VCS Expressway - Possible to use CPL script to block by incoming IP?

[Darren Lapierre]

Hello,

Is it possible to control the incoming call to a VCS Expressway from a known IP address? I know I can block auth/un-auth traffic as well as source alias, but I want to allow incoming calls from only a specific gatekeeper(s).

Is this possible? I have looked through the CPL section of the admin guide and I don't see anything pretaining to IP resolution, just aliases.

D.

[Paulo Souza · Accepted solution]

Hi Darren,

I think you can use CPL for this matter, however, as you need to block traffic based upon a specific source ip address, I suggest you to use the embedded firewall of VCS Exoressway, this reasource is available in the latest release of VCS, you can create firewall rules in VCS in order to allow or deny certain traffic.

Regards

Paulo Souza

Was my response helpful? Please rate useful replies and remember to mark any solved questions as "answered".

[Paulo Souza · Accepted solution]

Take a look at the administrator guide, starting on page 62:

http://www.cisco.com/en/US/docs/telepresence/infrastructure/vcs/admin_guide/Cisco_VCS_Administrator_Guide_X7-2.pdf

I hope this help.

Paulo Souza

Was my response helpful? Please rate useful replies and remember to mark any solved questions as "answered".

[Darren Lapierre]

Yeah, that is what I was thinking of doing if the CPL did not pan out.

I will try this, as it might just be simpler for the client to manage then editing a local cpl script.

Thanks!

[Paulo Souza]

Yeah! CPL is really nice, but it is hard to manage and operate, so, unless you know much about CPL or CPL is really required, I suggest anybody to avoid it if possible and try another methods. In your case, internal firewall is the best option.

Regards

Paulo Souza

Was my response helpful? Please rate useful replies and remember to mark any solved questions as "answered".