Cisco Cisco ASR 5000
ACS Rulebase Configuration Mode Commands
▀ route priority
▄ Command Line Interface Reference, StarOS Release 18
766
h323
: Route to H323 protocol analyzer.
http
: Route to HTTP protocol analyzer.
imap
: Route to IMAP protocol analyzer.
mipv6
: Route to MIPv6 protocol analyzer.
mms
: Route to MMS protocol analyzer.
pop3
: Route to POP3 protocol analyzer.
pptp
: Route to PPTP protocol analyzer.
radius
: Route to RADIUS protocol analyzer.
rtcp
: Route to RTCP protocol analyzer.
rtp
: Route to RTP protocol analyzer.
rtsp
: Route to RTSP protocol analyzer.
sdp
: Route to SDP protocol analyzer.
secure-http
: Route to secure HTTP protocol analyzer.
sip [ advanced | basic-and-advanced ]
: Route to SIP protocol analyzer.
advanced
: For SIP calls to work with NAT/Stateful Firewall, a SIP Application-Level
Gateway (ALG) is required to do payload translation of SIP packets and pin-hole (dynamic
flow) creation for media packets. A SIP routing rule must to be configured for routing the
packets to the SIP ALG for processing. If the keyword
flow) creation for media packets. A SIP routing rule must to be configured for routing the
packets to the SIP ALG for processing. If the keyword
advanced
is configured, the
packets matching the routing rule will be routed to SIP ALG for processing and not to ACS
SIP analyzer. If not configured, then packets will not be routed to SIP ALG and will be
routed to ACS SIP analyzer for processing.
SIP analyzer. If not configured, then packets will not be routed to SIP ALG and will be
routed to ACS SIP analyzer for processing.
Also, see
firewall nat-alg
CLI command in the ACS Configuration Mode.
basic-and-advanced
: For SIP ALG to co-exist with SIP Analyzer, the packets are routed
through ACS SIP Analyzer and SIP ALG. The SIP packets can pass through ACS
functionality (by ACS SIP Analyzer processing) and at the same time payload
translation/pinhole-creation can happen successfully (by SIP ALG processing). If
functionality (by ACS SIP Analyzer processing) and at the same time payload
translation/pinhole-creation can happen successfully (by SIP ALG processing). If
basic-
and-advanced
is configured, then the packets matching the routing rule will be routed
through the SIP Analyzer and then through SIP ALG for processing.
tftp
: Route to TFTP protocol analyzer.
smtp
: Route to SMTP protocol analyzer.
wsp-connection-less
: Route to WSP connection-less protocol analyzer.
wsp-connection-oriented
: Route to WSP connection-oriented protocol analyzer.
Important:
To route packets to the P2P analyzer, the ruledef should have rules to match all IP packets.
Otherwise, the analyzer may not detect all P2P traffic.
Important:
Use the
show active-charging analyzer statistics
command in the Exec Mode to see the
list of supported analyzers.
description description
Enables to add a description to the rule and action for later reference in saved configuration file.