Configuring SIP Snooping SIP Snooping Configuration Guidelines
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 14-8
SIP Snooping Configuration Guidelines
This section describes how to use OmniSwitch Command Line Interface (CLI) commands to configure
SIP Snooping on a switch. Consider the following guidelines when configuring SIP Snooping entities:
Configuring Edge Port
SIP snooping requires that the uplink ports are configured as non-edge port. An edge port is a port on
which the SIP user agent is connected. A non-edge port is the uplink port on which no SIP user agent is
connected but requires SIP snooping. All AOS features available for an edge port are supported with SIP
snooping.
By default, the edge and non-edge port modes are implicitly based on LLDP.
• A port that learns a LLDP remote agent advertising the “switch/router” capability is considered a non-
edge port.
• A port that does not learn a LLDP remote agent advertising the “switch/router” capability is considered
an edge port. A port can be forced to the edge or non-edge mode.
To configure the force-edge/force-non-edge, use the command as follows.
-> sip-snooping port 1/1/5-6 mode force-edge
-> sip-snooping port 1/1/10 mode force-non-edge
On the edge switch, it is recommended to disable auto phone with the qos no phones command. For
example
-> qos no phones
Set all edge ports, including network edge ports to the un-trusted mode. Also ensure uplink port and all the
traversing ports to other SIP endpoint are in trust mode.
Configuring Trusted SIP Server
By default, any SIP server is trusted. The SIP messages are trusted regardless of the origin (e.g., source IP
address) or destination (e.g., destination IP address) of the SIP message.
The SIP snooping feature allows the configuration of trusted SIP servers. This restricts the SIP snooping
functions to only a list of trusted server IP address.
Up to 8 trusted addresses can be configured as trusted SIP server. For configuring the trusted SIP server,
use the command
-> sip-snooping trusted-server 192.168.0.1
All SIP based calls using other than configured trusted call server will not be subject to the configured SIP
QOS treatment
To Next Page
Loading...
Need help?
General
