Solved

Cisco CUCM 7.1: Is there a way to require a PIN to reach certain long distance numbers?

Posted on 2014-09-24
9
577 Views
Last Modified: 2014-09-25
I would like to permit only users with a known PIN to be able to dial known heavy fraud countries like Turks and Caicos etc. Is there any means to effect this in Cisco Unified Communications Manager? My other option would be to use partitions and calling search spaces and limit access to certain phones or DNs. But PIN access would be even better.
0
Comment
Question by:amigan_99
  • 5
  • 4
9 Comments
 
LVL 4

Accepted Solution

by:
rlarian earned 500 total points
ID: 40342897
create route patterns that specifically match the countries dialing pattern. ie 9.1649XXXXXXX. On the route pattern, select the checkbox 'Require Forced Authorization Code', set the authorization level to 5 (as an example). Under Call Routing, create a Forced Authorization Code with a matching or higher level access.
0
 
LVL 4

Assisted Solution

by:rlarian
rlarian earned 500 total points
ID: 40342904
my preferred method is to create a route filter with all the area codes for non US area codes - or at least the higher offending ones. Create a 9.@ route pattern and apply the route filter and assign the authorization code.
This method allows a single route pattern to match all the offending numbers without having to create a route pattern for each country you want to block/restrict access.
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 40342976
Great - thank you.
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40345001
Say - an add on question if I may.. I already have a route pattern 9.@ for my general outbound calls. Would I just create another 9.@ route pattern only with the filter and force auth and position it above the general purpose 9.@?
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 4

Expert Comment

by:rlarian
ID: 40345073
have you ever done device/line calling search spaces? the original 9.@ would go on the device(phone), the filtered one would go on the line (DN)
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40345088
I wear many hats and haven't looked and haven't looked at this in a while. But yes indeed - I get what you're saying. Thank you!
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40345177
I added the new Route Pattern 9@ with Partition FILTER-STND and filter Abuse (all the bad country codes and area codes) and added Require Forced Authorization Code level 11 and it is set to ROUTE THIS PATTERN.  The DN and Line for my phone use CSS LINE-UNRESTRICTED which has but one partition in it FILTER-STND. Alas the calls seem to be getting out unfettered. I did see a brief flash that perhaps I need to reset the gateways. Could that be it?

My earlier success was when I added a Route Pattern to a specific number and added it to the partitions in the CSS of my device. So if push comes to shove I guess I could add 30, 40 route patterns with BAT. But I really would rather use the Filter method.
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40345214
Ah - I was farther along than I thought. If I add a 1 to the front of the number then I get the authorization prompt. But if I dial the Turks and Caicos number without the 1, e.g. 649-941-8XXX then the number just passes on its way to the PSTN. So it has something to do with the 9@ and the NANP. In the worst case I should be able to wild card this and not specify NANP.
0
 
LVL 4

Expert Comment

by:rlarian
ID: 40345277
649 without the 1 is not a legitimate number outside the 649 area. Either your carrier (like with cell phones) or your dial plan/gateway are adding a 1.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

There are no good configuration guides for HP-H3C router to LYNC on the web. :( Big statement, but we havent been able to find one yet. We did find the following document useful, but the information was not enough to use H3C router for use as a L…
Transferring data across the virtual world became simpler but protecting it is becoming a real security challenge.  How to approach cyber security  in today's business world!
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now