Chapter 3
Configuring Application Protocol Inspection
Setting the Minimum and Maximum SCCP Prefix Length
Associating an SCCP Parameter Map with a Layer 3 and Layer 4
Policy Map
OL-16202-01
By default, the ACE drops SCCP messages that have an SCCP prefix length that
is less than the message ID. You can configure the ACE to check for a specific
minimum prefix length. You can also configure the ACE to check for a maximum
prefix length, but this check is disabled by default. The ACE drops any Skinny
message packets that fail these checks and generates a syslog message.
To set the minimum and maximum SCCP prefix length, use the sccp-prefix-len
command in parameter map Skinny configuration mode. The syntax of this
command is as follows:
sccp-prefix-len {max number | min number}
The keywords and arguments are as follows:
max number—Enables the check of the maximum SCCP prefix length. Enter
•
an integer from 4 to 4000 bytes. The default is 4 bytes.
min number—Specifies the minimum SCCP prefix length. Enter an integer
•
from 4 to 4000 bytes.
For example, to set the minimum SCCP prefix length, enter:
host1/Admin(config-parammap-skinny)# sccp-prefix-len min 4
To reset the minimum SCCP prefix length to the default behavior, enter:
host1/Admin(config-parammap-skinny)# no sccp-prefix-len min 4
You can associate an SCCP parameter map with a Layer 3 and Layer 4 policy map
by using the appl-parameter skinny advanced-options command in policy map
class configuration mode.
The syntax of this command is as follows:
appl-parameter skinny advanced-options name
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring an SCCP Parameter Map
3-115