Partion Restriction

[Turki.A.Baqatada]

Hi

I have question regarding partitions

I have 2 Partitions

1 - for managers no one call them

2- for employees everyone call them

my question that this restriction for all extension inside CUCM only or also for calls coming from PSTN 

if the restriction for only extension inside CUCM so how i can block calls coming from outside

[Vaijanath Sonvane]

Hi @Turki.A.Baqatada ,

The restriction depends on what Calling Search Space (CCS) is applied on PSTN Gateway or SIP Trunk and which Partitions (PTs) are included in this CSS. 

For example:

1. If CSS applied on PSTN Gateway or SIP Trunk includes PTs for Employees and Managers then outside users can reach both employees and managers.

2. If CSS applied on PSTN Gateway or SIP Trunk includes PT for Employees then outside users can reach only employees.

If you are looking to restrict direct access to Managers then I would recommend to implement CUCM Manager Assistant feature:

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/14/cucm_b_feature-configuration-guide-for-cisco14su1/cucm_mp_m1ec4cda_00_manager-assistant-12-0.html 

[Turki.A.Baqatada]

Yes I know that restriction is all  in cabling search space

And the manager partition is not in included in any css

Also no one can call this partion

And I don't have issue with this 

My confusion that if manager partition is not on any of css, also people from outside can't call 

Becouse as I know if I called from home I should not be  limited as I'm not part of this network

If I am right then how I  limit people from outside to call people in this partion 

Is it from gateway or expressway 

It is really confused me 

Thanks in advance 

[Roger Kallberg · Accepted solution]

The gateway or trunk if you use SIP as the control protocol for your gateway has an inbound CSS. If the manager PT is not in that CSS calls from PSTN will not reach these directory numbers.

If you by Expressway mean MRA then the restriction is on the device that registered, ie it is the same as if the device register on-prem. The registration through MRA does not have anything to with any restrictions for calls.

If it is a B2B Expressway setup then it would have a SIP trunk in CM, so it’s the same as any other gateway/trunk.

[Nithin Eluvathingal · Accepted solution]

To block incoming calls to a particular partition, assign  CSS on voice gateway or Trunk which has no access to this partition. 

Below screenshot  is from my lab CUCM. For outside only extension  in internal partition  are reachable. Other partitions are not reachable from outside.

[Turki.A.Baqatada]

Thanks a lot

I got it now so all partition in CSS will be reachable from outside which is css_internal

[Roger Kallberg]

As others have pointed out partitions as such do not have any restrictions, it is the content of the calling search space that makes up the restriction or actually it is what is allowed. That is as long as you don't mix in blocking translation patterns in partitions into the setup. Then the content in a specific PT in a CSS might actually block calls and not allow it as it would normally do. But let's not go in on that edge type of setup for now.

A PT can be seen as an old school phone book, any phone number in the book is dial-able. If you'd want to extend the allowed called numbers you'd do that by adding another book. You'll have to store these books somewhere and that's where CSS comes in. You could see these as a shelf in a bookcase. You put the book on a shelf in the bookcase and any number within any book on the shelf is dial-able. Any number not in a book you have on your shelf is not dial-able. It's as simple as that.