| Note |
|---|
- It is highly advisable not to create rules with overlapping criteria (that is, rule R1 criteria overlaps with criteria of rule R2) to avoid any unexpected results.
- The SBC can track up to 4,000 entries at a time.
- The SBC supports up to eight rules per Enhanced DBL Profile.
The administrative state of the rule must be disabled before modifying the parameters of that rule. Either DBL Profile or enhanced DBL Profile can be attached to a SIP IPTG at a given time.
|
Perform the following steps:
| Anchor |
|---|
| Creating an Enhanced DBL Profile |
|---|
| Creating an Enhanced DBL Profile |
|---|
|
Creating an Enhanced DBL Profile
To create an enhanced DBL profile, enter the following command:
| Code Block |
|---|
set profiles services enhancedDblProfile test
commit |
| Anchor |
|---|
| Enabling the Enhanced DBL Profile |
|---|
| Enabling the Enhanced DBL Profile |
|---|
|
Enabling the Enhanced DBL Profile
To enable the enhanced DBL profile, enter the following command:
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled
commit |
| Anchor |
|---|
| Creating a Rule |
|---|
| Creating a Rule |
|---|
|
Creating a Rule
To create a rule, enter the following command:
| Code Block |
|---|
set profiles services enhancedDblProfile test rule r1
commit |
| Anchor |
|---|
| Defining the Required Criteria in the Rule |
|---|
| Defining the Required Criteria in the Rule |
|---|
|
Defining the Required Criteria in the Rule
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r1 criteria
Possible completions:
occurrence - Identifies period over which occurrences of the offending event should match the count so that action is triggered.
offendingEvent - It identifies the offending event and on the given occurrence can potentially trigger a given action.
scope - This field identifies on messages from which entity the criteria will be applied. |
| Anchor |
|---|
| Configuring "occurrence" |
|---|
| Configuring "occurrence" |
|---|
|
Configuring "occurrence"
If the flag consecutive is in disabled state:
| Note |
|---|
If the flag consecutive is in disabled state, the resetMethodResp and resetMethodType are displayed. |
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r1 criteria occurrence aggrCountValue 10 consecutive disabled countType aggrCount resetCount 1 resetMethodResp 101 resetMethodType INVITE timerWindow 60
commit |
or
If the flag consecutive is in enabled state:
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r1 criteria occurrence aggrCountValue 10 consecutive enabled countType aggrCount resetCount 1 timerWindow 60
commit |
| Anchor |
|---|
| Configuring scope |
|---|
| Configuring scope |
|---|
|
Configuring "scope"
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r1 criteria scope ipAddress
commit |
| Anchor |
|---|
| Configuring offendingEvent |
|---|
| Configuring offendingEvent |
|---|
|
Configuring "offendingEvent"
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r1 criteria offendingEvent triggerEventType receiptOfMessage methodResp [ 401 403 ] methodType INVITE
commit |
| Anchor |
|---|
| Defining the Required Action in the Rule |
|---|
| Defining the Required Action in the Rule |
|---|
|
Defining the Required Action in the Rule
To define the required action, enter the following command:
| Code Block |
|---|
set profiles services enhancedDblProfile test state enabled rule r2 action effectivePeriod 10 type rejectWithResponse rejectWithResponseCode 403
commit |
| Anchor |
|---|
| Enabling the Rule |
|---|
| Enabling the Rule |
|---|
|
Enabling the Rule
To enable the rule, enter the following command:
| Code Block |
|---|
set profiles services enhancedDblProfile test rule r1 state enabled
commit |
| Anchor |
|---|
| Attaching the Enhanced DBL Profile to SIP Trunk Group |
|---|
| Attaching the Enhanced DBL Profile to SIP Trunk Group |
|---|
|
Attaching the Enhanced DBL Profile to SIP Trunk Group
| Note |
|---|
The enhanced DBL profile must be attached to the ingress SIP Trunk Group. |
To attach the enhanced DBL profile to the ingress SIP Trunk Group, enter the following command:
| Code Block |
|---|
set addressContext default zone ZONE1 sipTrunkGroup INGRESS_TG services enhancedDblProfile test
commit |
| Anchor |
|---|
| Removing the Enhanced DBL Entry |
|---|
| Removing the Enhanced DBL Entry |
|---|
|
Removing the Enhanced DBL Entry
To remove the endpoint from the enhanced DBL entry, enter the following command:
| Code Block |
|---|
% request addressContext default enhancedDBL removeEnhancedDblEntry removeIpEntry sourceIpAddress 10.54.80.8 sourcePort 8000 transport tcp
commit |