7.3.18 Origin_Host_Exception_Config Table
This table is used to configure the list of Origin-Host to be exempted from Countermeasure business logic execution. It allows to customize the countermeasure behavior using the following options.
Table 7-35 Origin_Host_Exception_Config Fields
| Field | Description |
|---|---|
| Origin_Host | Defined the Origin-Host (in valid format). |
| AppCmdCst | To decide whether to Exempt Origin-Host for ApplicationId_And_Command_Code_Consistency_Check countermeasure |
| RealmWLScr | To decide whether to Exempt Origin-Host for Origin_Realm_And_Destination_Realm_Whitelist_Screening countermeasure |
| SubsIdenValid |
To decide whether to Exempt Origin-Host for Subscriber_Identity_Validation Countermeasure |
| SpecAVPScr |
To decide whether to Exempt Origin-Host for Specific_Avp_Screening countermeasure |
| OhOrCstChk | To decide whether to Exempt Origin-Host for Origin_Host_And_Origin_Realm_Consistency_Check countermeasure |
| VplmnORCst | To decide whether to Exempt Origin-Host for Visited-PLMN-ID and Origin-Realm Consistency Check countermeasure |
| RealmIMSICst | To decide whether to Exempt Origin-Host for Realm_And_IMSI_Consistency_Check countermeasure |
| DrOrMatch | To decide whether to Exempt Origin-Host for Destination_Realm_And_Origin_Realm_Match_Check countermeasure |
| AVPInstChk | To decide whether to Exempt Origin-Host for Avp_Multiple_Instance_Check countermeasure |
| AppIdWL | To decide whether to Exempt Origin-Host for ApplicationID_Whitelist_Screening countermeasure |
| PreLocChk | To decide whether to Exempt Origin-Host for Previous_Location_Check countermeasure |
| TimeDistChk | To decide whether to Exempt Origin-Host for Time_Distance_Check countermeasure |
| SrcHostValMme | To decide whether to Exempt Origin-Host for Source_Host_Validation_MME countermeasure |
| MsgRateMon | To decide whether to Exempt Origin-Host for Message_Rate_Monitoring countermeasure |
| SrcHostValHss | To decide whether to Exempt Origin-Host for Source_Host_Validation_HSS countermeasure |
| SesIntValChk | To decide whether to Exempt Origin-Host for Session_Integrity_Validation_Check countermeasure |
This table describes the field details for the Origin_Host_Exception_Config Table.
Table 7-36 Field Details for Origin_Host_Exception_Config
| Field Name | Unique | Mandatory | Data Type, Range, and Default Value | Description |
|---|---|---|---|---|
| Origin_Host | Yes | Yes |
UTF8String Range: 1-255 characters Default: n/a |
Origin-Host (in valid format). Origin-Host consists of labels separated by dots. Each label (max 63 chars) may contain a-z, A-Z, 0-9, "-" & "_" (only as 1st char) and must not start with "-" or ends with "-" & "_". [Range: 1 - 255] |
| AppCmdCst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: ApplicationId_And_Command_Code_Consistency_Check To decide whether to Exempt Origin-Host for CM |
| RealmWLScr | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Origin_Realm_And_Destination_Realm_Whitelist_Screening To decide whether to Exempt Origin-Host for CM. |
| SubsIdenValid | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Subscriber_Identity_Validation To decide whether to Exempt Origin-Host for CM. |
| SpecAVPScr | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Specific_Avp_Screening To decide whether to Exempt Origin-Host for CM |
| OhOrCstChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Origin_Host_And_Origin_Realm_Consistency_Check To decide whether to Exempt Origin-Host for CM |
| VplmnORCst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Visited-PLMN-ID and Origin-Realm Consistency Check To decide whether to Exempt Origin-Host for CM |
| RealmIMSICst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Realm_And_IMSI_Consistency_Check To decide whether to Exempt Origin-Host for CM |
| DrOrMatch | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Destination_Realm_And_Origin_Realm_Match_Check To decide whether to Exempt Origin-Host for CM |
| AVPInstChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Avp_Multiple_Instance_Check To decide whether to Exempt Origin-Host for CM |
| AppIdWL | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: ApplicationID_Whitelist_Screening. To decide whether to Exempt Origin-Host for CM |
| PreLocChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Previous_Location_Check To decide whether to Exempt Origin-Host for CM |
| TimeDistChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Time_Distance_Check To decide whether to Exempt Origin-Host for CM |
| SrcHostValMme | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Source_Host_Validation_MME To decide whether to Exempt Origin-Host for CM |
| MsgRateMon | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Message_Rate_Monitoring To decide whether to Exempt Origin-Host for CM |
| SrcHostValHss | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Source_Host_Validation_HSS To decide whether to Exempt Origin-Host for CM |
| SesIntValChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Session_Integrity_Validation_Check To decide whether to Exempt Origin-Host for CM |