7.3.18 Origin_Host_Exception_Config Table

This table is used to configure the list of Origin-Host to be exempted from Countermeasure business logic execution. It allows to customize the countermeasure behavior using the following options.

Table 7-35 Origin_Host_Exception_Config Fields

Field Description
Origin_Host Defined the Origin-Host (in valid format).
AppCmdCst To decide whether to Exempt Origin-Host for ApplicationId_And_Command_Code_Consistency_Check countermeasure
RealmWLScr To decide whether to Exempt Origin-Host for Origin_Realm_And_Destination_Realm_Whitelist_Screening countermeasure
SubsIdenValid

To decide whether to Exempt Origin-Host for Subscriber_Identity_Validation

Countermeasure
SpecAVPScr

To decide whether to Exempt Origin-Host for Specific_Avp_Screening

countermeasure
OhOrCstChk To decide whether to Exempt Origin-Host for Origin_Host_And_Origin_Realm_Consistency_Check countermeasure
VplmnORCst To decide whether to Exempt Origin-Host for Visited-PLMN-ID and Origin-Realm Consistency Check countermeasure
RealmIMSICst To decide whether to Exempt Origin-Host for Realm_And_IMSI_Consistency_Check countermeasure
DrOrMatch To decide whether to Exempt Origin-Host for Destination_Realm_And_Origin_Realm_Match_Check countermeasure
AVPInstChk To decide whether to Exempt Origin-Host for Avp_Multiple_Instance_Check countermeasure
AppIdWL To decide whether to Exempt Origin-Host for ApplicationID_Whitelist_Screening countermeasure
PreLocChk To decide whether to Exempt Origin-Host for Previous_Location_Check countermeasure
TimeDistChk To decide whether to Exempt Origin-Host for Time_Distance_Check countermeasure
SrcHostValMme To decide whether to Exempt Origin-Host for Source_Host_Validation_MME countermeasure
MsgRateMon To decide whether to Exempt Origin-Host for Message_Rate_Monitoring countermeasure
SrcHostValHss To decide whether to Exempt Origin-Host for Source_Host_Validation_HSS countermeasure
SesIntValChk To decide whether to Exempt Origin-Host for Session_Integrity_Validation_Check countermeasure
AVPWLScr To decide whether to Exempt Origin-Host for AVP_Whitelist_Screening countermeasure
SesIdValChk To decide whether to Exempt Origin-Host for Session_Id_Validation_Check countermeasure
OhOrFrmChk To decide whether to Exempt Origin-Host for Origin_Host_Origin_Realm_Format_Check Countermeasure
DhDrFrmChk To decide whether to Exempt Origin-Host for Destination_Host_Destination_Realm_Format_Check countermeasure

This table describes the field details for the Origin_Host_Exception_Config Table.

Table 7-36 Field Details for Origin_Host_Exception_Config

Field Name Unique Mandatory Data Type, Range, and Default Value Description
Origin_Host Yes Yes

UTF8String

Range: 1-255 characters

Default: n/a
Origin-Host (in valid format). Origin-Host consists of labels separated by dots. Each label (max 63 chars) may contain a-z, A-Z, 0-9, "-" & "_" (only as 1st char) and must not start with "-" or ends with "-" & "_". [Range: 1 - 255]
AppCmdCst No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: ApplicationId_And_Command_Code_Consistency_Check

To decide whether to Exempt Origin-Host for CM
RealmWLScr No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Origin_Realm_And_Destination_Realm_Whitelist_Screening

To decide whether to Exempt Origin-Host for CM.
SubsIdenValid No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Subscriber_Identity_Validation

To decide whether to Exempt Origin-Host for CM.
SpecAVPScr No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Specific_Avp_Screening

To decide whether to Exempt Origin-Host for CM
OhOrCstChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Origin_Host_And_Origin_Realm_Consistency_Check

To decide whether to Exempt Origin-Host for CM
VplmnORCst No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Visited-PLMN-ID and Origin-Realm Consistency Check

To decide whether to Exempt Origin-Host for CM
RealmIMSICst No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Realm_And_IMSI_Consistency_Check

To decide whether to Exempt Origin-Host for CM
DrOrMatch No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Destination_Realm_And_Origin_Realm_Match_Check

To decide whether to Exempt Origin-Host for CM
AVPInstChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Avp_Multiple_Instance_Check

To decide whether to Exempt Origin-Host for CM
AppIdWL No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply
CM Type: ApplicationID_Whitelist_Screening. To decide whether to Exempt Origin-Host for CM
PreLocChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Previous_Location_Check

To decide whether to Exempt Origin-Host for CM
TimeDistChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Time_Distance_Check

To decide whether to Exempt Origin-Host for CM
SrcHostValMme No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Source_Host_Validation_MME

To decide whether to Exempt Origin-Host for CM
MsgRateMon No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Message_Rate_Monitoring

To decide whether to Exempt Origin-Host for CM
SrcHostValHss No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Source_Host_Validation_HSS

To decide whether to Exempt Origin-Host for CM
SesIntValChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply

CM Type: Session_Integrity_Validation_Check

To decide whether to Exempt Origin-Host for CM
AVPWLScr No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply
CM Type: AVP_Whitelist_Screening

To decide whether to Exempt Origin-Host for CM

SesIdValChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply
CM Type: Session_Id_Validation_Check

To decide whether to Exempt Origin-Host for CM

OhOrFrmChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply
CM Type: Origin_Host_Origin_Realm_Format_Check

To decide whether to Exempt Origin-Host for CM

DhDrFrmChk No Yes

Enumerated

Range: Do_Not_Apply: 1

Apply: 2, Not_Supported: 3

Default: Do_Not_Apply
CM Type: Destination_Host_Destination_Realm_Format_Check

To decide whether to Exempt Origin-Host for CM