In this section:
The administrative state of the rule must be disabled before modifying the parameters of that rule.
Either DBL Profile or enhanced DBL Profile can be attached to a SIP IPTG at a given time.
Perform the following steps:
To create an enhanced DBL profile, enter the following command:
set profiles services enhancedDblProfile test commit
To enable the enhanced DBL profile, enter the following command:
set profiles services enhancedDblProfile test state enabled commit
To create a rule, enter the following command:
set profiles services enhancedDblProfile test rule r1 commit
set profiles services enhancedDblProfile test state enabled rule r1 criteria Possible completions: occurrence - Identifies period over which occurrences of the offending event should match the count so that action is triggered. offendingEvent - It identifies the offending event and on the given occurrence can potentially trigger a given action. scope - This field identifies on messages from which entity the criteria will be applied.
If the flag consecutive
is in disabled state:
If the flag consecutive
is in disabled state, the resetMethodResp
and resetMethodType
are displayed.
set profiles services enhancedDblProfile test state enabled rule r1 criteria occurrence aggrCountValue 10 consecutive disabled countType aggrCount resetCount 1 resetMethodResp 101 resetMethodType INVITE timerWindow 60 commit
or
If the flag consecutive
is in enabled state:
set profiles services enhancedDblProfile test state enabled rule r1 criteria occurrence aggrCountValue 10 consecutive enabled countType aggrCount resetCount 1 timerWindow 60 commit
set profiles services enhancedDblProfile test state enabled rule r1 criteria scope ipAddress commit
set profiles services enhancedDblProfile test state enabled rule r1 criteria offendingEvent triggerEventType receiptOfMessage methodResp [ 401 403 ] methodType INVITE commit
To define the required action, enter the following command:
set profiles services enhancedDblProfile test state enabled rule r2 action effectivePeriod 10 type rejectWithResponse rejectWithResponseCode 403 commit
To enable the rule, enter the following command:
set profiles services enhancedDblProfile test rule r1 state enabled commit
The enhanced DBL profile must be attached to the ingress SIP Trunk Group.
To attach the enhanced DBL profile to the ingress SIP Trunk Group, enter the following command:
set addressContext default zone ZONE1 sipTrunkGroup INGRESS_TG services enhancedDblProfile test commit
To remove the endpoint from the enhanced DBL entry, enter the following command:
% request addressContext default enhancedDBL removeEnhancedDblEntry removeIpEntry sourceIpAddress 10.54.80.8 sourcePort 8000 transport tcp commit