The following example activates two processing cards, placing one in active mode and labeling the other as redundant:

configure 
   card slot_number 
      redundancy card-mode 
      exit 
   card slot_number 
      mode active pac 
      end 

The following example sets the default subscriber in the local context:

configure 
   context local  
      interface local_ctx_iface_name 
         ip address ip_address ip_mask 
         exit 
      server ftpd 
         exit 
      server telnetd 
         exit 
      subscriber default 
         exit 
      administrator name encrypted password password ftp 
      ip route ip_addr ip_mask next_hop_addr local_ctx_iface_name  
      exit 
   port ethernet slot#/port# 
      no shutdown 
      bind interface local_ctx_iface_name local 
      exit 
   end 

The following example creates the VPN context and interface and binds the VPN interface to a configured Ethernet port:

configure 
   context vpn_context_name -noconfirm 
      interface vpn_interface_name 
         ip address ip_address ip_mask 
         exit 
     subscriber default 
         exit 
      ip route 0.0.0.0 0.0.0.0 next_hop_address vpn_interface_name 
      exit 
   port ethernet slot_number/port_number 
      no shutdown 
      bind interface vpn_interface_name vpn_context_name 
      end 

Use the following configuration to enable the Active Charging Service subsystem for URL Blacklisting:

configure 
   require active-charging 
   end 

Important

After you configure this command, you must save the configuration and then reload the chassis for the command to take effect. For information on saving the configuration file and reloading the chassis, refer to the System Administration Guide for your deployment.

Use the following configuration to configure URL Blacklisting database parameters:

configure 
   url-blacklisting database directory path directory_path 
   url-blacklisting database max-versions max_versions 
   url-blacklisting database override file file.extension 
   end 

Use the following configuration to create the Active Charging Service and set URL Blacklisting match:

configure 
  active-charging service service_name [ -noconfirm ] 
      url-blacklisting match-method { exact | generic }  
      end 

Use the following configuration to enable URL Blacklisting in a rulebase and configure the blacklisting action:

configure 
   active-charging service service_name 
      rulebase rulebase_name [ -noconfirm ] 
         url-blacklisting action { discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } 
         end 

Use the following command to load/upgrade the URL Blacklisting database:

upgrade url-blacklisting database [ -noconfirm ] 

The URL Blacklisting functionality can be tested by appending test URLs/URIs to the blacklist file. The test URLs/URIs must be added to the testurldb.pub file in the <WEM_Install_Dir>/flash/blacklist/testurldb directory.

The testurldb.pub file must have one URL per line without space. If space is included in the URL entries, the WEM ignores the URLs with space.

Use the following configuration to enable the Active Charging Service subsystem:

configure 
   require active-charging content-filtering category 
   end 

Notes:

A reboot is essential when enabling/disabling Category-based Content Filtering using the require active-charging content-filtering category command.

Important

After you configure this command, you must save the configuration and then reload the chassis for the command to take effect. For information on saving the configuration file and reloading the chassis, refer to the System Administration Guide for your deployment.

Use the following configuration to configure Content Rating Rule database parameters:

configure 
   content-filtering category database directory path directory_path 
   content-filtering category database max-versions max_versions 
   content-filtering category database override file file.extension 
   end 
upgrade content-filtering category { database | rater-pkg } 

Use the following configuration to create the Active Charging Service and Content Filtering Policy:

configure 
   active-charging service service_name [ -noconfirm ] 
      content-filtering category policy-id cf_policy_id [ description description ] [ -noconfirm ] 
      end 

Use the following configuration to configure the content filtering policy:

configure 
   active-charging service service_name 
      content-filtering category policy-id cf_policy_id 
         analyze priority priority { all | category category | x-category x-category } action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ] 
         failure-action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ] 
         end 
 

Notes

• To configure runtime categories not present in the CLI, use the following command:

  analyze priority priority x-category x-category action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]

• To configure the action to take for any match, and the default action to take when the category returned after rating is not configured in the subscriber’s content filtering policy, use the following command:

  analyze priority priority all action { allow | content-insert content_string | discard | redirect-url url | terminate-flow | www-reply-code-and-terminate-flow reply_code } [ edr edr_format ]

Use the following configuration to configure the rulebase:

configure 
   active-charging service service_name 
      rulebase rulebase_name 
         route priority route_priority ruledef ruledef_name analyzer analyzer_name [ description description ] 
         action priority priority { { group-of-ruledefs group_name | ruledef ruledef_name } charging-action charging_action_name [ description description ] } 
         flow end-condition content-filtering edr edr_format_name 
         billing-records { egcdr | radius | udr udr-format format_name } + 
         content-filtering category policy-id cf_policy_id 
         content-filtering mode category { static-only } 
         end 

APN Configuration

Use the following configuration to apply Content Filtering configuration to an APN through policy identifier:

configure 
   context context_name 
      apn apn_name 
         content-filtering category policy-id cf_policy_id 
         end 

Subscriber Configuration

Use the following configuration to apply Content Filtering configuration to a subscriber through policy identifier:

configure 
   context context_name 
      subscriber name user_name 
         content-filtering category policy-id cf_policy_id 
         end 

Important

When changing the cf_policy_id included in RADIUS CoA and CCA/RAR messages from AAA/PCRF, it is observed that the CF policy ID is applied to subscriber session level even if it is set at rulebase level or APN level. That is, the policy ID set by the latest message takes precedence and the same value is applied at the session level.

Important

Category Policy ID applied to APN or subscriber in this mode overrides the Category Policy ID configured using the content-filtering category policy-id cf_policy_id command in the Configuring Rulebase for Content Filtering section.