3241 GW ISDN to CUCM calls must be block

Hi Experts

I need your suggestion below

One of our customer with cisco Telepresence infrastructure setup (VCSC & E, conductor, TIP Server & TMS, CUCM). CUCM and integrated VCS, we recently installed ISDN the Gulf war (3241)

Now the client wants to block incoming and outgoing calls of CUCM to ISDN GW extension of GW ISDN extension CUCM

CUCM numbering plan is 62XXXX series and of VCS E.164 dial Plan is 64XXXX. All products in the most recent version S/W

someone suggest how fulfill us this requirement

Concerning

SR

Hello, welcome to the Cisco support community!  =)

There are two methods to meet your need, first using the rules of research named source areas and the second is the script of CPL. I'll give you an example on the use of the rules of research, which is the easiest way to meet your need:

Blocking of the ISDN to CUCM

1) register your gateway ISDN to a subarea separated in VCS control, for example 'ISDN-sub-zone '. Only the entry door must to enter this sub-area.

2) create a search rule that fits your plan number CUCM, in your case, 62XXXX. This rule have priority over any other rules of game. Set the 'source' as the 'ISDN-sub-zone ". Use the parameter "replace" and transform the number to an unknown number. Set the 'match' 'Stop '. If your ISDN gateway will not be able to call any CUCM endpoints.

Blocking of CUCM to ISDN

1) the easiest is to make blocking calls using CUCM himself. You can use the CSS/Partition of CUCM features in order to refuse some end points to call ISDN numbers

2) , but you can also use the VCS to block calls. You can use the same logic above. Create a search rule that fits your plan ISDN number, in my case, 0\d. * This rule have priority over any other rules of game. Set the 'source' as being the nearby area of CUCM. Use the parameter "replace" and transform the number to an unknown number. Set the 'match' 'Stop '. End points so that all your CUCM will not be able to call all ISDN numbers. Be aware that it will be applied to all the endpoints registered to CUCM, if you want to block only the end points, use the Partition/CSS of CUCM functions.

Free fraud prevention

When you implement an ISDN gateway registered in VCS, especially when you have a highway of VCS, you should consider the need to implement a free fraud prevention mechanism which will prevent external users to use your system as a phone system without. For example, if you do not implement such a mechanism, external Internet allows your VCS Expressway users to achieve your ISDN gateway and then free ISDN calls using your gateway. In addition, there is another method of fraud called "reunification", where the user external dials to your ISDN via ISDN gateway and connect to the auto attendant to recognition of the bridge, if it is enabled, then the user redial another ISDN number and then the call is routed to ISDN using your entry door, in other words, a malicious user can make a local call to your gateway and then use your gateway to recompose and make an international call, for example.

Therefore, it is extremely important to look at a diagram of toll-free fraud prevention when implementing any ISDN gateway registered in VCS, especially when you have VCSE.

Fortunately, Cisco provided a configuration example explaining how to block two methods of fraud without charge. Take a look at this guide from page 40:

http://www.Cisco.com/en/us/docs/Telepresence/infrastructure/VCs/config_guide/Cisco_VCS_Basic_Configuration_Control_with_Expressway_Deployment_Guide_X7-2.PDF

I suggest you consider all of the above examples, save time to plan and then implement your restriction and ISDN toll-free fraud prevention mechanism.

I hope this helps.

Paulo Souza

My answer was helpful? Please note the useful answers and do not forget to mark questions resolved as "responded."

Tags: Cisco Support

Similar Questions

  • 3241 GW ISDN with CUCM 10.5 or VCS

    Hi all

    What is the best practice to deploy ISDN GW 3241.

    It connects with CUCM or VCS control?

    How to connect it with CUCM or VCS?

    Kind regards

    There are some basic steps in the Quick Start Guide and there is more information on the different ways to configure it in this thread: https://supportforums.cisco.com/discussion/11580051/isdn-gw-3241-admin-config-guide

    Wayne
    --
    Remember the frequency responses and mark your question as answered as appropriate.

  • is it possible, end point of video recorded in CUCM call standalon SX10 via SIP Trunk?

    Dear all,

    Need help :)

    1.

    is it possible, end point of video recorded in CUCM call standalon SX10 via SIP Trunk?

    my customers will not buy TP - lic :)

    Topology:

    8900 (jabber) - CUCM-(SIP) - SX10

    2.

    Customer, have MCU machine.

    If not possible. is it possible, meeting point of MCU use?

    Topology:

    8900 (jabber) - CUCM - MCU - SX10

    1. Yes, but it is not that simple and straightforward that the SX10 can be reached by calling is the public IP address and CUCM does not support the IP address numbering is not a SIP address format...

    2. Yes, using the MCU would be much simpler, easier and, in my opinion, a better solution to be implemented. Here is an example of how a stand-alone SX10 could dial the IP address of the MCU standard automatic.

    You can also assign a SIP URI address to the meeting point which the SX10 can connect to.

    /Jens

    Please note the answers and score the questions as "answered" as appropriate.

  • ISDN-> disconnected IP calls

    Hello

    We have severel endpoints (C40 and 95MXP) with difficulties to follow connected ISDN/IP calls or even connect at all. Calls that crosses disconnect between 1 to 50 seconds. There is nothing no indication that calls are being disconnected with force.

    Sometimes the phone call seems to go nowhere, but the video end point really rings a few seconds.

    When the call is connected, we can hear the voice of the caller until the call is disconnected.

    I had (31) after log out message once.

    We have an ISDN GW 3241

    This rings a Bell with anyone?

    Best regards

    André

    The PRI channel could be out of sync and restarting resynch them.

  • BlackBerry Smartphones video calls between BlackBerry or Voip calls must read more than a year a RIM does nothing about it...! Must be in bb10 correct your mistakes

    Well, I'm not a programmer, but those who are not the their: Please answer this... ?

    Why isn't their an app that can allow us to make calls voip blackberry for blackberry ok forget voip called something like Skype or facetime where to users of phones like blackberry 9900 or the 9860 can call the other times video I had the blackberry from book reading its pretty useless I never use it no cause of offence I can t Skype video calls my friends family need to have a playbook to call me ridculous if you look @ the samsung or the iphone, they all Skype for if other users don't have the same mobile phone they can even video call each other pc to phone or ipad to pc... etc.

    I posted this on your facebook wall and hope that nothing is done about it

    Blackberry question, why don't have an application like Viber or Skype where users who have blackberry as 9900 or the 9860 in which the two phones have front camera could Skype call or an application like viber in the blackberry users can call on voip... it is a reall fall in expected an app for blackberry for almost a year rang also edge to do something about IT... most users go for iphone so because of these two applications that maintains the connected in time video reall... enjoy some answer on this...

    looking forward to the bb 10 having these sucks simple features of daily use not having them so fustrating I think to spend 529 book just cause the 9900 t can support Skype and the playbook is not just the feel

    It is perhaps a question better directed to Skype and not HERE in the forums.  Skype has an application for BlackBerry, but it is only available to U.S. subscribers using Verizon.  (This information can be updated to date, it's updated information I have.)  Given that these forums are composed (not the right choice of words) of volunteers who love BlackBerry phones and not by RIM developers, your chances of getting the answer you are looking for may be thin.

    I hope that helps you.

  • Can we get a feature "whitelist only" to only allow calls from contacts block all spammers?

    'Do not call' registry FTC does not work. With robo-callers and IP phones, basically any phone number that is not already on my list of contacts is a spammer.

    Is there a way to make sure that our iPhones will ring only when someone on my list of contacts of the calls?

    MooRogue,

    Try to use: do not disturb on your iPhone, iPad or iPod touch - Apple Support

  • iPhone os SE 9.3 (last) why outgoing call attributed to me when I didn't call and actually blocked the number when I received an unsolicited, a week ago the same call?

    Why is there an outgoing call this morning from my iphone os SE 9.3.2 to a number that called my phone Friday unsolicited and which I blocked immediately?  I got no call number.  1. how an outgoing call could be made from my phone?  2 is not a number of blocking prevents the contact incoming or outgoing?  What should do?

    Contact your operator.

  • Updates (optional) must be blocked if the essential addons are not yet compatible

    Example: I depend on Roboform to maintain several hundred secure passwords unique and credentials of the user. Updates to firefox often break the addon. I should be able to say thank you to any updates until the addons have caught up.

    At the present time, which requires an uninstall firefox and reinstalling the older version.

    (a) is there a better solution to workaround?
    (b) when the (delay until addon compatible) option will be made available?

    Third party products/software (e.g., Roboform, Adobe Flash, RealPlayer, products firewall-AV/AS, etc.) should be checked periodically by the user for the updates. Some third-party products, including Roboform, install an add-on (toolbar or another) in Firefox. Keep the third-party products updated is also important to keep your operating system updated.

    Regarding the Roboform and their version compatibility page: http://www.roboform.com/support/news (information I found on the internet indicates that Roboform 7.6.3 was released on 10/11/2011 - two days after Firefox 8 is out. Many/Most of third party vendors won't release updates before or shortly after the official public release of a new version of Firefox).

    For example, on the date of your original question, you must update the following third-party products who have installed 'Plug-ins' in your Firefox:

    • These would be covered in the lower part of my post 'not related to your question, but... "You may need to update some plug-ins '

      • Shockwave Flash 11.0 r1 (aka Adobe Flash) - you are at least one or more updates to date behind
      • Adobe PDF plugin for Firefox (Adobe Reader) - you are at least one or more updates behind
      • Next-generation Java plug-in 1.6.0_20 (Java) - you are 9 updates behind
    • The QuickTime Plugin - you must check with the QuickTime site
    • Foxit Reader plugin - you need to check with the Foxit website
    • npFFApi - part of ZoneAlarm Toolbar; You must check with their website. The current version is 10.1.065.000.

    If this answer solved your problem, please click 'Solved It' next to this response when connected to the forum.

  • Can ' transaction autonomous pragma ' called from exception block?

    CREATE OR REPLACE TRIGGER TRIG_EMP
    AFTER UPDATE
    ON EMP
    FOR EACH LINE

    DECLARE

    NUMBER OF THE CNT: = 0;

    BEGIN

    UPDATE EMP_bkp
    SET COMM = 999
    WHERE ENAME = 'SMITH ';.

    COMMIT; -It will generate the error that commit the cnt b use inside the trigger then wil code exception sommunications

    exception
    while others then
    declare
    PRAGMA AUTONOMOUS_TRANSACTION;
    Start
    commit;
    end;
    END;


    Why code gives error? cant I put PRAGMA AUTONOMOUS_TRANSACTION block of exception, even if I have the rolls in declare... begin... end of block.
    Could be considered to bear, but I m in delema why we cnt pragma 'use', in the exception block when an error themselves in code.as can call any proc, func via exception block then why don't we call pragma?

    A pragma shall apply to a set routine:
    -The anonymous PL/SQL blocks higher level (not nested)
    -Local, autonomous and packaged functions and procedures
    -A SQL object type methods
    -Database triggers

    But, even if you set a pragma autonomous_transaction in the exceptions, these commit will not commit the changes maded in the body of the trigger (because the idea of a stand-alone transaction, is independent).

    Perhaps (I'm not sure) you can try to trick Oracle write a function that do the validation.

    In any case, what you trying to do? There may be another way to achieve your goals

    I hope this helps.

    Kind regards
    Alfonso Vicente
    http / / www.logos.com.uy/el_blog_de_alfonso

  • my iphone is displayed must be blocked my id but ask or previous owner in activation password help

    turns out my iphone be locked in my id but ask previous owner using the activation password? can apple support contact me the former owner or solve this problem


    N ° locking activation is a measure of protection against theft.

    (144758)

  • I need to send a document that can be populated in the drop-down fields that I created.  After the document is completed and signed I need the form must be blocked new changes

    I am needing help with someone either able to complete and sign a form in Reader I created in Adobe Acrobat Pro XI.  After that the document is a sign I need to be locked to new changes.  Can someone please

    Hi Suzette.

    Once the document is digitally signed it will no more allow changes.

    You can view the solution mentioned in the thread: Re: convert editable PDF read-only when the Envoy in an email - JavaScript

    Kind regards

    Rave

  • execute immediate delivery when calling a plsql block procedure

    Hi all

    I have the following simple code, my immediate execution does not work (I am pasting the below error as well)

    CREATE OR REPLACE PROCEDURE CALL_RAHUL_PROCEDURES
    AS
    strng varchar2 (1000);

    BEGIN
    I'm in (select proc_name, flag, the rahul_procedures by id order id)
    loop
    If (i.flag = 'Y')
    then
    strng: = 'exec'. i.proc_name |' ("rahul")';
    dbms_output.put_line (strng);
    run immediately strng;
    end if;
    end loop;

    END CALL_RAHUL_PROCEDURES;

    --------------------------------------------------

    Error:

    Connect to the INQDWD database.
    ORA-00900: invalid SQL statement
    ORA-06512: at "ETLADMIN. CALL_RAHUL_PROCEDURES', line 17
    ORA-06512: at line 2
    exec ('rahul') RAHUL_HELLO_WORLD2;
    Process is complete.
    Disconnection from the INQDWD database.

    ----------------------------------------------------
    data in the rahul_procedures table:
    Proc_name flag Id
    RAHUL_HELLO_WORLD 1 N
    RAHUL_HELLO_WORLD2 Y 2
    RAHUL_HELLO_WORLD N 3
    RAHUL_HELLO_WORLD3 N 4

    ----------------------------------------------------

    Help, please.

    Concerning
    Rahul

    Transform your dynamic string in an anonymous PL/SQL block:

    strng := 'begin '||i.proc_name||'(''rahul''); end;';
    
  • Rules of ISDN GW 3241

    Hi all

    I have set up next week an ISDN gw 3241.  I've done a few readig on it (the user guide and other cisco docs).

    In my implementation we hane one ISDN gw with 1 E1 (several DID).  several points of video endpoints (VEP) will use this ISDN gw.

    All IP VEP are registed to the VCS.

    I want to set it up this way:

    IP for ISDN

    No matter what IP VEP, when calling IE 88XXXXXXX (88 is the prefix of video isdn gw), the call will be routed to the ISDN GW.

    ISDN to IP

    If the remote call of VEP ISDN GW number + 44335xxxx01, call get routed to IP VEP1

    If the remote call of VEP ISDN GW number + 44335xxxx02, call get routed to IP VEP2

    If the remote call of VEP ISDN GW number + 44335xxxx03, call get routed to IP VEP3

    If another number in this range is this is to say composed + 3245xxxx06, appeal to be rejected.

    Can someone share some shots of a configuration of ISDN gw with commentary and similar rules? Thanks in advance.

    Kind regards

    Hi friend

    With regard to the fraud free, I usually use a simple methodology that brings a security level pleasant without requiring a complex configuration. CPL is a nice option too, but it's too complex in some environment, and it is difficult to manage and troubleshoot in my opinion.

    Normally I restrict access to the ISDN gateway by only search rules. Try this:

    1. Let's say your code access to the PSTN is 9. If your end points would call a PSTN number dial 9 + number.
    2. Let's say that your ISDN gateway is to register the prefix 9 for VCS, so that when you dial 9XXXX the call is routed to the ISDN gateway that is registered in the local area of VCS
    3. Create a rule to search specific to ISDN calls, see example below, examine the marks:

    Please, follow all the instructions, I mentioned above, it is so important.

    If you have several access codes to the PSTN, you can create several rules of research as a result of this procedure, or you can use a regex to sum up the roads. For example, let's say you have 99, 98 and 97 as codes PSTN, your template string may be (99 | 98 | 97) \d*. This route matches any number including the prefix is 97 or 98 or 99.

    Another important consideration is, if you have PSTN access codes (not having not makes no sense), you need to design a numbering plan that avoidsmismatch between your access codes to the PSTN and your alias and routes. It is extremely important! For example, the suggestion that I placed above, you should not have any endpoint whose alias begins in 9 , because it would result in a conflict with your ISDN search rules.

    Prior to performing any configuration, save time for thinking and planning. I also suggest make you several test after the implementation of your ISDN integration with free fraud prevention.

    I hope that this is useful.

    Best regards

    Paulo Souza

    Please note the answers and mark it as "answered" as appropriate.

  • [question] what is the ports to use ISDN G/W?

    Hello. I am a newbie of telepresence area.

    I face to configure an ISDN G/W befind the firewall.

    To connect to other devices, I need to know which ports are using.

    I searched for information through Google and CISCO Web page, but I couldn't know.

    I hope that someone knows about the ports ISDN G/W. help, please...

    Thank you.

    You should mention this kind of gateway that you use, the better would be to also mention the version of the software.

    Also include some info from your deploymet.

    For the old codian procucts (like 3241/8321 ISDN GW), have a look here:

    http://www.Cisco.com/en/us/docs/Telepresence/infrastructure/articles/conferencing_products_conferenceme_ports_used_kb_3.shtml

    SIP is not currently supported, but I read somewhere here that it will come as well.

    It depends somewhat on your deployment which ports must be open and which should be blocked.

    Be cautious when you deploy an ISDN GW with connectivity to the public ISDN network

    as an open ISDN GW can cause unwanted / fraud calls that can generate a large number of costs.

    Better is to have a strict plan of numbering on the ISDN GW itself and also to block calls via a control call (vcs/cucm).

  • How to set up a '0' prior to call for outside calls (CCM 6.2.1)

    Community salvation.

    I think that this issue could be very easy to be decided by the experts of the calls voice cisco. What are the steps required to configure all the internal components of the phones that they must dial '0' to get an outside/international appeal of prior work? Is it a matter of templates for itinerary?

    Thanks in advance.

    Kind regards.

    Hello

    Yes, it is a RP "template routing." I hope to share with us your topology what your CUCM & gateway type (MGCP & H323). In any case regarding steps e, please find the below: -.

    1-configuration of your gateway that will be responsible for tree calls.on incoming and outgoing CUCM gateway device - select type.

    RG 2-group to configure or channel that will include your gateway recorded. CUCM call routing-road/hunting-lines group and assign your gateway listed

    3 - RL set which includes your RG that configured in step 2. Routing-road/hunting-other calls list, then assign the RG.

    3-model RP to configure or channel. for example

    0.161xxxxxxx for mobile

    0.00!                 for international

    At the partiton award

    B - RL that configured in step 3

    C - on the bottom, discard numbers "predot."

    Test; user dials a number that fits the RPS following 0.161xxxxxxx & 0.00!  the calls will go.

    Thank you

    Please note all relevant information

Maybe you are looking for