FAC in CME 9.1

[adamgibs7]

Hello ,

I need a help in configuring FAC for international calls in CME 9.1, I m following the below link but i am confused for the configuration text highlighted below.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucme/admin/configuration/guide/cmeadm/cmefac.html

voice lpcor enable
voice lpcor custom
group 11 LocalUser
group 12 AnalogPhone
!
voice lpcor policy LocalUser
service fac
accept LocalUser fac
accept AnalogPhone fac
!
voice lpcor policy AnalogPhone
service fac
accept LocalUser fac
accept AnalogPhone fac
!
application
package auth
param passwd-prompt flash:en_bacd_welcome.au -----from where i will get this files ??
param passwd 54321
param user-prompt flash:en_bacd_enter_dest.au-----from where i will get this files ???
param term-digit #
param abort-digit *
param max-digits 32

thanks

[Anas Abueideh]

Hi,

the FAC in CME is a bit tricky.

FAC call flow in CME like follow

1) IP Phone user dials a particular pattern (international destination, for example)
2) If this destination is enabled for FAC, the user will hear a voice prompt asking for an Account number and PIN
3) The user enters the Account/PIN pair. If valid, the call proceeds, if not the call is dropped.

- If the authentication fails after three retries, the call drops without notification.

Configuration Steps:

1- upload "enter_account.au" and "enter_pin.au" to the flash files. you can record these files.

2- Enter the following commands in configuration mode (in this example the Account and PIN are three digits long).  This forces a user id and pid length, but it not required:

application                          

 service clid_authen_collect         

  param uid-len 3              *length id 3 characters (can be user ext)

  param pin-len 3              *length pin 3 characters 

3- Create usernames for authentication. Notice that the username/password will represent the Account and PIN that the caller will have to dial to be successfully authenticated. You can create multiple usernames and then hand those out to select personnel that will be allowed to place premium calls. In this example both Account and PIN are three digits long.

aaa new-model

aaa authentication login h323 local 

aaa authorization exec h323 local and network authorization 

aaa authorization network h323 local for h323

username 107 password 123

username 107 autocommand exit

4- Create dial-peer cor

voice lpcor custom
 group 1 manager
 group 2 users
!
voice lpcor policy manager
 service fac
 accept manager fac
 accept users fac

dial-peer cor custom
 name international
  name fac-int
 name user-fac

dial-peer cor list int
 member international
!
dial-peer cor list fac-int
 member fac-int
!
dial-peer cor list user-fac
 member user-fac

5- Create a dial-peer for each pattern that you want cover using this application.

dial-peer voice 400 voip
 corlist incoming fac-int
 corlist outgoing user-fac
 service clid_authen_collect
 destination-pattern 900T
 session target ipv4:CME address
 incoming called-number 900T
 dtmf-relay h245-alphanumeric
 codec g711ulaw
 no vad

dial-peer voice 69 pots
 corlist outgoing fac-int
 translation-profile outgoing DiscardDigit9
 preference 3
 destination-pattern 900T
 port 0/0/0
 forward-digits all
 no sip-register
!

6- assign the proper cor list to match voip dial-peer for FAC

HTH

Anas

don't forget to rate the helpful posts

[adamgibs7]

thanks for the reply Anas,

Point 5,6 i didnt understood can you elaborate more.

i have recorded the file and tried to convert in .au format and successfully converted.

 i want to apply on only international calls as dial-peer shown below  so what will be the lpcor ??

dial-peer voice 2 pots
 corlist outgoing call-international
 description International calling
 destination-pattern 9T
 direct-inward-dial
 port 0/0/0:15

[Anas Abueideh]

Hi,

the idea of point 5 and 6 simply like the below:

you have international dial-peer and you need to restrict the access to this dial-peer.

the call flow like the below

users dial international number ==> it matches FAC voip Dial-peer ==> prompt for authentication ==> successful authentication ==> it matches pots dial-peer and proceed.

to achieve that we use cor list

1- user digit has FAC incoming corlist divert you to FAC voip dialpeer

2- Successful authentication

3- FAC dialpeer corlist incoming divery the call to international pots dialpeer

HTH

Anas

don't forget to rate the helpful posts

[adamgibs7]

Dear Anas,

attached is the cme configuration.

really confused with mine configuration and u as an expert suggestion,can you help merge the additional configuration of FAC in my existing configuration so that it will be clear view to me
 

[Anas Abueideh]

Hi,

kindly find the below config

application                          

 service clid_authen_collect         
  param uid-len 3             
  param pin-len 3

aaa new-model
aaa authentication login h323 local 
aaa authorization exec h323 local and network authorization 
aaa authorization network h323 local for h323
username 211 password 123
username 211 autocommand exit

voice lpcor custom
 group 1 manager
 group 2 users
!
voice lpcor policy manager
 service fac
 accept manager fac
 accept users fac

dial-peer cor custom
  name fac-int
  name user-fac

dial-peer cor list fac-int
 member fac-int
!
dial-peer cor list user-fac
 member user-fac

dial-peer cor list user-international
 member internal
 member emergency
 member toll-free
 member user-fac
 member national

dial-peer voice 20 voip
 corlist incoming fac-int
 corlist outgoing user-fac
 service clid_authen_collect
 description International calling
 destination-pattern 9T
session target ipv4:192.168.4.2
incoming called-number 9T
 dtmf-relay h245-alphanumeric
 codec g711ulaw
 no vad
!

dial-peer voice 2 pots
 corlist outgoing fac-int
 description International calling
 destination-pattern 9T
 direct-inward-dial
 port 0/0/0:15
!

HTH

Anas

don't forget to rate the helpful posts

[anthonio1]

Hello,

Thank you for the post. It has really helped me understand how FAC works. For me, I want to restrict users from making external calls unless they put the unique code given to them. My main aim is to be able to give accurate billing statements. However, I'm not sure about the Manager group being created. I assume any user whose not authorized to input a user and pass will not be prompted? Please take a look at my configs and advice

voice ipcor custom
group 1 users
!
voice ipcor policy manager
service fac
accept users fac
!
dial-peer cor custom
name fac-incoming
name user-fac
!
dial-peer cor list fac-incoming
member fac-incoming
!
dial-peer cor list user-fac
member user-fac
!
dial-peer voice 110 voip
*corlist incoming fac-incoming
*corlist outgoing user-fac
*service clid_authen_collect
description OUTBOUND CALLS via MPLS
translation-profile outgoing OUTGOING_CALLS
destination-pattern 9T
redirect ip2ip
session protocol sipv2
session target ipv4:10.66.56.138
voice-class codec 2
dtmf-relay rtp-nte
ip qos dscp cs5 media
ip qos dscp cs5 signaling
no vad

Thanks.