The SBC Core supports tracing routes for specific peer IP addresses. The Traceroute utility provided by the GNU/Linux is utilized as a base for this functionality. This feature handles and processes the traceroute requests from the Signaling Gateway (SG).

The Traceroute functionality for a peer IP address is invoked by sending a traceroute request message to the Traceroute module. The message contains details of the peer's IP address, which is processed by the TRCRT/Traceroute module.

This feature supports the following scenarios:

  • If the ARS blacklists a server, SIP Signaling Gateway (SIPSG)  sends a traceroute request to log the route for the blacklisted server.
  • When the Gateway-Gateway (GW-GW) TCP connection is lost and cannot be restored, the Gateway Signaling Gateway (GWSG) sends a traceroute request to log the route for the peer GW server.
  • When the establishment of a GW-GW connection fails.
  • When a peer IP address is blacklisted by the Path Check process via the ARS mechanism.

To allow the Internet Control Message Protocol (ICMP) packets from different routers when the traceroute starts, an Access Control List (ACL) entry is configured. As soon as the traceroute output is available, this ACL entry is removed.

Note

For the Traceroute utility to work, a higher precedence "IP ACL rule" is created to accept ICMP traffic on the SIP Signaling port. This rule overrides any "deny-all" or "deny-ICMP" User ACL rule configured by the Administrator. This higher precedence "IP ACL rule" is created before the start of traceroute for an endpoint, and is be removed as soon as the traceroute is over. Thus, for the brief duration of traceroute, the ICMP traffic to the Signaling port is allowed from any IP address, even if "deny-ICMP" or "deny-all" User ACL rules are configured in the system. 


From the EMA main screen, navigate to All > Address Context > Zone > Traceroute Sig Port. The Traceroute Sig Port window is displayed. 

Select the Address Context and the Zone from the drop-down lists. 

The Edit Traceroute Sig Port window is displayed.


Click Save to save the changes, or Undo Edits to cancel the changes.


Traceroute Sig Port Parameters

ParametersDescription
State

Administrative state of the Traceroute Sig Port.

  • Disabled (default)
  • Enabled
Probe Method

Traceroute probe method.

  • UDP (default)
  • Icmp


  • No labels