Adding A Layer 7 Class Map Description For Sip Inspection; Defining The Called Party In The Sip To Header - Cisco 4700M Configuration Manual

Chapter 3 Configuring Application Protocol Inspection

Adding a Layer 7 Class Map Description for SIP Inspection

Defining the Called Party in the SIP To Header

OL-16202-01
You can add a Layer 7 Class map description by using the description command
in class map SIP inspection configuration mode.
The syntax of this command is as follows:
description text
The text argument is an unquoted text string with a maximum of
240 alphanumeric characters.
For example, enter:
host1/Admin(config-cmap-sip-insp)# description SIP inspection class
map
To remove the description from the class map, enter:
host1/Admin(config-cmap-sip-insp)# no description
You can filter SIP traffic based on the called party (callee or destination) as
specified in the URI of the SIP To header. The ACE does not include the display
name or tag part of the field. To filter SIP traffic based on the called party, use the
match called-party command in class map SIP inspection configuration mode.
The syntax of this command is as follows:
[line_number] match called-party expression
The arguments and options are as follows:
line_number—(Optional) Argument that assists you in editing or deleting
•
individual match commands. Enter an integer from 2 to 1024 as the line
number. You can enter no line_number to delete long match commands
instead of entering the entire line. The line numbers do not dictate a priority
or sequence for the match statements.
expression—Regular expression that identifies the called party in the URI of
•
the To header. Enter a regular expression from 1 to 255 alphanumeric
characters. The ACE supports the use of regular expressions for matching.
Expressions are stored in a header map in the form header-name: expression.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring a Layer 7 SIP Inspection Policy
3-77