Defining The Calling Party In The Sip From Header - Cisco 4700M Configuration Manual

Configuring a Layer 7 SIP Inspection Policy

Defining the Calling Party in the SIP From Header

Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-78
Header expressions allow spaces if the spaces are escaped or quoted. See
Table 3-5 for a list of the supported characters that you can use in regular
expressions.
When matching data strings, note that the period (.) and question
Note
mark (?) characters do not have a literal meaning in regular
expressions. Use brackets ([]) to match these symbols (for example,
enter www[.]xyz[.]com instead of www.xyz.com). You can also use a
backslash (\) to escape a dot (.) or a question mark (?).
For example, to identify the called party in the SIP To header, enter:
host1/Admin(config-cmap-sip-insp)# match called-party
sip:some-user@somenetwork.com
To remove the match statement from the class map, enter:
host1/Admin(config-cmap-sip-insp)# no match called-party
sip:some-user@somenetwork.com
You can filter SIP traffic based on the calling party (caller or source) as specified
in the URI of the SIP From header. The ACE does not include the display name
or tag part of the field. To filter SIP traffic based on the calling party, use the
match calling-party command in class map SIP inspection configuration mode.
The syntax of this command is as follows:
[line_number] match calling-party expression
The arguments are as follows:
line_number—(Optional) Argument that assists you in editing or deleting
•
individual match commands. Enter an integer from 2 to 1024 as the line
number. You can enter no line_number to delete long match commands
instead of entering the entire line. The line numbers do not dictate a priority
or sequence for the match statements.
expression—Regular expression that identifies the calling party in the URI of
•
the SIP From header. Enter a regular expression from 1 to 255 alphanumeric
characters. The ACE supports the use of regular expressions for matching.
Expressions are stored in a header map in the form header-name: expression.
Chapter 3 Configuring Application Protocol Inspection
OL-16202-01