Route call based on source IP address

Hello Guys,
Is there a way to route calls based on source IP address?
I want to redirect calls to specific queues based on the ip of the phone who's starting it.
Any ideas?
Thanks in advance.
Filipe Leite

Hi Filipe
I'm assuming here that you are using CallManager rather than CME?
One option might be to use the 'device mobility' feature to assign a specific CSS to devices based on their IP subnet. That CSS could have the appropriate partitions to route to a seperate trigger that directs calls to a separate CSQ.
Of course, whether you can do this depends on whether it would be appropriate to override the device CSS in this way.
Aaron

Similar Messages

Route calls based on extensions

Hi guys
First of all, I not have a good Englis so I hope you undertand me.
I would like to know if there is a way to route calls based on the caller id. This is, for instance, I have extensions 5xxx and 88xx and now they are going trough E1 0/0/1, I want to move this, and only this extension go out to pstn through teh E1 0/0/0. It is possible to do someting like this, in such case, how?
Best Regards

Hi.
You can also use the search function for your query because this topic has been touched many times here
Eg. Use caller ID route based as search keyword and you'll find the solution
HTH
Regards
Carlo
Please rate all helpful posts
"The more you help the more you learn"

Load balancing based on source IP address

Hi,
I configured a CSS to balance the load depending on source IP address to suppport a application feature in the server.
We have two firewalls and behind we have different users. We have also two servers behind the CSS.
Firewalls perform NAT with a unique outside IP address. So, for example, in these conditions the CSS balances requests coming from FW 1 to server 1 and requests coming from FW 2 to server 2. Is it correct this scenario?
Is it possible that requests coming from FW 1 could be forwarded to Server 2 and viceversa?
Could anyone answer me?
Thanks in advance.
Best regards.
Giuseppe.

Giuseppe,
it all depends on how you configured your CSS.
Did you use an ACL to force traffic from SRC1 to server1 and traffic from SRC2 to server2 ?
Or did you simply configure sticky based on source ip or a source ip hash loadbalancing ?
Except the ACL, all other methods do not guarantee that the traffic will be splitted in 2.
Gilles.

ACE load balance based on Source IP Address

Hi Cisco Support,
I have question related to Cisco ACE behavior in term to taking a decision based on source address
I currently have two servers sits behind ACE part of one server farm, these servers are load balanced via one VIP on ACE module and every things looks fine.
Now service owners want to replace these old servers with new hardware hence before the migration we need to make sure these new servers are working as required standard hence need to create a testing scenario for new servers along with old server. The problem is that number of third party partners are accessing existing servers by hitting VIP on ace and we can't engage all our partner to participate in this test therefore decided to engage only one partner to carry our test with us.
For that reason can we some how configure the ACE so when packet arrive on ACE from one test partner mentioned above, ACE send only that partner's traffic based on it's source address (define via class/policy map on ACE if possible) towards new servers in the existing server farm and not to the old server in the same server farm.
Thanks for your support

Hi,
Just to put some config sample that might help you to get this done.
First create the new rservers and include them under a new serverfarm (New-APP)/
serverfarm host Webfarm
rserver SVR1
    inservice
rserver SVR2
    inservice
serverfarm host New-APP
rserver New-1
    inservice
rserver New-2
    inservice
- Same VIP already working.
class-map match-all VIP-HTTP
2 match virtual-address 10.10.10.10 tcp eq www
- Create a new class that will include your partner's IP(s).
class-map type http loadbalance match-any 3rd-Party
2 match source-address 200.200.200.1 255.255.255.255
3 match source-address 200.200.200.10 255.255.255.255
Modify your current first-match policy to put the new class on top so that all the traffic matched by the statement above (IP) will be redirected to the new farm with the new APP, any other traffic that does not match the "rule" will be sent to the old serverfam with the old app.
policy-map type loadbalance first-match L7-SLB
class 3rd-Party
    serverfarm New-APP
class class-default
    serverfarm Webfarm
Since you already have LB working then this is it, nothing needs to be added under the multi-match policy nor interface.
HTH
Pablo

Redirect based on source IP address????

I have a site that I don't want our competitors to view! By
tracking code, I have managed to obtain their source IP addresses.
After looking around, there is a .php solution to my problem
but my host is not well suited to .php files (although it does some
processing).
My pages are in .shtml (to process css drop-down menus
correctly) and I understand that this attached code, if put at the
top of the page before anything else, will work.
I have managed to get one working
http://www.donbur.co.uk/gb/newindex.php
but am having difficulty getting this code to work elsewhere.
The problem is, when I try to put this code into either a
template or as an include, it won't process correctly or the page
won't render at all.
Do I have to use .php files or can I insert php script into
an .shtml document.
Getting really confused now.... HELP

Thanks for the constructive advice...
quote:
>After looking around, there is a .php solution to my
problem but my host is not well
>suited to .php files (although it does some processing).
What does this mean? Does your hosting plan include php
support or not?
You can't just put a php script into any page. It needs to be
a .php page or you need to reconfigure the server to parse other
pages for php. But if your hosting plan doesn't support php then it
won't work in any case.
My host is BT Internet and they claim not to process .php
files which is why our main .php site is hosted elsewhere; however,
it seems that, although it has difficulty (to clarify: doesn't
render) with main full scripts, it does seem to process simple
<?php echo commands for example.
It has been suggested on another forum that the .shtml files
are set to be recognised by .php in the cpanel but our host will
not do this...
Our competitors are not particularly smart or up-to-date and
this would have been reasonably effective; however, I bow to better
judgement and close this topic.

Re-direct based on source ip address

Dear all,
i wish to redirect url traffic to another server based on their ip address. We currently have sharepoint server and was hoping to utilise it facilities to redirect to another server. https://www.abc.com to
http://www.abc.com/def
we have iis7 runnin in the backgroup if that help.. Would iis be a better choice?
Thanks in advance..
N DHANRAJ

Hi Dhanraj,
I understand that you want to redirect the url from
https://www.abc.com to http://www.abc.com/def, you can try URL Rewrite rules to achieve this goal.
Here are some posts about this topic, you can take a look.
http://stackoverflow.com/questions/22182087/iis-rewrite-rule-to-redirect-specific-domain-url-to-different-url-on-same-domain
http://social.technet.microsoft.com/wiki/contents/articles/23074.sharepoint-2013-url-rewrite.aspx
Supportability of Rewrite and Redirects with SharePoint 2007/2010/2013
More about the IIS redirect, I would recommend you post in IIS forum below, there will be more experts assisting on this issue.
http://forums.iis.net/t/1153050.aspx?URL+Rewrite+for+SSL+redirection
Thanks
Daniel Yang
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Route Calls based on first 2 digits of customer Ref#

Hi,
I just want some help with an IVR script I am preparing.
The idea is to route calls to a different ICM script depending on the Ref# entered by the customer. Reference numbers are currently 11 digits long (I used Get Digit String to gather the Ref#).
- For References starting by 10, send to X script
- For References starting by 11 to 19, send to Y script
- For References starting by 2, send to Z script
1) What is the best way of identifying and routing the calls to the specified target as written above?.
2) Are there any good practices for these sort of tasks?
3) is there an specific functions I can use.
Following are the details of my site:
- Cisco CRS 4.5
- Cisco ICM 7.1
Thanks very much for your support
I am not really an UCCE developer, But I intend to learn as mich as I can
Regards

My personal choice is to put all the decision making in ICM, mostly because there's usually just one ICM script and multiple IVRs which need to be updated in order to make a change. That being said, here's a high level on how to do it. In the IVR you collect your reference number and pass it to ICM as an enterprice variable, lets say Peripheral Variable 1. In ICM you have an IF node which uses the following function if(left(PV1,2)="10", this looks at the two left most variables and checks if it is 10 or not. If it's 10 you can send it to one ICM script if it's not 10 then you have another IF node which checks if it's something else.
david

How to Route Calls based on priority

Hi,
We have ICM Version 7.2.5 running on our contact center setup along with CVP 7.0. Here we have some scenario as required by the customer:
For Ex.
We have two differnt skill group namely Custmoer care and Technical Support. We are getting call1 for cust care, call2 for cust care ,call3 for tec support and call4 cust care.In this case we need to serve call4 for before call3 were we have differnt scripts running for each skill group.
Kindly suggest your recommendations on the above and guide me to take it further.
Regards,
Sivakumar

You can lower the priority of calls in queue either by editing the settings of the queue node or placing a priority node after you queue the call. In your case you would lower the priority of calls in your tech support script. Default priority is 5, and lower numbers correspond to higher priorities, so you would change your tech support priority to 6 for example. Keep in mind if you lower the priority, those calls will always go to the back of the line behind higher priority calls. Careful you don't squeeze these callers out completely.

VRF selector using PBR or Source IP address

Could anyone can tell which is the better choice of VRF selector using PBR or Source IP address? From Cisco doc, VRF selection based on Source take advance over PBR. My feeling is that PBR may match more criterias than just match source IP address.
Thanks

I would personally use the "VRF selection based on source IP address" only where the "VRF selection using PBR" is not available since the latter is a superset of the former.
Hope this helps,

Route call base on where call came from

Would like to route calls based on the location they are calling from. Have three remote sites in same cluster. Would like to route calls from A & B to ACD server at remote site A, via A's gateway. A has a tie line trunk from gateway to ACD. Calls from C to go to external number via C's gateway. Have previously setup a route pattern for the internal XXXXX ext and all calls from A, B, and C went to ACD. But would like to route calls from C to external number.

Well, if currently xxxxx is a route pattern that is in the internal partition and points at the gateway at site A, I would put it into a new pt called 'acd' or something, and then make another xxxxx in another new pt 'gwyC', and adjust the CSS for devices at each location so that A&B have the 'acd' pt and C has the 'gwyc' pt, and everyone can still have internal pt and call each other without any confusion.
Mary Beth

How is NTP reply routed when requesting router uses loopback as source address

The Cisco NTP Best Practices White Paper and DISA STIGs recommend setting the NTP source address to a loopback interface (e.g. "ntp source loopback0").
But this only seems to work if the requesting (NTP client) router is the default gateway for the NTP server.
Specifically, the NTP server will attempt to reply to the requesting router's loopback-based source address (taken from the NTP request packet). Since that address will always be non-local from the perspective of the NTP server, the NTP server will encapsulate the reply in a Layer 2 frame addressed to its default gateway. If the gateway was the source of the original NTP request, that should work. But in most other situations that gateway won't know how to reach a loopback-based address, and will discard the reply.
I have verified this in tests with routers running both 12.4 and 15.1 releases (and NTP debugging enabled). When the NTP source is a loopback address, NTP replies never reach the requesting router. With the default NTP source address (i.e. based on the exit interface) everything works fine.
Obviously, you could employ workarounds, such as static routes or injecting loopback addresses into your routing protocols. But that seems uglier than leaving NTP source addresses at their defaults.
Why is this "best practice" so commonly advocated without mention of some significant caveats regarding routing? Am I missing something?
Thanks,
Mark

Michel:
Thanks for the response. Actually, I understand what kind of routing workarounds could allow NTP to function in spite of this "best practice." But I am mystified as to why a Cisco "NTP best practice" paper (http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a0080117070.shtml) and various security policies would call for setting a loopback address as the NTP source when that practice will often cause more problems than it solves.
The stability of a loopback address is nice when that address is used to uniquely identify the platform for a routing protocol or syslog. A loopback-based source address can also simplify ACL management, since that address won't change if an interface or link failure forces the router to send traffic from a different interface. But I keep seeing security configuration guides/policies that call for also using a loopback address as the source for two-way protocols, such as FTP and NTP. That just doesn't make sense to me when you balance the routing implications against the limited security benefits (stable device identification, simplified ACL maintenance, and obfuscation of device addresses).
I was hoping to learn that some obscure command might allow me to control which NTP exchanges use the loopback-based source address. For example, the loopback source address would work fine on outgoing NTP broadcasts (and probably in replies from NTP servers). But I would prefer that NTP client requests use a source address based on the exit interface. That way replies can be routed back to the client without cluttering up routing tables with routes to loopback addresses.
So far, it looks like I'll need to chalk this up to poor coordination between the network security and network administration communities.
Thanks again,
Mark

Redirecting traffic based on source address on CSS11503

Hi all,
I need to redirect HTTP traffic originating from a specific range of IPs to a specific farm of HTTP servers. More specifically, I need request comming to CSS's outside VIP address on port 80/tcp to be redirected to the HTTP farm (2 boxes with RFC1918 addresses) on port 30084/tcp.
The trick is that this rule should only apply for a certain range of source IP addresses. The rest should be content switched normally. I.e. 80/tcp -> 80/tcp, etc.
Is this possible with ACL or somthing similar?
I'm running WebNS 7.20 on a CSS11503.
Thanks,
haver

you could create a 2nd VIP like x.x.x.x:81 and
a service like
service redirect
domain x.x.x.x:81
type redirect
keepalive type none
Under the Vip x.x.x.x:81, you configure the 2 services with private ip addresses and port 30084.
Then you create an ACL
acl 10
clause 10 permit tcp destination content prefer redirect
clause 99 permit any any destination any
apply circuit-VLAN...
Don't forget you will need an ACL permit any any on all other interfaces to avoid blocking the rest of the traffic.
What this will do is tell the browser to close the current connection to vip:80 and reopen a new one to vip:81 and this will be loadbalanced to the private servers.
Gilles.

Route calls to specific number based on Date and Time

Hi,
UCCX 8.5.1.11001-22
I am trying to create a script that will route calls to a specific number after-hours. The only catch is the number changes every week and rotates among 4 or 5 people. I have seen several scripts and xml documents up that give me a good start but I just cant seem to figure out the process with the xml document and call flow of this one. I do realize this is basically a programing question but if you could get me headed in the right direction it would help.
I am no stranger to UCCX scripting but a novice to xml integration.

I'm not sure what the SM toolkit is. Could you explain it or provide a link?
If you and your collegaue are admins, then I would say skip the overhead of an XML document for now and just manage the schedule in a subflow.
Example:
Subflow Variables
String oncall_number_current = ""String oncall_number_avholloway = "916125551212"String oncall_number_jsmith = "916125551313"String oncall_number_default = "916125551000"Date today = D[now]
Subflow Script
StartSwitch int (today.month) January (value == 1)
    /* In Jan, from the first to the fifteenth, Anthony is on call */    If (today.date >= 1 && today.date <= 15)
      True        Set oncall_number_current = oncall_number_avholloway
        Goto End of Script      False
    /* In Jan, from the sixthteenth to the thirty-first, John is on call */    If (today.date >= 16 && today.date <= 31)
      True        Set oncall_number_current = oncall_number_jsmith
        Goto End of Script      False
Febraury (value == 2)    /* In Feb, from the first to the sixth, Anthony is on call */
    If (today.date >= 1 && today.date <= 6)      True
        Set oncall_number_current = oncall_number_avholloway        Goto End of Script
      False    /* In Feb, on the seventh, from midnight to noon, Anthony is on call */
    If (today.date == 7 && today.hod >= 0 && today.hod <= 11)      True
        Set oncall_number_current = oncall_number_avholloway        Goto End of Script
      False    /* In Feb, on the seventh, from noon to midnight, John is on call */
    If (today.date == 6 && today.hod >= 12 && today.hod <= 23)      True
        Set oncall_number_current = oncall_number_jsmith        Goto End of Script
      False    /* In Feb, from the eighth to the twenty-nineth, John is on call */
    If (today.date >= 8 && today.date <= 29)      True
        Set oncall_number_current = oncall_number_jsmith        Goto End of Script
      False March (value == 3)
    ..etc, etc, building out the whole year... Default
    /* Set the default on call number */    Set oncall_number_current = oncall_number_default
    Goto End of ScriptLabel End of Script
End
Main Script Variables
String oncall_number = ""
Main Script Script
...oncall_number = Call Subflow (SCRIPT[oncall-sublfow.aef], oncall_number_current)Call Redirect (--Triggering Contact--, oncall_number)...
In the example of January 3rd, the subflow would execute 4 steps. That's not much at all. Of course you would only call the subflow if the hours called for it. This would eliminate unecessary calls to the subflow.
To update the oncall, just update the script, save, upload, refresh, and then refresh the apps which call it. No down time at all!
I hope that makes sense. If not, ask questions.
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.

Jdbc connection set source ip address

Hi
Is there any way to specify the local (source) ip address of a jdbc connection ?
I work in an enterprise environment with firewalls all over, and only certain ip addresses can connected to other ip addresses.
The server which runs my application has many ip addresses and
I'd like to be sure that my ip address is the source...
Thanks
Gabor Dolla
Budapest, Hungary

No, certainly not in the JDBC API. I don't believe there's even a way to do this in the java.net Socket API. There's the very slimmest of slim chances that a particular driver might implement something like this, in which case it would be in the driver's documentation. However, the chances are so slim that I'd bet strongly against any driver doing this.
The source address is usually picked by the operating system, based on the routability to the target IP address. Basically, the OS network services looks at the target IP and says to itself, "which (logical) interface can get there? That's the source IP I will use". If your host's routing says there are multiple routes to the IP, then it will pick one; if there's only one route to the particular IP, there will be only one interface (and therefore source IP) that can be chosen.
There's no reason Java or a driver couldn't be extended to do this, but no particular demand either; the problem is usually dealt with at the network layer.

CME conferencing source IP address

I have a customer who is implementing CME with conferencing. They have remote sites across a QoS-guaranteed WAN and are running IPSec VPN between the sites. When they create conference calls, the source IP address of the audio stream going to the remote site is the public interface of the CME router. This creates one-way audio where the remote phone cannot hear the bridge because the audio traffic is not being put into the VPN tunnel. We need to be able to specify that the audio traffic always originate from the private interface IP address.
We have the "ip source-address" command specified under "telephony-service" and also tried the "h323-gateway voip bind srcaddr" and "h323-gateway voip interface" commands under the private interface but those did not work either.
Any ideas how we can force the CME conference bridge to always use the private interface IP address as conference source? Thanks!

Generally you cannot encrypt packets on the same router that generates the packets. Packets need to go through the router. There are 2 workarounds:
1. Run a GRE tunnel inside the IPSec tunnel, since the GRE packets essentially get routed over the VPN tunnel the router will encrypt them.
2. Policy route packets through a loopback
a. Create a loopback interface with an ip address
b. 'ip policy route-map FORCE-TUNNEL'
c. create the policy route-map to set the next hop of the other end of the vpn tunnel
d. add a static route for the other h323 or callmanager endpoint pointing to the loopback you created in step (a)
Pertinent config:
dial-peer voice 7000 voip
destination-pattern 7000
session target ipv4:172.31.0.10
codec g729br8
ip route 172.31.0.10 255.255.255.255 loopback1 5
interface loopback1
ip address 10.255.255.1 255.255.255.252
ip policy route-map FORCE-TUNNEL
ip access-list extended FORCE-TUNNEL
permit ip any host 172.31.0.10
route-map FORCE-TUNNEL permit
match ip address FORCE-TUNNEL
set ip next-hop 10.255.0.2 <-- ip of vpn tunnel next hop
As always, ask additional questions and rate this post if it helped you.

Route call based on source IP address

Similar Messages

Maybe you are looking for