Configures AAA-based user management parameters.

users list_of_local_users

Specify the user name.

Must be a string.

old-password user_password

Specify the user's current password.

Must be a string.

new-password user_password

Specify the user's new password.

Must be a string.

confirm-password user_password

Reenter the user's new password.

Must be a string.

Configures Active Charging Service (ACS) parameters.

service service_name

Specify name of the Active Charging Service.

Must be a string of 1-15 characters.

Configures ACS bandwidth policy parameters.

bandwidth-policy bandwidth_policy_name

Specify name of the ACS Bandwidth Policy.

Must be a string of 1-63 characters.

Configures bandwidth ID and bandwidth policy group parameters.

group-id group_id

Specify the bandwidth policy group ID.

Must be an integer in the range of 1-65535.

id id

Specify the bandwidth ID.

Must be an integer in the range of 1-65535.

Configures bandwidth policy group ID.

group-id group_id

Specify the bandwidth policy group ID.

Must be an integer in the range of 1-65535.

Configures peak bandwidth parameters.

committed-burst-size committed_burst_size

Specify the committed burst size in bytes.

Must be an integer in the range of 1-4294967295.

committed-options committed_option

Specify the committed option.

Must be one of the following:

• committed-data-rate-kbps : Specify Committed Data Rate in kilo bits per second. This can also be used to specify GBR for Bearer Binding (without the exceed-action).

• committed-data-rate : Specify Committed Data Rate in bits per second. This can also be used to specify GBR for flow Binding (without the exceed-action).

committed-value committed_value

Specify the bandwidth in bits per second.

Must be an integer in the range of 1-4294967295.

exceed-action exceed_action

Specify the action to be taken if committed data rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak-burst-size peak_burst_size

Specify the burst size in bytes.

Must be an integer in the range of 1-4294967295.

peak-options peak_options

Specify the peak data rate option.

Must be one of the following:

• peak-data-rate-kbps : Specify Peak Data Rate in kilo bits per second.

• peak-data-rate : Specify Peak Data Rate in bits per second.

peak-value peak_value

Specify the bandwidth in bits per second.

Must be an integer in the range of 1-4294967295.

violate-action violate_action

Specify the action to be taken if Peak Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

Configures peak bandwidth parameters.

committed-burst-size committed_burst_size

Specify the committed burst size in bytes.

Must be an integer in the range of 1-4294967295.

committed-options committed_option

Specify the committed option.

Must be one of the following:

• committed-data-rate-kbps : Specify Committed Data Rate in kilo bits per second. This can also be used to specify GBR for Bearer Binding (without the exceed-action).

• committed-data-rate : Specify Committed Data Rate in bits per second. This can also be used to specify GBR for flow Binding (without the exceed-action).

committed-value committed_value

Specify the bandwidth in bits per second.

Must be an integer in the range of 1-4294967295.

exceed-action exceed_action

Specify the action to be taken if committed data rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak-burst-size peak_burst_size

Specify the burst size in bytes.

Must be an integer in the range of 1-4294967295.

peak-options peak_options

Specify the peak data rate option.

Must be one of the following:

• peak-data-rate-kbps : Specify Peak Data Rate in kilo bits per second.

• peak-data-rate : Specify Peak Data Rate in bits per second.

peak-value peak_value

Specify the bandwidth in bits per second.

Must be an integer in the range of 1-4294967295.

violate-action violate_action

Specify the action to be taken if Peak Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

Configures flow/session-based packet buffering.

flow-max-packets flow_max_packets

Specify the maximum number of packets to be buffered per flow.

Must be an integer in the range of 1-255.

subscriber-max-packets subscriber_max_packets

Specify the maximum number of packets to be buffered per subscriber.

Must be an integer in the range of 1-255.

Configures ACS charging actions.

charging-action charging_action_name

Specify name of the charging action.

Must be a string of 1-63 characters.

content-id content_id

Specify the content ID to use in the generated billing records, as well as the AVP used by the Credit Control Application, such as the "Rating-Group" AVP for use by the Diameter Credit Control Application (DCCA). This identifier assists the carrier's billing post processing and is also used by the credit-control system to use independent quotas for different value of content-id.

Must be an integer in the range of 1-2147483647.

nexthop-forwarding-address { ipv4_address | ipv6_address }

Specify the nexthop forwarding address for this charging action. When an uplink packet matches a rule and a charging action is applied to it this nexthop forwarding address is used.

Must be a string in the ipv4-address pattern. For information on the ipv4-address pattern, see the Input Pattern Types section.

-Or-

Must be a string in the ipv6-address pattern. For information on the ipv6-address pattern, see the Input Pattern Types section.

qos-class-identifier qos_class_id

Specify the QoS Class Identifier (QCI).

Must be an integer in the range of 1-9.

service-identifier service_id

Specify the service identifier to use in the generated billing records, as well as the AVP used by the Credit Control Application, such as the "Service-Identifier" AVP for use by DCCA. This is a more general classifier than content-id.

Must be an integer in the range of 1-2147483647.

tft-notify-ue

Specify whether or not TFT updates are sent to UE. Use this command to suppress the selected TFT updates from being sent to the UE. This helps to identify if the appropriate TFT defined in the charging action needs to be sent to the UE or not.

Configures the Allocation Retention Priority (ARP).

allocation-retention-priority priority_level

Specify the priority.

Must be an integer in the range of 1-15.

pci preemption_capability_indicator

Specify the Pre-emption Capability Indicator (PCI).

Must be one of the following:

• MAY_PREEMPT

• NOT_PREEMPT

pvi preemption_vulnerability_indicator

Specify the Pre-emption Vulnerability Indicator (PVI).

Must be one of the following:

• NOT_PREEMPTABLE

• PREEMPTABLE

Configures the billing action for packets that match specific ruledefs.

egcdr

Specify to enable eG-CDR billing.

Configures the Credit Control Charging Credit behavior.

preemptively-request

Specify preemptively requested charging credit behavior.

rating-group coupon_id

Specify the coupon ID used in prepaid charging as rating-group which maps to the coupon ID for prepaid customer. This option also assigns different content-types for the same charging action depending upon whether or not prepaid is enabled. This rating-group overrides the content ID, if present in the same charging-action for the prepaid customer in Diameter Credit Control Application (DCCA). But, only the content IDs will be used in eG-CDRs irrespective of the presence of rating-group in that charging action.

Must be an integer in the range of 0-65535.

Configures to take the redirect-url or terminate-flow action on packets that match ruledefs.

redirect-url redirect_url

Specify to redirect URL.

Must be a string.

terminate-flow

Specify to terminate flow.

Configures discard action on packets that match ruledefs.

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures the readdress server for this charging action.

server { ipv4_address | ipv6_address }

Specify IP address of the readdress server.

Must be a string in the ipv4-address pattern. For information on the ipv4-address pattern, see the Input Pattern Types section.

-Or-

Must be a string in the ipv6-address pattern. For information on the ipv6-address pattern, see the Input Pattern Types section.

For Session Control functionality, this command allows you to enable or disable bandwidth limiting.

id bw_limit_id

Specify the bandwidth limiting ID.

Must be an integer in the range of 1-65535.

Configures the peak data rate in bits per second.

committed-burst-size committed_burst_size

Specify the committed burst size in bytes.

Must be an integer in the range of 1-4294967295.

Default Value: 3000.

committed-data-rate committed_data_rate

Specify the Committed Data Rate in bits per second. This can also be used to specify GBR for Bearer Binding (without the exceed-action).

Must be an integer in the range of 1-4294967295.

Default Value: 144000.

exceed-action exceed_action

Specify the action to be taken if the Committed Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak-burst-size peak_burst_size

Specify the peak burst size in bytes.

Must be an integer in the range of 1-4294967295.

violate-action violate_action

Specify the action to be taken if the Peak Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak_data_rate

Specify the peak data rate in bits per second.

Must be an integer in the range of 1-4294967295.

Configures the peak data rate in bits per second.

committed-burst-size committed_burst_size

Specify the committed burst size in bytes.

Must be an integer in the range of 1-4294967295.

Default Value: 3000.

committed-data-rate committed_data_rate

Specify the Committed Data Rate in bits per second. This can also be used to specify GBR for Bearer Binding (without the exceed-action).

Must be an integer in the range of 1-4294967295.

Default Value: 144000.

exceed-action exceed_action

Specify the action to be taken if the Committed Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak-burst-size peak_burst_size

Specify the peak burst size in bytes.

Must be an integer in the range of 1-4294967295.

violate-action violate_action

Specify the action to be taken if the Peak Data Rate is surpassed.

Must be one of the following:

• discard : Specify to discard the packet.

• lower-ip-precedence : Specify to lower the IP precedence of the packet.

peak_data_rate

Specify the peak data rate in bits per second.

Must be an integer in the range of 1-4294967295.

Configures the packet filter to use in Traffic Flow Template (TFT) sent to the MS.

packet-filter packet_filter_name

Specify name of the packet filter.

Must be a string of 1-63 characters.

Configures using Assured Forwarding 11 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 12 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 13 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 21 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 22 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 23 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 31 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 32 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 33 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 41 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 42 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Assured Forwarding 43 Per Hop Behavior (PHB).

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Best Effort Forwarding PHB.

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures using Expedited Forwarding PHB.

downlink

Specify only downlink packets.

uplink

Specify only uplink packets.

Configures the least-significant six bits in the ToS byte with the specified numeric value.

downlink

Specify the ToS only for downlink packets.

lower-bits value

Specify the value.

Must be an integer in the range of 0-63.

uplink

Specify the ToS only for uplink packets.

Configures Content Filtering Category Policy ID.

policy-id cf_category_policy_id

Specify the Content Filtering Category Policy ID.

Must be an integer in the range of 1-4294967295.

Assigns priority to a Content Filtering Category in the Content Filtering Policy.

priority cf_category_priority

Specify priority of the Content Filtering Category in the Content Filtering Policy.

Must be an integer in the range of 1-65535.

Configures all content to be rated.

action

Specify an action.

allow

Specify the allow action.

content-insert content_to_insert

Specify the content insert action, and the content string to insert.

Must be a string.

Configures category of the content to be rated.

action

Specify an action.

allow

Specify the allow action.

category category_name

Specify name of the category.

Must be one of the following:

• ABOR

• ADULT

• ADVERT

• ANON

• ART

• AUTO

• BACKUP

• BLACK

• BLOG

• BUSI

• CAR

• CDN

• CHAT

• CMC

• CRIME

• CULT

• DRUG

• DYNAM

• EDU

• ENERGY

• ENT

• FIN

• FORUM

• GAMB

• GAME

• GLAM

• GOVERN

• HACK

• HATE

• HEALTH

• HOBBY

• HOSTS

• KIDS

• LEGAL

• LIFES

• MAIL

• MIL

• NEWS

• OCCULT

• PEER

• PERS

• PHOTO

• PLAG

• POLTIC

• PORN

• PORTAL

• PROXY

• REF

• REL

• SCI

• SEARCH

• SHOP

• SPORT

• STREAM

• SUIC

• SXED

• TECH

• TRAVE

• UNKNOW

• VIOL

• VOIP

• WEAP

• WHITE

content-insert content_to_insert

Specify the content insert action, and the content string to insert.

Must be a string.

Configures unclassified categories to be rated.

action

Specify an action.

allow

Specify the allow action.

content-insert content_to_insert

Specify the content insert action, and the content string to insert.

Must be a string.

x-category xcategory_name

Specify name of the x-category.

Must be a string of 1-6 characters.

Configures prepaid services for Diameter/RADIUS applications.

group cc_group_name

Specify name of the credit control group.

Must be a string of 1-63 characters.

Associates the failure handling template.

failure-handling-template template_name

Specify name of the failure handling template.

Must be a string of 1-63 characters.

Configures accepting/ignoring service ID in the Service-Identifier AVP defined in the Diameter dictionaries.

ignore-service-id { false | true }

Specify to enable or disable usage of service ID. To disable, set to true.

Must be one of the following:

• false

• true

Default Value: false.

Configures the Diameter Credit Control Origin Endpoint parameter.

origin endpoint origin_endpoint_name

Specify name of the Diameter Credit Control Origin Endpoint.

Must be a string of 1-63 characters.

Configures the value to be sent in the Service-Context-Id AVP, which defines the context in which DCCA is used.

service-context-id service_context_id

Specify the value to be sent in the Service-Context-Id AVP.

Must be a string of 1-63 characters.

Configures Diameter Credit Control Session Failover.

failover

Specify Diameter Credit Control Session Failover.

Configures Diameter Credit Control Failure Handling action to continue.

continue continue_action

Specify the continue action.

Must be one of the following:

• go-offline-after-tx-expiry : After Tx expiry, start offline charging.

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action to retry, and in case of failure, to terminate.

retry-and-terminate retry_and_terminate_action

Specify the retry-and-terminate action.

Must be one of the following:

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action as terminate.

Configures Diameter Credit Control Failure Handling action to continue.

continue continue_action

Specify the continue action.

Must be one of the following:

• go-offline-after-tx-expiry : After Tx expiry, start offline charging.

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action to retry, and in case of failure, to terminate.

retry-and-terminate retry_and_terminate_action

Specify the retry-and-terminate action.

Must be one of the following:

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action as terminate.

Configures Diameter Credit Control Failure Handling action to continue.

continue continue_action

Specify the continue action.

Must be one of the following:

• go-offline-after-tx-expiry : After Tx expiry, start offline charging.

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action to retry, and in case of failure, to terminate.

retry-and-terminate retry_and_terminate_action

Specify the retry-and-terminate action.

Must be one of the following:

• retry-after-tx-expiry : After Tx expiry, retry.

Configures Diameter Credit Control Failure Handling action as terminate.

Configures the Diameter Credit Control pending traffic treatment to forced reauthorization.

drop

Specify to drop.

pass

Specify to pass.

Configures the Diameter Credit Control Pending Traffic Treatment.

buffer

Specify to tentatively count/time traffic, and then buffer traffic pending arrival of quota. Buffered traffic will be forwarded and fully charged against the quota when the quota is eventually obtained and the traffic is passed.

drop

Specify to drop any traffic when there is no quota present.

pass

Specify to pass all traffic more or less regardless of quota state.

Enables limited access for subscribers when the OCS is unreachable.

volume volume

Specify limited volume access to subscriber in case OCS is unreachable.

Must be an integer in the range of 1-4294967295.

Configures the Diameter Credit Control Pending Traffic Treatment parameter for quota exhaustion.

buffer

Specify to tentatively count/time traffic, and then buffer traffic pending arrival of quota. Buffered traffic will be forwarded and fully charged against the quota when the quota is eventually obtained and the traffic is passed.

drop

Specify to drops any traffic when there is no quota present.

pass

Specify to pass all traffic more or less regardless of quota state.

Configures the Diameter Credit Control pending traffic treatment to trigger.

drop

Specify to drop.

pass

Specify to pass.

Configures the Diameter Credit Control pending traffic treatment to validity-expired.

drop

Specify to drop.

pass

Specify to pass.

Configures the Credit Control Quota Holding Time (QHT).

holding-time holding_time

Specify the quota holding time in seconds.

Must be an integer in the range of 1-4000000000.

Configures Credit Control include/exclude packet causing threshold.

exclude-packet-causing-trigger

Specify to exclude packet causing trigger.

include-packet-causing-trigger

Specify to include packet causing trigger.

Configures the timestamp rounding mechanism for quota consumption.

timestamp-rounding timestamp_rounding_mechanism

Specify the timestamp rounding mechanism for quota consumption.

Must be one of the following:

• ceiling : Specify to round off to the smallest integer greater than the fraction.

• floor : Specify to always discard the fraction.

• roundoff : If the fractional part is greater than or equal to 0.5, specify to round off to the smallest integer greater than the fraction.

Configures the ACS Credit Control usage reporting type.

report-only-granted-volume

Suppresses the input and output octets. If the Granted-Service-Unit (GSU) AVP comes with CC-Total-Octets, then the device will send total, input and output octets in Used-Service-Unit (USU) AVP. If it comes with Total-Octets, the device will send only Total-Octets in USU.

Configures ACS group-of-ruledefs parameters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string.

Configures the priority of the ruledef in the current group-of-ruledefs.

priority ruledef_priority

Specify the priority of the ruledef. The priority must be unique within the group-of-ruledefs.

Must be an integer in the range of 1-10000.

ruledef ruledef_name

Specify name of the ruledef to add to the current group-of-ruledefs.

Must be a string of 1-63 characters.

Specify the supported attribute of configurable P2P detection attributes populated from the currently loaded P2P plugin.

id-reduce-factor id_reduce_factor

Specify by what factor the SSL ID is stored in the SSL Session ID Tracker table.

Must be an integer in the range of 0-65535.

max-entry-per-sessmgr max_entry_per_sessmgr

Specify maximum SSL Session IDs tracked per session manager.

Must be an integer in the range of 0-65535.

Enables or disables ACS analysis for all or specified analyzer.

ecs-analysis analyzer

Specify the ACS analyzers.

Must be one of the following:

• all : ACS analysis for all analyzers.

• ftp : ACS analysis for FTP analyzer.

• http : ACS analysis for HTTP analyzer.

• https : ACS analysis for HTTPS analyzer.

• rtsp : ACS analysis for RTSP analyzer.

• sip : ACS analysis for SIP analyzer.

Enables or disables the detection of all or specified peer-to-peer (P2P) protocols.

protocol p2p_protocol

Specify the P2P protocol.

Must be one of the following:

• all

• cisco-jabber

• eros

• fasttrack

• googlemaps

• skype

• teamspeak

• uber

• ufc

• yahoo

Configures ACS Packet Filter parameters.

direction direction

Specify the direction in which the current packet filter will be applied.

Must be one of the following:

• bi-directional : Specify to apply the filter both in the uplink and downlink directions. This is the default value.

• downlink : Specify to apply the filter only in the downlink direction.

• uplink : Specify to apply the filter only in the uplink direction.

Default Value: bi-directional.

packet-filter packet_filter_name

Specify name of the packet filter.

Must be a string of 1-63 characters.

priority priority

Specify the priority of the packet filter.

Must be an integer in the range of 0-255.

Configures the port number of the local or remote transport protocol.

operator

Specify how to match.

Must be one of the following:

• = : Equals.

port_number

Specify the port number of the transport protocol.

Must be an integer in the range of 0-65535.

Configures a range of port numbers of the local or remote transport protocol.

to end_port_number

Specify the ending port number for the port number range. The ending port number must be greater than the starting port number.

Must be an integer in the range of 0-65535.

start_port_number

Specify the starting port number for the port number range. The starting port number must be lesser than the ending port number.

Must be an integer in the range of 0-65535.

Configures the IP protocol(s) for the current packet filter.

operator

Specify how to match.

Must be one of the following:

• = : Equals.

protocol_number

Specify the protocol number.

Must be an integer in the range of 0-255.

Configures the IP remote address(es) for the current packet filter.

ip_address_mask

Specify the IP address and mask.

Must be a string in the ipv4-prefix pattern. For information on the ipv4-prefix pattern, see the Input Pattern Types section.

-Or-

Must be a string in the ipv6-prefix pattern. For information on the ipv6-prefix pattern, see the Input Pattern Types section.

operator

Specify how to match.

Must be one of the following:

• = : Equals.

Configures the port number of the local or remote transport protocol.

operator

Specify how to match.

Must be one of the following:

• = : Equals.

port_number

Specify the port number of the transport protocol.

Must be an integer in the range of 0-65535.

Configures a range of port numbers of the local or remote transport protocol.

to end_port_number

Specify the ending port number for the port number range. The ending port number must be greater than the starting port number.

Must be an integer in the range of 0-65535.

start_port_number

Specify the starting port number for the port number range. The starting port number must be lesser than the ending port number.

Must be an integer in the range of 0-65535.

Configures the type of service (TOS) traffic class under charging action in the Packet filter mode.

mask mask_operator

Specify how to match the specified mask.

Must be one of the following:

• = : Equals.

mask_field_value

Specify the traffic-class mask field.

Must be an integer in the range of 0-255.

tos_traffic_class_operator

Specify how to match the specified TOS Traffic Class.

Must be one of the following:

• = : Equals.

traffic_class

Specify the traffic class value to filter the traffic.

Must be an integer in the range of 0-255.

Configures ACS rulebases.

retransmissions-counted { false | true }

Specify whether to count retransmissions in all charging modules.

Must be one of the following:

• false

• true

Default Value: true.

rulebase rulebase_name

Specify name of the rulebase. If the named rulebase does not exist, it is created, and the CLI mode changes to the ACS Rulebase Configuration Mode wherein the rulebase can be configured. If the named rulebase already exists, the CLI mode changes to the ACS Rulebase Configuration Mode for that rulebase.

Must be a string.

transactional-rule-matching

Specify to enable or disable transactional rule matching (TRM), which allows the ACS to bypass per-packet rule matching on a transaction once the transaction is fully classified.

Configures the action priority for a ruledef / group-of-ruledefs in the current rulebase.

Configures priority for the specified ruledef / group-of-ruledefs in the current rulebase.

priority action_priority

Specify the action priority.

Must be an integer in the range of 1-65535.

Enables matching of dynamic rules with static rules for this action priority on a flow.

Assigns a group-of-ruledefs to the rulebase. Or, associates a time definition with a group-of-ruledefs.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

Assigns ruledefs to the rulebase. Or, associates a time definition with a ruledef.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Assigns a group-of-ruledefs to the rulebase. Or, associates a time definition with a group-of-ruledefs.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

Assigns ruledefs to the rulebase. Or, associates a time definition with a ruledef.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Assigns a group-of-ruledefs to the rulebase. Or, associates a time definition with a group-of-ruledefs.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

Assigns ruledefs to the rulebase. Or, associates a time definition with a ruledef.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Assigns a group-of-ruledefs to the rulebase. Or, associates a time definition with a group-of-ruledefs.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

Assigns ruledefs to the rulebase. Or, associates a time definition with a ruledef.

charging-action charging_action_name

Assigns the specified charging action to the rulebase.

Must be a string of 1-63 characters.

description description

Adds specified text to the rule and action.

Must be a string of 1-63 characters.

monitoring-key monitoring_key

Associates the specified monitoring-key with ruledefs for usage monitoring.

Must be an integer in the range of 1-134217727.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Configures rulebase bandwidth policy parameters.

default-policy default_firewall_policy_name

Specify the default firewall policy.

Must be a string of 1-63 characters.

Configures the type of billing to be performed for subscriber sessions.

egcdr

Generates an enhanced G-CDR (eG-CDR) for GGSN / P-GW-CDR for P-GW, and/or UDR with specified format on the occurrence of an interim trigger condition at the end of a subscriber session, or an SGSN-to-SGSN handoff

radius

Generates postpaid RADIUS accounting records at the start and end of a subscriber session, and on the occurrence of an interim trigger condition. RADIUS accounting records are generated for each content ID.

rf

Specify to enable Rf accounting.

Generates Usage Data Record (UDR) with specified the format on the occurrence of an interim trigger condition, at the end of a subscriber session, or a handoff.

udr-format udr_format_name

Specify name of the UDR format.

Must be a string of 1-63 characters.

Configures the ACS Diameter Credit Control Requesting Service Unit - time values.

cc-time cc_time

Specify requested service unit for charging time duration in seconds in included sub-AVP.

Must be an integer in the range of 1-4000000000.

Configures ACS Diameter Credit Control Requesting Service Unit - Service-specific values.

cc-service-specific-units charging_unit

Specify the service-specific charging units.

Must be an integer in the range of 1-4000000000.

Configures the ACS Diameter Credit Control Requesting Service Unit - Time values.

cc-input-octets cc_input_octets

Specify the volume in bytes.

Must be an integer in the range of 1-4000000000.

cc-output-octets cc_output_octets

Specify the output charging octets in bytes.

Must be an integer in the range of 1-4000000000.

cc-total-octets cc_total_octets

Specify the total charging octets in bytes.

Must be an integer in the range of 1-4000000000.

Configures the Quota Holding Time (QHT). QHT is used with both time- and volume-based quotas.

content-id content_id

Specify the content ID (Rating group AVP) to use for the Quota holding time for the current rulebase. Must be the content ID specified for Credit Control Service in the ACS.

Must be an integer in the range of 1-2147483647.

holding-time holding_time

Specify the holding time.

Must be an integer in the range of 1-4000000000.

Configures the retry time for the quota request.

max-retries max_retries

Specify the maximum number of retries allowed for blacklisted categories.

Must be an integer in the range of 1-65535.

retry-time retry_time

Specify the retry interval in seconds.

Must be an integer in the range of 0-86400.

Configures the algorithm to compute time duration for Prepaid Credit Control Application quotas in the current rulebase.

algorithm

Specify the Credit Control Quota Time Duration algorithm.

consumed-time consumed_time

Specify the Credit Control consumed time.

Must be an integer in the range of 1-4294967295.

content-id content_id

Specify the Content ID.

Must be an integer in the range of 1-2147483647.

continuous-time-periods continuous_time_periods

Specify the continuous time periods.

Must be an integer in the range of 1-4294967295.

parking-meter parking_meter

Specify the Credit Control Parking Meter.

Must be an integer in the range of 1-4294967295.

plus-idle

Specify the Credit Control idle time.

Configures the Content Filtering Category Policy Identifier for Policy-based Content Filtering support in the current rulebase.

policy-id cf_policy_id

Specify the Content Filtering Policy ID.

Must be an integer in the range of 1-4294967295.

Configures the action to take on Content Filtering packets in the case of ACS error scenarios.

deny

Specify the flow-any-error configuration as deny. All the denied packets will be accounted for by the discarded-flow-content-id configuration in the Content Filtering Policy Configuration Mode. This content ID will be used to generate UDRs for packets denied via content filtering.

permit

Specify the flow-any-error configuration as permit.

Enables or disables the specified Category-based Content Filtering mode in the current rulebase.

category { static-and-dynamic | static-only }

Using Category-based Content Filtering support requires Content Filtering Category configuration in the Global Configuration Mode.

Must be one of the following:

• static-and-dynamic : Configures Category-based Content Filtering in Static-and-Dynamic mode, wherein a static rating of the URL is first performed, and only if the static rating fails to find a match, dynamic rating of the content that the server returns is then performed.

• static-only : Configures Category-based Content Filtering in static only mode, wherein all URLs are compared against an internal database to categorize the requested content.

server-group server_group_name

Specify name of the Content Filtering Server Group.

Must be a string of 1-63 characters.

Configures the credit control group to be used for subscribers who use this rulebase.

credit-control-group cc_group_name

Specify name of the credit control group.

Must be a string of 1-63 characters.

Configfures whether dynamic rules are matched before statically configured rules.

order dynamic_rule_order

Specify dynamic rule order.

Must be one of the following:

• always-first : Specify to match all the dynamic rules against the flow prior to any static rule. This is the default value.

• first-if-tied : Specify to match rules against the flow based on their priority with the condition that dynamic rules match before a static rule of the same priority. A rule is a combination of a ruledef, charging action, and precedence. Static rules are defined by the "action" CLI command in the ACS Rulebase Configuration Mode, and are applicable to all subscribers that are associated with the rulebase. Dynamic rules are obtained via a dynamic protocol, such as, the Gx-interface for a particular subscriber session.

Configures EDR-related parameters.

charging-edr charging_edr_format_name

Specify to generate charging EDR on transaction completion.

Must be a string of 1-63 characters.

dns

DNS protocol-related configuration.

edr-format edr_format_name

Specify to generate EDR on transaction completion for DNS or HTTP protocol.

Must be a string of 1-63 characters.

http

HTTP protocol-related configuration.

reporting-edr reporting_edr_format_name

Specify the reporting EDR format name to generate reporting EDR on transaction completion.

Must be a string of 1-63 characters.

Assigns volume or interval values to the interim G-CDRs.

interval duration

Specify the time interval, in seconds, for closing the G-CDR/PGW-CDR if the minimum time duration thresholds are satisfied.

Must be an integer in the range of 60-40000000.

Configures the uplink/downlink volume octet counts for the generation of the interim G-CDRs/PGW-CDRs.

downlink bytes

Specify the limit for the number of downlink (from network to subscriber) octets after which the G-CDR/PGW-CDR is closed.

Must be an integer in the range of 100000-4000000000.

total bytes

Specify the limit for the total number of octets (uplink+downlink) after which the G-CDR/PGW-CDR is closed.

Must be an integer in the range of 100000-4000000000.

uplink bytes

Specify the limit for the number of uplink (from subscriber to network) octets after which the G-CDR/PGW-CDR is closed.

Must be an integer in the range of 100000-4000000000.

Specify control protocol handshake packets.

charge-separate-from-application

Specify the charging action to separate the charging of the initial control packets or all subsequent control packets from regular charging.

Configures the charging action to include the flow control packets either during initial handshaking only or specified control packets during session for charging.

all-packets

Specify that the initial setup packets will wait until the application has been determined before assigning the content-id, and all mid-session ACK packets as well as the final tear-down packets will use that content-id.

initial-packets

Specify that only the initial setup packets will wait for content-id assignment.

mid-session-packets

Specify that the ACK packets after the initial setup will use the application's or content-id assignment.

tear-down-packets

Specify that the final tear-down packets (TCP or WAP) will use the application's or content-id assignment.

Configures the end condition of the session flows related to a user session and triggers EDR generation.

charging-edr charging_edr_format_name

Specify name of the charging EDR format.

Must be a string of 1-63 characters.

normal-end-signaling

Creates an EDR with the specified EDR format whenever flow end is signaled normally, for example like detecting FIN and ACK for a TCP flow, or a WSP-DISCONNECT terminating a connection-oriented WSP flow over UDP) and create an EDR for the flow using the specified EDR format.

session-end

Creates an EDR with the specified EDR format whenever a subscriber session ends. By this option ACS creates an EDR with the specified format name for every flow that has had any activity since last EDR was created for the flow on session end.

timeout

Creates an EDR with the specified EDR format whenever a flow ends due to a timeout condition.

This command allows you to limit the total number of simultaneous flows per Subscriber/APN sent to a rulebase regardless of the flow type, or limit flows based on the protocol type under the Session Control feature.

non-tcp non_tcp_limit

Specify the maximum limit of non-TCP type flows.

Must be an integer in the range of 1-4000000000.

tcp tcp_limit

Specify the maximum limit of TCP flows.

Must be an integer in the range of 1-4000000000.

limit

Specify the maximum limit.

Must be an integer in the range of 1-4000000000.

Configures IP parameters related to user session.

reassembly-timeout reassembly_timeout

Specify the maximum duration for which ip packet fragments are retained, in milliseconds.

Must be an integer in the range of 100-30000.

Default Value: 5000.

Enables or disables the P2P analyzer to detect peer-to-peer (P2P) applications.

dynamic-flow-detection

Enables dynamic-flow detection, allowing the P2P analyzer to detect the P2P applications configured for the ACS.

Configures the post-processing priority of a specific ruledef in the current rulebase.

priority post_processing_priority

Specify the post-processing priority.

Must be an integer in the range of 1-65535.

Configures group-of-ruledefs parameters.

charging-action charging_action_name

Specify name of the charging action.

Must be a string of 1-63 characters.

description description

Specify an optional description for this configuration.

Must be a string of 1-63 characters.

group-of-ruledefs group_of_ruledefs_name

Specify name of the group-of-ruledefs.

Must be a string of 1-63 characters.

Assigns ruledefs to the current rulebase.

charging-action charging_action_name

Specify name of the charging action.

Must be a string of 1-63 characters.

description description

Specify an optional description for this configuration.

Must be a string of 1-63 characters.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Configures the priority of the route in the rulebase.

priority route_priority

Specify the route priority.

Must be an integer in the range of 0-65535.

Configures the ruledef to evaluate packets to determine analyzer.

analyzer analyzer

Specify the analyzer for the ruledef.

Must be one of the following:

• dns : Route to DNS protocol.

• file-transfer : Route to file analyzer.

• ftp-control : Route to FTP Control protocol.

• ftp-data : Route to FTP Data protocol.

• h323 : Route to H323 protocol.

• http : Route to HTTP protocol.

• imap : Route to IMAP protocol analyzer.

• mipv6 : Route to MIPv6 protocol analyzer.

• mms : Route to MMS protocol analyzer.

• pop3 : Route to POP3 protocol analyzer.

• pptp : Route to PPTP protocol analyzer.

• radius : Route to light-weight RADIUS protocol analyzer.

• rtcp : Route to RTCP protocol analyzer.

• rtp : Route to RTP protocol analyzer.

• rtsp : Route to RTSP protocol analyzer.

• sdp : Route to SDP protocol analyzer.

• secure-http : Route to secure HTTP protocol analyzer.

• sip : Route to SIP protocol analyzer.

• smtp : Route to SMTP protocol analyzer.

• tftp : Route to TFTP protocol analyzer.

• wsp-connection-less : Route to WSP connection-less protocol analyzer.

• wsp-connection-oriented : Route to WSP connection-oriented protocol analyzer.

description description

Specify to add a description to the rule and action in the saved configuration file for later reference.

Must be a string of 1-31 characters.

ruledef ruledef_name

Specify name of the ruledef.

Must be a string of 1-63 characters.

Configures the Real Time Streaming Protocol (RTSP) and Session Description Protocol (SDP) analyzers to detect the start/stop of RTP and RTCP flows.

dynamic-flow-detection

Specify to enable dynamic RTP/RTCP flow detection.

Configures TCP window size checking.

check-window-size

Specify to enable TCP window-size checking.

Configures the TCP Maximum Segment Size (MSS) in TCP SYN packets.

add-if-not-present

Specify to add the TCP MSS if not present in the packet.

limit-if-present

Specify to limit the TCP MSS if present in the packet.

mss tcp_mss

Specify the TCP MSS.

Must be an integer in the range of 496-65535.

Configures processing of TCP packets that are out of order, while waiting for the earlier packet(s) to arrive.

timeout timeout_duration

Specify the timeout duration for re-assembly of TCP out-of-order packets in milliseconds.

Must be an integer in the range of 100-30000.

Default Value: 5000.

Configures the TCP out-of-order segment behavior after buffering a copy.

transmit transmit_behavior

Specify the TCP out-of-order segment behavior after buffering a copy.

Must be one of the following:

• after-reordering : Specify to deliver the TCP out-of-order segments in-sequence to the ACS analyzer after all packets are received and successfully reordered. The "after-reordering" option is doing this by buffering out-of-order packets, and only releasing them after the missing out-of-order packets are received (or after OOO timeout). When the missing packet is received, complete deep packet inspection of all the packets and all relevant in-line services is done, and then the last packet is forwarded (as the latest). If reordering is not successful within the specified OOO timeout, all the subsequent received packets in that TCP flow are forwarded without being passed through the analysers (except the L3/L4 analyzer). As a consequence, only L3/L4 rule matching will take place. If memory allocation fails or the received packet is partial retransmitted data, the packet will also be forwarded immediately without being passed through the protocol analyzers, except for the L3/L4 analyzers.

• immediately : Specify to deliver the TCP out-of-order segments in-sequence to the ACS analyzer after all packets are received and successfully reordered. The "immediately" option is accomplishing this by making a copy of out-of-order packets, and buffering those, while transmitting the original data packets through the outgoing interface immediately. When the missing packet is received, complete deep packet inspection of all the packets and all relevant in-line services is done, and then the last packet is forwarded. If reordering of the buffered packets is not successful within the specified OOO timeout, all the subsequent received packets in that TCP flow are forwarded without being passed through the analysers (except the L3/L4 analyzer). As a consequence only L3/L4 rule matching will take place. If memory allocation fails or the received packet is partial retransmitted data, the packet will also be forwarded immediately without being passed through the protocol analyzers, except for the L3/L4 analysers.

Enables or disables the Tethering Detection feature for the current rulebase, and specifies the database to use.

application

Specify to perform tethering detection based on App-based method.

dns-based

Specify to perform tethering detection based on DNS-based method.

max-syn-packet-in-flow max_syn_packets

Specify the number of SYN packets applicable for tethering detection in a flow.

Must be an integer in the range of 1-3.

tethering_database

Specify to perform tethering detection using the specified database.

Must be one of the following:

• os-db-only : Specify to perform tethering detection using IPv4 and IPv6 OS signature databases.

• os-ua-db : Specify to perform tethering detection using IPv4 OS, IPv6 OS, and UA signature databases.

• ua-db-only : Specify to perform tethering detection using only the UA signature database.

Configures URL Blacklisting action.

content-id content_id

Specify the content ID, a number assigned to URL Blacklisting.

Must be an integer in the range of 1-65535.

discard

Specify the URL Blacklisting action as "discard".

redirect-url redirect_url

Specify the redirect URL/URI, which must be a fully qualified URL/URI.

Must be a string.

terminate-flow

Specify the URL Blacklisting action as "terminate-flow".

www-reply-code-and-terminate-flow reply_code

Specify the URL Blacklisting action as "terminate-flow action with reply code".

Must be an integer in the range of 400-599.

Configures URL Blacklisting match-method.

match-method match_method

Specify the match method.

Must be one of the following:

• exact : URL Blacklisting performs an exact match of URL.

• generic : URL Blacklisting performs generic match of URL.

Configures ACS rule definitions (ruledef).

rule-application ruledef_purpose

Specify the purpose of the ruledef. When a ruledef is evaluated, if the multi-line-or all-lines command is configured, the logical OR.

Must be one of the following:

• charging : Specify that the current ruledef is for charging purposes.

• post-processing : Specify that the current ruledef is for post-processing purposes. This enables processing of packets even if the rule matching for them has been disabled.

• routing : Specify that the current ruledef is for routing purposes. Up to 256 ruledefs can be defined for routing in an ACS.

ruledef ruledef_name

Specify name of the ruledef. If the named ruledef does not exist, it is created, and the CLI mode changes to the ACS Ruledef Configuration Mode wherein the ruledef can be configured. If the named ruledef already exists, the CLI mode changes to the ACS Ruledef Configuration Mode for that ruledef.

Must be a string.

Specify RAT type associated with the bearer flow.

operator

Specify how to match.

Must be one of the following:

• != : Does not equal.

• = : Equals.

rat_type

Specify the RAT type.

Must be one of the following:

• geran : GSM EDGE Radio Access Network type.

• utran : UMTS Terrestrial Radio Access Network type.

• wlan : Wireless LAN type.

Configures ruledef to match DNS answer name.

operator

Specify how to match.

Must be one of the following:

• != : Does not equal.

• !contains : Does not contains.

• !ends-with : Does not end with.

• !starts-with : Does not start with.

• = : Equals.

• case-sensitive : Strings will be matched in case-sensitive manner.

• contains : Contains.

• ends-with : Ends with.

• starts-with : Starts with.

value

Specify the value.

Must be a string of 1-127 characters.

Configures rule expression to match all packets of the specified protocol.

condition

Specify the condition.

Must be one of the following:

• FALSE

• TRUE

operator

Specify how to match.

Must be one of the following:

• != : Does not equal.

• = : Equals.

Configures rule expression to match previous state of the DNS FSM.

operator

Specify how to match.

Must be one of the following:

• != : Does not equal.

• = : Equals.

previous_state

Specify the previous state to match.

Must be one of the following:

• dns-timeout : DNS timeout.

• init : Init.

• req-sent : Request sent.

• resp-error : Response error.

• resp-success : Response success.

Configures rule expression to match query name in DNS request messages.

operator

Specify how to match.

Must be one of the following:

• != : Does not equal.

• !contains : Does not contain.

• !ends-with : Does not end with.

• !starts-with : Does not start with.

• = : Equals.

• case-sensitive : Strings will be matched in case-sensitive manner.

• contains : Contains.

• ends-with : Ends with.

• starts-with : Starts with.

query_name

Specify the query name to match.

Must be a string of 1-127 characters.

Configures rule expression to match the query type in the DNS request messages.