SIP Admission Control Configuration

You can configure the registered endpoint to accept and process requests from SIP realms. If a request does not meet the criteria of the option you choose here, it is rejected with a 403 (Forbidden) response.

To configure admission control:

In Superuser mode, type configure terminal and press Enter.
```
ORACLE# configure terminal
```
Type session-router and press Enter.
```
ORACLE(configure)# session-router
```
Type sip-interface and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.
```
ORACLE(session-router)# sip-interface
ORACLE(sip-interface)#
```
Type sip-ports and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.
```
ORACLE(sip-interface)# sip-port
ORACLE(sip-port)#
```
Set the criteria for admission control.

allow-anonymous—Enter the anonymous connection mode you want applied when SIP requests are processed. The default value is all.

The following are valid values:
- all—No ACL is applied and all anonymous connections are allowed.
- agents-only—Only requests from configured session agents are processed. The Oracle® Enterprise Session Border Controller responds to all other requests with a forbidden response.
- realm-prefix—Only requests from session agents and addresses matching the realm’s address prefix are processed. All other requests are rejected with a 403 (Forbidden) response.
- registered—Only requests from session agents and registered endpoints are processed. REGISTER allowed from any endpoint.
- registered-prefix—Only requests from session agent and registered endpoint addresses that match the realm’s realm prefix are processed.
  
  The following example shows the allow-anonymous parameter that has been configured to allow only requests from session agents and registered endpoints. All other session agent parameters following the allow-anonymous parameters are omitted for brevity.
```
sip-port
                address
                port                           5060
                transport-protocol             UDP
                allow-anonymous                registered
```