The Transparency Profile is the recommended method of configuring transparency on the SBC Core for new deployments as well as when applying additional transparency configurations to existing deployments. Do not use IP Signaling Profile flags in these scenarios because the flags will be retired in upcoming releases.
Refer to the SBC SIP Transparency Implementation Guide for additional information.
The instructions, commands and references in this document apply to the
This document does not apply to SBC Edge (SBC 1000 and 2000 systems).
This document provides configuration and provisioning guidance to enable SIP transparency on
This document is intended for design engineers, system engineers and operations staff for the purpose of deploying SIP on a
For some SIP elements, transparency is a frequently-debated topic. When transparency for a SIP header or body is desired, the user may often compare the element against a SIP Proxy which is a typical benchmark for significant transparency. Considered a popular comparison, this topic needs to addressed up front when discussing SIP transparency.
The SIP devices that connect most peers and endpoints are typically a SIP Proxy or Back-to-Back User Agent (B2BUA). The most transparent device is the SIP Proxy; its behaviors are primarily specified in RFC 3261 and are very basic in its message processing capabilities. The required transparency of a Proxy is one of its few strengths when compared to a B2BUA.
Although an
While RFC 3261 goes into detail describing the required behavior of a SIP Proxy, its description for a B2BUA could be considered somewhat terse: "Since it is a concatenation of a UAC [User Agent Client] and UAS [User Agent Server], no explicit definitions are needed for its behavior." This statement notwithstanding, debate and research into the transparency behavior of a B2BUA continued, but seemingly without consensus. An often referenced IETF draft (draft-marjou-sipping-01) submitted to the SIPPING WG was not accepted as a working group document.
Admittedly, complete SIP transparency is not achievable due to the needs and requirements of changing some headers. Even a SIP Proxy is not completely transparent. In many scenarios the ability to control and even minimize transparency is a strength of a B2BUA/
Fundamentally, the
This document describes the
Since its inception, the
Prior to release 4.0, SIP header and body transparency was controlled primarily by the use of individual Transparency Flags, mostly within the IP Signaling Profile (IPSP; ipSignalingProfile > commonIpAttributes > transparencyFlags) and apply on the egress leg of a session (egress relative to the SIP message).
If a header or body did not have a specific flag on the
When a transparency flag was added for a header, it meant that the header was now known and that the unknownHeader flag no longer controlled it.
This methodology was problematic as headers transitioned from unknown to known on the
The
A Transparency Profile is a user-configurable profile allowing the user to transparently pass almost any SIP header/body through the Both already-known and previously-unknown SIP headers and bodies can be configured in a Transparency Profile. By default, no headers or message bodies are present in a Transparency Profile. If a received Content-Type header value matches any “Message Body” entry configured in the Transparency Profile, the The following functionality is included:
When a header or body is specified in a Transparency Profile, the profile will take precedence over any applicable Transparency Flag. For headers not specified in a transparency profile, the setting of existing Transparency Flags will continue to determine the transparency of that header. In this way, a Transparency Profile can either override or augment existing Transparency Flag settings. This document will describe some usage scenarios where both mechanisms may be used together.
When configuring a Transparency Profile for specific SIP headers,
The following transparency is not supported by the
endToEndAck
flag is enabled in the "IP Signaling Profile".For configuration details, see Service Profiles - Transparency Profile (EMA) or Transparency Profile - CLI.
The
set profiles services transparencyProfile <profile> sipHeader <SIP Header>
where <SIP Header>
is case insensitive, supports up to 31 characters, and supports an "all" entry to match all headers (see section 3.3 for exceptions).
The ability to exclude specific headers from transparency is primarily intended for use in conjunction with the "all" header option.
SIP headers are also configurable using compact form. When configuring specific headers in a Transparency Profile,
Compact form can be received by the
The
The following SIP headers are not controlled by the Transparency Profile (or any Transparency Flags), and are ignored if configured in a Transparency Profile:
RAck
P-Associated-URI
The transparency of Allow, Supported, and Require headers can be controlled by using SIP Param Filter Profile. For more information, refer to SIP Param Filter Profile.
If Contact Header is specified in a Transparency Profile, then it is treated as full Contact transparency and it will take precedence over other Contact related flags (such as useZoneLevelDomainNameInContact).
set profiles services transparencyProfile <profile> sipMessageBody <Content-Type>
where <Content-Type>
is case insensitive, supports up to 127 characters, and supports an "all" entry to match all message bodies except those described in the below list.
The following Content-Types are not controlled by the Transparency Profile and are ignored if configured in a profile:
Multipart/mixed and multipart/alternative are ignored because the
A Transparency Profile cannot control the SDP (application/sdp). The SDP and its controls will be discussed later in this document.
The other exceptions are due to existing Relay Flags (see table below) elsewhere within the
See Relay Flags below for details.
SIP Transparency Profile provides advanced control of the transparency of headers and message bodies. However, customers may continue with the existing (albeit simple) IPSP transparency controls in PSX/e-PSX/ERE.
Using message body transparency as an example:
Header transparency is based on the headers that are present in the Transparency Profile of the egress trunk group for requests and headers that are present in the ingress trunk group for responses. By default, no headers are present in the Transparency Profile.
Headers may be configured in compact form and transparently passed using a Transparency Profile. It is advisable to configure both compact and long formats to ensure both types of received headers in the PDU are transparently passed.
A 'sipHeader' in the Transparency Profile can be composed of:
Some headers are not under the control of transparency flags in relay scenarios. These headers can be classified into three categories as shown in the below table:
The following SIP headers are not supported by a Transparency Profile (or any Transparency flags):
RAck
These SIP headers are entirely added and/or modified by the
Previously, the following headers were transparently passed by the
There are some exceptions to the transparency mechanisms. Some SIP Methods and some SIP headers are not affected by any configurable transparency mechanism, while other headers may not be affected by transparency controls in some scenarios (in-dialog vs. out-of-dialog).
The following SIP methods are not supported by a Transparency Profile (or any Transparency flags):
Option tags/methods of the following SIP headers can be transparently passed or blocked by configuring the SIP Param Filter Profile.
For configuration details, see:
Some header behaviors vary depending on whether they are received in or out of an existing dialog. While the Transparency Profile has been extended in 4.2 to apply to out-of-dialog messages, there are some specific headers whose behavior is not under the control of a Transparency Profile (or Transparency Flags) when received in out-of-dialog messages.
A Dialog "represents a peer-to-peer SIP relationship between two user agents that persists for some time. The dialog facilitates sequencing of messages between the user agents and proper routing of requests between both of them. The dialog represents a context in which to interpret SIP messages." (reference: RFC 3261)
The
If "Session-Expires" header is configured, the SBC passes the "Min-SE" header and their values transparently to the egress remote peer. This behavior is achieved either by configuring “all” header or “Session-Expires” and “Min-SE” header in the Transparency Profile. The Keep-Alive behavior must be disabled by setting “Session-Expires” to “0” in the respective SIP Trunk Group.
For example,
% set profiles services transparencyProfile ALL_HEADER sipHeader all
or
% set profiles services transparencyProfile SIP_HEADER sipHeader Session-Expires ignoreTransparency no % set profiles services transparencyProfile SIP_HEADER sipHeader Min-SE ignoreTransparency no % set addressContext default zone Zone1 sipTrunkGroup TG1 signaling timers sessionKeepalive 0
If "all" header in Transparency Profile is configured and SBC supports "Session Keep Alive" mechanism, the "Session-Expiry" and "Min-SE" headers are excluded from the Transparency Profile by setting ignoreTransparency
as “yes”.
For example,
% set profiles services transparencyProfile ALL_HEADER sipHeader all % set profiles services transparencyProfile ALL_HEADER sipHeader Session-Expires ignoreTransparency yes % set profiles services transparencyProfile ALL_HEADER sipHeader Min-SE ignoreTransparency yes
Out-of-Dialog header behavior irrespective of the Transparency Profile or Flags:
Message body transparency is based on message bodies that are present in the Transparency Profile of the egress trunk group for requests and content-types/bodies that are present in the ingress trunk group for responses. By default, no message bodies are present in the Transparency Profile.
The allowed range for a "contentType" in the Transparency Profile includes:
The
For example, consider a SIP message with content-type 'multipart/mixed' with two parts in its body: the first part is type 'application/foo' and the other type 'application/bar'. If the Transparency Profile is configured to transparently pass 'application/foo', then the first part of the message body is passed transparently in the egress SIP message.
This feature will be supported across Sonus Gateways (using Sonus Proprietary GW to GW Signalling) only for SIP INVITE messages.
he
For all the above mentioned media types (with the exception of Audio), the
For Audio, the
You must enable Video (assign a valid video bandwidth) and Audio transparency to achieve the above described behavior using the below CLI syntax.
Associate the following configuration with both Trunk Groups.
% set profiles media packetServiceProfile <packetServiceProfileName> packetToPacketControl transcode transcoderFreeTransparency % set addressContext <addressContextName> zone <zoneName> sipTrunkGroup <trunkGroupName> media sdpAttributesSelectiveRelay enabled % set addressContext <addressContextName> zone <zoneName> sipTrunkGroup <trunkGroupName> media lateMediaSupport passthru
Make note that the sdpTransparencyState
signaling object within the SIP Trunk Group must not be considered a general use parameter. It is specific to some functionality (mainly ICE) and environments; however, this flag does not apply to all types of call flows.
Do not enable the sdpTransparencyState
flag unless specifically directed to do so by
The
rtpmap
, fmtp
, and T38
fax
. Audio transparency functionality is used to manage bandwidth for audio stream in the pass-through calls. By enabling this feature, audio codecs that are unknown to the system are available to establish audio calls or streams.This feature does not support H323-H323 and GW-GW calls.
Audio Transparency Feature is controlled by two flags:
Bandwidth (b) lines are transparently relayed and do not play any role in calculating the unknown audio codec bandwidth. The following PSP configuration bits for Audio Transparency feature are included for Unknown audio bandwidth reservation to calculate the Unknown audio bandwidth:
unknownCodecBitRate
unknownCodecPacketSize
If the bandwidth is not configured, the default settings (Packet Size—10 ms and Bit Rate—124 KB/s) are used for a pass-through call.
By default for pass-through calls,
reserveBwForPreferredAudioCommonCodec
is added to reserve the bandwidth associated with the preferred common codec (instead of the worst case common codec) on the Trunk Groups and IP interfaces. When this flag is enabled, bandwidth of the first common codec from Answer (SIP) is used for reservation and bandwidth of the heaviest common codec is used for policer.This flag can be used independently or in conjunction with Audio Transparency feature and/or policeOnHeaviestAudioCodec
flag. This functionality is currently supported for SIP-SIP call scenarios only. In the event that policeOnHeaviestAudioCodec
and reserveBwForPreferredAudioCommonCodec
are both configured, the following behavior applies:
reserveBwForPreferredAudioCommonCodec
impacts the bandwidth reservation policy. That is, first common codec from Answer (SIP) and,policeOnHeaviestAudioCodec
impacts the policer configuration. That is, heaviest codec in the offer or answer.The flag reserveBwForPreferredAudioCommonCodec
is active for a call when both the PSPs have this flag enabled. If this flag is disabled in any of the PSPs, the flag is not applied.
By default for pass-through calls, the
policeOnHeaviestAudioCodec
is used in the PSP.This flag can be used independent of or in conjunction with Audio transparency feature and/or reserveBwForPreferredAudioCommonCodec
flag. This functionality is currently supported for SIP-SIP call scenarios only.
Configuring the basic audio transparency feature contains:
sdpAttributesSelectiveRelay
Parameter on Both Ingress and Egress Trunk GroupstranscoderFreeTransparency
Parameter on Packet Service ProfileEnabling the sdpAttributesSelectiveRelay
Parameter on Both Ingress and Egress Trunk Groups
% set addressContext default zone ZONE1 sipTrunkGroup TG_SBX_INT media sdpAttributesSelectiveRelay enabled % set addressContext default zone ZONE2 sipTrunkGroup TG_SBX_EXT media sdpAttributesSelectiveRelay enabled
Configuring the transcoderFreeTransparency
Parameter on Packet Service Profile
% set profiles media packetServiceProfile PSP_INT packetToPacketControl transcode transcoderFreeTransparency % set profiles media packetServiceProfile PSP_EXT packetToPacketControl transcode transcoderFreeTransparency
Configuring AudioTransparecy Parameter on Packet Service Profile
% set profiles media packetServiceProfile PSP_INT audioTransparency unknownCodecBitRate 124 % set profiles media packetServiceProfile PSP_EXT audioTransparency unknownCodecBitRate 124 % set profiles media packetServiceProfile PSP_INT audioTransparency unknownCodecPacketSize 10 % set profiles media packetServiceProfile PSP_EXT audioTransparency unknownCodecPacketSize 10 % set profiles media packetServiceProfile PSP_INT flags reserveBwForPreferredAudioCommonCodec enable % set profiles media packetServiceProfile PSP_EXT flags reserveBwForPreferredAudioCommonCodec enable
For configuring Bit Rate (kbps), Packet Size (ms) and Reserve BW For Preferred Audio Common Codec for pass-through calls flags on PSX, refer to PSX Documentation.
As discussed previously, the Transparency Profile does not deprecate any existing Transparency Flag. Those flags continue to function as designed. When a header/body is specified in a Transparency Profile, then the profile takes precedence over any applicable Transparency Flag. For headers/bodies not specified in a transparency profile, the setting of existing Transparency Flags continues to determine the transparency of that header.
When configuring a Transparency Profile for specific SIP headers,
There are three modes of using Transparency Profile:
In this mode, only headers/bodies explicitly configured in the Transparency Profile are allowed to pass-through.
For example, the following scenario allows only the headers "p-asserted-identity" and "xyzHdr" and message bodies of type "application/simple-message-summary" and "xyzContentType" to pass transparently.
set profiles services transparencyProfile ALLOW_SPECIFIC_HDRS_BODIES sipHeader p-asserted-identity set profiles services transparencyProfile ALLOW_SPECIFIC_HDRS_BODIES sipHeader xyzHdr set profiles services transparencyProfile ALLOW_SPECIFIC_HDRS_BODIES sipMessageBody application/simple-message-summary set profiles services transparencyProfile ALLOW_SPECIFIC_HDRS_BODIES sipMessageBody xyzContentType set profiles services transparencyProfile ALLOW_SPECIFIC_HDRS_BODIES state enabled commit
Complete or maximum transparency is occasionally desired, especially during initial integration testing to determine if specific headers are required for the success of certain call flows.
set profiles services transparencyProfile MAX_TRANSPARENCY sipHeader all set profiles services transparencyProfile MAX_TRANSPARENCY sipMessageBody all set profiles services transparencyProfile MAX_TRANSPARENCY state enabled commit set addressContext <AC> zone <ZONE> sipTrunkGroup <TG> services transparencyProfile MAX_TRANSPARENCY commit
Additional Relay Flags also need to be enabled to maximize the transparency of the Trunk Group for testing. See Relay Flags above.
All headers/bodies are allowed to pass-through unless they are explicitly disallowed by Transparency Profile configuration. The ignoreTransparency
header option within the Transparency Profile is primarily used for excluding one or more specific headers when paired with the "all" header option. In the example below, the user wishes to pass all SIP headers except for the History-Info header.
For example, in the following scenario, the rules are configured and all the headers and message bodies except "history-info" and "application/resource-lists+xml" are passed transparently. The "xyzHeader" is passed transparently in all methods except INFO and REGISTER. The "xyzContentType" is passed transparently in all methods except INVITE.
set profiles services transparencyProfile ALMOST_ALL_TRANSPARENCY sipHeader all set profiles services transparencyProfile ALMOST_ALL_TRANSPARENCY sipMessageBody all set profiles services transparencyProfile ALMOST_ALL_HDRS sipHeader history-info ignoreTransparency yes set profiles services transparencyProfile ALMOST_ALL_HDRS sipMessageBody application/resource-lists+xml ignoreTransparency yes set profiles services transparencyProfile ALMOST_ALL_HDRS sipHeader xyzHeader excludedMethods info,register set profiles services transparencyProfile ALMOST_ALL_HDRS sipMessageBody xyzContentType excludedMethods invite set profiles services transparencyProfile ALMOST_ALL_HDRS state enabled commit
The excludedMethods
parameter indicates the list of methods for which the transparency is not allowed and is common to both header and body entries.
set profiles services transparencyProfile TP1 sipHeader all set profiles services transparencyProfile TP1 sipHeader all excludedMethods bye,info,notify commit
If a specific header is configured, ignoreTransparency
and excludedMethods
are exclusive. Once ignoreTransparency
is configured, excludedMethods
no longer displays. Likewise, once excludedMethods
is configured, ignoreTransparency
no longer displays.
Use the ignoreTransparency
flag in a configuration to allow all SIP headers, or use it when one of the SIP header transparency flags is enabled in the IP Signaling Profile.
Existing deployments will likely utilize Transparency Flags, and those that must pass proprietary or otherwise
While a Transparency Profile can be configured to completely overlap with any existing Transparency Flags settings, it is not required. A Transparency Profile can be configured to simply augment existing Transparency Flags settings with a more surgical configuration and allowing unknownHeader to be disabled.
For example, a user may wish to have the
Rather than continue to allow all unknown headers through the
set profiles services transparencyProfile IDENTITY_HDRS sipHeader Identity set profiles services transparencyProfile IDENTITY_HDRS sipHeader y set profiles services transparencyProfile IDENTITY_HDRS sipHeader Identity-Info set profiles services transparencyProfile IDENTITY_HDRS sipHeader n set profiles services transparencyProfile IDENTITY_HDRS state enabled commit set addressContext <AC> zone <ZONE> sipTrunkGroup <TG> services transparencyProfile IDENTITY_HDRS commit set profiles signaling ipSignalingProfile <IPSP> commonIpAttributes transparencyFlags unknownHeader disable commit
The following diagram illustrates the media flow for an SRTP pass-through call.
To control this SRTP media pass-through, the allowPassthru
flag is available from the secureRtpRtcp
parameter of the PSP. When allowPassthru
flag is enabled along with the security enableSrtp
flag, it allows SBC to pass-through SRTP media without authenticating, decrypting, and encrypting it internally. When selected, this flag prioritizes SRTP pass-through media over terminated SRTP media. When disabled, this flag terminates all SRTP and SRTCP media for authentication, encryption, or decryption. This flag is disabled by default.
Relay Flags exist mostly within the IP Signaling Profile (IPSP; ipSignalingProfile > commonIpAttributes > relayFlags) and apply on the ingress leg of a session (ingress relative to the SIP message).
Relay Flags are intended mainly for SIP Methods (Requests) and Responses (and some SIP message bodies) that normally get consumed or modified by the
Albeit imprecise, a good method to contrast Relay Flags and Transparency Flags/Profiles is to consider that Relay controls whether a SIP request/response is sent through the
The
refer
relay flag is disabled. To support this enhancement, Conditional Relay Matching criteria is provided by the If the refer
relay flag is disabled, the Call Control (CC) mechanism forwards the REFER request to Digital Signaling (DS). DS exchanges information with the PSX to check the match criteria set in Conditional Relay Matching.
The matched criteria includes call parameters such as Username, Directory Number (DN), or Fully Qualified Domain Name (FQDN).
If a REFER request is sent after a switchover and:
refer
relay flag is enabled, refer
relay flag is disabled and DN/username/FQDN match, This feature is supported only for Blind/Unattended Transfer calls and not for Attended Transfer (refer with replaces) calls.
To configure this feature, perform the following steps:
Create SIP_MSG_TYPE_REFER call parameter filter profile (CPFP) in the PSX. Execute the following command to view the CPFP SIP_MSG_TYPE_REFER. This profile is already present in ERE.
For more information on creating CPFP, refer to PSX Documentation.
> show table profiles callParameterFilterProfile Description: Profile used for routing based on SIP message type. Possible completions: SIP_MSG_TYPE_INFO - SIP Message Type is Info SIP_MSG_TYPE_MESSAGE - SIP Message Type is Message SIP_MSG_TYPE_NOTIFY - SIP Message Type is Notify SIP_MSG_TYPE_REFER - SIP Message Type is Refer SIP_MSG_TYPE_REGISTER - SIP Message Type is Register SIP_MSG_TYPE_SUBSCRIBE - SIP Message Type is Subscribe none - seed data for provisioning support
All > Profiles > Call Parameter Filter Profile
A new script SONS_SIP_REFER_RELAY is seeded in both ERE and PSX.
Disable the Refer relay flag in IPSP.
% set profiles signaling ipSignalingProfile DEFAULT_SIP commonIpAttributes relayFlags refer disable
Enable the Notify relay in Egress side on IPSP to relay REFER for DN/Username/FQDN match.
% set profiles signaling ipSignalingProfile DEFAULT_SIP commonIpAttributes relayFlags notify enable
All > Profiles > Signaling > Ip Signaling Profile > Common Ip Attributes > Relay Flags
Create a new routing label with the script SONS_SIP_REFER_RELAY to trigger process refer request feature.
The routing label action must be set as script.
% set global callRouting routingLabel <routing_label> script SONS_SIP_REFER_RELAY action script
All > Global > Call Routing > Routing Label
Configure a DN criteria in the standard route and attach the SIP_MSG_TYPE_REFER profile to the standard route by executing the following command:
% set global callRouting route none Sonus_NULL Sonus_NULL standard <Matched_DN or FQDN> 1 all ALL SIP_MSG_TYPE_REFER Sonus_NULL routingLabel <routing_label>
For DN (Directory Number) or username
% set global callRouting route none Sonus_NULL Sonus_NULL standard <Matched_DN or Username> 1 all ALL SIP_MSG_TYPE_REFER Sonus_NULL routingLabel <routing_label>
For FQDN with DN or username
The corresponding Sip domain group must be configured in
% set global sipDomain <Matched_domain_name > % set global callRouting route none Sonus_NULL Sonus_NULL standard <Matched_DN or Username> 1 all ALL SIP_MSG_TYPE_REFER <Matched_domain_name> routingLabel <routing_label>
All > Global > Call Routing > Route
Execute the following commands to view the call detail status and call media status.
> show status global callDetailStatus or > show status global callMediaStatus
The
The SIP Param Filter Profile includes the following characteristics:
The following table explains the SIP Param Filter Profile behavior when using the Allow, Supported and Require headers.
The SIP Filter Profile is a collection of the configurable filter settings of individual SIP headers. Depending on the filter settings of each of the SIP headers in the SIP Filter Profile, the SBC either relays the SIP messages without parsing the header, or parses the headers of the messages.
For every SIP message associated with the ingress leg of the call, the SBC first checks the SIP Filter Profile for the filter setting of the SIP header. If the SIP Filter Profile indicates that a particular SIP header needs filtering, the SBC stores it without parsing.
The SIP header of the egress leg is populated on the basis of the configuration in the IP Signaling Profile and the Transparency Profile. In the egress leg of a call, the transparency bit mask is set to identify the headers that are transparently passed. If the transparency settings of all unknown headers in the IP Signaling Profile is enabled, all the stored headers (including the ones filtered in the ingress leg), is copied to the SIP header of the egress leg.
If the Transparency Profile attached with the Egress Trunk Group indicates that specific headers are allowed to pass transparently, and those headers are present as filtered headers, they are individually copied to the SIP header of the egress leg. In this case, the transparency bits are enabled, either by the IP Signaling Profile or through the flexible header transparency.
The SIP Filter Profile is not used for the egress leg of a call.
The mandatory headers which are not part of the sipFilterProfie
are as follows:
From
To
Via
Call-id
Cseq
Max-Forwards
Avoid filtering headers pertaining to SIP call routing/protocol processing, as it may cause unexpected results such as call failures. Some of the headers that should not be filtered are as follows:
Contact
RSeq
RAck
Record-Route
Route
Content-Type
Content-Length
WWW-Authenticate
Perform the following:
Creating a new SIP Filter Profile
% set profiles signaling sipFilterProfile doc_FILTER2
Changing the Transparency Setting of a Header Under a SIP Filter Profile
% set profiles signaling sipFilterProfile doc_FILTER2 header Also enabled
If sipFilterProfile
is used for Allow
, Require
, and Supported
headers, their transparency cannot be achieved using sipParamFilterProfile
.
Configuring the Zone ID for the Selected Zone
% set addressContext default zone doc_ZONE_IAD id 10
Configuring the Media IP Interface Group Name for the SIP Trunk Group
% set addressContext default zone doc_ZONE_IAD sipTrunkGroup doc_SBX10_IAD media mediaIpInterfaceGroupName LIF1
% set addressContext default zone doc_ZONE_IAD sipTrunkGroup doc_SBX10_IAD signaling sipFilterProfile doc_FILTER2
disabled
. To filter a particular SIP header, change the setting to enabled
.disabled
, the SBC transparently relays the SIP messages containing that header in the following cases:enabled
in the IP Signaling Profile.A new flag anonymizeHostIpAddress
is introduced for the privacy
parameter of the IP Signaling Profile to enable or disable this feature. When this flag is activated, the SBC anonymizes the incoming host IP portion of the private headers (P-AID, P-PID, RPID) by replacing it with the IP address of the SBC, before sending it to the egress leg of a call.
This feature supports anonymizing the host IP address for the following message types:
This feature currently supports only in-dialog messages, and not out-of-dialog messages.
anonymizeHostIpAddress
is available for configuration only when the transparency
flag is enabled for egressIpAttributes
of an ipSignalingProfile
. For more information on Privacy Transparency of Egress IP Attributes, refer to Privacy Parameters - Egress IP Attributes.transparency
and anonymizeHostIpAddress
are set to disable
.Perform the following:
Enabling the transparency
Flag
To enable the transparency
flag for an ipSignalingProfile
, enter the following command:
% set profiles signaling ipSignalingProfile DEFAULT_SIP egressIpAttributes privacy transparency enable
Enabling the anonymizeHostIpAddress
Flag
To enable the anonymizeHostIpAddress
flag to activate this feature, enter the following command:
% set profiles signaling ipSignalingProfile DEFAULT_SIP egressIpAttributes privacy anonymizeHostIpPortion enable