Whitelist Learning Configuration
The ACLI interface provides two commands that allow a Superuser to start and stop whitelist learning on the Oracle® Enterprise Session Border Controller:
Command | Description |
---|---|
start <argument> <options> | Starts whitelist learning on the
Oracle® Enterprise Session Border Controller.
You must specify the argument learn-allowed-elements with this command to start the learning operation. Optionally, you can use method, msg-type, and params after the argument. |
stop <argument> <identifier> | Stops the whitelist learning on the
Oracle® Enterprise Session Border Controller and writes the learned configuration to the editing configuration on the
Oracle® Enterprise Session Border Controller where it is saved and activated.
You must specify the argument learn-allowed-elements with this command to stop the learning operation. You must specify a unique identifier that identifies the allowed-elements-profile name. If you specify an identifier name that already exists as a profile, the ACLI returns an error message and prompts you to enter a different name. |
You can use these commands at the top level ACLI prompt as required on the Oracle® Enterprise Session Border Controller.
You use these commands with the argument, learn-allowed-elements to start/stop the whitelist learning feature. By default, the learning mode creates a single rule-set under which all of the headers and their respective parameters are stored.
For example:
ORACLE# start learn-allowed-elements
Learning mode for allowed-elements-profile started.
In the above example, start is the top level ACLI command and learn-allowed-elements is the operation being performed.
Optionally, you can specify [method], [msg-type], and [params] in any order, for the Oracle® Enterprise Session Border Controller to learn specific rule-set elements from incoming messages and save them to the whitelist configuration.
For example:
ORACLE# start learn-allowed-elements method msg-type params
The method option creates a new rule-set per unique method. The msg-type option creates a new rule-set per unique message-type seen. The params option performs URI and header parsing to examine parameters within the message. By default, parameter parsing is disabled.
To start the whitelist learning feature:
In Superuser mode, at the top level ACLI prompt, type
start learn-allowed-elements
and press Enter.
ORACLE# start learn-allowed-elements
The following message displays:
Learning mode for allowed-elements-profile started.
To specify the elements of rule-sets for whitelists:
In Superuser mode, at the top level ACLI prompt, type
start learn-allowed-elements method msg-type params
and press Enter.
ORACLE# start learn-allowed-elements method msg-type params
The following message displays:
Learning mode for allowed-elements-profile started.
Note:
If you try to start a whitelist learning operation while another learning operation is already running, the following message displays:Learning mode restarted without saving Learning mode for allowed-elements-profile started.
To stop the whitelist learning feature:
In Superuser mode, at the top level ACLI prompt, type stop learn-allowed-elements <identifier>, where <identifier> is the allowed-elements-profile name, and press Enter.
ORACLE# stop learn-allowed-elements whitelist1
The following message displays:
Learning mode for allowed-elements-profile stopped.
If you specify an identifier name that already exists as a profile, the ACLI returns an error message and prompts you to enter a different name.