1. Administrative Security Guide
  2. Configuring IKEv2 Interfaces
  3. Configuring Access Control
  4. Configuring White Lists
  5. IMSI/MAC Filtering

IMSI/MAC Filtering

With EAP-SIM protocol in use, authentication is accomplished by a RADIUS server. Using the Wm interface, the Oracle Communications Session Border Controller passes the received IMSI identity to the RADIUS server. In order to minimize server processing, the OCSBC provides users with the optional ability to compile IMSI prefix white lists that filter identities presented for RADIUS authentication. White lists are inclusive in that only those identities matching list contents are granted RADIUS access; non-matching identities are summarily rejected by the OCSBC. The white lists contain numeric strings or simple regular expressions that identify blocks of subscribers eligible for access to the RADIUS server.

These strings are interpreted as either an IMSI prefix or as a MAC address. White lists now contain either IMSI or MAC identifiers. Identifiers are constructed using the digits 0 through 9 , any hexadecimal digit, and the ^ wild-card character, which specifies any single base-10 or base-16 digit. Each identifier one or one or more subscribers eligible for authentication.

Sample identifiers are as follows:
  • 744 matches the country of Paraguay
  • 74401 matches a specific Paraguayan carrier (Hola Paraguay S.A.)
  • 7440^ matches all current Paraguayan carriers (74401, 74402, 74404, and 74405)