Network to Network Interface Configuration Profile Example
This section provides a complete example of a Network to Network Interface Configuration Profile in the following sections:
•Network to Network Interface Configuration Profile Adjacencies
•Network to Network Interface Configuration Profile (in Segments)
•Network to Network Interface Configuration Profile (for Copy and Paste)
•Network to Network Interface Configuration Profile (with CLI Prompts)
Network to Network Interface Configuration Profile Adjacencies
The Network to Network Interface (NNI) feature of the Cisco Unified Border Element provides the ability to create and maintain a secure connection between two different service provider networks or between a service provider network and an enterprise business. The connection between two different networks is a SIP trunk.
In this NNI example, the signaling peers for the Cisco Unified Border Element are the PBX and the service provider. (See Figure 6.)
Figure 6 shows the NNI for these examples.
Figure 6
Network to Network Interface (NNI)
In this example, the signaling-peer address is the IP address of the PBX.
PBX Adjacency
inherit profile preset-core
signaling-address ipv4 7.1.1.1
remote-address ipv4 61.0.0.0 255.255.0.0
In this example, signaling-peer address is IP address of the service provider.
Service Provider Adjacency
adjacency sip service_provider
inherit profile preset-peer
signaling-address ipv4 7.1.1.1
remote-address ipv4 62.0.0.0 255.255.0.0
Network to Network Interface Configuration Profile (in Segments)
This Network to Network Interface Configuration Profile example shows each segment of the example separated by a Heading describing the function of that segment.
Configuration Mode
SBC SBE Configuration Setup
Media Characteristics (Security)
White List, Pass Headers
sip header-profile PASS-HEADERS
description pass non-essential headers
header Allow-Events entry 1
header Remote-Party-ID entry 1
header Session-Expires entry 1
header session-expiry entry 1
header RESOURCE-PRIORITY entry 1
White List, Methods and Options
sip method-profile method1
description pass default methods
sip option-profile option1
description pass default options plus timer
PBX Adjacency
header-profile inbound PASS-HEADERS
header-profile outbound PASS-HEADERS
method-profile inbound method1
method-profile outbound method1
option-profile ua inbound option1
option-profile ua outbound option1
security trusted-unencrypted
signaling-address ipv4 23.61.1.1
statistics method summary
remote-address ipv4 175.181.0.10 255.255.255.255
signaling-peer 175.181.0.10
Service Provider Adjacency
adjacency sip service_provider
header-profile inbound PASS-HEADERS
header-profile outbound PASS-HEADERS
method-profile inbound method1
method-profile outbound method1
option-profile ua inbound option1
option-profile ua outbound option1
security trusted-unencrypted
signaling-address ipv4 23.61.2.1
statistics method summary
remote-address ipv4 175.182.0.12 255.255.255.255
signaling-peer 175.182.0.12
Call Policy, PBX to Service Provider Connection
first-call-routing-table start-table
rtg-src-adjacency-table start-table
match-adjacency service_provider
dst-adjacency service_provider
Call Policy, Number Analysis Stage - Number Validation
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Number Analysis Stage - Number Categorization
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Number Analysis Stage - Digit Manipulation
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
Call Policy, Routing Stage - Destination Adjacency
first-call-routing-table ROUTE-ON-DEST-NUM
rtg-dst-address-table ROUTE-ON-DEST-NUM
dst-adjacency service_provider
dst-adjacency service_provider
Call Admission Control, CAC Policy Media Bandwidth Field Ignore
description Ignore the bandwidth field in SDP
media bandwidth-field ignore
Show Command, Display Adjacencies
Router# show sbc MY_SBC sbe adjacencies
Name Type State Description
-----------------------------------------------------------
service provider SIP Attached
Network to Network Interface Configuration Profile (for Copy and Paste)
This is a complete Network to Network Interface Configuration Profile example that can be copied and pasted into the CLI of an ASR1000 running the Cisco Unified Border Element. Each segment is separated only by returns.
sip header-profile PASS-HEADERS
description pass non-essential headers
header Allow-Events entry 1
header Remote-Party-ID entry 1
header Session-Expires entry 1
header session-expiry entry 1
header RESOURCE-PRIORITY entry 1
sip method-profile method1
description pass default methods
sip option-profile option1
description pass default options plus timer
header-profile inbound PASS-HEADERS
header-profile outbound PASS-HEADERS
method-profile inbound method1
method-profile outbound method1
option-profile ua inbound option1
option-profile ua outbound option1
security trusted-unencrypted
signaling-address ipv4 23.61.1.1
statistics method summary
remote-address ipv4 175.181.0.10 255.255.255.255
signaling-peer 175.181.0.10
adjacency sip service_provider
header-profile inbound PASS-HEADERS
header-profile outbound PASS-HEADERS
method-profile inbound method1
method-profile outbound method1
option-profile ua inbound option1
option-profile ua outbound option1
security trusted-unencrypted
signaling-address ipv4 23.61.2.1
statistics method summary
remote-address ipv4 175.182.0.12 255.255.255.255
signaling-peer 175.182.0.12
first-call-routing-table start-table
rtg-src-adjacency-table start-table
match-adjacency service_provider
dst-adjacency service_provider
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-number-analysis-table VALIDATE-DEST-PREFIX
na-dst-prefix-table VALIDATE-DEST-PREFIX
first-call-routing-table ROUTE-ON-DEST-NUM
rtg-dst-address-table ROUTE-ON-DEST-NUM
dst-adjacency service_provider
dst-adjacency service_provider
description Ignore the bandwidth field in SDP
media bandwidth-field ignore
Network to Network Interface Configuration Profile (with CLI Prompts)
This complete Network to Network Interface Configuration Profile example shows the CLI prompts.
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#sbc MY_SBC
Router(config-sbc-sbe)#secure-media
Router(config-sbc-sbe)#sip header-profile PASS-HEADERS
Router(config-sbc-sbe-sip-hdr)#description pass non-essential headers
Router(config-sbc-sbe-sip-hdr)#header Allow entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Min-SE entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Reason entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header SERVER entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header DIVERSION entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Allow-Events entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Remote-Party-ID entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header Session-Expires entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#header session-expiry entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#$URCE-PRIORITY entry 1
Router(config-sbc-sbe-sip-hdr-ele)#action pass
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#
Router(config-sbc-sbe-sip-hdr-ele-act)#sip method-profile method1
Router(config-sbc-sbe-sip-mth)#description pass default methods
Router(config-sbc-sbe-sip-mth)#pass-body
Router(config-sbc-sbe-sip-mth)#method INFO
Router(config-sbc-sbe-sip-mth-ele)#action as-profile
Router(config-sbc-sbe-sip-mth-ele)#method OPTION
Router(config-sbc-sbe-sip-mth-ele)#action pass
Router(config-sbc-sbe-sip-mth-ele)#method UPDATE
Router(config-sbc-sbe-sip-mth-ele)#action pass
Router(config-sbc-sbe-sip-mth-ele)#sip option-profile option1
Router(config-sbc-sbe-sip-opt)#$ pass default options plus timer
Router(config-sbc-sbe-sip-opt)#option TIMER
Router(config-sbc-sbe-sip-opt)#option REPLACES
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#
Router(config-sbc-sbe-sip-opt)#adjacency sip pbx
Router(config-sbc-sbe-adj-sip)#vrf pbx
Router(config-sbc-sbe-adj-sip)#header-profile inbound PASS-HEADERS
Router(config-sbc-sbe-adj-sip)#header-profile outbound PASS-HEADERS
Router(config-sbc-sbe-adj-sip)#method-profile inbound method1
Router(config-sbc-sbe-adj-sip)#method-profile outbound method1
Router(config-sbc-sbe-adj-sip)#option-profile ua inbound option1
Router(config-sbc-sbe-adj-sip)#option-profile ua outbound option1
Router(config-sbc-sbe-adj-sip)#preferred-transport tcp
Router(config-sbc-sbe-adj-sip)#security trusted-unencrypted
Router(config-sbc-sbe-adj-sip)#signaling-address ipv4 23.61.1.1
Router(config-sbc-sbe-adj-sip)#statistics method summary
Router(config-sbc-sbe-adj-sip)#signaling-port 5160
Router(config-sbc-sbe-adj-sip)#$ess ipv4 175.181.0.10 255.255.255.255
Router(config-sbc-sbe-adj-sip)#signaling-peer 175.181.0.10
Router(config-sbc-sbe-adj-sip)#signaling-peer-port 5160
Router(config-sbc-sbe-adj-sip)#account pbx
Router(config-sbc-sbe-adj-sip)#attach
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#adjacency sip service_provider
Router(config-sbc-sbe-adj-sip)#vrf service_provider
Router(config-sbc-sbe-adj-sip)#header-profile inbound PASS-HEADERS
Router(config-sbc-sbe-adj-sip)#header-profile outbound PASS-HEADERS
Router(config-sbc-sbe-adj-sip)#method-profile inbound method1
Router(config-sbc-sbe-adj-sip)#method-profile outbound method1
Router(config-sbc-sbe-adj-sip)#option-profile ua inbound option1
Router(config-sbc-sbe-adj-sip)#option-profile ua outbound option1
Router(config-sbc-sbe-adj-sip)#preferred-transport tcp
Router(config-sbc-sbe-adj-sip)#security trusted-unencrypted
Router(config-sbc-sbe-adj-sip)#signaling-address ipv4 23.61.2.1
Router(config-sbc-sbe-adj-sip)#statistics method summary
Router(config-sbc-sbe-adj-sip)#signaling-port 5160
Router(config-sbc-sbe-adj-sip)#$ess ipv4 175.182.0.12 255.255.255.255
Router(config-sbc-sbe-adj-sip)#signaling-peer 175.182.0.12
Router(config-sbc-sbe-adj-sip)#signaling-peer-port 5160
Router(config-sbc-sbe-adj-sip)#account service_provider
Router(config-sbc-sbe-adj-sip)#attach
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#
Router(config-sbc-sbe-adj-sip)#call-policy-set 1
Router(config-sbc-sbe-rtgpolicy)#first-call-routing-table start-table
Router(config-sbc-sbe-rtgpolicy)#rtg-src-adjacency-table start-table
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$ency service_provider
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#dst-adjacency pbx
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#entry 2
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-adjacency pbx
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy service_provider
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 1
Router(config-sbc-sbe)#call-policy-set 2
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 2
Router(config-sbc-sbe)#call-policy-set 3
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 3
Router(config-sbc-sbe)#call-policy-set 4
Router(config-sbc-sbe-rtgpolicy)#$-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy)#$ix-table VALIDATE-DEST-PREFIX
Router(config-sbc-sbe-rtgpolicy-natable)#entry 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 8X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#edit-dst del-prefix 1
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 2
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 1XX
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Non-Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 3
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix 911
Router(config-sbc-sbe-rtgpolicy-natable-entry)#category Emergency
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action accept
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#entry 4
Router(config-sbc-sbe-rtgpolicy-natable-entry)#match-prefix X
Router(config-sbc-sbe-rtgpolicy-natable-entry)#action reject
Router(config-sbc-sbe-rtgpolicy-natable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-natable)#complete
Router(config-sbc-sbe-rtgpolicy)#active-call-policy-set 4
Router(config-sbc-sbe)#call-policy-set 5
Router(config-sbc-sbe-rtgpolicy)#$routing-table ROUTE-ON-DEST-NUM
Router(config-sbc-sbe-rtgpolicy)#$ress-table ROUTE-ON-DEST-NUM
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 212
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#edit add-prefix 1
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#dst-adjacency pbx
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 2
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 215
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#dst-adjacency pbx
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)# action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#entry 3
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 732
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy service_provider
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#exit
Router(config-sbc-sbe-rtgpolicy-rtgtable)#entry 4
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#match-address 908
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#prefix
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#$cy service_provider
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#edit replace 609
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#action complete
Router(config-sbc-sbe-rtgpolicy-rtgtable-entry)#complete
Router(config-sbc-sbe-rtgpolicy)#exit
Router(config-sbc-sbe)#active-call-policy-set 5
Router(config-sbc-sbe)#cac-policy-set 1
Router(config-sbc-sbe-cacpolicy)#$ Ignore the bandwidth field in SDP
Router(config-sbc-sbe-cacpolicy)#first-cac-table BW
Router(config-sbc-sbe-cacpolicy)#first-cac-scope call
Router(config-sbc-sbe-cacpolicy)#cac-table BW
Router(config-sbc-sbe-cacpolicy-cactable)#table-type policy-set
Router(config-sbc-sbe-cacpolicy-cactable)#entry 1
Router(config-sbc-sbe-cacpolicy-cactable-entry)#$idth-field ignore
Router(config-sbc-sbe-cacpolicy-cactable-entry)#action cac-complete
Router(config-sbc-sbe-cacpolicy-cactable-entry)#complete
Router(config-sbc-sbe-cacpolicy)#active-cac-policy-set 1