
Configuring Dial Services
5-20
308621-14.20 Rev 00
Example of a Security Breach
One carrier was using call screening as a first-level security barrier to ensure that
only calls from known branch offices were accepted. An intruder who knew an
allowed number specified a “user-provided” number in the local DTE. The DTE
inserted this number into the ISDN call setup packet, and potentially allowed the
intruder access.
To ensure security, the carrier can configure the router to select the
network-provided number and pass this number to the call screening function.
Although the network appends a network-provided number to the packet, the
user-provided number is found first and used for screening if not specified
otherwise.
If you have experienced attempts to circumvent your standard calling line ID
based security through user-based or calling device-based IEs, use the
network-provided screening bit option. If your network does not provide a calling
number information element, choose any option except network-provided to
ensure that calls get through.
Calls that do not contain the specified screening bit type are treated as if the
calling number is not present. If the appropriate calling number screening table
has been configured, the call is rejected. To enable calling line ID, see “Enabling
Calling Line ID Screening” on page 11-17.
Kommentare zu diesen Handbüchern