AudioCodes Mediant 500 E-SBC, User Manual

Page: 270 / 920

User's Manual 270 Document #: LTRT-10437
Mediant 500 E-SBC
Parameter Description

If the PreferRouteTable parameter is set to 1, the routing rules in
the Outbound IP Routing table take precedence over this ‘Serving
IP Group ID’ parameter.

If this parameter is not configured, the INVITE messages are sent
to the default Proxy or according to the Outbound IP Routing table.
SBC Parameters
Classify By Proxy Set
CLI: classify-by-proxy-set
[IPGroup_ClassifyByProxyS
et] Enables classification of incoming SIP dialogs (INVITEs) to Server-
type IP Groups based on Proxy Set (assigned using the
IPGroup_ProxySetName parameter).

[0] Disable

[1] Enable = (Default) The device searches the Proxy Set table for
a Proxy Set that is configured with the same source IP address as
that of the incoming INVITE (if host name, then according to the
dynamically resolved IP address list). If such a Proxy Set is found,
the device classifies the INVITE as belonging to the IP Group
associated with the Proxy Set.
Note:

The parameter is applicable only to Server-type IP Groups.

For security, it is recommended to classify SIP dialogs based on
Proxy Set only if the IP address of the IP Group is unknown. In
other words, if the Proxy Set associated with the IP Group is
configured with an FQDN. In such cases, the device classifies
incoming SIP dialogs to the IP Group based on the DNS-resolved
IP address. If the IP address is known, it is recommended to use a
Classification rule instead (and disable the Classify by Proxy Set
feature), where the rule is configured with not only the IP address,
but also with SIP message characteristics to increase the strictness
of the classification process (see Configuring Classification Rules
on page 480).
The reason for preferring classification based on Proxy Set when
the IP address is unknown is that IP address forgery (commonly
known as IP spoofing) is more difficult than malicious SIP message
tampering and therefore, using a Classification rule without an IP
address offers a weaker form of security. When classification is
based on Proxy Set, the Classification table for the specific IP
Group is ignored.

If you have assigned the same Proxy Set to multiple IP Groups,
disable the parameter and instead, use Classification rules to
classify incoming SIP dialogs to these IP Groups. If the parameter
is enabled, the device is unable to correctly classify incoming
INVITEs to their appropriate IP Groups.

Classification by Proxy Set occurs only if classification based on
the device's registration database fails (i.e., the INVITE is not from
a registered user).
Max. Number of Registered
Users
CLI: max-num-of-reg-users
[IPGroup_MaxNumOfRegUs
ers] Defines the maximum number of users in this IP Group that can
register with the device. By default, no limitation exists for registered
users.
Note: This field is applicable only to User-type IP Groups.
Inbound Message
Manipulation Set
CLI: inbound-mesg-
manipulation-set Assigns a Message Manipulation Set (rule) to the IP Group for SIP
message manipulation on the inbound message. To configure
Message Manipulation rules, see Configuring SIP Message
Manipulation on page
288 .