In this section:
Configuring the LI Call Data Channel (CDC)
Configuring the Node Number LI
As user 'Calea', use the following commands to configure LI:
% set addressContext default intercept nodeNumber <integer>
- If the CDC is configured through the EMS, the node number is configured automatically by the EMS.
- If the CDC is configured through the SBC, the node number must be configured along with the CDC on the SBC.
Configuring the Default LI in the I-SBC or S-SBC
Use the following command to establish the LI call data channel configuration in the I-SBC or S-SBC.
% set addressContext default intercept callDataChannel <callDataChannel_name> interceptStandard <etsi | packetcable | packetcablePlusEtsi | threeGpp> ipInterfaceGroupName <ipInterfaceGroup_name> kaTimer <kaTimer_value> priIpAddress <IP_Address> priMode <active | outofservice | standby> priPort <priPort_number> priState <disabled | enabled> retries <value> secIpAddress <IP_Address> secMode <active | outofservice | standby> secState <disabled | enabled> vendorId <none | ss8 | utimaco | verint>
The following is an example of how to configure the default LI in the I-SBC.
% set addressContext default intercept callDataChannel <callDataChannel_name> ipInterfaceGroupName <ipInterfaceGroup_Name> interceptStandard <etsi | packetcable | packetcablePlusEtsi | threeGpp> kaTimer <kaTimer_value> priIpAddress <IP_Address> priMode active priPort <priPort_number> priState enabled retries 3 secIpAddress <IP_Address> secMode standby secState enabled vendorId <none | ss8 | utimaco | verint> [ok]
Configuring the Default LI in the M-SBC
Use the following command to establish the LI call data channel configuration in the M-SBC.
% set addressContext default intercept callDataChannel <callDataChannel_name> interceptStandard < etsi | packetcable | packetcablePlusEtsi | threeGpp> kaTimer <kaTimer_value> priIpAddress <IP_Address> priMode <active | outofservice | standby> priPort <priPort_number> priState <disabled | enabled> retries <value> secIpAddress <IP_Address> secMode <active | outofservice | standby> secState <disabled | enabled> vendorId <none | ss8 | utimaco | verint>
Configuring the SBC Core IPsec
As user ''Admin'', use the following commands to configure IPsec:
- This optional configuration is needed if secure connection is required between the SBC and the Mediation Server.
- The SBC does not support IPsec for media interception over UDP.
- The SPD entry is required to create the following entries:
localIdentity ipAddress – The SBC Interface Group IP associated with the LI CDC.
remoteIdentity ipAddress – The Mediation Server IP configured in the LI CDC.
The Recommended setting for LI IPsec mode is 'transport'.
For more information on IPsec configuration, refer to the section IP Security - CLI.
### create and configure IKE and IPsec protection profiles set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF saLifetimeTime 28800 set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF espAlgorithms integrity hmacSha1,hmacMd5 set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF espAlgorithms encryption aesCbc128,_3DesCbc set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF saLifetimeTime 28800 set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF algorithms encryption aesCbc128,_3DesCbc set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF algorithms integrity hmacSha1,hmacMd5 set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF dpdInterval noDpd ### create IKE peer set addressContext default ipsec peer PRGGSX2 ipAddress 10.54.78.20 preSharedKey 00000000000000000000000000000000 localIdentity type ipV4Addr ipAddress 10.220.41.161 set addressContext default ipsec peer PRGGSX2 remoteIdentity type ipV4Addr ipAddress 10.54.78.20 set addressContext default ipsec peer PRGGSX2 protocol ikev1 protectionProfile PRGGSX2_IKE_PROT_PROF ### create an SPD rule for this IKE peer set addressContext default ipsec spd PRGGSX2_SPD state enabled precedence 1001 set addressContext default ipsec spd PRGGSX2_SPD localIpAddr 10.220.41.161 localIpPrefixLen 32 remoteIpAddr 10.54.78.20 remoteIpPrefixLen 32 set addressContext default ipsec spd PRGGSX2_SPD action protect set addressContext default ipsec spd PRGGSX2_SPD protocol 0 set addressContext default ipsec spd PRGGSX2_SPD protectionProfile PRGGSX2_IPSEC_PROT_PROF set addressContext default ipsec spd PRGGSX2_SPD mode transport set addressContext default ipsec spd PRGGSX2_SPD peer PRGGSX2 ### enable IPsec on the IP interface group set addressContext default ipInterfaceGroup LIG1 enabled
Viewing the Default LI Configuration Statistics
As user 'Calea', use the following command in System-level mode to retrieve the LI statistics:
> show status addressContext default intercept interceptCallDataChannelStatistics interceptCallDataChannelStatistics default { primaryChannelStatus inService; secondaryChannelStatus outOfService; StartSuccess 0; StartFailures 0; StopSuccess 0; StopFailures 0; CallAnswerSuccess 0; CallAnswerFailures 0; CallDisconnectSuccess 0; CallDisconnectFailures 0; ServiceInstanceSuccess 0; ServiceInstanceFailures 0; IndicationSuccess 0; IndicationFailures 0; KeepAliveSuccess 1; KeepAliveFailures 0; RestartSuccess 1; RestartFailures 0; RadiusAckReceived 2; StartResponsesReceived 0; } [ok]