Configure a Local Policy for Authenticating Surrogate Agent Traffic

To configure a local policy to support intra-realm surrogate agent authentication, you configure the local policy that directs traffic from the surrogate agent to the softswitch, which initiates the authentication challenge for any traffic coming from the surrogate agent (usually a PBX without the ability to authenticate itself).

1. In Superuser mode, type configure terminal and press Enter.

   ACMEPACKET# configure terminal

2. Type session-router and press Enter.

   ACMEPACKET(configure)# session-router

3. Type local-policy and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.

   ACMEPACKET(session-router)# local-policy
   ACMEPACKET(local-policy)#

4. from-address—Indicate the originating address information by entering a From address value. You can use the asterisk (*) as a wildcard to indicate this policy can be used with all originating addresses.

   Note:

   After entering the from-address value, the Oracle Communications Session Delivery Manager automatically saves it to the configuration when exiting from local policy.
5. to-address—Indicate the destination address by entering a To address value. You can use the asterisk (*) as a wildcard to indicate all this policy can be used for any destination address.

   Note:

   After entering the to-address value, the Oracle Communications Session Delivery Manager automatically saves it to the configuration when exiting from local policy.
6. source-realm—Enter the identifier of the realm on which the surrogate agent resides.
7. state—Indicate whether you want the local policy to be enabled or disabled on the system. The default value is enabled. The valid values are:

   • enabled | disabled

8. policy-attribute—Configure local policy attributes required for this feature. All other attributes are optional.
9. next-hop—Identify the next signaling host by entering the next hop value. For this feature, then next hop is the soft switch.
10. realm—Identify the egress realm (the realm used to reach the next hop) if the system must send requests out from a specific realm.
11. lookup—Set this parameter to single.
12. auth-user-lookup—Enter the name of the target auth-user-lookup you have configured for this surrogate agent on the Softswitch realm.
13. Type done twice to save changes to your policy-attributes and your local policy.
14. Save and activate your configuration.