SIP PAI Stripping Configuration

When you configure this feature, please note how the Oracle® Enterprise Session Border Controller behaves when you combine the designation of a realm as trusted/untrusted and SIP PAI stripping is enabled. Enter the choices for the ACLI trust-me and pai-strip parameters accordingly.

Be aware that trust is also established in the session agent configuration, and that the trust level set in a session agent configuration overrides the trust set in a realm configuration. For example, a realm might have several endpoints, some of which are associated with session agents and some of which are not. The endpoints that have configured session agent will take their trust level from the session agent parameters you set; the other endpoints, ones that are not associated with session agents, take their trust level from the realm parameters you set.

Take this relationship into consideration when you configure SIP PAI header stripping, or this feature will not work as designed.

For the sample configuration cited below, the desired Oracle® Enterprise Session Border Controller behavior is to always strip the PAI regardless of privacy type.

To configure SIP PAI stripping for an existing realm using the ACLI:

1. In Superuser mode, type configure terminal and press Enter.

   ORACLE# configure terminal

2. Type media-manager and press Enter to access the media-manager path.

   ORACLE(configure)# media-manager

3. Type realm-config and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.

   ORACLE(media-manager)# realm-config
   ORACLE(realm-config)#

4. Select the realm to which you want to apply this feature.

   ORACLE(realm-config)# select
   identifier:
   1: acmePacket <none>           192.168.20.0/24
   2: realm1     <none>           0.0.0.0
   selection:2
   ORACLE(realm-config)#

5. pai-strip—Enable PAI stripping. The default is disabled. Valid values are:

   • enabled | disabled

     ORACLE(realm-config)# pai-strip enabled

6. Save your work using the ACLI save or done command.