In this section:
The Policy Server object allows you to configure up to 10 policy servers (one local server and nine external policy servers). When an active server becomes congested, the SBC Core application will first distribute overflow traffic to one of the active servers with enough capacity, or to one of the standby servers that is not currently congested.
The SBC can obtain policy services from one or more active servers in load-sharing (or round-robin) mode, and one or more active servers can be configured in the standby mode.
Types of policy server configurations include:
- Global Configuration is applicable to all policy servers.
- Local Policy Server Configuration is applicable to local (embedded) policy server.
- Remote Policy Server Configuration is applicable to remote policy servers.
The SBC administrator enables or disables the policy server. When a policy server is enabled, it receives database queries from the SBC. You can enable or disable the policy server only in the out-of-service mode.
Global Configuration
The Policy Server global configuration commands are described below. The SBC can be configured to communicate with an external PSX policy server using either a Management Interface Group or IP Interface Group.
The SBC SWe supports configuring an alternate IP address for communicating with the external PSX. Refer to Using an Alternate IP Address to Communicate with the PSX for details.
The DNS query to an Interface Group outside the address context feature adds additional flexibility to query the PSX FQDN with a particular DNS Group. For more information, refer to DNS Support.
Command Syntax
% set system policyServer globalConfig addressContext <address context name> congestionControl <disabled | enabled> dnsGroup <DNS group server name> dscpProfile <dscpProfileName> ipInterfaceGroup <ipInterfaceGroup_name> ipVar <metavariable name> mgmtInterfaceGroup <mgmtInterfaceGroup_name> reconnectTimeout <1-3600 seconds> sbcGatewayName <SbcGateway Name> switchOverMode <automatic | manual> type <ip | mgmt>
Command Parameters
Command Examples
To set the policy server global configuration using management interface group called "mgmtGroup":
% set system policyServer globalConfig type mgmt mgmtInterfaceGroup mgmtGroup congestionControl enabled reconnectTimeout 5 switchOverMode automatic
To set the policy server global configuration using IP Interface Group called "ipInterfaceGroup":
% set system policyServer remoteServer PSXSWE2 state disabled mode outOfService % commit
% set system policyServer globalConfig type ip addressContext a1 ipInterfaceGroup LIF1 reconnectTimeout 10 switchOverMode automatic congestionControl enabled % commit
% set system policyServer remoteServer PSXSWE2 state enabled mode active % commit
To view the policy server global configuration settings with type
as mgmt
:
% show system policyServer globalConfig reconnectTimeout 5; switchOverMode automatic; congestionControl enabled; type mgmt; mgmtInterfaceGroup mgmtGroup;
To view the policy server global configuration settings with type
as ip
:
> show system policyServer globalConfig reconnectTimeout 10; switchOverMode automatic; congestionControl disabled; type ip; addressContext a1; ipInterfaceGroup LIF1;
To view the status of policy server global configuration from system-level mode with type
as mgmt
:
> show table system policyServer globalConfig reconnectTimeout 5; switchOverMode automatic; congestionControl enabled; type mgmt; mgmtInterfaceGroup mgmtGroup;
To view the status of policy server global configuration from system-level mode with type
as ip:
> show table system policyServer globalConfig reconnectTimeout 10; switchOverMode automatic; congestionControl disabled; type ip; addressContext a1; ipInterfaceGroup LIF1;
Local Policy Server Configuration
The Local Policy Server configuration commands are described below.
Command Syntax
% set system policyServer localServer <softswitch_name> action <dryUp | force> keepAliveTimer <1-60 seconds> mode <active | alternate | outOfService | standby> retries <0-32> retryTimer <# milliseconds> state <disabled | enabled> transactionTimer <50-60000 milliseconds>
Command Parameters
Parameter | Length/Range | Description |
---|---|---|
| N/A | Specifies the name of the local policy server. |
| N/A | Specifies the method on which queued transactions are processed, when operational state is either standby or out-of-service: |
| 1-60 | Specifies the time interval (in seconds) to wait before issuing a "keepalive" poll to the policy server. This poll is issued only if there is no other policy server activity during this interval. The receipt of any message from the policy server resets the elapsed time to 0. |
| N/A | Specifies the operational state of the local policy server:
NOTE: If two external active policy servers fail and local policy server is in standby mode, the standby local policy server is used as active server until the external policy server becomes active. |
| 0-32 | Specifies the number of retries for any policy server transaction. Must be 0-32, default is 1. |
| N/A | Specifies the time (in milliseconds) for the SBC to wait for the response from the local policy server. (default = 2500). |
| N/A | The administrative state of the local policy server.
NOTE: If changing the state, ensure mode is first set to "outofservice". |
| 50-60000 | Time to wait (in milliseconds) for a reply from the initial transaction request. When this timer expires, a transaction retry will be issued. Subsequent retries of this transaction are controlled by |
Command Example
To set the local policy server configuration:
% set system policyServer localServer PSX_LOCAL_SERVER action dryUp keepAliveTimer 3 mode standby retries 1 retryTimer 2500 state enabled transactionTimer 2500
To view the local policy server configuration settings:
% show system policyServer localServer localServer PSX_LOCAL_SERVER { state enabled; mode standby; action dryUp; transactionTimer 2500; keepAliveTimer 3; retryTimer 2500; retries 1; }
To view the status of local policy servers:
% show table system policyServer localServer KEEP TRANSACTION ALIVE RETRY NAME STATE MODE ACTION TIMER TIMER TIMER RETRIES ------------------------------------------------------------------------------- PSX_LOCAL_SERVER enabled active dryUp 2500 5 2500 1
Remote Policy Server Configuration
The Remote Policy Server configuration commands are described below.
Command Syntax
% set system policyServer remoteServer <softswitch_name> action <dryUp | force> ipAddress 169.254.77.2 keepAliveTimer <1-60 seconds> mode <active | alternate | outOfService | standby> portNumber <softswitch port number> retries <0-32> retryTimer <# milliseconds> state <disabled | enabled> transactionTimer <50-60000 milliseconds> % request system policyServer remoteServer <softswitch_name> switchBack
Command Parameters
Parameter | Length/Range | Description |
---|---|---|
| N/A | The name of the remote policy server. |
| N/A | Use this object to specify the action to take against the policy server.
|
| N/A | the IP address. |
| 1-60 | The time interval (in seconds) to wait before issuing a "keepalive" poll to the policy server. This poll is issued only if there is no other policy server activity during this interval. The receipt of any message from the policy server resets the elapsed time to 0 (default = 5). |
| N/A | The operational state of the remote policy server:
|
| 1-65535 | The logical port number used for IP communication with the remote policy server. (default = 3055). |
| 0-32 | The number of times to retry any remote policy server transaction. (default = 1). |
| N/A | The time (in milliseconds) for the SBC to wait for the response from the remote policy server. (default = 2500). |
| N/A | Administrative state of the remote policy server. Options are:
NOTE: The mode must be set to 'outOfService' before changing the state. |
| N/A | Use this parameter with the |
| 50-60000 | The time for SBC to wait (in milliseconds) for a reply from the policy server after sending a transaction request. When this timer expires, a transaction retry is issued based on |
Command Examples
To set the remote policy server configuration:
% set system policyServer remoteServer RS-1 mode outOfService % set system policyServer remoteServer RS-1 ipAddress 169.254.77.2 state enabled
To view the remote policy server configuration settings:
% show system policyServer remoteServer remoteServer RS-1 { ipAddress 169.254.77.2; state enabled; mode outOfService; }
To view the status of remote policy server from top-level CLI mode:
> show table system policyServer remoteServer KEEP SUB IP PORT TRANSACTION ALIVE RETRY PORT NAME ADDRESS NUMBER STATE MODE ACTION TIMER TIMER TIMER RETRIES NUMBER -------------------------------------------------------------------------------------------- RS-1 169.254.77.2 3055 enabled active dryUp 2500 5 2500 1 3053
To reset the SIP registration count of the remote policy server:
% request system policyServerremoteServer RS-1 switchBack result PASSED
In order to use the 'switchBack' command, the remote policy server must first be configured to allow a manual switchback.