Enabling Registration Enforcement; Setting The Maximum Message Id - Cisco 4700M Configuration Manual

Configuring an SCCP Parameter Map

Enabling Registration Enforcement

Setting the Maximum Message ID

Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-114
You can configure the ACE to allow only registered Skinny clients to make calls.
To accomplish this task, the ACE maintains the state of each Skinny client. After
a client registers with CCM, the ACE opens a secure port (pinhole) to allow that
client to make a call. By default, this feature is disabled.
To enable registration enforcement, use the enforce-registration command in
parameter map Skinny configuration mode. The syntax of this command is as
follows:
enforce-registration
For example, to enable registration enforcement for Skinny clients, enter:
host1/Admin(config-parammap-skinny)# enforce-registration
To disable registration enforcement, enter:
host1/Admin(config-parammap-skinny)# no enforce-registration
You can set the maximum SCCP StationMessageID that the ACE allows by using
the message-id max command in parameter map Skinny configuration mode. The
syntax of this command is as follows:
message-id max number
The number argument is the largest value for the station message ID in
hexadecimal that the ACE accepts. Enter a hexadecimal value from 0 to 4000. If
a packet arrives with a station message ID greater than the maximum configured
value or greater than the default value, the ACE drops the packet and generates a
syslog message.
For example, to set the maximum SCCP message ID to 0x3000, enter:
host1/Admin(config-parammap-skinny)# message-id max 3000
To reset the maximum message ID to the default of 0x181, enter
host1/Admin(config-parammap-skinny)# no message-id max 3000
Chapter 3 Configuring Application Protocol Inspection
OL-16202-01