Creating a CEP Detection Group

CEP detection groups can be created, deleted, enabled, or disabled. You create a CEP detection group by associating an ID with the create command. Once a group is created, you associate a CEP type, IP address, protocol, and high or low protocol port to it. The type can be H.323, Siemens, or SIP. The IP address is the IP address of the CEP device. By default, H.323 will use 224.0.1.41 as its IP address and Siemens will have no IP address configured. The protocol can be TCP or UDP. The high or low protocol port is the maximum or minimum TCP or UDP port to be used by the group.

CEP Detection Group Configuration describes the creation of a CEP detection group.

Click to expand in new window

CEP Detection Group Configuration

Step Task Command(s)
1 Create a new CEP detection group or enable, disable, or delete an existing group. set cep detection-id id {create | enable | disable | delete}
2 Specify the CEP type to be associated with the this group. set cep detection-id id type {h323 | siemens | sip}
3 Specify the CEP device IP address and mask or set to unknown. set cep detection-id id address {ip-address | unknown} mask {mask | unknown}
4 Set the CEP detection group protocol. set cep detection-id id protocol {tcp | udp | both | none}
5 Set the maximum or minimum port for the TCP or UDP group protocol. set cep detection-id id {porthigh | portlow} port

CEP Configuration describes the steps to configure CEP.

Click to expand in new window

CEP Configuration

Step Task Command(s)
1 Determine the policy profile index of the profile you wish to associate with a CEP type. show policy profile all
2 Associate a policy profile with a CEP type. set cep policy {cisco | h323 | lldp-med | siemens | sip} policy-index
3 Enable or disable the CEP device port for the CEP type set cep port port-string cep-type enable

set cep port port-string cep-type disable

4 If you are using the Cisco discovery protocol, enable the Cisco discovery protocol. You can also optionally set the voice VLAN ID, whether tagged traffic is trusted or untrusted, and 802.1X priority transmitted to the Cisco IP phone to format in the 802.1Q VLAN tag of its VoIP traffic. set ciscodp port {[status {disable | enable}] [vvid {vlan-id | none | dot1p | untagged}] [trust-ext {trusted | untrusted}] [cos-ext value]} port-string
5 If the Cisco discovery protocol is enabled on any port, enable the Cisco discovery protocol globally. set ciscodp status
6 Globally enable or disable CEP on the switch. set cep enable

set cep disable

7 Optionally, globally enable CEP agent accounting. set cep accounting {enable | disable}
8 Set the MultiAuth mode. set multiauth mode multi
9 Display CEP connections, detection, policy and port settings. show cep {connections | detection | policy | port}