Forced Authorization Code and Partitions Behaviour

[nascoentr]

Hi there,

We have three departments in our organization that have managers that need access to mobile's but "with different codes" to be able to access dialing mobile numbers...

I did the following and am noticing a strange behaviour, any indications as to why this is happening would be highly appreciated:

STEP 1:

I created the following Forced Authorization Codes:

1 - Mobile Access Sales - 1111 (Authorization Level 10)

2 - Mobile Access Mrktg - 2222 (Authorization Level 11)

3 - Mobile Access Tech -  3333 (Authorization Level 12)

STEP 2:

I created the following router patterns for mobile numbers and assinged them to the appropriate partitions listed below:

3 - 905xxxxxxxx - Mobile Sales (this contains the Forced Authorization Code for "Mobile Access Sales" with code 1111 and Level 10)

3 - 905xxxxxxxx - Mobile Mrktg (this contains the Forced Authorization Code for "Mobile Access Mrktg" with code 2222 and Level 11)

3 - 905xxxxxxxx - Mobile Tech (this contains the Forced Authorization Code for "Mobile Access Tech" with code 3333 and Level 12)

Now my objective is that if

- the Sales Manager Calls a mobile number he should only be able to dial mobile numbers with the code 1111 and not with 2222 and 3333

- the Mrktg Manager Calls a mobile number he should only be able to dial mobile numbers with the code 2222 and not with 1111 and 3333

- the Tech Manager Calls a mobile number he should only be able to dial mobile numbers with the code 3333 and not with 1111 and 2222

Behaviour Observed

- the Tech Manager is only able to call mobile numbers with the code 3333 and not with 1111 and 2222, this is working perfect, he has FAC Level 12

- the Mrktg Manager is able to call mobile numbers with the code 2222 & 3333 and not with 1111,  he has FAC Level 11 and i'm assuminig since he has a FAC Level of 11 he is able to call all FAC numbers with a level of 11 and above

- The Sales Manager is able to call mobile numbers with all codes 1111, 2222, 3333, he has a FAC level of 10 and i'm assuming he is able to call all FAC numbers with a level of 10 and above.

Are my assumptions right? and what can i do to make things work the way they should, i would appreciate if someone were to explain how the FAC's associated with route patterns associated with partitions and CSS actually should behave.

thanks a million.

[iptuser55 · Accepted solution]

Perhaps you are looking at it the wrong way. FAC is assigned to anyone and anyone can

use it if they they know the FAC code

You create FAC codes of

101 for level 10

201 level 11

then you create a route patterns of say

9.01!  ( National calls) and assign a minimum FAC level of 10

9.00!  ( International)                                                        11

9.2!    (Local) no FAC Code

To access the route pattern 9.01! national you need to know a FAC code with at least a level of 10 to make a call, to access 9.00! you need to enter a FAC code of 11. These codes are not assigned to users but anyone can enter them if they know them. FAC codes are used as an authorized level as in to stop some users making certain calls while others are allowed e.g  All users have access to local calls but say Middle managers can access national calls and local as they know the FAC code 101 only but Senior managers can also access International as they know FAC 201

You have a couple of different ways of doing this - complicated  FAC or easy CMC

FAC

If you want to restrict mobile calls unless a user enters a FAC code you and you want to identify a group of users then you need to create 3 x Partitions called "PT_Mobile PSTN -Sales" , "PT_Mobile PSTN -Mrktg, "PT_Mobile PSTN -Tech" and create 3 x separate route patterns for each group and with a mobile prefix

1.  905xxxxxxxx - PT-Mobile PSTN-Sales

3 - 905xxxxxxxx - PT_Mobile PSTN-Mrktg

3 - 905xxxxxxxx - PT_Mobile PSTN-Tech

Change the general Mobile route pattern to block e.g 905!

Then you need to copy your existing CSS you use for PSTN access and create a new one for each group Sales, Tech and Mrktg with the new partition you created in each one and assign them to each group, CSS_PSTN_SALE, CSS_PSTN_TECH etc now each CSS has two PSTN partitions- General 9.!  and the 905xxxxxxxx  so sales device can only use the route pattern 9.! and their own 905xxxxxxxx,Tech can access the general 9.! and only their 905xxxxxxxx.

So now when a Sales person dials any number except a mobile and they can dial out correctly , they dial a mobile without a FAC they get blocked due lack of FAC code and the "blocked" route pattern of 905! To dial a mobile they have to enter the FAC code associated to their mobile route pattern,this repeated the same with the other groups

CMC- much easier

keep the configuration the same  but create 3 x Client Matter codes and give them to each group. Now on the route pattern for mobile 905xxxxxxxx tick the box which states "Require Client Matter codes"

Each group will now need to enter the code to make a mobile call, the generic route pattern is as before without the tick box so users can make calls

CMC used to work differently in CCM 4.x in that you only had to configure the number of digits each CMC code was so say you configured CMC so the number of digits entered had to be 10 a user could enter any 10 digit number as CCM only checked the digit length NOT the actual digits as in the case of FAC but reading it now on CUCM6.X it seems it works in a similar way as FAC in that it also checks the digits  entered

The main difference between FAC and CMC is that with CMC , it displays on the handset screen "Enter CMC" while with FAC it is just a audible tone

In both cases the FAC, CMC show up in the CDR records

Hopefully that makes sense

[nascoentr]

thanks iptuser55, i figured out the problem and your suggestions did help....