7.3.18 Origin_Host_Exception_Config Table
This table is used to configure the list of Origin-Host to be exempted from Countermeasure business logic execution. It allows to customize the countermeasure behavior using the following options.
Table 7-35 Origin_Host_Exception_Config Fields
Field | Description |
---|---|
Origin_Host | Defined the Origin-Host (in valid format). |
AppCmdCst | To decide whether to Exempt Origin-Host for ApplicationId_And_Command_Code_Consistency_Check countermeasure |
RealmWLScr | To decide whether to Exempt Origin-Host for Origin_Realm_And_Destination_Realm_Whitelist_Screening countermeasure |
SubsIdenValid |
To decide whether to Exempt Origin-Host for Subscriber_Identity_Validation Countermeasure |
SpecAVPScr |
To decide whether to Exempt Origin-Host for Specific_Avp_Screening countermeasure |
OhOrCstChk | To decide whether to Exempt Origin-Host for Origin_Host_And_Origin_Realm_Consistency_Check countermeasure |
VplmnORCst | To decide whether to Exempt Origin-Host for Visited-PLMN-ID and Origin-Realm Consistency Check countermeasure |
RealmIMSICst | To decide whether to Exempt Origin-Host for Realm_And_IMSI_Consistency_Check countermeasure |
DrOrMatch | To decide whether to Exempt Origin-Host for Destination_Realm_And_Origin_Realm_Match_Check countermeasure |
AVPInstChk | To decide whether to Exempt Origin-Host for Avp_Multiple_Instance_Check countermeasure |
AppIdWL | To decide whether to Exempt Origin-Host for ApplicationID_Whitelist_Screening countermeasure |
PreLocChk | To decide whether to Exempt Origin-Host for Previous_Location_Check countermeasure |
TimeDistChk | To decide whether to Exempt Origin-Host for Time_Distance_Check countermeasure |
SrcHostValMme | To decide whether to Exempt Origin-Host for Source_Host_Validation_MME countermeasure |
MsgRateMon | To decide whether to Exempt Origin-Host for Message_Rate_Monitoring countermeasure |
SrcHostValHss | To decide whether to Exempt Origin-Host for Source_Host_Validation_HSS countermeasure |
SesIntValChk | To decide whether to Exempt Origin-Host for Session_Integrity_Validation_Check countermeasure |
AVPWLScr | To decide whether to Exempt Origin-Host for AVP_Whitelist_Screening countermeasure |
SesIdValChk | To decide whether to Exempt Origin-Host for Session_Id_Validation_Check countermeasure |
OhOrFrmChk | To decide whether to Exempt Origin-Host for Origin_Host_Origin_Realm_Format_Check Countermeasure |
DhDrFrmChk | To decide whether to Exempt Origin-Host for Destination_Host_Destination_Realm_Format_Check countermeasure |
This table describes the field details for the Origin_Host_Exception_Config Table.
Table 7-36 Field Details for Origin_Host_Exception_Config
Field Name | Unique | Mandatory | Data Type, Range, and Default Value | Description |
---|---|---|---|---|
Origin_Host | Yes | Yes |
UTF8String Range: 1-255 characters Default: n/a |
Origin-Host (in valid format). Origin-Host consists of labels separated by dots. Each label (max 63 chars) may contain a-z, A-Z, 0-9, "-" & "_" (only as 1st char) and must not start with "-" or ends with "-" & "_". [Range: 1 - 255] |
AppCmdCst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: ApplicationId_And_Command_Code_Consistency_Check To decide whether to Exempt Origin-Host for CM |
RealmWLScr | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Origin_Realm_And_Destination_Realm_Whitelist_Screening To decide whether to Exempt Origin-Host for CM. |
SubsIdenValid | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Subscriber_Identity_Validation To decide whether to Exempt Origin-Host for CM. |
SpecAVPScr | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Specific_Avp_Screening To decide whether to Exempt Origin-Host for CM |
OhOrCstChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Origin_Host_And_Origin_Realm_Consistency_Check To decide whether to Exempt Origin-Host for CM |
VplmnORCst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Visited-PLMN-ID and Origin-Realm Consistency Check To decide whether to Exempt Origin-Host for CM |
RealmIMSICst | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Realm_And_IMSI_Consistency_Check To decide whether to Exempt Origin-Host for CM |
DrOrMatch | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Destination_Realm_And_Origin_Realm_Match_Check To decide whether to Exempt Origin-Host for CM |
AVPInstChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Avp_Multiple_Instance_Check To decide whether to Exempt Origin-Host for CM |
AppIdWL | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: ApplicationID_Whitelist_Screening. To decide whether to Exempt Origin-Host for CM |
PreLocChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Previous_Location_Check To decide whether to Exempt Origin-Host for CM |
TimeDistChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Time_Distance_Check To decide whether to Exempt Origin-Host for CM |
SrcHostValMme | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Source_Host_Validation_MME To decide whether to Exempt Origin-Host for CM |
MsgRateMon | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Message_Rate_Monitoring To decide whether to Exempt Origin-Host for CM |
SrcHostValHss | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Source_Host_Validation_HSS To decide whether to Exempt Origin-Host for CM |
SesIntValChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Session_Integrity_Validation_Check To decide whether to Exempt Origin-Host for CM |
AVPWLScr | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: AVP_Whitelist_Screening
To decide whether to Exempt Origin-Host for CM |
SesIdValChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Session_Id_Validation_Check
To decide whether to Exempt Origin-Host for CM |
OhOrFrmChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type: Origin_Host_Origin_Realm_Format_Check
To decide whether to Exempt Origin-Host for CM |
DhDrFrmChk | No | Yes |
Enumerated Range: Do_Not_Apply: 1 Apply: 2, Not_Supported: 3 Default: Do_Not_Apply |
CM Type:
Destination_Host_Destination_Realm_Format_Check
To decide whether to Exempt Origin-Host for CM |