Static Flow Configuration
This section describes how to configure the static-flow element using the ACLI.
The ingress IP address criteria is set first. These parameters are applicable to traffic entering the ingress side of the Oracle® Enterprise Session Border Controller .
- in-realm-id—The access realm, where endpoints are located.
- in-source—The source network in the access realm where the endpoints exist. This parameter is entered as an IP address and netmask in slash notation to indicate a range of possible IP addresses.
- in-destination—The IP address and port pair where the endpoints send their traffic. This is usually the IP address and port on a Oracle® Enterprise Session Border Controller interface that faces the access realm.
The egress IP address criteria is entered next. These parameters determine how traffic is re-sourced as it leaves the Oracle® Enterprise Session Border Controller and enters the backbone network.
- out-realm-id—The backbone realm, where servers are located.
- out-source—The IP address on the interface of the Oracle® Enterprise Session Border Controller where traffic exits the Oracle® Enterprise Session Border Controller into the backbone realm. Do not enter a port for this parameter.
- out-destination—The IP address and port pair destination of the traffic. This is usually a server in the backbone realm.
- protocol—The protocol associated with the static flow. The protocol you choose must match the protocol in the IPv4 header. Valid entries are TCP, UDP, ICMP, ALL.
The type of NAT ALG, if any.
- alg-type—The type of NAT ALG. Set this to NAPT, TFTP, or none.
The port range for port re-sourcing as traffic affected by the NAT ALG exits the egress side of the Oracle® Enterprise Session Border Controller is set next. (Not applicable if alg-type is set to none.)
- start-port—The starting port the NAT ALG uses as it re-sources traffic on the egress side of the Oracle® Enterprise Session Border Controller .
- end-port—The ending port the NAT ALG uses as it re-sources traffic on the egress side of the Oracle® Enterprise Session Border Controller .
The flow timers are set next. (Not applicable if alg-type is set to none.)
- flow-time-limit—Total session time limit in seconds. The default is 0; no limit.
Note:
Note that the static flow-time-limit must have a value larger than initial-guard-timer and subsq-guard-timer for static flows. - initial-guard-timer—Initial flow guard timer for an ALG dynamic flow in seconds. The default is 0; no limit.
- susbsq-guard-timer—Subsequent flow guard timer for an ALG dynamic flow in seconds. The default is 0; no limit.
Finally, you can set the optional bandwidth policing parameter for static flows (with or without NAT ALG applied).
- average-rate-limit—Sustained rate limit in bytes per second for the static flow and any dynamic ALG flows. The default is 0; no limit.
To configure static flow: