COR - block internal calls on CME

Answered Question
May 16th, 2010
User Badges:

Hi expert...


is there anyway to block internal calls on CME?


for example, RouterA extensions 1000,1001 and RouterB extensions 2000,2001.. I want to restrict so 1000 wont be able to call 2000, however 1000 can call 2001


I tried to configure like below, however, I still can call 2000 from 1000

RouterA


dial-peer cor custom
name 2000


dial-peer call list call2000
member 2000


dial-peer voice 2000 voip
corlist outgoing call2000
destination-pattern 2000
session target ipv4:10.0.0.2
codec g711ulaw


dial-peer voice 2001 voip
destination-pattern 2000
session target ipv4:10.0.0.2
codec g711ulaw


ephone-dn 1
number 1000


ephone-dn 2
number 1001
corlist incoming call2000


Thanks in advance

Correct Answer by Abu Hadee about 7 years 1 week ago

Hi Torrence,


COR list to work, you need to have both incoming and outgoing corlist on dialpeers.


Now, since ephone-dn 1 (for ext 1000) doesn't have any cor list, it can dial all the other dial-peers


Correct configuration will be like this



dial-peer cor custom

  name block-pt

  name permit-pt


dial-peer cor list block2000

  member block-pt


dial-peer cor list permit2000

member permit-pt


dial-peer voice 2000 voip
corlist outgoing permit2000
destination-pattern  2000
session target ipv4:10.0.0.2
codec g711ulaw


dial-peer  voice 2001 voip
destination-pattern 2000
session target  ipv4:10.0.0.2
codec g711ulaw


ephone-dn 1
number 1000

corlist incoming block2000


ephone-dn 2
number  1001



with this configuration, when 1000 dials 2000, router will check incoming cor list block2000 with outgoing cor list permit2000. Since incoming is not subnet of outgoing call fails.

When 1000 dials 2001. Out going dial-peer does not have any cor list. So, not restriction.


for 1001, no incoming cor list, so outgoing cor list doesn't apply


Hope this helps


thanks

-abu

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Abu Hadee Sun, 05/16/2010 - 22:32
User Badges:
  • Silver, 250 points or more

Hi Torrence,


COR list to work, you need to have both incoming and outgoing corlist on dialpeers.


Now, since ephone-dn 1 (for ext 1000) doesn't have any cor list, it can dial all the other dial-peers


Correct configuration will be like this



dial-peer cor custom

  name block-pt

  name permit-pt


dial-peer cor list block2000

  member block-pt


dial-peer cor list permit2000

member permit-pt


dial-peer voice 2000 voip
corlist outgoing permit2000
destination-pattern  2000
session target ipv4:10.0.0.2
codec g711ulaw


dial-peer  voice 2001 voip
destination-pattern 2000
session target  ipv4:10.0.0.2
codec g711ulaw


ephone-dn 1
number 1000

corlist incoming block2000


ephone-dn 2
number  1001



with this configuration, when 1000 dials 2000, router will check incoming cor list block2000 with outgoing cor list permit2000. Since incoming is not subnet of outgoing call fails.

When 1000 dials 2001. Out going dial-peer does not have any cor list. So, not restriction.


for 1001, no incoming cor list, so outgoing cor list doesn't apply


Hope this helps


thanks

-abu

Actions

This Discussion