1. Configuration Guide
  2. Revision History

Revision History

The following table lists the shows and descriptions of revisions to the S-Cz9.1.0 ACLI Configuration Guide.

Date Description
July 2020
  • Initial release
  • Updates for creating, importing, and signing CA keys.
July 2020
  • Updates "Securing Communications Between the OCSBC and SDM with TLS" to indicate that reboot is required after configuration.
  • Directs customer to release notes for licensed features
September 2020
  • Removes option to use -1 for ease of use purposes in "Configuring an Individual Control Rule" in "Admission Control and QoS"
  • Updates the RTC Support table to indicate that access-control is not RTC
  • Updates the RTC Support table to indicate H.323 stack subelement parameters that are not RTC supported
  • Adds EVS and SRVCC topic
  • Adds content for 840p2
September 2020
  • Adds content on NPLI Optimization.
October 2020
  • Adds Local User Accounts in the User Accounts section of the Getting Started chapter to describe adding and managing local accounts.
  • Updated Configure an SDES Profile in the SRTP for Software section of the Security chapter to describe the new ciphers available.
November 2020
  • Updates inclusive language.
  • Clarifies that Acme-User-Class VSA must be lowercase in "RADIUS Authentication" in Getting Started chapter.
  • Adds note on acquire-config and VLANs in "Boot Parameter Definitions" in Getting Started chapter.
  • Updates "Exporting to a PKCS#12 File" in Security chapter to note that using RSA is required.
  • Updates "Importing a PKCS#12 File" in Security chapter to describe required options.
  • Adds "Cluster Member Graceful Shutdown" section to the System Configuration chapter.
  • Updates "SSH Remote Connections" to warn about old SSH clients.
December 2020
  • Removes erroneously included Small Footprint VNF section.
  • Updates "CPU Core Configuration" section to include a paragraph on alarms in HA environments.
March 2021
  • Adds configuration conflict between NPLI profile settings and provision-signaling-flow.
  • Removes or notes hold-invite-calls-for-aaa option, which is no longer operational.
  • Includes orig-realm-only as a valid setting for reserve-incomplete when used to support S8HR roaming.
  • Adds cleanup-inactive-imsaka-tcp-socket option.
  • In 840p3 and later, the new local-accounts command replaces the old ssh-password command. Users running 840p1 and 840p2 may still use ssh-password but should plan to migrate to local-accounts when they upgrade to 840p3 or later.
  • Corrects values to sti-attest parameter.
  • Adds diameter compliance parameter.
  • Adds detail in TLS Notifications for Certificate Expiration regarding local-cert-exp-trap-int parameter.
  • Notes that the system does not load balance Rx messages when performing recursion on them, and does not recurse CER or DWR messages.
  • Clarifies HIP configuration descriptions.
  • Corrects statement on add-codecs effect on codec offer order.
  • Notes to clarify absence of support for HMU with RTCP and SRTCP, and explain how 2 instances of the same SSRC can trigger HMU.
  • Adds explanation of PT check and reuse of that PT, when applicable.
  • Adds the use of the unique-sdp-id option to ensure compliance with RFC 6337.
  • Clarifies the reinvite-trying option's functionality.
  • Clarifies RBT media file specifications.
  • Adds unique-sdp-id option information to the context of RBT.
  • Updates reuse-connections parameter in "SIP TCP Connection Reuse Configuration" to include all supported options.
April 2021
  • Adds the "Configuration Assistant Operations" section to the "Getting Started" chapter.
  • Adds content for the S-CZ8.4.0p5 release.
  • Adds configuration consideration for DTMF and KPML interworking.
  • Adds ACL configuration consideration where incorrect syntax can result in unintended behavior.
June 2021
  • Adds start-hold-timer-event parameter
  • Corrects ptimes for G.722 for vSBC
  • Corrects ptimes for EVRC1 and EVRCB1
  • Adds optimization option caveat to NPLI behavior overview
  • Clarifies session translation on out-of-dialog messages
  • Clarifies that round-robin is the only policy-group strategy
  • Clarifies the source of the AF-Application-Identifier AVP
  • Clarifies TLS profile requirement under STIR/SHAKEN
  • Removes reference to deprecated SRR feature
  • Adds S-Cz8.4.0p6 content to external policy servers
August 2021
  • Adds SPL chapter for 840p7 and later
  • Adds constraint when using SIP REFER from a realm-config
  • Updates the "Configuration Assistant Operations" section in the "Getting Started" chapter to reflect changes in the Configuration Assistant work flow for SC-z8.4.0p7.
November 2021
  • Updates for Outgoing Flows in Secure and Non-Secure in the Same Realm section in the Security chapter.
  • Updates for transport-method in Configuring Session Agents section.
  • Updates for T.140 to Baudot Relay Examples in T.140 to Baudot Relay section.
  • Adds features for S-Cz8.4.0p8.
  • Adds the Caution statement about confguration erasure to the "Configuration Assistant Work Flow and Checklist" topic.
February 2022
  • Corrects the maximum value of tcp-number-of-ports-per-flow to 4
  • Updates local-error parameter in Specific Reason Headers in 503 Response section.
  • Removes DTLS SRTP Profile from Configure Advanced Media Termination in Realm Config section.
  • Adds a message for notify berpd force command in Manual Switchovers section, applicable for S-Cz8.4.0p7 and above.
  • Adds a save and activate during entitlement setup
  • Adds note about SBC not supporting multiple m lines with KPML - 2833 interworking in KPML to RFC2833 section.
  • Updates details about sequence number in HMU Support for RTP to SRTP Interworking section.
  • Updates the version reference point to Rx 3GPP R15 29.214 in application IDs and modes table.
  • Updates the standards reference point to 3GPP (R15) for Rx interface for Bandwidth Management Applications table in Application Type / Interface Matrix Reference.
  • Adds allowed-ssrc-change-limit under realm-config in SRTP under Security.
  • Adds a note about add-sdp-baseBehavior option in ensuring telephone event negotiation within delayed media and conflicting configurations section.
  • Corrects rtcp-mux in Configure Advanced Media Termination in Realm Config section.
  • Adds information about license required in transcoding call for virtual SBC in RTCP Generation Platform Support section.
  • Adds note about reboot in QoS Configuration section.
  • Adds information about Session Router Session Capacity Enhancement.
  • Removes Static flow policing under policing methods as SBC no longer supports static flows.
  • Removes Media Policing Configuration for Static Flows under security as SBC no longer supports static flows.
March 2022
  • Updates value for max-incoming-conns in Denial of Service TLS section and DoS protection for TLS Connections section for S-Cz8.4.0p5 and above.
  • Adds information that the Host routes to IPv6 addresses do not support a netmask in Host Route section.
  • Adds strip-restored-sdp option is enabled by default starting S-Cz8.4.0 and above in Ensuring Compliant SDP Management for P-Early Media Call Flows section.
  • Adds session agent group naming support in session routing and load balancing section.
  • Adds recommendation about local-port-match-max in Security Policy Configuration section.
  • Adds note about transcoding capacity for all supporting codec in transcodable details section.
  • Adds note about RTP media-sec-policy in the Single-Ended SRTP Termination Configuration section.
  • Adds details about notify fped refresh command when you refresh the telephony fraud protection file in the High Availability section.
  • Adds local-port-match-max and remote-port-match-max in Sample Security Policy Configuration in IMS Support chapter.
  • Adds local-port-match-max and remote-port-match-max in Security Policy Configuration in Security chapter.
June 2022
  • Adds Local Route Table Performance topic.
  • Clarifies sequence for sending queries to the primary and backup DNS servers
  • Highlights that save and activate are not relevant to a standby system in HA pair feature setup procedure
  • Updates certificate record config to include limits on 'state' field.
  • Removes ECDSA from PKCS12 note.
July 2022
  • Adds clarification to translation-rules for replacing strings.
  • Corrects default tls-version.
  • Adds limitation that hardware platform SBCs support a maximum of 4 ENUM servers.
  • Adds a note about sip-dynamic-hnt in Adaptive NHT Configuration section.
  • Adds details about min-reg-expire in HNT Configuration section.
  • Adds 840p12 IP Prefix feature.
October 2022
  • Adds recommendation on forwarding core configuration based on the use of PMD drivers.
  • Clarifies the requirement for media-policy for setting all DSCP codes on egress, and includes passthrough configuration.
  • Typographical error fixes in S8HR documentation.
  • In Configuring a PLMN INTRO Change Subscription, replaced parameter "specific-action-subscription" with "specific-action-sig-flow-subscription."
November 2022
  • Updates note about order of codecs in Conditional Codec Policies section.
  • Corrects use of anonymous-priority in local-policy configuration.
  • Fixes various typographical errors.
  • Updates "Telephony Fraud Protection Target Matching Rules" section to include information about realm precedence.
  • Updates "Configuring a PLMN INFO Change Subscription" for accuracy.
February 2023
  • Update values for transport-method within session-agent.
  • Updates the "MSRP Management Monitoring" topic.
  • Removes unsupported feature Daylong Transcoding Session Cleanup section from Transcoding chapter.
  • Updates comfort noise transcoding support details in Supported and Unsupported Platforms and Behavior section in transcoding chapter.
  • Updates Voice Scenario 3 in Transcoding chapter.
  • Clarifies partial support for ITU Q.1912.5.