Individual Subscriber Configuration Profile Example
This section provides a complete example of an Individual Subscriber Configuration Profile in the following sections:
•
Individual Subscriber Configuration Profile Adjacencies
•
Individual Subscriber Configuration Profile (in Segments
•
Individual Subscriber Configuration Profile (for Copy and Paste)
•
Individual Subscriber Configuration Profile (with CLI Prompts)
Individual Subscriber Configuration Profile Adjacencies
The User Network Interface (UNI) feature of the Cisco Unified Border Element provides individual subscribers with secure connections to service provider networks.
For a UNI, the adjacencies are the signaling peers for the Cisco Unified Border Element. In this example, the adjacencies are the softswitch of the service provider and the IP DSLAM. (See Figure 5.)
The Cisco Unified Border Element routes messages from the IP DSLAM to the softswitch of the service provider.
The following components are configured on UNI adjacencies:
•
SIP trunk between the Cisco Unified Border Element and the softswitch of the service provider
•
VRF between the Cisco Unified Border Element and the IP DSLAM
•
Registration of subscribers with the softswitch
Figure 5 shows a subscriber connected to the softswitch of a service provider via an IP DSLAM and how the Cisco Unified Border Element provides a secure connection between the subscriber and the service provider. The softswitch and the IP DSLAM are the signaling peers for the Cisco Unified Border Element.
Figure 5
User Network Interface (UNI)
In subscriber adjacency, the signaling peer is the IP DSLAM and the remote-address is the range of IP addresses that are allowed for the IP DSLAM. The registration outgoing timer command enables softswitch shielding and sets the timeout period during which the Cisco Unified Border Element has to send outgoing register messages to the softswitch.
Subscriber Adjacency
adjacency sip subscribers
inherit profile preset-access
signaling-address ipv4 6.1.1.1
remote-address ipv4 51.0.0.0 255.255.0.0
registration outgoing timer 3600
registration rewrite-register
In the softswitch adjacency, the signaling peer is the softswitch and the remote-address is the range of IP addresses that are allowed for the softswitch. The registration contact username rewrite command allows the contact username in a SIP REGISTER request to be changed or rewritten.
Softswitch Adjacency
inherit profile preset-core
signaling-address ipv4 6.1.1.1
remote-address ipv4 52.0.0.0 255.255.255.255
registration contact username rewrite
Individual Subscriber Configuration Profile (in Segments
This Individual Subscriber Configuration Profile example shows each segment of the example separated by a Heading describing the function of that segment.
Configuration Mode
SBC SBE Configuration Setup
Media Characteristics (Security)
White List, Pass Headers
sip header-profile PASS-HEADERS
description pass non-essential headers
header Allow-Events entry 1
header Remote-Party-ID entry 1
header Session-Expires entry 1
header session-expiry entry 1
header RESOURCE-PRIORITY entry 1
White List, Methods and Options
sip method-profile method1
description pass default methods
sip option-profile option1
description pass default options plus timer
Subscriber Adjacency
adjacency sip subscribers
inherit profile preset-access
signaling-address ipv4 6.1.1.1
remote-address ipv4 51.0.0.0 255.255.0.0
registration outgoing timer 3600
registration rewrite-register
Softswitch Adjacency
inherit profile preset-core
signaling-address ipv4 6.1.1.1
remote-address ipv4 52.0.0.0 255.255.255.255
registration contact username rewrite
Call Policy, Subscriber to Softswitch Connection
first-call-routing-table start-table
rtg-src-adjacency-table start-table
match-adjacency softswitch
dst-adjacency subscribers
match-adjacency subscribers
Call Policy, Number Analysis Stage - Number Validation
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Number Analysis Stage - Number Categorization
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Number Analysis Stage - Digit Manipulation
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Routing Stage - Destination Adjacency
first-call-routing-table ROUTE-ON-DEST-NUM
rtg-dst-address-table ROUTE-ON-DEST-NUM
dst-adjacency subscribers
dst-adjacency subscribers
Call Admission Control, CAC Policy Media Bandwidth Field Ignore
description Ignore the bandwidth field in SDP
media bandwidth-field ignore
Show Command, Display Adjacencies
Router# show sbc MY_SBC sbe adjacencies
Name Type State Description
-----------------------------------------------------------
Individual Subscriber Configuration Profile (for Copy and Paste)
This is a complete Individual Subscriber Configuration Profile example that can be copied and pasted into the CLI of an ASR1000 running the Cisco Unified Border Element. Each segment is separated only by returns.
sip header-profile PASS-HEADERS
description pass non-essential headers
header Allow-Events entry 1
header Remote-Party-ID entry 1
header Session-Expires entry 1
header session-expiry entry 1
header RESOURCE-PRIORITY entry 1
sip method-profile method1
description pass default methods
sip option-profile option1
description pass default options plus timer
adjacency sip subscribers
inherit profile preset-access
signaling-address ipv4 6.1.1.1
remote-address ipv4 51.0.0.0 255.255.0.0
registration outgoing timer 3600
registration rewrite-register
inherit profile preset-core
signaling-address ipv4 6.1.1.1
remote-address ipv4 52.0.0.0 255.255.255.255
registration contact username rewrite
first-call-routing-table start-table
rtg-src-adjacency-table start-table
match-adjacency softswitch
dst-adjacency subscribers
match-adjacency subscribers
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-call-routing-table ROUTE-ON-DEST-NUM
rtg-dst-address-table ROUTE-ON-DEST-NUM
dst-adjacency subscribers
dst-adjacency subscribers
description Ignore the bandwidth field in SDP
media bandwidth-field ignore
Individual Subscriber Configuration Profile (with CLI Prompts)
This complete Individual Subscriber Configuration Profile example shows the CLI prompts.
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#sbc MY_SBC
Router(config-sbc-sbe)#secure-media
Router(config-sbc-sbe)#sip header-profile PASS-HEADERS
Router(config-sbc-sbe-sip-hdr)#description pass non-essential headers
Router(config-sbc-sbe-sip-hdr)#header Allow entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Min-SE entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Reason entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header SERVER entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header DIVERSION entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Allow-Events entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Remote-Party-ID entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Session-Expires entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header session-expiry entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#$URCE-PRIORITY entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#sip method-profile method1
Router(config-sbc-sbe-sip-mth)#description pass default methods
Router(config-sbc-sbe-sip-mth)#pass-body
Router(config-sbc-sbe-sip-mth)#method INFO
Router(config-sbc-sbe-sip-mth-ele)#action as-profile
Router(config-sbc-sbe-sip-mth-ele)#method OPTION
Router(config-sbc-sbe-sip-mth-ele)#action pass
Router(config-sbc-sbe-sip-mth-ele)#method UPDATE
Router(config-sbc-sbe-sip-mth-ele)#action pass
Router(config-sbc-sbe-sip-mth-ele)#sip option-profile option1
Router(config-sbc-sbe-sip-opt)#$ pass default options plus timer
Router(config-sbc-sbe-sip-opt)#option TIMER
Router(config-sbc-sbe-sip-opt)#option REPLACES
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#adjacency sip subscribers
Router(config-sbc-sbe-adj-sip)#vrf subscribers
Router(config-sbc-sbe-adj-sip)#inherit profile preset-access
Router(config-sbc-sbe-adj-sip)#signaling-address ipv4 6.1.1.1
Router(config-sbc-sbe-adj-sip)#signaling-port 5060
Router(config-sbc-sbe-adj-sip)#$ess ipv4 51.0.0.0 255.255.0.0
Router(config-sbc-sbe-adj-sip)#signaling-peer 51.0.0.1
Router(config-sbc-sbe-adj-sip)#registration outgoing timer 3600
Router(config-sbc-sbe-adj-sip)#registration rewrite-register
Router(config-sbc-sbe-adj-sip)#account subscribers
Router(config-sbc-sbe-adj-sip)#attach
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#adjacency sip softswitch
Router(config-sbc-sbe-adj-sip)#vrf softswitch
Router(config-sbc-sbe-adj-sip)#inherit profile preset-core
Router(config-sbc-sbe-adj-sip)#signaling-address ipv4 6.1.1.1
Router(config-sbc-sbe-adj-sip)#signaling-port 5060
Router(config-sbc-sbe-adj-sip)#$ess ipv4 52.0.0.0 255.255.255.255
Router(config-sbc-sbe-adj-sip)#signaling-peer 52.0.0.1
Router(config-sbc-sbe-adj-sip)#registration contact username rewrite
Router(config-sbc-sbe-adj-sip)#account softswitch
Router(config-sbc-sbe-adj-sip)#attach
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#call-policy-set 1
Router(config-sbc-sbe-rtgpolicy)#first-call-routing-table start-table
Router(config-sbc-sbe-rtgpolicy)#rtg-src-adjacency-table start-table
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$ency softswitch
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy subscribers
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#entry 2
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$ency subscribers
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy softswitch
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 1
Router(config-sbc-sbe)#call-policy-set 2
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 2
Router(config-sbc-sbe)#call-policy-set 3
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 3
Router(config-sbc-sbe)#call-policy-set 4
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#edit-dst del-prefix 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 4
Router(config-sbc-sbe)#call-policy-set 5
Router(config-sbc-sbe-rtgpolicy)#$routing-table ROUTE-ON-DEST-NUM
Router(config-sbc-sbe-rtgpolicy)#$ress-table ROUTE-ON-DEST-NUM
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 212
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#edit add-prefix 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy subscribers
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 2
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 215
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy subscribers
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#entry 3
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 732
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy softswitch
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 4
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 908
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy softswitch
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#edit replace 609
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#complete
Router(config-sbc-sbe-rtgpolicy)#exit
Router(config-sbc-sbe)#active-call-policy-set 5
Router(config-sbc-sbe)#cac-policy-set 1
Router(config-sbc-sbe-cacpolicy)#$ Ignore the bandwidth field in SDP
Router(config-sbc-sbe-cacpolicy)#first-cac-table BW
Router(config-sbc-sbe-cacpolicy)#first-cac-scope call
Router(config-sbc-sbe-cacpolicy)#cac-table BW
Router(config-sbc-sbe-cacpolicy-cactable)#table-type policy-set
Router(config-sbc-sbe-cacpolicy-cactable)#entry 1
Router(config-sbc-sbe-cacpolicy-cactable-entry)#$idth-field ignore
Router(config-sbc-sbe-cacpolicy-cactable-entry)#action cac-complete
Router(config-sbc-sbe-cacpolicy-cactable-entry)#complete
Router(config-sbc-sbe-cacpolicy)#active-cac-policy-set 1