In this section:
The Policy Server object allows you to configure up to 10 policy servers (one local server and nine external policy servers). When an active server becomes congested, the SBC Core application will first distribute overflow traffic to one of the active servers with enough capacity, or to one of the standby servers that is not currently congested.
The SBC can obtain policy services from one or more active servers in load-sharing (or round-robin) mode, and one or more active servers can be configured in the standby mode.
Types of policy server configurations include:
The SBC administrator enables or disables the policy server. When a policy server is enabled, it receives database queries from the SBC. You can enable or disable the policy server only in the out-of-service mode.
The Policy Server global configuration commands are described below. The SBC can be configured to communicate with an external PSX policy server using either a Management Interface Group or IP Interface Group.
The SBC SWe supports configuring an alternate IP address for communicating with the external PSX. Refer to Using an Alternate IP Address to Communicate with the PSX for details.
The DNS query to an Interface Group outside the address context feature adds additional flexibility to query the PSX FQDN with a particular DNS Group. For more information, refer to DNS Support.
% set system policyServer globalConfig addressContext <address context name> congestionControl <disabled | enabled> dnsGroup <DNS group server name> dscpProfile <dscpProfileName> ipInterfaceGroup <ipInterfaceGroup_name> ipVar <metavariable name> mgmtInterfaceGroup <mgmtInterfaceGroup_name> reconnectTimeout <1-3600 seconds> sbcGatewayName <SbcGateway Name> switchOverMode <automatic | manual> type <ip | mgmt>
Parameter | Length/Range | Description |
---|---|---|
addressContext | 1-23 |
NOTE: This parameter is only configurable (visible from command line) when attribute |
| N/A | When this parameter is enabled, the SBC throttles the sending or policy requests to either active or standby policy server. Options are:
|
dnsGroup | N/A | <DNS group name> – The name of the DNS group to associate with the policy server global configuration to allow PSX FQDN resolution with a particular DNS group. |
dscpProfile | <profile_name> - Name of the DSCP Profile in which DSCP values are configured for HPC and non HPC calls. For more information, refer to DSCP Profile - CLI. | |
ipInterfaceGroup | 1-23 |
NOTE: This parameter is only configurable once |
ipVar | 1-255 | Use this parameter to specify a metavariable name (from the PSX’s metavariable table) used to provide an IP address for the SBC SWe for connecting to the PSX. When the NOTE: Use this parameter for SBC SWe N:1 HA or cloud-based deployments only. |
| N/A | Specifies the Management Interface Group to be used for communication with an external PSX. NOTE: If attribute |
| 1-3600 | Specifies the timeout period in seconds to re-attempt the connection to a policy server that is in the enabled state. Default is 10 seconds. |
sbcGatewayName | N/A | The SBC Gateway name given to the softswitch. |
| N/A | Specifies the mode to switch over the policy server to active state. Mode can be:
|
type | N/A | Interface type supported by the policy server.
|
To set the policy server global configuration using management interface group called "mgmtGroup":
% set system policyServer globalConfig type mgmt mgmtInterfaceGroup mgmtGroup congestionControl enabled reconnectTimeout 5 switchOverMode automatic
To set the policy server global configuration using IP Interface Group called "ipInterfaceGroup":
% set system policyServer remoteServer PSXSWE2 state disabled mode outOfService % commit
% set system policyServer globalConfig type ip addressContext a1 ipInterfaceGroup LIF1 reconnectTimeout 10 switchOverMode automatic congestionControl enabled % commit
% set system policyServer remoteServer PSXSWE2 state enabled mode active % commit
To view the policy server global configuration settings with type
as mgmt
:
% show system policyServer globalConfig reconnectTimeout 5; switchOverMode automatic; congestionControl enabled; type mgmt; mgmtInterfaceGroup mgmtGroup;
To view the policy server global configuration settings with type
as ip
:
> show system policyServer globalConfig reconnectTimeout 10; switchOverMode automatic; congestionControl disabled; type ip; addressContext a1; ipInterfaceGroup LIF1;
To view the status of policy server global configuration from system-level mode with type
as mgmt
:
> show table system policyServer globalConfig reconnectTimeout 5; switchOverMode automatic; congestionControl enabled; type mgmt; mgmtInterfaceGroup mgmtGroup;
To view the status of policy server global configuration from system-level mode with type
as ip:
> show table system policyServer globalConfig reconnectTimeout 10; switchOverMode automatic; congestionControl disabled; type ip; addressContext a1; ipInterfaceGroup LIF1;
The Local Policy Server configuration commands are described below.
% set system policyServer localServer <softswitch_name> action <dryUp | force> keepAliveTimer <1-60 seconds> mode <active | alternate | outOfService | standby> retries <0-32> retryTimer <# milliseconds> state <disabled | enabled> transactionTimer <50-60000 milliseconds>
Parameter | Length/Range | Description |
---|---|---|
| N/A | Specifies the name of the local policy server. |
| N/A | Specifies the method on which queued transactions are processed, when operational state is either standby or out-of-service: |
| 1-60 | Specifies the time interval (in seconds) to wait before issuing a "keepalive" poll to the policy server. This poll is issued only if there is no other policy server activity during this interval. The receipt of any message from the policy server resets the elapsed time to 0. |
| N/A | Specifies the operational state of the local policy server:
NOTE: If two external active policy servers fail and local policy server is in standby mode, the standby local policy server is used as active server until the external policy server becomes active. |
| 0-32 | Specifies the number of retries for any policy server transaction. Must be 0-32, default is 1. |
| N/A | Specifies the time (in milliseconds) for the SBC to wait for the response from the local policy server. (default = 2500). |
| N/A | The administrative state of the local policy server.
NOTE: If changing the state, ensure mode is first set to "outofservice". |
| 50-60000 | Time to wait (in milliseconds) for a reply from the initial transaction request. When this timer expires, a transaction retry will be issued. Subsequent retries of this transaction are controlled by |
To set the local policy server configuration:
% set system policyServer localServer PSX_LOCAL_SERVER action dryUp keepAliveTimer 3 mode standby retries 1 retryTimer 2500 state enabled transactionTimer 2500
To view the local policy server configuration settings:
% show system policyServer localServer localServer PSX_LOCAL_SERVER { state enabled; mode standby; action dryUp; transactionTimer 2500; keepAliveTimer 3; retryTimer 2500; retries 1; }
To view the status of local policy servers:
% show table system policyServer localServer KEEP TRANSACTION ALIVE RETRY NAME STATE MODE ACTION TIMER TIMER TIMER RETRIES ------------------------------------------------------------------------------- PSX_LOCAL_SERVER enabled active dryUp 2500 5 2500 1
The Remote Policy Server configuration commands are described below.
You cannot configure multiple Remote Servers using a combination of IP addresses and FQDNs. Only one type is allowed at any given time.
% set system policyServer remoteServer <softswitch_name> action <dryUp | force> fqdn <PSX cluster FQDN> ipAddress <IPv4 or IPv6 address> keepAliveTimer <1-60 seconds> maxPolicyServerCount <1-40> mode <active | alternate | outOfService | standby> portNumber <softswitch port number> retries <0-32> retryTimer <# milliseconds> state <disabled | enabled> transactionTimer <50-60000 milliseconds> % request system policyServer remoteServer <softswitch_name> switchBack
Parameter | Length/Range | Description |
---|---|---|
| N/A |
|
| N/A | Use this object to specify the action to take against the policy server.
|
| 0-256 | This functionality is currently only available in an OpenStack cloud environment.
You can configure the PSX cluster FQDN in an SBC instance or seed it in the SBC instance during instantiation. The SBC instance learns a list of IP addresses of remote policy server instances in a PSX cluster by resolving the PSX cluster's FQDN with the help of the DNS server. This enables SBC to talk to multiple PSX instances of a PSX cluster by simply providing the FQDN of the PSX cluster.
Refer to SBC Support of Multiple PSX Clusters Using PSX Cluster FQDN for feature details. |
| Up to 32 characters |
|
| 1-60 | The time interval (in seconds) to wait before issuing a "keepalive" poll to the policy server. This poll is issued only if there is no other policy server activity during this interval. The receipt of any message from the policy server resets the elapsed time to 0 (default = 5). |
| 1-40 |
NOTE: This parameter is only visible when |
| N/A | The operational state of the remote policy server.
|
| 1-65535 |
|
| 0-32 |
|
| 50-60000 |
|
| N/A | Administrative state of the remote policy server.
NOTE: The mode must be set to ' |
| N/A | Use this parameter with the |
| 50-60000 | The time for SBC to wait (in milliseconds) for a reply from the policy server after sending a transaction request. When this timer expires, a transaction retry is issued based on |
To set the remote policy server configuration:
% set system policyServer remoteServer RS-1 mode outOfService % set system policyServer remoteServer RS-1 ipAddress 169.254.77.2 state enabled
To view the remote policy server configuration settings:
% show system policyServer remoteServer remoteServer RS-1 { ipAddress 169.254.77.2; state enabled; mode outOfService; }
To view the status of remote policy server from top-level CLI mode:
> show table system policyServer remoteServer KEEP SUB IP PORT TRANSACTION ALIVE RETRY PORT NAME ADDRESS NUMBER STATE MODE ACTION TIMER TIMER TIMER RETRIES NUMBER -------------------------------------------------------------------------------------------- RS-1 169.254.77.2 3055 enabled active dryUp 2500 5 2500 1 3053
Use this command to reset the SIP registration count of the remote policy server.
% request system policyServer remoteServer <softswitch_name> switchBack
Parameter | Description |
---|---|
| Use this parameter with the Note that the |
% request system policyServer remoteServer RS-1 switchBack result PASSED