Installation guide

162 Oracle Communications Session Border Controller ACLI Reference Guide Version S-C6.1.0
CONFIGURATION ELEMENTS A-M IPSEC>SECURITY-POLICY
priority—Set the priority number of this security policy
Default 0
Values Min: 0 / Max: 254
local-ip-addr-match—Enter the local IP address to match traffic selectors for this
security policy
Default 0.0.0.0
remote-ip-addr-match—Enter the remote IP address to match traffic selectors for
this security policy
Default 0.0.0.0
local-port-match—Enter the local port to match traffic selectors for this security
policy
Default 0
Values Min: 0 / Max: 65535
remote-port-match—Enter the remote port to match traffic selectors for this
security policy
Default 0
Values Min: 0 / Max: 65535
trans-protocol-match—Select the transport protocol to match traffic selectors for
this security policy
Default all
Values TCP | UDP | ALL | ICMP
direction—Set the direction of traffic this security policy can apply to
Default both
Values in | out | both
local-ip-mask—TEnter the he local IP address mask, in dotted-decimal notation
Default 255.255.255.255
remote-ip-mask—Enter the remote IP address mask, in dotted-decimal notation
Default 255.255.255.255
action—Select the action the Net-Net SBC should take when this policy matches
outbound IPsec traffic. The choices are:
Default ipsec
Values • ipsec—continue processing as IPsec traffic
• allow—forward the traffic without any security processing
• discard—discard the traffic
outbound-sa-fine-grained-mask—Enter the outbound-sa-fine-grained-
mask
subelement
Path security-policy is a subelement under the ipsec element. The full path from the
topmost ACLI prompt is: configure-terminal > security > ipsec > security-
policy.
Release First appearance: 5.0