General Parameters

The general management parameters are described in the table below.

General Management Parameters

Parameter

Description

'WAN OAMP Interface'

bind GigabitEthernet <slot/port.vlanId> oamp

[OAMPWanInterfaceName]

Binds the OAMP interface to a WAN interface, which can later be associated with a Virtual Routing and Forwarding (VRF).

'Allow WAN access to HTTP'

config-system > web > wan-http-allow

[AllowWanHTTP]

Enables WAN access to the management interface through HTTP.

[0] Disable (default)
[1] Enable

Note:

For the parameter to take effect, a device reset is required.
By default, the device's data-router firewall blocks all ("any") incoming traffic on the WAN. Thus, to enable WAN access, you must also enable the data-router firewall:

# configure data
(config-data)# interface gigabitethernet 0/0
(conf-if-GE 0/0)# firewall enable

'Allow WAN access to HTTPS'

config-system > web > wan-https-allow

[AllowWanHTTPS]

Enables WAN access to the management interface through HTTPS.

[0] Disable (default)
[1] Enable

Note:

For the parameter to take effect, a device reset is required.
By default, the device's data-router firewall blocks all ("any") incoming traffic on the WAN. Thus, to enable WAN access, you must also enable the data-router firewall:

# configure data
(config-data)# interface gigabitethernet 0/0
(conf-if-GE 0/0)# firewall enable

'Allow WAN access to SNMP'

config-system > snmp settings > wan-snmp-allow

[AllowWanSNMP]

Enables WAN access to the management interface through SNMP.

[0] Disable (default)
[1] Enable

Note:

For the parameter to take effect, a device reset is required.
By default, the device's data-router firewall blocks all ("any") incoming traffic on the WAN. Thus, to enable WAN access, you must also enable the data-router firewall:

# configure data
(config-data)# interface gigabitethernet 0/0
(conf-if-GE 0/0)# firewall enable

'Allow WAN access to Telnet'

wan-telnet-allow

[AllowWanTelnet

Enables WAN access to the management interface through Telnet.

[0] Disable (default)
[1] Enable

Note:

For the parameter to take effect, a device reset is required.
By default, the device's data-router firewall blocks all ("any") incoming traffic on the WAN. Thus, to enable WAN access, you must also enable the data-router firewall:

# configure data
(config-data)# interface gigabitethernet 0/0
(conf-if-GE 0/0)# firewall enable

'Allow WAN access to SSH'

wan-ssh-allow

[AllowWanSSH]

Enables WAN access to the management interface through SSH.

[0] Disable (default)
[1] Enable

Note:

For the parameter to take effect, a device reset is required.
By default, the device's data-router firewall blocks all ("any") incoming traffic on the WAN. Thus, to enable WAN access, you must also enable the data-router firewall:

# configure data
(config-data)# interface gigabitethernet 0/0
(conf-if-GE 0/0)# firewall enable

'Web Server Name'

configure system > web > web-hostname

[WebHostname]

Defines a hostname (FQDN) for the device's Web interface. This can be used to access the Web interface instead of the device's IP address.

By default, no value is defined.

For more information, see Configuring a Hostname for Web Interface.

Note: If not configured, the device uses the [Hostname] parameter.

'Host Name'

configure system > hostname

[Hostname]

Defines a hostname for the device, which is used for various functionality such as the CLI prompt name.

The valid value is a string of up to 18 characters. By default, no value is defined.

For more information, see Configuring a Hostname for the Device.

Note: To configure a hostname for accessing the device's Web interface, use the [WebHostname] parameter.

[WebLoginBlockAutoComplete]

Disables autocompletion when entering the management login username in the 'Username' field of the device's Web interface. Disabling autocompletion may be useful for security purposes by hiding previously entered usernames and thereby, preventing unauthorized access to the device's management interface.

[0] Disable = (Default) Autocompletion is enabled and the 'Username' field automatically offers previously logged in usernames.
[1] Enable = Autocompletion is disabled.

configure system > web > enforce-password-complexity

[EnforcePasswordComplexity]

Enables the enforcement of the management user's login password complexity requirements to ensure strong passwords.

[0] Disable (default)
[1] Enable

For more information on password complexity requirements, see the 'Password' parameter in Configuring Management User Accounts.

configure system > web > min-web-password-len

[MinWebPasswordLen]

Defines the minimum length (number of characters) of the management user's login password when password complexity is enabled (using the [EnforcePasswordComplexity] parameter).

The valid value is a string of 8 to 20 characters. The default is 8.

For more information on password complexity requirements, see the 'Password' parameter in Configuring Management User Accounts.

'Lock'

admin state lock

[AdminState]

Locks the device, whereby existing calls are terminated (optionally, after a graceful period) and new calls are rejected.

[0] Lock
[2] Unlock (default)

For more information, see Locking and Unlocking the Device.

'Graceful Option'

admin state lock graceful

[AdminStateLockControl]

Defines a graceful period (in seconds) before the device locks. During this period, the device does not accept any new calls, allowing only existing calls to continue until the timeout expires. If all existing calls end before the timeout expires, the device locks. If there are still existing calls when the timeout expires, the device terminates them and then locks.

The valid value is 0 to 32,768 seconds. The default is 0, meaning no graceful lock (i.e., immediate lock). A value of -1 means that the device locks only after all the existing calls end (on their own accord).

For more information, see Locking and Unlocking the Device.

'Disconnect Client Connections'

admin state lock no-graceful disconnect-client-connections

[AdminStateRestrictConnections]

Enables the device to close existing TLS/TCP client connections and reject incoming TLS/TCP client connections when the device is in locked state.

[0] Disable (default)
[1] Enable

For more information, see Locking and Unlocking the Device.

'Floating License'

configure system > floating-license > floating-license

[EnableFloatingLicense]

Enables the device to operate with the Floating License.

[0] Disable (default)
[1] Enable

For more information, see Floating License Model.

Note: For the parameter to take effect, a device reset is required.

'Allocation Profile'

configure system > floating-license > allocation-profile

[AllocationProfile]

Defines an SBC capacity profile (Allocation Profile) for the Floating License feature.

[0] SIP Trunking = (Default) Profile suited for SIP Trunking applications.
[1] Registered Users = Profile suited for applications requiring registered users.
[2] Custom = Customized Allocation Profile.

Note: For the parameter to take effect, a device reset is required.

'Allocation - Far End Users'

configure system > floating-license > allocation-registered-users

[AllocationRegisteredUsers]

Defines registered users capacity for a customized Allocation Profile for the Floating License feature.

Note:

For the parameter to take effect, a device reset is required.
The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Allocation – SBC Media Sessions'

configure system > floating-license > allocation-media-sessions

[AllocationMediaSessions]

Defines SBC media session capacity for a customized Allocation Profile for the Floating License feature.

Note:

For the parameter to take effect, a device reset is required.
The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Allocation – SBC Signaling Sessions'

configure system > floating-license > allocation-signaling-sessions

[AllocationSignalingSessions]

Defines SBC signaling session capacity for a customized Allocation Profile for the Floating License feature.

Note:

For the parameter to take effect, a device reset is required.
The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit - Far End Users'

configure system > floating-license > limit-registered-users

[LimitRegisteredUsers]

Defines a limit of the registered user capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – SBC Media Sessions'

configure system > floating-license > limit-media-sessions

[LimitMediaSessions]

Defines a limit of the SBC media session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – SBC Signaling Sessions'

configure system > floating-license > limit-signaling-sessions

[LimitSignalingSessions]

Defines a limit of the SBC SIP signaling session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – Transcoding Sessions'

configure system > floating-license > limit-transcoding-sessions

[LimitTranscodingSessions]

Defines a limit of the transcoding session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

[CustomerSN]

Defines a serial number (S/N) for the device.

Note: The device's original S/N is automatically added at the end of the configured S/N. For example, if the original S/N is 8906721 and the configured S/N is "abc123", the resultant S/N is "abc1238906721".

[DisableDualImageFeature]

Enables the device to fallback to the previously installed software version file (.cmp) if during a software upgrade the device resets for whatever reason (e.g., a power off-on scenario), causing a software upgrade failure.

[0] = (Default) Enabled.
[1] = Disabled.

Note:

For the parameter to take effect, a device reset is required.