.2.0.1 Delete session and corresponding gateway entries for a specified gateway. The value is the endpoint name from the Audit Name field of the RSIP. If a gateway has multiple endpoints, then the last endpoint that sent the RSIP should be used as the endpoint ID.
PAGE 57
NOTIFY Example ACLI COMMANDS N - Z ACMEPACKET# notify radd reload notify sipd Syntax notify sipd Arguments The following are arguments for this command: Values • reload—Update configuration changes dynamically by reloading the configuration data that SIP functionality might need. This command cannot tear down any in-progress sessions, and it cannot tear down any listening sockets.
PAGE 58
ACLI COMMANDS N - Z NOTIFY notify * rotate-logs Syntax notify rotate-logs Arguments Enter the tasks’ process and protocol trace logs to rotate Values • sipd • sysmand • berpd • brokerd • lemd • mbcd • h323d • algd • radd • all Notes This command only applies until a reboot occurs; it is not persistent after a reboot.
PAGE 59
PACKET-CAPTURE ACLI COMMANDS N - Z packet-capture The packet-capture command captures and views packets from a designated interface.
PAGE 60
ACLI COMMANDS N - Z PACKET-TRACE Default Values Example n y[es] | n [o] ACMEPACKET# packet-capture modify 50 y packet-capture show Syntax packet-capture show Notes Displays a summary of the most recently captured packets on the screen Example ACMEPACKET# packet-capture show packet-capture detail Syntax packet-capture detail Arguments Mode Superuser Release First appearance: 1.0 / Most recent update: 1.2.
PAGE 61
PASSWORD-SECURE-MODE ACLI COMMANDS N - Z • local-port—Layer 4 port number on which the Net-Net SBC receives and from which it sends. This is an optional parameter; if no port is specified or if it is set to 0, then all ports will be traced. • remote-port—Layer 4 port to which the Net-Net SBC sends and from which it receives. This is an optional parameter; if no port is specified or if it is set to 0, then all ports are traced. Manually stop packet tracing on the Net-Net SBC.
PAGE 62
ACLI COMMANDS N - Z PING ping The ping command pings a remote IP address. Syntax ping [vlan] [source-ip] Arguments Enter the IP address of host to ping Enter the network interface or vlan to use. This is an optional argument. Enter the source IP address to use. This is an optional argument. Mode User Release First appearance: 1.
PAGE 63
REALM-SPECIFICS ACLI COMMANDS N - Z Release First appearance: 5.0 Example ACMEPACKET# prompt-enabled disabled realm-specifics The realm-specifics command displays all configuration elements that have a specified realm ID configured. Syntax realm-specifics Arguments Mode User Release First appearance: 2.0 Notes If a specified realm-ID appears as a configuration parameter in any configuration element, that full element is displayed on the screen.
PAGE 64
ACLI COMMANDS N - Z REGENERATE-CONFIG regenerate-config The regenerate-config command updates the configuration to the current version of the Net-Net SBC system software. Syntax regenerate-config Mode Superuser Release First appearance: 1.1 Notes This command rebuilds the configuration database information without causing downtime. You can use it after a system upgrade or if configuration information becomes corrupted.
PAGE 65
RESET ACLI COMMANDS N - Z Enter the collection groups you can configure to collect data information from. This is an optional argument and when no group is specified, the Net-Net SBC collects information from all groups.
PAGE 66
ACLI COMMANDS N - Z RESTORE-BACKUP-CONFIG • application—Reset the application statistics shown in the show application command • ebmd—Reset EMBD statistics • h323d—Reset the h323-related signaling statistics • mbcd—Reset mbcd-related statistics shown in the show mbcd command (except statistics related to high availability) • nsep-stats—Reset counters for NSEP-related statistics; to reset counters for a specific r-value, add the specific r-value to the end of the command • redundancy—Reset the redundancy s
PAGE 67
SAVE-CONFIG ACLI COMMANDS N - Z Restore the configuration to the last running configuration. This is an optional argument. Mode Superuser Release First appearance: 1.0 Notes Use the display-backups command to view the backups that are available to be restored. Example ACMEPACKET# restore-backup-config FEB_07.gz saved save-config The save-config command saves the current configuration to the Net-Net SBC’s last-saved configuration, stored in flash memory.
PAGE 68
ACLI COMMANDS N - Z Example SET-FRONT-INTERFACE ACMEPACKET# secret login set-front-interface The set-front-interface command quickly sets the parameters of the front media interfaces. This command is used to configure front interfaces on a one time basis. Use the phy-interface configuration element to permanently configure a physical interface.
PAGE 69
SET-FRONT-INTERFACE ACLI COMMANDS N - Z • 1—Right slot Select the media interface port Values • 0—Leftmost port • 1—Second from left port • 2—Third from left port (not applicable for GigE cards) • 3—Rightmost port (not applicable for GigE cards) Select the interface admin state Values • enabled—Enable auto-negotiation • disabled—Disable auto-negotiation Notes This command sets the auto-negotiation protocol for the front interfaces.
PAGE 70
ACLI COMMANDS N - Z SET-SYSTEM-STATE set-front-interface speed Syntax set-front-interface speed Arguments Select the media interface slot Values • 0—Left slot • 1—Right slot Select the media interface port Values • 0—Leftmost port • 1—Second from left port • 2—Third from left port (not applicable for GigE cards) • 3—Rightmost port (not applicable for GigE cards) Select the port speed for selected slot and port pair Values • 10—Set the por
PAGE 71
SHOW ACLI COMMANDS N - Z show The show command displays Net-Net SBC statistics, configurations, and other information. Many of the show commands display period and lifetime statistic counts. show about Syntax show about This command displays credit information including version number for the NetNet SBC. Example ACMEPACKET# show about show acl Syntax show acl Displays ACL information regarding either a specified entry or all entries.
PAGE 72
ACLI COMMANDS N - Z SHOW show algd Syntax show algd Displays ALGD statistics for either a specified command or all command statistics.
PAGE 73
SHOW ACLI COMMANDS N - Z • interface The second section of the show arp command displays contains the following information that refers only to media (front) interfaces: • interface • VLAN • IP Address • MAC address • time stamp • type The third section of the show arp command shows reachability data for all configured IP gateways. A section on ARP table information which contains CAM entry data is also included.
PAGE 74
ACLI COMMANDS N - Z SHOW This command displays information regarding the IP call replication for call recording (IPRCR) feature configured on the Net-Net SBC. Entering this command without the optional IPRCR ID displays all IPRCR endpoints configured on the NetNet SBC along with their state. Arguments [crs-id] You can specify a IPRCR whose information you want to view.
PAGE 75
SHOW ACLI COMMANDS N - Z • enum-config—Show the enum-config configuration • ext-policy-server—Show the external-policy-server configuration • h323-config—Show h323 configuration • h323-stack—Show all h323-stack configurations • iwf-stack—Show iwf-stack configuration • host-route—Show all host-route configurations • local-policy—Show all local-policy configurations • local-response-map—Show sip-local-map configuration • media-profile—Show all media-profile configurations • media-manager—Show media-manager
PAGE 76
ACLI COMMANDS N - Z SHOW • enforcement-profile—Show enforcement-profile configurations • sip-q850-map—Show sip-q850-map configuration • snmp-community—Show all snmp-community configurations • static-flow—Show all static-flow configurations • steering-pool—Show all steering-pool configurations • realm-group—Show realm-group configurations • surrogate-agent—Show all of the surrogate-agent configurations • system-config—Show system-config configuration • tls-profile—Show TLS profile configurations • translat
PAGE 77
SHOW ACLI COMMANDS N - Z • cache-entry—Look in the DNS cache for a specific entry Your entries must follow the formats below: –NAPTR records—NAPTR:abc.com –SRV records—SRV:_sip._tcp.abc.com –A records—A:abc.com Example ACMEPACKET# show dns stats show enum Sytnax show enum Displays ENUM statistics for your Net-Net SBC.
PAGE 78
ACLI COMMANDS N - Z SHOW show features Syntax show features This command shows the currently enabled features based on added licenses. Example ACMEPACKET# show features show h323d Syntax show h323d This command displays H.323 statistics for your Net-Net SBC. Arguments The following is a list of h323d statistics: Values • status—Display H.323 server status. The following statistics are displayed when this command is entered: –Incoming Calls—Number of incoming H.
PAGE 79
SHOW ACLI COMMANDS N - Z information about the session agent specified by its IP address in the argument. • groupconfig—Display H.323 session agent group configuration • agentstats—Display H.323 session agent statistics. show h323d agentstats shows the activity for the H.323 session agent that you specify in the argument. • groupstats—Display session information for session agent groups • h323stats—Display H.323 stacks and statistics on the NetNet SBC.
PAGE 80
ACLI COMMANDS N - Z SHOW Executing the show h323 command without any arguments will return the same output as using the status argument. Example ACMEPACKET# show h323d status show health Syntax show health In HA architectures, the show health command displays the following information: Example • Health score • Current Net-Net SBC HA state as active, standby, or out of service • If media flow information is synchronized for all supported protocols: SIP, H.323, and MGCP (true/false).
PAGE 81
SHOW ACLI COMMANDS N - Z The show interfaces command shows all information concerning the Net-Net SBC’s rear interfaces: • Flags (such as loopback, broadcast, promiscuous, ARP, running, and debug) • Type • Internet address • VLAN ID (if applicable) • Broadcast address (if applicable) • Netmask • Subnet mask (if applicable) • Gateway (if applicable) • Ethernet (MAC) address (if applicable) • Route metric • Maximum transfer unit size • Number of octets sent and received on this interf
PAGE 82
ACLI COMMANDS N - Z SHOW • TCP—Display all TCP statistics • UDP—Display all UDP statistics Executing the show ip command with no arguments returns the equivalent of the show ip statistics command. Example ACMEPACKET# show ip connections show logfile Syntax show logfile [filename] Display log files saved onto the Net-Net SBC. Entering this command without specifying a filename displays a complete list of log files. Arguments [filename] Specify the file whose logs you want to view.
PAGE 83
SHOW ACLI COMMANDS N - Z This command displays Local Routing Table (LRT) statistics on the Net-Net SBC. Arguments Example Display a specific entry in the LRT Display all LRT statistics ACMEPACKET# show lrt stats show mbcd Syntax show mbcd The show mbcd command displays MBCD statistics for your Net-Net SBC.
PAGE 84
ACLI COMMANDS N - Z SHOW –Flow-Released—Number of hairpined/spiraled flows released back into the original realm (when mm-in-realm or mm-in-network is disabled) –MSM-Release—Number of flows that have been released as part of the SIP distributed (multi-system) release feature –NAT Entries—Number of NAT table entries in the CAM established by MBCD for its flows. The NAT table can be viewed with the show nat commands.
PAGE 85
SHOW ACLI COMMANDS N - Z –Dynamic Trusted –Dynamic Blocked The following ACL statistics are shown for the Lifetime monitoring span: –Add Requests –Added –Removed –Dropped • errors—Display MBCD task error statistics, starting with a time stamp showing when the current period began; statistics for client and server are included.
PAGE 86
ACLI COMMANDS N - Z SHOW –Flow Update Failed—Number of errors encountered when attempting to update an entry in the NAT table upon receipt of the first packet for a media flow –Flow Latch Failed—Number of errors when attempting to locate an entry in the NAT table upon receipt of the first packet for a media flow –Pending Flow Expired—Number of flow timer expirations for pending flows that have not been added to the NAT table –ARP Wait Errors—Number of errors and timeouts related to obtaining the Layer 2 a
PAGE 87
SHOW ACLI COMMANDS N - Z flow that the active system replaced; when the flow is replaced, the steering ports are also reallocated properly (i.e.
PAGE 88
ACLI COMMANDS N - Z SHOW –Incoming errors sent—Number of errors sent in response to an mbcd modify Add outgoing statistics when an mbcd modify message is sent by the Net-Net SBC.
PAGE 89
SHOW ACLI COMMANDS N - Z –Outgoing requests sent—Number of MBCD notify commands sent from the Net-Net SBC –Outgoing replies received—Number of responses received in response to a sent notify message –Outgoing errors received—Number of errors received in response to a sent notify message • other—List statistics of mbcd transactions related to noncompliant protocols used by specific customers.
PAGE 90
ACLI COMMANDS N - Z SHOW –Ports Used—Number of ports used –Free Ports—Number of free ports –No Ports Avail—Number of times no steering ports were available –Ingress Band—Amount of bandwidth used for inbound flows –Egress Band—Amount of bandwidth used for outbound flows –BW Allocations—Number of times that bandwidth was allocated –Band Not Avail—Number of times a session was rejected due to insufficient bandwidth • redundancy—Display the equivalent of the show redundancy mbcd command • all—Display informat
PAGE 91
SHOW Arguments ACLI COMMANDS N - Z The following is a list of admin state arguments: Values • classify—Display network processor statistics; requires slot and port arguments • host-stats—Display statistics for the host processor including number of packets received at a specific port and types of packets received; requires slot and port arguments • frame-stats—Display frame counts and drops along the host path; does not require port and slot specification • network—Display network interf
PAGE 92
ACLI COMMANDS N - Z Example SHOW ACMEPACKET# show memory application show mgcp Syntax show mgcp This command displays MGCP statistics on the Net-Net SBC. Values Example The type of MGCP statistics you want to view.
PAGE 93
SHOW ACLI COMMANDS N - Z Values • by-index —Display a specified range of entries in the NAT table, with a maximum of 5024 entries. The syntax for using the show nat by-index command is: show nat by-index The default range is 1 through 200. The range corresponds to line numbers in the table, and not to the number of the entry itself. • in-tabular —Display a specified range of entries in the NAT table display in table form, maximum of 5024 entries.
PAGE 94
ACLI COMMANDS N - Z SHOW show nsep-stats Syntax show nsep-stats [all | rvalue] The show nsep-stats command displays information about inbound sessions and rvalues. Arguments Display information about inbound sessions and r-values for the Net-Net SBC’s NSEP support feature. This is an optional argument. View statistics for a specific r-value. An r-value is a namespace and priority combination entered in the following format: namespace.priority.
PAGE 95
SHOW ACLI COMMANDS N - Z Mode Superuser Release First appearance: 5.0 Example ACMEPACKET# show packet-trace show power The show power command allows you to view Net-Net SBC power supply information including the state of the power supply and the installation position.
PAGE 96
ACLI COMMANDS N - Z SHOW • acliTelnet2— Show acliTelnet2 process statistics • acliTelnet3— Show acliTelnet3 process statistics • acliTelnet4— Show acliTelnet4 process statistics • ebmd— Show embd process statistics • h323d— Show h323d process statistics • lid— Show lid process statistics • pusher— Show pusher process statistics • snmpd— Show snmpd process statistics • cliworker— Show CliWorker process statistics • berpd—Display statistics for the border element redundancy protocol tasks; only accessible i
PAGE 97
SHOW ACLI COMMANDS N - Z • total—Display the total statistics for all of the application processes applicable to your Net-Net SBC. The following fields explain the output of the show processes total command: –Svcs—Number of times the process performed actions for different services (e.g., sockets, timeout queues, etc.
PAGE 98
ACLI COMMANDS N - Z Example SHOW ACMEPACKET# show processes sysmand show prom-info Syntax show prom-info The show prom-info command displays hard-coded information about Net-Net SBC hardware.
PAGE 99
SHOW ACLI COMMANDS N - Z Values • accounting—Display the status of established RADIUS accounting connections. A successful RADIUS connection is displayed as READY, and an unsuccessful connection is displayed as DISABLED.
PAGE 100
ACLI COMMANDS N - Z Example SHOW ACMEPACKET# show realm realm1 show redundancy Syntax show redundancy Display HA statistics for a redundant Net-Net SBC.
PAGE 101
SHOW ACLI COMMANDS N - Z responded to it, but the client system did not receive the response in time and retransmitted its original request –Success responses—Number of HA requests that were received followed by a successful response to the client –Error responses—Number of HA requests that were received followed by a error response to the client –Request sent—Number of HA requests that were sent by the standby Net-Net SBC –Retransmission sent—Number of times an HA request was retransmitted after no respo
PAGE 102
ACLI COMMANDS N - Z SHOW Values • IP address—Enter the IP address of the registrar whose registration cache information you want to view. This value can be wildcarded. Display information for calls by their Internet-routable IP address. This allows you to view the endpoints associated with public addresses. Values • IP address—Enter the IP address whose registration cache information you want to view. This value can be wildcarded.
PAGE 103
SHOW ACLI COMMANDS N - Z –Refresh Extended—The number of times the expire time in a REGISTER response was extended due to the max-registerrefresh threshold –Surrogate Regs— The total number of surrogate registers –Surrogate Sent— The total number of surrogate registers sent –Surrogate Reject—The total number of surrogate register rejects –Surrogate Timeout— The total number of surrogate register timeouts Example ACMEPACKET# show registration sipd by user* show route-stats Syntax show route-stats The s
PAGE 104
ACLI COMMANDS N - Z SHOW show running-config Syntax show running-config The show running-config entered without any arguments displays the running configuration information in use on the Net-Net SBC. If you use any configuration element keyfield as an argument, this show command will display only that specified configuration element.
PAGE 105
SHOW ACLI COMMANDS N - Z • ClassPolicy—Show all ClassPolicy configurations • redundancy-config—Show redundancy-config configuration • ResponseMap—Show all ResponseMap configurations • rph-profile—Show rph-profile configurations • rph-policy—Show rph-policy configurations • session-agent—Show all session-agent configurations • session-group—Show all session-group configurations • session-translation—Show all session-translation configurations • translation-rules—Show all translation-rules configurations •
PAGE 106
ACLI COMMANDS N - Z SHOW • security-association—Show all security-association configurations • security-policy—Show all security-policy configurations • password-policy—Show password-policy configuration • session-constraints—Show all session-constraint configurations • system-access-list—Show all system-access-list configurations • tls-global—Show all tls-global configurations • inventory—Display an inventory of all configured elements on the Net-Net SBC Example ACMEPACKET# show running-config host-rout
PAGE 107
SHOW ACLI COMMANDS N - Z Values Example • session-cache—Display TLS session cache information Displays public key record information including login name, fingerprint, fingerprint raw, comment (detailed view only), and public key (detailed view only). Values • brief—View a brief display • detail—View a detailed display ACMEPACKET# show security ipsec spd m10 show sessions Syntax show sessions Displays session capacity for license and session use.
PAGE 108
ACLI COMMANDS N - Z SHOW Values • status—Display information about SIP transactions. These statistics are given for the Period and Lifetime monitoring spans. This display also provides statistics related to SIP media events. The following statistics are displayed when using the show sipd status command.
PAGE 109
SHOW ACLI COMMANDS N - Z –Early Media Exps—Flow timer expiration notifications received for media sessions that have not been completely set up due to an incomplete or pending INVITE transaction –Exp Media Drops—Number of flow timer expiration notifications from the MBCD that resulted in the termination of the dialog/session by the SIP application –Multiple OK Drops—Number of dialogs terminated upon reception of a 200 OK response from multiple UASs for a given INVITE transaction that was forked by a downs
PAGE 110
ACLI COMMANDS N - Z SHOW –Terminated—Number of times that the server received a 2xx response or never received an ACK in the “completed” state, and transitioned to the “terminated” state • client—Display statistics for SIP client events when the NetNet SBC is acting as a SIP client in its B2BUA role. Period and Lifetime monitoring spans are displayed.
PAGE 111
SHOW ACLI COMMANDS N - Z The following session statistics are shown for the Period and Lifetime monitoring spans, in addition to the current Active count: –Sessions—Identical to the identically named statistic on the show sipd status command –Initial—Displays sessions for which an INVITE of SUBSCRIBE is being forwarded –Early—Displays sessions for which the first provisional response (1xx other than 100) is received –Established—Displays sessions for which a success (2xx) response is received –Terminated—
PAGE 112
ACLI COMMANDS N - Z SHOW • redundancy—Display sipd redundancy statistics. Executing the show sipd redundancy command is the equivalent to the show redundancy sipd command • agents [hostname][method]—Display statistics related to defined SIP session agents. Entering this command without any arguments list all SIP session agents.
PAGE 113
SHOW ACLI COMMANDS N - Z arguments you can narrow the display to view just the interface and method you want to view.
PAGE 114
ACLI COMMANDS N - Z SHOW –CANCEL—Display the number of SIP transactions including a CANCEL method –BYE—Display the number of SIP transactions including a BYE method –ACK—Display the number of SIP transactions including an ACK method –INFO—Display the number of SIP transactions including an INFO method –PRACK—Display the number of SIP transactions including a PRACK method –SUBSCRIBE—Display the number of SIP transactions including a SUBSCRIBE method –NOTIFY—Display the number of SIP transactions including
PAGE 115
SHOW ACLI COMMANDS N - Z –503 Service Unavail—Number of times server was unable to handle the request due to a temporary overloading or maintenance of the server –5xx Server Error—Number of times the 5xx class of status code appeared –Response Retrsns—Number of response retransmissions sent and received –Transaction Timeouts— Number of times a transaction timed out.
PAGE 116
ACLI COMMANDS N - Z SHOW show snmp-community-table Syntax show snmp-community-table The show snmp-community-table command displays all information for configured SNMP communities including request and responses for each community. Example ACMEPACKET# show snmp-community-table show support-info Syntax show support info [filename] [custom | standard] This command allows you to gather a set of information commonly requested by the Acme Packet TAC when troubleshooting customers.
PAGE 117
SHOW Example ACLI COMMANDS N - Z ACMEPACKET# show temperature show timezone Syntax show timezone Displays the information set with the timezone-zet command including the name of the timezone, its minutes from UTC, and the start and stop date and hours for daylight saving time. Example ACMEPACKET# show timezone show trap-receiver Syntax show trap-receiver The show trap-receiver command displays trap receiver information for each configured SNMP community.
PAGE 118
ACLI COMMANDS N - Z Example SHOW ACMEPACKET# show users show version Syntax show version The show version command shows the OS version information including: the OS version number, the date that the current copy of the OS was made, and other information. Example ACMEPACKET# show version show virtual-interfaces Syntax show virtual-interface The show virtual-interface command shows the virtual interfaces for Net-Net SBC signaling services; for example, SIP-NAT external address, H.
PAGE 119
SSH-PASSWORD Example ACLI COMMANDS N - Z ACMEPACKET# show wancom ssh-password The ssh-password command creates SSH login accounts and passwords for secure access into a Net-Net SBC. Syntax ssh-password Arguments Enter the username of the new account or the username of the existing SSH account Enter a password for the new account or a new password for the existing account Mode Superuser Release First appearance: 2.
PAGE 120
ACLI COMMANDS N - Z Example STACK ACMEPACKET# ssh-pub-key import jdoe stack The stack command shows the function call stack trace for a specified stack. Syntax stack Arguments Mode Superuser Release First appearance: 1.0 Notes This command displays a list of nested routine calls for the specified stack. Each routine call and its parameters are shown. Example ACMEPACKET# stack sipd Enter a task name or task ID stop-task The stop-task command shuts down a specified task.
PAGE 121
SYSTIME-SET Example ACLI COMMANDS N - Z ACMEPACKET# switchover-redundancy-link 2 systime-set The systime-set command sets the system clock. Syntax systime-set Mode Superuser Release First appearance: 1.0 / Most recent update: 1.2.1 Notes The systime-set command prompts the user for the date and time and updates the system clock. The command will not set the system time if an invalid year, month, or day is entered.
PAGE 122
ACLI COMMANDS N - Z Arguments TCB Enter the name of the process that is writing to the specified logfile Enter an alternate logfile’s name for which you want new entries echoed to the console screen. Not entering the logfile argument forces the default log for the named process to be displayed on the screen. This argument is optional. Mode Superuser Release First appearance: 4.0 Notes Must be a valid logfile that is currently being written to.
PAGE 123
TEST-POLICY ACLI COMMANDS N - Z Release First appearance: 5.0 Example ACMEPACKET# test-pattern-rule expression ‘.*;tgid=(.+).*’ Notes This command exists both as a command and as a configuration element. test-policy The test-policy command is used to test routes configured for the address translation feature. This command is also found in the session-router path. Details on its use are found in the Configuration Elements N-Z chapter.
PAGE 124
ACLI COMMANDS N - Z Example TEST-TRANSLATION ACMEPACKET# test-policy time-of-day enabled test-translation The test-translation command is used to test translation rules configured for the address translation feature. This command is also found in the session-router path. Details on its use are found in the Configuration Elements N-Z chapter.
PAGE 125
WATCHDOG ACLI COMMANDS N - Z The verify-config command checks the consistency of configuration elements that make up the current configuration and should be carried out prior to activating a configuration on the Net-Net SBC. Mode Superuser Release First appearance: 1.3; Most recent update: S-C6.1.0 The verify-config command, entered either directly or via the save-config command, checks for address duplication for a given network-interface within a configuration.
PAGE 126
ACLI COMMANDS N - Z 126 Oracle Communications Session Border Controller ACLI Reference Guide WATCHDOG Version S-C6.1.
PAGE 127
4 Configuration Elements A-M access-control The access-control configuration element is used to manually create ACLs for the host path in the Net-Net SBC.
PAGE 128
CONFIGURATION ELEMENTS A-M ACCESS-CONTROL • TCP • UDP access—Select the access control type for this entry Default permit Values • permit—Puts the entry in trusted or untrusted list depending on the trust-level parameter. This gets promoted and demoted according to the trust level configured for the host. • deny—Puts this entry in the deny list. average-rate-limit—Enter the allowed sustained rate in bytes per second for host path traffic from a trusted source within the realm.
PAGE 129
ACCOUNT-CONFIG CONFIGURATION ELEMENTS A-M untrusted-signal-threshold—Enter the maximum number of signaling messages from untrusted sources allowed within the tolerance window Default 0 Values Min: 0 / Max: 999999999 deny-period—Enter the time period in seconds a deny-listed or deny entry is blocked by this ACL. The host is taken out of deny-list after this time period elapses.
PAGE 130
CONFIGURATION ELEMENTS A-M ACCOUNT-CONFIG strategy—Select the strategy used to select the current accounting server Default Hunt Values • hunt—Selects accounting servers in the order in which they are listed • failover—Uses first and subsequent servers in accounting server list until a failure is received from that server • roundrobin—Selects accounting server in order, distributing the selection of each accounting server evenly over time • fastestrtt—Selects accounting server with the fastest RTT obse
PAGE 131
ACCOUNT-CONFIG CONFIGURATION ELEMENTS A-M • reinvite—RADIUS Interim message is generated when a SIP session reINVITE message is received • reinvite-response—RADIUS Interim message is generated when a SIP session reINVITE is received and the system responds to it • reinvite-cancel—RADIUS Interim message is generated when a SIP session reINVITE is received, and the Reinvite is cancelled before the Net-Net SBC responds to it • unsuccessful-attempt—RADIUS Interim message is generated when a session set-up att
PAGE 132
CONFIGURATION ELEMENTS A-M ACCOUNT-CONFIG > ACCOUNT-SERVER ftp-password—Enter the password the Net-Net SBC will use to log in to the FTP server ftp-remote-path—Enter the file path the Net-Net SBC will use to work in on the FTP server intermediate-period—Set the time interval used to generate periodic interim records during a session Default 0 Values Min: 0 / Max: 999999999 account-servers—Access the account-server subelement cdr-output-redundancy—Enable or disable the redundant storage of commadelimit
PAGE 133
ACCOUNT-CONFIG > ACCOUNT-SERVER CONFIGURATION ELEMENTS A-M port—Enter the UDP port number associated with the accounting server is configured here Default 1813 Values Min: 1025 / Max: 65535 state—Enable or disable this account-server Default enabled Values enabled | disabled min-round-trip—Enter the time in milliseconds of the minimum RTT for an accounting message for use with the fastest RTT strategy method Default 250 Values Min: 10 / Max: 5000 max-inactivity—Enter the maximum time in second
PAGE 134
CONFIGURATION ELEMENTS A-M AUTHENTICATION RTC Status Unsupported Notes This list can contain as many accounting servers as necessary. By default, this list remains empty. RADIUS will not work unless an account server is configured. This is a multiple instance configuration element. authentication The authentication configuration element is used for configuring an authentication profile.
PAGE 135
AUTHENTICATION > RADIUS-SERVERS CONFIGURATION ELEMENTS A-M authentication > radius-servers The radius-servers subelement defines and configures the RADIUS servers that the Net-Net SBC communicates with.
PAGE 136
CONFIGURATION ELEMENTS A-M BOOTPARAM dead-time—Set the time in seconds before the Net-Net SBC retries a RADIUS server that it has designated as dead Default 10 Values Min: 10 / Max: 10000 authentication-methods—Select the authentication method the Net-Net SBC uses when communicating with the RADIUS server Default pap Values all | pap | chap | mschapv2 Path radius-servers is a subelement under the authentication configuration element under the security path.
PAGE 137
BOOTPARAM CONFIGURATION ELEMENTS A-M When booting off the system flash memory, this filename must always start with: /tffs0/. Values • tffs0=/boot • tffs1=/code inet on ethernet—Enter the internet address of the Net-Net SBC’s Ethernet interface. An optional subnet mask in the form inet_adrs:subnet_mask is available. If DHCP is used to obtain the configuration parameters, lease timing information may also be included.
PAGE 138
CONFIGURATION ELEMENTS A-M RTC Status CALL-RECORDING-SERVER Unsupported call-recording-server The call-recording-server configuration element allows you to forward both signaling and media packets to and from a realm to a specified destination.
PAGE 139
CAPTURE-RECEIVER CONFIGURATION ELEMENTS A-M capture-receiver The capture-receiver configuration element allows you to configure packet tracing functionality on your Net-Net SBC.
PAGE 140
CONFIGURATION ELEMENTS A-M CLASS-PROFILE Default 1024 Values 512 | 1024 | 2048 alternate-name—Enter the alternate name of the certificate holder trusted—Enable or disable trust of this certificate Default enabled Values enabled | disabled key-usage-list—Enter the usage extensions to use with this certificate record; can be configured with multiple values Default digitalSignature and keyEncipherment extended-key-usage-list—Enter the extended key usage extensions you want to use with this certific
PAGE 141
CODEC-POLICY Parameters CONFIGURATION ELEMENTS A-M profile-name—Enter the classification profile name to-address—Enter a list of addresses to match for when determining when to apply this class-policy. Addresses can take the forms: • +—E164 address • —Default address type • [].domain—Host and/or domain address media-policy—Enter the media-policy used for this class-policy Path class-policy is a subelement under the session-router path.
PAGE 142
CONFIGURATION ELEMENTS A-M DNS-CONFIG > SERVER-DNS-ATTRIBUTES Syntax dns-config Parameters client-realm—Enter the realm from which DNS queries are received. This value is the name of a configured realm. description—Describe the dns-alg configuration element client-address-list—Enter the IP client realm address(es) from which the Net-Net SBC can receive DNS queries. This field is required.
PAGE 143
DNS-CONFIG > SERVER-DNS-ATTRIBUTES > ADDRESS-TRANSLATION Values CONFIGURATION ELEMENTS A-M Min: 0 / Max: 999999999 address-translation—Access the address-translation subelement Path server-dns-attributes is a subelement under the dns-config element. The full path from the topmost ACLI prompt is: configure terminal > media-manager > dnsconfig > server-dns-attributes. Release First appearance: 1.3 RTC Status Supported Notes This is a multiple instance configuration element.
PAGE 144
CONFIGURATION ELEMENTS A-M ENFORCEMENT-PROFILE>SUBSCRIBE-EVENT allowed-methods—Select a list of SIP methods that you want to allow in this set. Default None Values INVITE, REGISTER, PRACK, OPTIONS, INFO, SUBSCRIBE, NOTIFY, REFER, UPDATE, MESSAGE, PUBLISH sdp-address-check—Enable or disable SDP address checking on the Net-Net SBC. Default Path disabled Values enabled | disabled enforcement-profile is an element under the session-router path.
PAGE 145
ENUM-CONFIG CONFIGURATION ELEMENTS A-M top-level-domain—Enter the domain extension used to query the ENUM servers for this configuration. The query name is a concatenation of the number and the domain. realm-id—Enter the realm-id is used to determine on which network interface to issue an ENUM query enum-servers—Enter the name of an ENUM server and its corresponding redundant servers to be queried. In a query, separate each server address with a space and enclose list within parentheses.
PAGE 146
CONFIGURATION ELEMENTS A-M EXT-POLICY-SERVER Release First appearance: 2.1.1/4.1 RTC Status Supported ext-policy-server The ext-policy-server is used for configuring PDP/RACF or CLF functionality on the Net-Net SBC.
PAGE 147
EXT-POLICY-SERVER CONFIGURATION ELEMENTS A-M realm—Enter the realm where the external policy server exists num-connections—Enter the number of TCP connections to external policy server Default 1 Values Min: 0 / Max: 65535 reserve-incomplete—Enable or disable admission requests being made before all of the details of the call are known Default enabled Values • Enabled—Supports the usual behavior when the AAR is sent upon SDP offer as well as SDP answer.
PAGE 148
CONFIGURATION ELEMENTS A-M H323 • sip-interface—This setting means that the Net-Net SBC will use the realm associated with the SIP interface on which the REGISTRATION request arrived domain-name-suffix—Sets the suffix for Origin-Realm and Origin-Host AVPs that have a payload string constructed as a domain name. If your entry does not include the dot, the system prepends one. Default .
PAGE 149
H323 CONFIGURATION ELEMENTS A-M Values EMERGENCY | CRITICAL | MAJOR | MINOR | WARNING | NOTICE | INFO | TRACE | DEBUG response-tmo—Set the number of seconds Net-Net SBC waits between sending a SETUP message and receiving no response before the call is torn down Default 4 Values Min: 0 / Max: 999999999 connect-tmo—Set the number of seconds Net-Net SBC waits between sending out a SETUP message and failing to receive a CONNECT message before the call is torn down.
PAGE 150
CONFIGURATION ELEMENTS A-M H323 RTC Status Supported Notes Unlike other single-instance configuration elements, the h323 element does not have to be selected before it can be viewed. The options field does not appear in the output for the show command within the h323 element or for running-config subcommand unless it contains configured values. This is a single instance configuration element. 150 Oracle Communications Session Border Controller ACLI Reference Guide Version S-C6.1.
PAGE 151
H323 > H323-STACKS CONFIGURATION ELEMENTS A-M h323 > h323-stacks The h323-stack subelement supports the SFIWF, FSIWF, H.323<—>SIP traffic, and general H.323 functionality.
PAGE 152
CONFIGURATION ELEMENTS A-M Notes H323 > H323-STACKS Default 0.0.0.0 This command is not RTC supported max-calls—Enter the maximum number of calls allowed for the network associated with this H.323 stack Notes Default 200 Values Min: 0 / Max: 232-1 This command is not RTC supported. max-channels—Enter the maximum number of concurrent channels (or pathways used between nodes) allowed for each call associated with this H.
PAGE 153
H323 > H323-STACKS Notes CONFIGURATION ELEMENTS A-M This parameter is not RTC supported. multicast—Enter the multicast address and port of the RAS Multicast IP Group used for automatic gatekeeper discovery. In order to clear this field, you must enter an empty string by typing a space. 224.0.1.41:1718 is the well known value used to discover the Gatekeeper. Notes Default 0.0.0.0:0 This parameter is not RTC supported. gatekeeper—Enter the IP address and RAS port of the Gatekeeper.
PAGE 154
CONFIGURATION ELEMENTS A-M H323 > H323-STACKS call-start-fast—Enable or disable conversion of an incoming Slow Start call into a Fast Start call. This H.323 stack must be the outgoing stack for conversion to work. If this field is set to disabled, the outgoing call will be set up with the same starting mode as the incoming call. This parameter must take the opposite value as the callstart-slow parameter.
PAGE 155
H323 > H323-STACKS Notes CONFIGURATION ELEMENTS A-M This command is not RTC supported. h245-stage—Select the H.245 stage at which the Net-Net SBC allows either of the following: • Transfer of the H.245 address to remote side of the call • Acting on the H.245 address sent by the remote side Default connect Values • • • • • • • • setup proceeding alerting connect early facility noh245 dynamic q931-start-port—Set the starting port number for Q.931 port range used for Q.
PAGE 156
CONFIGURATION ELEMENTS A-M HOST-ROUTE Values enabled | disabled rfc2833-mode—Select whether 2833/UII negotiation will be transparent to the NetNet SBC (pre-4.1 behavior), or use 2833 for DTMF and signal it in its TCS Default transparent Values transparent | preferred Path h323-stacks is a subelement under the h323 element. The full path from the topmost ACLI prompt is: configure terminal > session-router > h323 > h323stacks. Release First appearance: 1.2 / Most recent update: 4.
PAGE 157
IMS-AKA-PROFILE CONFIGURATION ELEMENTS A-M ims-aka-profile The ims-aka-profile configuration element establishes supports IP Media Subsystem-Authentication and Key Agreement, defined in 3GPPr7 (specifications in TS 33.203 and call flows in TS 24.228).
PAGE 158
CONFIGURATION ELEMENTS A-M IPSEC ipsec The ipsec configuration element allows you to configure security policies and security associations on your Net-Net SBC. Syntax ipsec Parameters security-policy—Enter the security-policy configuration element security-association—Enter the security-association configuration element Path ipsec is an element of the security path. The full path from the topmost ACLI prompt is: configure terminal > security> ipsec.
PAGE 159
IPSEC>SECURITY-ASSOCIATION CONFIGURATION ELEMENTS A-M Min: 0 / Max: 999999999 options—Enter the appropriate option name for the behavior you want to configure Path security-association is a subelement of the ipsec path. The full path from the topmost ACLI prompt is: configure terminal > security> ipsec>securityassociation. Release First appearance: S-C6.1.0 RTC Status Notes This is a single instance configuration element.
PAGE 160
CONFIGURATION ELEMENTS A-M IPSEC>SECURITY-ASSOCIATION>MANUAL network-interface—Enter the network interface and VLAN where this security association applies in the form of: interface_name:VLAN local-ip-addr—Enter the local IP address to match for traffic selectors for this SA remote-ip-addr—Enter the remote IP address to match for traffic selectors for this SA local-port—Enter the local port to match for traffic selectors for this SA Default 0 Values Min: 0 (disabled) / Max: 65535 remote-port—Enter the
PAGE 161
IPSEC>SECURITY-ASSOCIATION>TUNNEL-MODE CONFIGURATION ELEMENTS A-M auth-key—Enter the authentication key for the previously chosen authentication algorithm for this SA encr-key—Enter the encryption key for the previously chosen encryption algorithm for this SA aes-ctr-nonce—Enter the AES nounce. This only applies if aes-128-ctr or aes256-ctr are chosen as your encryption algorithm. Default 0 tunnel-mode—Enter the tunnel-mode subelement Path security-association is a subelement under the ipsec element.
PAGE 162
CONFIGURATION ELEMENTS A-M IPSEC>SECURITY-POLICY priority—Set the priority number of this security policy Default 0 Values Min: 0 / Max: 254 local-ip-addr-match—Enter the local IP address to match traffic selectors for this security policy Default 0.0.0.0 remote-ip-addr-match—Enter the remote IP address to match traffic selectors for this security policy Default 0.0.0.
PAGE 163
IPSEC>SECURITY-POLICY>OUTBOUND-SA-FINE-GRAINED-MASK RTC Status CONFIGURATION ELEMENTS A-M Supported ipsec>security-policy>outbound-sa-fine-grained-mask This configuration element allows you to configure a fine grained security policy.
PAGE 164
CONFIGURATION ELEMENTS A-M LICENSE Syntax iwf-config Parameters state—Enable or disable the Net-Net SBC’s IWF Default disabled Values enabled | disabled media-profiles—Set the default media SDP profiles that Net-Net SBC uses for Slow Start IWF calls.
PAGE 165
LOCAL-POLICY CONFIGURATION ELEMENTS A-M Syntax license Parameters add—Add a license by entering a key obtained from Acme Packet no—Delete licenses by feature. You are prompted to choose a license for deletion based on license features. Path licenses is an element under the system-config path. The full path from the topmost ACLI prompt is: configure terminal > system > license. Release First appearance: 2.
PAGE 166
CONFIGURATION ELEMENTS A-M LOCAL-POLICY > POLICY-ATTRIBUTES state—Enable or disable the local-policy element Default enabled Values enabled | disabled policy-priority—Set the policy priority parameter for this local policy. It is used to facilitate emergency sessions from unregistered endpoints. This value is compared against a policy priority parameter in a SIP interface configuration element.
PAGE 167
LOCAL-POLICY > POLICY-ATTRIBUTES CONFIGURATION ELEMENTS A-M in the local-policy, session-agent, and the sip-config. These carrier names are global in scope, especially if they are exchanged in TRIP.
PAGE 168
CONFIGURATION ELEMENTS A-M LOCAL-RESPONSE-MAP terminate-recursion—Terminate route recursion with this next hop Default disabled Values enabled | disabled methods—Enter the SIP methods you want to use for matching this set of policy attributes Path policy-attributes is a subelement under the local-policy element. The full path from the topmost ACLI prompt is: configure terminal > session-router > localpolicy > policy-attributes. Release First appearance: 1.0 / Most recent update: S-C6.1.
PAGE 169
LOCAL-RESPONSE-MAP > ENTRIES CONFIGURATION ELEMENTS A-M local-response-map > entries The entries subelement is used to add a local response map entry for RFC3326 support.
PAGE 170
CONFIGURATION ELEMENTS A-M LOCAL-ROUTING-CONFIG local-routing-config The local-routing-config element allows you to configure local route tables, giving the Net-Net SBC the ability to determine nest hops and map E.164 to SIP URIs locally, providing extensive flexibility for routing. Syntax local-routing-config Parameters name—Enter a unique identifier for the local route table.
PAGE 171
MEDIA-MANAGER-CONFIG CONFIGURATION ELEMENTS A-M Values enabled | disabled latching—Enable or disable the Net-Net SBC obtaining the source of the first packet received for a dynamic flow. This parameter is only applicable to dynamic flows. If packet source is unresolved, but Net-Net SBC expects a packet, it will use newly arrived packet’s source address if latching is enabled. All subsequent packets for the dynamic flow must come from the “latched” source address; otherwise, the packets are dropped.
PAGE 172
CONFIGURATION ELEMENTS A-M MEDIA-MANAGER-CONFIG Values Min: 0 / Max: 999999999 tcp-number-of-ports-per-flow—Enter the number of ports, inclusive of the server port, to use for media over TCP. The total number of supported flows is this value minus one. Default 2 Values Min: 2 / Max: 5 hnt-rtcp—Enable or disable support of RTCP when the Net-Net SBC performs HNT. If disabled, the Net-Net SBC will only do RTP for endpoints behind a NAT.
PAGE 173
MEDIA-MANAGER-CONFIG CONFIGURATION ELEMENTS A-M red-mgcp-port—Enter the number of the port for checkpointing MGCP signaling associated with the HA interface. Setting the red-mgcp-port value to 0 disables MGCP HA. Notes Default 1986 Values Min: 1025 / Max: 65535 This parameter is not RTC supported. red-max-trans—Set the size of media flow and MGCP signaling transaction lists (i.e.
PAGE 174
CONFIGURATION ELEMENTS A-M MEDIA-MANAGER-CONFIG Values Min: 1 / Max: 100 min-media-allocation—Enter the minimum number of entries devoted specifically to media flows Default 32000 Values Min: 0 / Max: 62988 for 64K Cam; 251952 for 256K Cam min-trusted-allocation—Enter the minimum number of entries devoted specifically to trusted flows Default 1000 Values Min: 0 / Max: 62988 for 64K Cam; 120000 for 256K Cam deny-allocation—Enter the number of entries devoted specifically to denied entries Default
PAGE 175
MEDIA-MANAGER-CONFIG CONFIGURATION ELEMENTS A-M fragment-msg-bandwidth—Enter the maximum bandwidth that can be used by IP fragment messages Default 0 Values Min: 0 (fragment packets are treated as untrusted bandwidth); 2000 / Max: 10000000 rfc2833-timestamp—Enable or disable use of a timestamp value calculated using the actual time elapsed since the last RTP packet for H.
PAGE 176
CONFIGURATION ELEMENTS A-M MEDIA-POLICY media-policy The media-policy element sets the TOS/DiffServ values that define an individual type or class of service. Syntax media-policy Parameters name—Name of this media policy tos-settings—Enter into the tos-values subelement Path media-policy is an element under the media-manager path. The full path from the topmost ACLI prompt is: configure terminal > media-manager > media-policy.
PAGE 177
MEDIA-PROFILE CONFIGURATION ELEMENTS A-M Path tos-settings is a subelement under the media-policy element. The full path from the topmost ACLI prompt is: configure terminal > media-manager > mediapolicy>tos-settings. Release First appearance: 1.2.1 RTC Status Supported Notes This configuration element sets the Packet Marking for Media features and defines an individual type or class of service for the Net-Net SBC. Media policies can be chosen on a per-realm basis.
PAGE 178
CONFIGURATION ELEMENTS A-M MEDIA-PROFILE frames-per-packet—Enter the number of frames per RTP packet. This field is used to specify a media profile to facilitate Slow Start translations to Fast Start. A value of 0 means that this field is not being used.
PAGE 179
MEDIA-PROFILE CONFIGURATION ELEMENTS A-M RTC Status Supported Notes This element supports new SDP formats when they are defined. This element is used to associate bandwidth requirements with SDP requirements from information passed during the establishment of sessions. The names established in the media-profile elements are used to populate the corresponding fields in other elements. This is a multiple instance configuration element. Version S-C6.1.
PAGE 180
CONFIGURATION ELEMENTS A-M MGCP-CONFIG mgcp-config The mgcp-config element provides ALG functionality for MGCP messages between media gateways and media gateway controllers.
PAGE 181
MGCP-CONFIG CONFIGURATION ELEMENTS A-M Default 0.0.0.0 public-gw-port—Enter the port on media interface in the public realm. This field value is the media gateway port that the Net-Net SBC uses to communicate with the call agent or softswitch. Default 2427 Values Min: 1025 / Max; 65535 second-public-gw-port—Enter the second UDP port on public-gw-address where Net-Net SBC receives packets from the call agent or softswitch.
PAGE 182
CONFIGURATION ELEMENTS A-M MGCP-CONFIG divisor—Enter the unit for computing name of an endpoint. This field is used to determine the number for the LinePrefix or LineUnit. The remainder of the private IP address divided by this number becomes the prefix/unit number. If FQDNs are used for network addressing, the divisor field is not used. Default 256 Values 256 | 65535 | 16777216 | 4294967296 unit-prefix—Enter the prefix for the unit term of the endpoint name.
PAGE 183
MGCP-CONFIG CONFIGURATION ELEMENTS A-M Values 5xx return codes per RFC 3435 ca-failover-ip-addresses—Enter the IP addresses for call agent redundancy support. You must enter the list of IP addresses enclosed in parentheses and separate each IP address with a . You can enter one or more entries. options—Enter the MGCP options. Used to place 911 calls for MGCP by use of the Via parameter.
PAGE 184
CONFIGURATION ELEMENTS A-M MGCP-CONFIG 184 Oracle Communications Session Border Controller ACLI Reference Guide Version S-C6.1.
PAGE 185
5 Configuration Elements N-Z net-management-control The net-management-control configuration element allows you to control multimedia traffic, specifically for static call gapping and 911 exception handling. These controls limit the volume or rate of traffic for a specific set of dialed numbers or dialed number prefixes.
PAGE 186
CONFIGURATION ELEMENTS N-Z NET-MANAGEMENT-CONTROL realm-next-hop—Enter the realm identifier to designate the realm of the next hop when the treatment type is DIVERT protocol-next-hop—Enter the signaling protocol for the next hop when the treatment type is DIVERT status-code—Enter the SIP response code that you want the Net-Net SBC to use when the treatment method is REJECT Default 503 Values Min: 1 / Max: 699 cause-code—Enter the Q.
PAGE 187
NETWORK-INTERFACE CONFIGURATION ELEMENTS N-Z Release First appearance: 4.1.1 RTC Status Supported network-interface The network-interface element creates and configures a logical network interface.
PAGE 188
CONFIGURATION ELEMENTS N-Z NETWORK-INTERFACE gw-heartbeat—Access the gateway-heartbeat subelement dns-ip-primary—Enter the IP address of the primary DNS to be used for this interface dns-ip-backup1—Enter the IP address of the first backup DNS to be used for this interface dns-ip-backup2—Enter the IP address of the second backup DNS to be used for this interface dns-domain—Set the default domain name used to populate incomplete hostnames that do not include a domain. Entries must follow the Name Format.
PAGE 189
NETWORK-INTERFACE > GW-HEARTBEAT CONFIGURATION ELEMENTS N-Z network-interface > gw-heartbeat The gw-heartbeat subelement supports the front interface link failure detection and polling feature.
PAGE 190
CONFIGURATION ELEMENTS N-Z NETWORK-PARAMETERS network-parameters The network-parameters element enables and configures the TCP keepalive feature used for keeping H.323 connections open.
PAGE 191
NETWORK-PARAMETERS CONFIGURATION ELEMENTS N-Z Path network-parameters is an element under the system path. The full path from the topmost ACLI prompt is: configure terminal > system > network-parameters. Release First appearance: 2.0; Last updated: S-C6.1.0 RTC Status Supported Notes This is a single instance configuration subelement. Version S-C6.1.
PAGE 192
CONFIGURATION ELEMENTS N-Z NTP-SYNC ntp-sync The ntp-sync element sets the ntp server IP address for correct and accurate time synchronization. Syntax ntp-sync Parameters add-server—Add IP address of NTP server; entries must follow the IP Address Format del-server—Remove a previously entered NTP server. Entries must follow the IP Address Format. Path ntp-sync is a top-level element.
PAGE 193
PASSWORD-POLICY CONFIGURATION ELEMENTS N-Z call-load-reduction—Enter the percentage by which the Net-Net SBC will reduce calls to the realm if the major-rfactor is exceeded; a value of 0 means the call load will not be reduced Default 0 Values Min: 0 / Max: 100 Path qos-constraints is an element under the session-router path. The full path from the topmost ACLI prompt is: configure terminal > session-router> qosconstraints. Release First appearance: S-C6.1.
PAGE 194
CONFIGURATION ELEMENTS N-Z Parameters PHY-INTERFACE name—Enter the name for this physical interface. Physical interfaces with an operation-type of Control or Maintenance must begin with “wancom.” This is a required field. Entries in this field must follow the Name Format. Name values for the phy-interface must be unique. operation-type—Select the type of physical interface connection Default Control Values • Media—Front-panel interfaces only.
PAGE 195
Q850-SIP-MAP CONFIGURATION ELEMENTS N-Z speed—Set the speed in Mbps of the front-panel 10/100 Phy interfaces; this field is only used if the auto-negotiation field is set to disabled for 10/100 Phy cards Default 100 Values 10 | 100 wancom-health-score—Enter the amount to subtract from the Net-Net SBC’s health score if a rear interface link goes down Default 50 Values Min: 0 / Max: 100 Notes This parameter is not RTC supported Path phy-interface is an element under the system path.
PAGE 196
CONFIGURATION ELEMENTS N-Z Parameters REALM-CONFIG q850-cause—Enter the q850 cause code to map to a SIP reason code sip-status—Enter the SIP response code that maps to this q850 cause code Values Min: 100 / Max: 699 sip-reason—Describe the mapped SIP response code Path entries is a subelement under the q850-sip-map configuration element, which is located under the session-router path. The full path from the topmost ACLI prompt is: configure terminal > session-router > q850-sip-map > entries.
PAGE 197
REALM-CONFIG CONFIGURATION ELEMENTS N-Z network-interfaces—Enter the network interface through which this realm can be reached. Entries in this parameter take the form: :.
PAGE 198
CONFIGURATION ELEMENTS N-Z REALM-CONFIG Default 0 Values Min: 0 / Max: 232-1 max-jitter—Enter the maximum jitter in milliseconds allowed for flows within this realm. If this field is set to 0, then no alarm condition is set and no requests to/from the realm are rejected. Reserved for future use. Default 0 Values Min: 0 / Max: 232-1 max-packet-loss—Enter the maximum packet loss percentage in hundredths of a percent allowed for flows within this realm.
PAGE 199
REALM-CONFIG CONFIGURATION ELEMENTS N-Z early-media-allow—Select the early media suppression for the realm Values • none: No early media is allowed in either direction • both: Early media is allowed in both directions • reverse: Early media received by Net-Net SBC in the reverse direction is allowed additional-prefixes—Enter one or more additional address prefixes. Not specifying the number of bits to use implies all 32 bits of the address are used to match.
PAGE 200
CONFIGURATION ELEMENTS N-Z REALM-CONFIG average-rate-limit—Enter the average data rate in bits per second for host path traffic from a trusted source Default 0 (disabled) Values Min: 0 / Max: 4294967295 access-control-trust-level—Select a trust level for the host within the realm Default none Values • high—Hosts always remains trusted • medium—Hosts belonging to this realm can get promoted to trusted, but can only get demoted to untrusted. Hosts will never be put in black-list.
PAGE 201
REALM-CONFIG CONFIGURATION ELEMENTS N-Z Values enabled | disabled user-cac-mode—Set this parameter to the per user CAC mode that you want to use Default none Values • none—No user CAC for users in this realm • AOR—User CAC per AOR • IP—User CAC per IP user-cac-bandwidth—Enter the maximum bandwidth per user for dynamic flows to and from the user. By leaving this parameter set to 0 (default), there is unlimited bandwidth and the per user CAC feature is disabled for constraint of bandwidth.
PAGE 202
CONFIGURATION ELEMENTS N-Z REALM-CONFIG options—Enter any optional features or parameters constraint-name—Enter the name of the constraint you want to use for this realm call-recording-server-id—Enter the name of the call recording server associated with this realm icmp-detect-multiplier—Enter the multiplier to use when determining how long to send ICMP pings before considering a target unreachable.
PAGE 203
REALM-GROUP CONFIGURATION ELEMENTS N-Z Values enabled | disabled stun-server-ip—Enter the IP address for the primary STUN server port Default 0.0.0.0 stun-server-port—Enter the port to use with the stun-server-ip for primary STUN server port Default 3478 Values Min. 1025/Max. 65535 stun-changed-ip—Enter the IP address for the CHANGED-ADDRESS attribute in Binding Requests received on the primary STUN server port; must be different from than the one defined for the stun-server-ip Default 0.0.0.
PAGE 204
CONFIGURATION ELEMENTS N-Z REDUNDANCY early-media-allow-direction—Set the direction for which early media is allowed for this realm group. Default both Values • none—Turns off the feature for this realm group by blocking early media • reverse—Allows early media to flow from called to caller • both—Allows early media to flow to/from called and caller state—Enable or disable this realm group Default disabled Path Values enabled | disabled realm-group is an element of the media-manager path.
PAGE 205
REDUNDANCY CONFIGURATION ELEMENTS N-Z • detail health-threshold—Enter the health score at which standby Net-Net SBC switches over to the Active state and takes control of all system functionality as the active Net-Net SBC Default 75 Values Min: 1 / Max: 100 emergency-threshold—Enter the low health score value that triggers the initializing standby Net-Net SBC to become the active Net-Net SBC immediately.
PAGE 206
CONFIGURATION ELEMENTS N-Z REDUNDANCY Values Min: 5 / Max: 999999999 becoming-active-time—Enter the time in milliseconds a previously standby NetNet SBC takes to become active. This field applies to the following scenarios: • When the health of an active Net-Net SBC has failed • When the standby Net-Net SBC is healthier than the active Net-Net SBC This is a transitional state.
PAGE 207
REDUNDANCY CONFIGURATION ELEMENTS N-Z basis by the value configured in the gw-heartbeat: heartbeat field of the gwheartbeat subelement in the network-interface element. Notes Default 0 Values Min: 0 / Max: 65535 This parameter is not RTC supported. gateway-heartbeat-retry—Enter the number of front interface gateway heartbeat retries after a front interface gateway failure occurs.
PAGE 208
CONFIGURATION ELEMENTS N-Z REDUNDANCY > PEERS Release First appearance: 1.1 / Most recent update: 1.2.1 RTC Status This element has both supported and unsupported parameters. Unsupported parameters are marked with a note. Notes This is a single instance configuration element. redundancy > peers The peers subelement establishes the name and state of an HA node.
PAGE 209
REDUNDANCY > PEERS > DESTINATIONS CONFIGURATION ELEMENTS N-Z redundancy > peers > destinations The destinations subelement establishes locations where health and state information is sent and received. Syntax destinations
Parameters address—Enter the IP address and port on the interface of the HA Net-Net SBC peer where this HA Net-Net SBC peer sends HA messages. The parameter format is an IP address and port combination (IP address:port).
PAGE 210
CONFIGURATION ELEMENTS N-Z RTC Status RPH-PROFILE Supported rph-profile The rph-profile contains information about how the Net-Net SBC should act on the namespace(s) present in Resource-Priority headers. Syntax rph-profile Parameters name—Enter the name of this RPH profile; this is the value used when applying this RPH profile to an NMC rule.
PAGE 211
SESSION-AGENT CONFIGURATION ELEMENTS N-Z session-agent The session-agent element defines a signaling endpoint that can be configured to apply traffic shaping attributes and information regarding next hops or previous hops.
PAGE 212
CONFIGURATION ELEMENTS N-Z SESSION-AGENT transport-method—Select the IP protocol used for communicating with this session agent Default UDP Values • UDP—UDP used as the transport method • UDP+TCP—Initial transport method of UDP, followed by a subsequent transport method of TCP if and when a failure or timeout occurs in response to a UDP INVITE. If this transport method is selected, then INVITEs are always sent via UDP as long as a response is received.
PAGE 213
SESSION-AGENT CONFIGURATION ELEMENTS N-Z max-outbound-sessions—Enter the maximum number of simultaneous outbound sessions that are allowed to the session agent; 0 means there is no constraint Default 0 Values Min: 0 / Max: 232-1 max-burst-rate—Enter the number of session invitations per second allowed to be sent to or received from the session agent. A session is rejected if the calculated persecond rate exceeds this value.
PAGE 214
CONFIGURATION ELEMENTS N-Z SESSION-AGENT sustain-rate-window—Enter the sustained window period in seconds used to measure the sustained rate. The term “window” refers to the period of time over which the sustained rate is computed.
PAGE 215
SESSION-AGENT CONFIGURATION ELEMENTS N-Z response-map—Enter the name of the sip-response-map element set in the session router element to use for translating inbound final response values ping-method—Enter the SIP message/method to use to “ping” a session agent ping-interval—Set how often to ping a session agent in seconds Default 0 Values Min: 0 / Max: 999999999 ping-send-mode—Set the mode with which you want to send ping messages to session agents Default keep-alive Values keep-alive | continuous
PAGE 216
CONFIGURATION ELEMENTS N-Z SESSION-AGENT ping-to-user-part—Set the user portion of the To: header in a session agent ping message ping-from-user-part—Set the user portions of the Request-URI and the From: header in a session agent ping message li-trust-me—Set this parameter to enabled to designate this session agent as trusted for P-DCS-LAES use Default disabled Values enabled | disabled in-manipulationid—Enter the name of the SIP header manipulations configuration to apply to the traffic entering the
PAGE 217
SESSION-AGENT CONFIGURATION ELEMENTS N-Z Values • none—No early media allowed • reverse—Allow early media in the direction of calling endpoint • both—Allow early media in both directions invalidate-registrations—Enable or disable the invalidation of all the registrations going to this SA when its state transitions to “out of service” Default disabled Values enabled | disabled rfc2833-mode— Select whether 2833/UII negotiation will be transparent to the Net-Net SBC (pre-4.
PAGE 218
CONFIGURATION ELEMENTS N-Z SESSION-AGENT Default 0 Values Min: 0 / Max: 999999999 max-outbound-sustain-rate—Enter the maximum outbound sustain rate in INVITEs per second Default 0 Values Min: 0 / Max: 999999999 codec-policy—Enter the codec policy you want to apply to this session agent enforcement-profile—Enter the enforcement policy set of allowed SIP methods you want to use for this session agent Default None Values Name of a valid enforcement-profile element refer-call-transfer—Enable or di
PAGE 219
SESSION-AGENT>RATE-CONSTRAINTS CONFIGURATION ELEMENTS N-Z Default None Values SIP Response codes out-service-response-codes—Enter the response codes that take a session agent out of service when they appear in its response to the Net-Net SBC’s ping request or any dialog-creating request.
PAGE 220
CONFIGURATION ELEMENTS N-Z SESSION-AGENT-GROUP Default 0 Values Min: 0 / Max: 999999999 max-inbound-sustain-rate—For the SIP method you set in the method parameter, enter the number to restrict the inbound sustain rate on the SIP interface where you apply these constraints Default 0 Values Min: 0 / Max: 999999999 max-outbound-sustain-rate—For the SIP method you set in the method parameter, enter the number to restrict the outbound sustain rate on the SIP interface where you apply these constraints
PAGE 221
SESSION-AGENT-GROUP CONFIGURATION ELEMENTS N-Z strategy—Select the session agent allocation options for the session-agent-group. Strategies determine how session agents will be chosen by this session-agentgroup element. Default Hunt Values • Hunt—Selects session agents in the order in which they are listed • RoundRobin—Selects each session agent in the order in which they are listed in the dest list, selecting each agent in turn, one per session.
PAGE 222
CONFIGURATION ELEMENTS N-Z SESSION-CONSTRAINTS session-constraints The session-constraints configuration element allows you to create session layer constraints in order to manage and police session-related traffic including maximum concurrent sessions, maximum outbound concurrent sessions, maximum session burst rate, and maximum session sustained rate.
PAGE 223
SESSION-CONSTRAINTS CONFIGURATION ELEMENTS N-Z Default 0 Values Min: 0 / Max: 999999999 max-sustain-rate—Enter the maximum rate of session invitations allowed within the current window for this constraint Default 0 Values Min: 0 / Max: 999999999 max-inbound-sustain-rate—Enter the maximum inbound sustain rate (of session invitations allowed within the current window) for this constraint Default 0 Values Min: 0 / Max: 999999999 max-outbound-sustain-rate—Enter the maximum outbound sustain rate (o
PAGE 224
CONFIGURATION ELEMENTS N-Z SESSION-CONSTRAINTS>RATE-CONSTRAINTS sustain-rate-window—Enter the time in seconds used to measure the sustained rate Default 0 Values Min: 0 / Max: 999999999 rate-constraints—Access the rate-constraints subelement Path session-constraints is an element of the session-router path. The full path from the topmost ACLI prompt is: configure terminal > session-router > sessionconstraints. Release First appearance: 4.1.
PAGE 225
SESSION-ROUTER-CONFIG CONFIGURATION ELEMENTS N-Z max-outbound-sustain-rate—For the SIP method you set in the method parameter, enter the number to restrict the outbound sustain rate on the SIP interface where you apply these constraints Default 0 Values Min: 0 / Max: 999999999 Path session-constraints> rate-constraints is an element of the session-router path. The full path from the topmost ALCI prompt is: configure terminal > sessionrouter > session-constraints > rate-constraints.
PAGE 226
CONFIGURATION ELEMENTS N-Z SESSION-ROUTER-CONFIG sr-secondary-name—Enter the name of the secondary session router; must match the target name in the boot parameters of the secondary SR sr-secondary-address—Enter the IP Address of the maintenance interface of the secondary session router. This must match the "inet on ethernet" address in the boot parameters of the secondary SR. divide-resources—Indicate whether or not resources are divided by the number of configured session directors.
PAGE 227
SESSION-ROUTER > HOLIDAYS CONFIGURATION ELEMENTS N-Z session-router > holidays The session-router-holidays configuration subelement establishes the holiday schedule to which the Net-Net SBC conforms. Syntax holidays Parameters date—Enter the date of a holiday in YYYY-MM-DD format. A session router holidays entry will not function properly unless it is a valid date.
PAGE 228
CONFIGURATION ELEMENTS N-Z SIP-CONFIG and rule3 last. This is a multiple instance configuration element. sip-config The sip-config element is used to define the parameters for this protocol specific to the Net-Net SBC communicating with SIP.
PAGE 229
SIP-CONFIG CONFIGURATION ELEMENTS N-Z Default enabled Values enabled | disabled home-realm-id—Enter the identifier of the home realm. This is the network to which the Net-Net SBC’s SIP proxy (B2BUA) is logically connected. If configured, this field must correspond to a valid identifier field entry in a realm-config. egress-realm-id—Enter the default egress realm identifier nat-mode—Select the home realm NAT mode.
PAGE 230
CONFIGURATION ELEMENTS N-Z SIP-CONFIG Values Min: 0 / Max: 999999999 max-timer—Enter the maximum retransmission timeout in milliseconds for SIP. In RFC 3261, this value is also referred to as TIMER_T2. Default 4000 Values Min: 0 / Max: 999999999 trans-expire—Enter the TTL1 in seconds for SIP transactions. This timer is equivalent to TIMER_B in RFC 3261, and the same value is used for TIMER_D, TIMER_F, TIMER_H, and TIMER_J as set out in the same RFC.
PAGE 231
SIP-CONFIG CONFIGURATION ELEMENTS N-Z red-sync-comp-time—Enter the time in milliseconds the standby Net-Net SBC waits before checkpointing with the active Net-Net SBC to obtain the latest SIP signaling transaction information once the initial checkpointing process is complete Notes Default 1000 Values Min: 0 / Max: 999999999 This parameter is not RTC supported. options—Enter customer-specific features and/or parameters.
PAGE 232
CONFIGURATION ELEMENTS N-Z SIP-CONFIG Default disabled Values enabled | disabled nsep-sa-sessions-rate—Enter maximum acceptable number of SIP INVITES (NSEP sessions) per second to allow for SIP session agents. 0 means there is no limit.
PAGE 233
SIP-FEATURE CONFIGURATION ELEMENTS N-Z sip-feature The sip-feature element defines how the Net-Net SBC’s B2BUA should treat specific option tags in SIP headers.
PAGE 234
CONFIGURATION ELEMENTS N-Z SIP-FEATURE require-mode-outbound—Select the treatment of feature (option tag) in a Require header for an outbound packet Default reject Values • pass—B2BUA should include the tag in the corresponding outgoing message • reject—B2BUA should reject the request with a 420 (Bad Extension) response. The option tag will be included in an Unsupported header in the reject response.
PAGE 235
SIP-INTERFACE CONFIGURATION ELEMENTS N-Z sip-interface The sip-interface element allows you to configure a SIP interface for your Net-Net SBC.
PAGE 236
CONFIGURATION ELEMENTS N-Z SIP-INTERFACE contact-mode—Select the contact header routing mode Default none Values • • • • none maddr strict loose nat-traversal—Select the type of HNT functionality for SIP Default none Values • none—NAT Traversal is disabled • always—Performs HNT when SIP-Via and transport addresses do not match • rport—Performs HNT when Via rport parameter is present and SIPVia and transport addresses do not match nat-interval—Enter the expiration time in seconds for the Net-Net S
PAGE 237
SIP-INTERFACE CONFIGURATION ELEMENTS N-Z uri-fqdn-domain—Change the host part of the URIs to the FQDN value set here. This applies to the Request-URI, From header, and To header in non-dialog requests sent from the SIP interface.
PAGE 238
CONFIGURATION ELEMENTS N-Z SIP-INTERFACE Values Min: 1025 / Max: 65535 in-manipulationid—Enter the name of the SIP header manipulations configuration to apply to the traffic entering the Net-Net SBC via this SIP interface out-manipulationid—Enter the name of the SIP header manipulations configuration to apply to the traffic exiting the Net-Net SBC via this SIP interface sip-ims-feature—Enable or disable IMS functionality on this SIP interface Default disabled Values enabled | disabled operator-ident
PAGE 239
SIP-INTERFACE Notes CONFIGURATION ELEMENTS N-Z • pass—Pass the P-Charging-Vector header received in an incoming SIP message untouched as the message is forwarded out of the Net-Net SBC, extracting RADIUS information • delete—Delete the P-Charging-Vector header received in an incoming SIP message before it is forwarded out of the Net-Net SBC • insert—Inserts the P-Charging-Vector header in an incoming SIP message that does not contain the P-Charging-Vector header.
PAGE 240
CONFIGURATION ELEMENTS N-Z SIP-INTERFACE ecf-address—Set the ECF address value that will be inserted into the P-ChargingFunction-Address header secured-network—Enable or disable sending messages on unsecured transport Default disabled Values enabled | disabled max-incoming-conns—Enter the maximum number of TCP/TLS connections for this sip interface Default 0 Values Min: 0 / Max: 40000; setting a value of 0 disables this parameter per-scr-ip-max-incoming-conns—Enter the maximum number of TCP/TLS co
PAGE 241
SIP-INTERFACE CONFIGURATION ELEMENTS N-Z Default 0 Values Min: 0 / Max: 999999999 tcp-nat-interval—Enter the TCP NAT traversal registration interval in seconds Default 90 Values Min: 0 / Max: 999999999 constraint-name—Enter the name of the constraint being applied to this interface response-map—Enter the name of the response map being applied to this interface local-response-map—Enter the name of the local response map being applied to this interface max-redirect-contacts—Enter the maximum number
PAGE 242
CONFIGURATION ELEMENTS N-Z SIP-INTERFACE > SIP-PORTS Values enabled | disabled Path sip-interface is an element under the session-router path. The full path from the topmost ACLI prompt is: configure terminal > session-router > sip-interface. Release First appearance: 1.0 / Most recent update: 4.1 RTC Status Supported Notes This is a multiple instance configuration element.
PAGE 243
SIP-INTERFACE > SIP-PORTS CONFIGURATION ELEMENTS N-Z Path sip-ports is a subelement is under the sip-config element. The full path from the topmost ACLI prompt is: configure terminal > session-router > sip-interface > sip-ports. Release First appearance: 1.0 / Most recent update: 4.1 RTC Status Supported Notes There must be at least one sip-port entry configured within the sip-config and there can be as many entries as necessary for the sip-port. This is a multiple instance configuration element.
PAGE 244
CONFIGURATION ELEMENTS N-Z SIP-MANIPULATION sip-manipulation The sip-manipulation feature lets the Net-Net SBC add, modify, and delete SIP headers and SIP header elements. Syntax sip-manipulation Parameters name—Enter the name of this list of header rules header-rules—Access the header rules subelement description—Describe what the set of header rules is doing Path sip-manipulation is an element under the session-router path.
PAGE 245
SIP-MANIPULATION > HEADER-RULES > ELEMENT-RULES CONFIGURATION ELEMENTS N-Z • request—Request messages only • reply— Reply messages only methods—Enter a list of SIP methods that this header rule applies to. An empty value applies this header rule to all SIP method messages.
PAGE 246
CONFIGURATION ELEMENTS N-Z SIP-MANIPULATION > HEADER-RULES > ELEMENT-RULES • • • • • • • uri-header-name—SIP URI header name uri-header—Header included in a request constructed from the URI uri-user-param—User parameter of the SIP URI status-code—Status code of the SIP URI reason-phrase—Reason phrase of the SIP URI uri-user-only—URI username without the URI user parameters uri-phone-number-only—User part of the SIP/TEL URI without the user parameters when the user qualifies for specific BNF action—Selec
PAGE 247
SIP-NAT CONFIGURATION ELEMENTS N-Z Operators are: • Operator Description + Append the value to the end. For example: “acme”+”packet” generates “acmepacket” +^ Prepends the value. For example: “acme”+^”packet” generates “packetacme” - Subtract at the end. For example: “112311”-”11” generates “1123” -^ Subtract at the beginning.
PAGE 248
CONFIGURATION ELEMENTS N-Z SIP-NAT ext-proxy-address—Enter the IP address of the default next-hop SIP element (a SIP proxy) in the external network. This is a required field. Entries in this field must follow the IP Address Format. ext-proxy-port—Enter the port number of the default next-hop SIP element (a SIP proxy) in the external network Default 5060 Values Min: 1025 / Max: 65535 ext-address—Enter the IP address on the network interface in the external realm.
PAGE 249
SIP-NAT CONFIGURATION ELEMENTS N-Z related to extracting digits from the encoded portion of SIP messages along with the parameter-name field. Default none Values • • • • none from-to phone all parameter-name—Enter the URL parameter name used when constructing messages. This field is used in SIP-NAT encoding addresses that have a use-urlparameter field value of either from-to or all. This field can hold any value, but it should not be a recognized name that another proxy might use.
PAGE 250
CONFIGURATION ELEMENTS N-Z SIP-Q850-MAP sip-q850-map The sip-q850-map configuration element is used to map SIP response codes to q850 cause codes. Syntax sip-q850-map Parameters entries—Enter the entries configuration subelement delete—Delete a SIP to q850 mapping. Enter the SIP code. edit—Edit a response map by number Path sip-q850-map is an element under the session-router path.
PAGE 251
SIP-RESPONSE-MAP CONFIGURATION ELEMENTS N-Z sip-response-map The sip-response-map element establishes SIP response maps associated with the upstream session agent. Syntax sip-response-map Parameters name—Name of SIP response map entries—Access the entries subelement delete—Remove the selected response-map entry Path sip-response-map is an element under the session-router path.
PAGE 252
CONFIGURATION ELEMENTS N-Z SNMP-COMMUNITY Path entries is a subelement of the sip-response-map element. The full path from the topmost ACLI prompt is: configure terminal > session-router > sip-responsemap > entries. Release First appearance: 1.1 RTC Status Supported Notes This is a multiple instance configuration element. snmp-community The snmp-community element defines the NMSs from which the Net-Net SBC will accept SNMP requests.
PAGE 253
STATIC-FLOW CONFIGURATION ELEMENTS N-Z identifier field entry in a realm-config. This is a required field. Entries in this field must follow the Name Format. description—Provide a brief description of the static-flow configuration element in-source—Enter the incoming source IP address and port of packets to match for static flow translation. IP address of 0.0.0.0 matches any source address. Port 0 matches packets received on any port.
PAGE 254
CONFIGURATION ELEMENTS N-Z STATIC-FLOW protocol—Select the protocol for this static-flow. The protocol selected must match the protocol in the IP header. The protocol remains the same for the inbound and outbound sides of the packet flow. Default UDP Values • • • • UDP—UDP used for this static-flow element TCP—TCP used for this static-flow element ICMP—ICMP used for this static-flow element ALL—Static-flow element can accept flows via any of the available protocols.
PAGE 255
STEERING-POOL CONFIGURATION ELEMENTS N-Z steering-pool The steering-pool element defines sets of ports that are used for steering media flows through the Net-Net SBC. The Net-Net SBC can provide packet steering in order to ensure a determined level of quality or routing path. Syntax steering-pool Parameters ip-address—Enter the target IP address of the steering pool.
PAGE 256
CONFIGURATION ELEMENTS N-Z SURROGATE-AGENT surrogate-agent The surrogate-agent configuration element allows you to configure the Net-Net SBC for surrogate registration. This feature lets the Net-Net SBC explicitly register on behalf of Internet Protocol Branch Exchange (IP-PBX).
PAGE 257
SYSTEM-ACCESS-LIST CONFIGURATION ELEMENTS N-Z Values enabled | disabled aor-count—Enter the number of registrations to do on behalf of this IP-PBX Default 1 Values Min: 0 / Max: 999999999 auth-user—Enter the authentication user name you want to use for the surrogate agent max-register-attempt—Enter the number of times to attempt registration; a 0 value means registration attempts are unlimited Default 3 Values Min: 0 / Max: 10 register-retry-time—Enter the amount of time in seconds to wait befor
PAGE 258
CONFIGURATION ELEMENTS N-Z SYSTEM-CONFIG Release First appearance: 5.0 RTC Status Supported system-config The system-config element establishes general system information and settings.
PAGE 259
SYSTEM-CONFIG CONFIGURATION ELEMENTS N-Z Default disabled Values enabled | disabled enable-snmp-syslog-notify—Enable or disable sending syslog notifications to an NMS via SNMP; determines whether SNMP traps are sent when a Net-Net SBC generates a syslog message Default disabled Values enabled | disabled enable-snmp-monitor-traps—Determine whether traps are sent out in apsmgmt.mib trap.
PAGE 260
CONFIGURATION ELEMENTS N-Z SYSTEM-CONFIG • • • • • notice info trace| debug detail syslog-servers—Access the syslog-servers subelement system-log-level—Set the system-wide log severity levels write to the system log Default warning Values • • • • • • • • • • emergency critical major minor warning notice info trace debug detail process-log-level—Set the default log level that processes running on the Net-Net SBC start Default notice Values • • • • • • • • • • emergency critical major minor warni
PAGE 261
SYSTEM-CONFIG CONFIGURATION ELEMENTS N-Z Default 0.0.0.0 restart—Enable or disable the Net-Net SBC rebooting when a task is suspended. When set to enabled, this field causes the Net-Net SBC to reboot automatically when it detects a suspended task. When this field is set to disabled and a task is suspended, the Net-Net SBC does not reboot. Default enabled Values enabled | disabled call-trace—Enable or disable protocol message tracing for sipmsg.log for SIP and alg.
PAGE 262
CONFIGURATION ELEMENTS N-Z SYSTEM-CONFIG exceptions—Select system tasks that have no impact on system health or cause the system to restart. This field contains the name(s) of the task(s) surrounded by quotation marks. If there are multiple entries, they should be listed within quotation marks, with each entry separated by a . telnet-timeout—Enter the time in seconds the Net-Net SBC waits when there is no Telnet activity before an administrative telnet session is terminated.
PAGE 263
SYSTEM-CONFIG>COLLECT CONFIGURATION ELEMENTS N-Z Values Min: 0 / Max: 65535 trap-event-lifetime—Set this parameter to the number of days you want to keep the information in the alarm synchronization table; 0 turns alarm synchronization off Default 0 Values Min: 0 / Max: 7 options—Enter any customer-specific features and/or parameters for this global system configuration. This parameter is optional. Notes Under the system-config element, options are not RTC supported.
PAGE 264
CONFIGURATION ELEMENTS N-Z SYSTEM-CONFIG>COLLECT>PUSH-RECEIVER Default Notes disabled Values enabled | disabled This parameter is not RTC supported. red-collect-state—Enable or disable HA support for the collection function Default disabled Values enabled | disabled red-max-trans—Enter the maximum number of redundancy sync transactions to keep on active Default 1000 Values Min: 0 / Max: 999999999 red-sync-start-time—Enter the time to start redundancy sync timeout, in milliseconds.
PAGE 265
SYSTEM-CONFIG>COLLECT>GROUP-SETTINGS CONFIGURATION ELEMENTS N-Z password—Enter the login password for the specified server used when pushing collected data data-store—Enter a directory on the specified server in which to put collected data protocol—Set the protocol with which to send HDR collection record files. Default Path FTP Values FTP | SFTP push-receiver is a subelement of the system-config>collect subelement.
PAGE 266
CONFIGURATION ELEMENTS N-Z SYSTEM-CONFIG > SYSLOG-SERVERS • • • • • • • • • • • • • • • • • voltage fan temperature sip-sessions sip-ACL-oper sip-ACL-status sip-client sip-server sip-policy sip-errors sip-status algd-state mgcp-trans mgcp-media-events mgcp-ACL algd-ACL h323-stats sample-interval—Enter the group data collection sampling interval, in minutes Default 0 Values Min: 0 / Max: 120 start-time—Enter the date and time to start group data collection.
PAGE 267
TEST-PATTERN-RULE CONFIGURATION ELEMENTS N-Z facility—Enter the user-defined facility value sent in every syslog message from the Net-Net SBC to the syslog server. This value must conform to IETF RFC 3164. Default 4 Path syslog-servers is a subelement under the system-config element. The full path from the topmost ACLI prompt is: configure terminal > system > system-config > syslog-servers. Release First appearance: 1.2.
PAGE 268
CONFIGURATION ELEMENTS N-Z TEST-TRANSLATION from-address—Enter the “from” address of the local policy to look up/test. From addresses should be entered as SIP-URLs in the form of sip:19785551212@netnetsystems.com. to-address—Enter the “to” address of the local policy to look up/test. To addresses should be entered as SIP-URLs in the form of sip:19785551212@netnetsystems.com.
PAGE 269
TLS-GLOBAL Notes CONFIGURATION ELEMENTS N-Z The test-translation element can also be configured in Superuser mode as a command. tls-global The tls-global configuration element allows you to configure global TLS parameters.
PAGE 270
CONFIGURATION ELEMENTS N-Z TRANSLATION-RULES Default 10 Values Min: 0 / Max: 10 mutual-authenticate—Enable or disable mutual authentication on the Net-Net SBC Default disabled Values enabled | disabled tls-version—Enter the TLS version you want to use with this TLS profile Default compatability Values TLSv1 | SSLv3 | compatability Mode Superuser Path tls-profile is an element under the security path. The full path from the topmost prompt is: configure terminal > security > tls-profile.
PAGE 271
TRAP-RECEIVER CONFIGURATION ELEMENTS N-Z Default blank string add-index—Enter the location in the original address where the string specified in the add-string value is inserted. This value is the character position starting at 0 to insert the add-string value. When a dollar-sign ($) is used for the add-index, it appends the add-string to the end of the number. This is represented by “999999999” when a show is performed.
PAGE 272
CONFIGURATION ELEMENTS N-Z TRAP-RECEIVER filter-level—Set the filter level for the NMS identified within this trap-receiver element Default critical Values • All—All alarms, syslogs, and other traps will be trapped out. That is, the corresponding NMS will receive informational, warning, and error events.
PAGE 273
6 ACLI Command Summary ACLI Commands Version S-C6.1.
PAGE 274
ACLI COMMAND SUMMARY Command Mode exit User generate-certificate-request User generate-key User import-certificate User kill Superuser load-image Superuser log-level Superuser management Superuser monitor User notify Superuser packet-capture Superuser packet-trace Superuser password-secure-mode Superuser ping User prompt-enabled Superuser realm-specifics User reboot Superuser regenerate-config Superuser request Superuser reset Superuser restore-backup-config Super
PAGE 275
ACLI COMMAND SUMMARY Command Mode Notes tail-logfile-close Superuser tail-logfile-open Superuser tcb Superuser test-pattern-rule User multi-parameter test-policy User multi-parameter test-translation User multi-parameter timezone-set Superuser verify-config Superuser watchdog User Multi-parameter ACLI Commands The archives, test-policy, test-translation, and show commands are multi-parameter commands.
PAGE 276
ACLI COMMAND SUMMARY Command Parameter request audit collection test-pattern-rule expression string show exit test-policy carriers exit from-address media-profiles show source-realm time-of-day to-address test-translation called-address calling-address exit show translation-id show about acl algd arp backup-config buffers call-recording-server certificates clock configuration dns enum ext-band-mgr 276 Oracle Communications Session Border Controller ACLI Reference Guide Version S-C6.1.
PAGE 277
ACLI COMMAND SUMMARY ext-clf-svr features h323d health hosts interfaces ip logfile loglevel lrt mbcd media memory mgcp monthly-minutes nat net-management-control nsep packet-trace power privilege processes prom-info qos radius ramdrv realm redundancy registration route-stats routes running-config security Version S-C6.1.
PAGE 278
ACLI COMMAND SUMMARY sessions sipd snmp-community-table support-info system-state temperature trap-receiver uptime users version virtual-interfaces voltage 278 Oracle Communications Session Border Controller ACLI Reference Guide Version S-C6.1.