Configuring policy-attributes

You use the policy-attributes object in the ACLI to configure the ldap: prefix with the name of the ldap-config. This allows the ESD to send LDAP queries to the Active Directory server(s) configured in the ldap-config element whenever there is a match for the corresponding local-policy.

Note:

An ldap-config with the LDAP name specified for this value must be configured for the next hop. An LDAP next hop is supported only for SIP to SIP calls.

To configure policy-attributes for LDAP:

1. In Superuser mode, type configure terminal and press Enter.

   ACMEPACKET# configure terminal

2. Type session-router and press Enter to access the session router-related objects.

   ACMEPACKET(configure)# session-router
   ACMEPACKET(session-router)#

3. Type local-policy and press Enter to access the local policy configuration-related attributes.

   ACMEPACKET(session-router)# local-policy
   ACMEPACKET(local-policy)#

4. Type policy-attributes and press Enter to access the policy attributes configuration-related attributes.

   ACMEPACKET(local-policy)# policy-attributes
   ACMEPACKET(local-attributes)#

   next-hop—Enter the “ldap:” prefix along with the name of the ldap-config. An ldap-config with this name must be configured. An ldap next hop is supported only for SIP-to-SIP calls. Valid values are alpha-numeric characters. Default is blank.

   XML Tag: nextHop

   ACMEPACKET(ldap-cfg-attributes)# next-hop ldap:ldapquery

   XML Example for policy-attributes for LDAP

   <localPolicy description='' 
      activateTime=''
      deactivateTime=''
      state='enabled'
      anonymousPriority='none'
      lastModifiedBy='admin@10.1.20.147'
      lastModifiedDate='2012-07-12 20:10:30'
      objectId='85'>
      <from addr='*'
         type='Hostname'
         addrPrefix=''/>
      <to addr='*'
         type='Hostname'
         addrPrefix=''/>
      <sourceRealm name='net192'/>
      <policyAttribute nextHop='ldap:ldapquery'
         destRealm='net172'
         action='none'
         isTermRoute='disabled'
         carrierName=''
         startTime='0000'
         endTime='2400'
         dow='U-S'
         cost='0'	
         state='enabled' 
         appProtocol='SIP' 
         methods='' 
         mediaProfiles='' 
         lookup='single' 
         nextKey='' 
         eLocStrLkup='disabled' 
         eLocStrMatch=''/> 
      <key>view_realm_from_to/net192/Hostname/Hostname</key>
   </localPolicy>