AudioCodes Media Pack MP-11x, User Manual

Page: 505 / 650

Version 6.6 505 MP-11x & MP-124
User's Manual 44. Configuration Parameters Reference
Parameter Description
EMS: HTTPS Port
[HTTPSPort]
Defines the local Secured HTTPS port of the device. This
parameter allows secure remote device Web management from
the LAN. To enable secure Web management from the LAN,
configure the desired port.
The valid range is 1 to 65535 (other restrictions may apply within
this range). The default port is 443.
Note: For this parameter to take effect, a device reset is
required.
Web/EMS: HTTPS Cipher String
[HTTPSCipherString]
Defines the Cipher string for HTTPS (in OpenSSL cipher list
format). For the valid range values, refer to URL
http://www.openssl.org/docs/apps/ciphers.html.
The default is ‘RC4:EXP’ (Export encryption algorithms). For
example, use ‘ALL’ for all ciphers suites (e.g., for ARIA
encryption for TLS). The only ciphers available are RC4 and
DES, and the cipher bit strength is limited to 56 bits.
Note: For this parameter to take effect, a device reset is
required.
Web: HTTP Authentication Mode
EMS: Web Authentication Mode
[WebAuthMode]
Determines the authentication mode used for the Web interface.

[0] Basic Mode = Basic authentication (clear text) is used.

[1] Web Based Authentication = (Default) Digest
authentication (MD5) is used.
Note: If you enable RADIUS login (i.e., the WebRADIUSLogin
parameter is set to 1), you must set the WebAuthMode
parameter to Basic Mode [0].
Web: Requires Client Certificates
for HTTPS connection
[HTTPSRequireClientCertificate]
Determines whether client certificates are required for HTTPS
connection.

[0] Disable = (Default) Client certificates are not required.

[1] Enable = Client certificates are required. The client
certificate must be preloaded to the device and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device for the client
certificate to be verified.
Notes:

For this parameter to take effect, a device reset is required.

For a description on implementing client certificates, see
'Client Certificates' on page
114 .
[HTTPSRootFileName] Defines the name of the HTTPS trusted root certificate file to be
loaded using TFTP. The file must be in base64-encoded PEM
(Privacy Enhanced Mail) format.
The valid range is a 47-character string.
Note: This parameter is applicable only when the device is
loaded using BootP/TFTP.
[HTTPSPkeyFileName] Defines the name of a private key file (in unencrypted PEM
format) to be loaded from the TFTP server.