How to block outgoing calls in just one extension on CME

[tgut]

Hello Everyone,

I am trying to configure a CME v8.6

Everything works fine, but i got a requeriment;

i need to block calls using a code in just one phone extension. All calls in the rest of phones must be free

Anyone has configured something like that?

Thanks in Advance

Regards

Rolando Gutierrez

[Ayodeji Okanlawon]

You can use Class of restriction to achieve this...Here is the link on how to configure this

http://www.cisco.com/en/US/tech/tk652/tk90/technologies_configuration_example09186a008019d649.shtml

Please rate all useful posts

"opportunity is a haughty goddess who waste no time with those who are unprepared"

[tgut]

Thanks aokanlawon,

yes, i am sure that cor list would be fine, but what the boss is asking, is a secret code, what i mean is, when the people try to make a call, prompt for a code, if isn't the correct, then drop the call...

I was reading and trying to configure FAC. but is not working...

aaa new-model

!

aaa authentication login default local

aaa authentication login h323 local

aaa authorization exec h323 local

aaa authorization network h323 local

!

voice lpcor enable

voice lpcor custom

group 1 garita

group 2 general

!

voice lpcor policy general

service fac

accept general fac

!

application

package auth

  param max-retries 0

  param term-digit #

  param passwd 12345

  param abort-digit *

  param max-digits 32

!

voice-port 0/1/0:15

lpcor outgoing general

translation-profile incoming 91-IN

!

ephone  6

lpcor type local

lpcor incoming garita

lpcor outgoing garita

device-security-mode none

mac-address abc.def.000.000

ephone-template 1

button  1:5

I think something i'm missing, but is the first time trying...

Somebody can tell me what is wrong??

Thanks in Advance

[tgut]

TTTTT#sh voice lpcor policy

voice lpcor policy general (group 2):

  service fac is enabled

  ( reject     ) garita (group 1)

  ( accept fac ) general (group 2)

the policy garita would ask for the code? and

the policty general would be free?

It is something like that?

[Ayodeji Okanlawon · Accepted solution]

Please refer to this thread...The correct configuration ofr lpcor is there

https://supportforums.cisco.com/message/3780229#3780229

Please rate all useful posts

"opportunity is a haughty goddess who waste no time with those who are unprepared"

[tgut]

So many thanks aokanlawon

Here it is my final config, it is working ok!

Just In case somebody could need it!

aaa new-model

!

aaa authentication login default local

aaa authentication login h323 local

aaa authorization exec h323 local

aaa authorization network h323 local

!

aaa session-id common

!

voice lpcor enable

voice lpcor call-block cause invalid-number

voice lpcor custom

group 11 LocalUser

group 12 AnalogPhone

!

voice lpcor policy LocalUser

service fac

accept LocalUser fac

accept AnalogPhone fac

!

voice lpcor policy AnalogPhone

service fac

accept LocalUser fac

accept AnalogPhone fac

!

application

package auth

  param max-retries 2

  param passwd-prompt flash:pass.au

  param abort-digit *

  param passwd 12345

  param term-digit #

  param user-prompt flash:user.au

  param max-digits 32

!

username 839382 password 0 9039

!

gw-accounting aaa

!

voice-port 0/1/0:15

lpcor incoming AnalogPhone

lpcor outgoing AnalogPhone

!

ephone  6

lpcor type local

lpcor incoming LocalUser

lpcor outgoing LocalUser

device-security-mode none

description "XXXXXX"

mac-address aaaa.bbbb.cccc

type X

button  1:X

!

end

Cheers!

[paolo bevilacqua]

You can use after-hours block with login PIN override.

[tgut]

Thanks Paolo,

i tried it too, but what i need is just block one extension

Regards,

[paolo bevilacqua]

tonoguate wrote:
Thanks Paolo,
i tried it too, but what i need is just block one extension
Regards,

yes, you would configure all the other as exempt. There is more than one way to do what you want.