Routing Sbc; Configuring Classification Rules - AudioCodes Mediant 800B MSBR User Manual

Mediant 800B MSBR
37

Routing SBC

This section describes the configuration of the routing entities for the SBC application.
These include the following:

Classification rules - see ''Configuring Classification Rules'' on page 545

Message Condition rules - see ''Configuring Message Condition Rules'' on page 551

IP-to-IP routing rules - see ''Configuring SBC IP-to-IP Routing Rules'' on page 552

Alternative routing reasons - see ''Configuring SIP Response Codes for Alternative
Routing Reasons'' on page 561
37.1

Configuring Classification Rules

The Classification table lets you configure up to 100 Classification rules. A Classification
rule classifies incoming SIP dialog-initiating requests (e.g., INVITE messages) to an IP
Group from where the SIP dialog request was received. The identified IP Group is then
used in the manipulation and routing processes. Classification rules also enhance security
by allowing you to create a SIP access list, whereby classified calls can be denied (i.e.,
blacklist) or allowed (i.e., whitelist).
A Classification rule includes two areas:

Matching characteristics (Rule) - characteristics of incoming IP call such as source IP
address.

Operation (Action) - if the incoming call matches the characteristics of the rule, the
device classifies the call as belonging to an IP Group.
The Classification table is used to classify incoming SIP dialog requests only if the
following classification stages fail:
1. Classification Stage 1 - Registered Users Database: The device searches its
registration database to check if the incoming SIP dialog arrived from a registered
user:
•
Compares the SIP Contact header of the received SIP dialog to the Contact of
the registered user.
•
Compares the URL in the SIP P-Asserted-Identity/From header to the registered
address-of-record (AOR).
If this stage fails, the device proceeds to classification based on Proxy Set.
2. Classification Stage 2 - Proxy Set: If the database search fails, the device performs
classification based on Proxy Set. This is done only if the 'Classify By Proxy Set'
parameter is enabled for the IP Group (see ''Configuring IP Groups'' on page 270).
The device checks whether the INVITE's IP address (if host name, then according to
the dynamically resolved IP address list) is defined for a Proxy Set ID (in the Proxy Set
table). If a Proxy Set ID has such an IP address, the device classifies the INVITE to
the IP Group that is associated with this Proxy Set. (The Proxy Set ID is assigned to
the IP Group using the IP Group table's 'Proxy Set ID' parameter.)
Note:
feature so that the device can use the Classification table instead. This enables
"strict" classification of incoming calls to IP Groups. In addition, in cases where
multiple IP Groups are associated with the same Proxy Set ID, do not use the
Classify by Proxy Set feature.
If this stage fails (or Classify by Proxy Set is disabled), the device proceeds to
classification based on the Classification table.
Version 6.8
For security, it is highly recommended to disable the Classify by Proxy Set
545
37. Routing SBC
Mediant 800B MSBR