voice source-group

[tolya]

I want to limit calls to my gateway from the remote gateway using his IP address.

I want to use voice source-group. For example:

voice source-group test

access-list 1

carrier-id source testid

access-list 1 permit 95.100.5.5

dial-peer voice 1234 voip

max-conn 10

carrier-id source testid

Will it work? I can't check it, because I have all gateways in productive network...

[kyaw_thu]

huh ? Your question is not really clear..

If you want to limit number of calls to specific IP, you just limit the calls on the respective dial-peer will do. It apply to pots dial-peer as well.

[tolya]

Okey, let me clarify the situation.

I've gateway, which is terminating the traffic from different remote gateways. They send the same prefix, so I have only 1 dial-peer for them. If I put max-conn in this dial-peer it will limit all calls coming to my gateway. I want to limit calls only for 1 specific IP.

So, I can differentiate the calls only using the remote IP. How I can do it? Will this configuration work?

[abdul ilyas]

I think, you will have to create one more dial-peer with a different prefix specifically for this carrier and limit calls in there.

[Maxim Denisov]

Hi Tolya,

You can do it this way but I recommend you configure dial-peers to all your gateways.

If you still want using voice source groups you should configure non intersecting ACLs. Keep in mind that default "deny any" rule not working here.

Sent from Cisco Technical Support iPad App

[ADAM CRISP]

Hello.

You are correct in your assertion to use source groups.

Source groups are processed before dial-peers.

You should consider building a source-group for your source and use this feature to prepend a local prefix. You can then build an inbound dial-peer matching the prefix and treat the calls as appropriate.

Beware. If you have any source group configured on the router, and you have a source that is not matched by a source-group then calls will be rejected with a 500 internal server error.

For an illustration - see feature two here: http://www.voip.co.uk/ciscoccatoolsecurity/

Adam