AudioCodes Mediant 500 MSBR, User Manual

Page: 332 / 1248

User's Manual 332 Document #: LTRT-10375
Mediant 500 MSBR
TLS Mutual
Authentication
tls-mutual-auth
[SIPInterface_TLSMutual
Authentication]
Enables TLS mutual authentication for the SIP Interface (when the
device acts as a server).

[0] Disable = Device does not request the client certificate for TLS
connection on the SIP Interface.

[1] Enable = Device requires receipt and verification of the client
certificate to establish the TLS connection on the SIP Interface.
By default, no value is defined and the SIPSRequireClientCertificate
global parameter setting is applied.
Message Policy
message-policy-name
[SIPInterface_MessageP
olicyName]
Assigns a SIP message policy to the SIP interface.
To configure SIP Message Policy rules, see Configuring SIP Message
Policy Rules.
User Security Mode
block-un-reg-users
[SIPInterface_BlockUnR
egUsers]
Defines the blocking (reject) policy for incoming SIP dialog-initiating
requests (e.g., INVITE messages) from registered and unregistered
users belonging to the SIP Interface.

[-1] Not Configured = (Default) The corresponding parameter in the
SRDs table (SRD_BlockUnRegUsers) of the SRD that is associated
with the SIP Interface is applied.

[0] Accept All = Accepts requests from registered and unregistered
users.

[1] Accept Registered Users = Accepts requests only from users
registered with the device. Requests from users not registered are
rejected.

[2] Accept Registered Users from Same Source = Accepts requests
only from registered users whose source address is the same as that
registered with the device (during the REGISTER message process).
All other requests are rejected. The device verifies whether the IP
address and port are different only if the transport protocol is UDP;
otherwise, the device verifies only the IP address. The verification is
performed before any of the device's call handling processes (i.e.,
Classification, Manipulation and Routing).
Note:

The parameter is applicable only to calls belonging to User-type IP
Groups.

The feature is not applicable to REGISTER requests.

The option, Accept Registered Users from Same Source [2] does not
apply to registration refreshes. These requests are accepted even if
the source address is different to that registered with the device.

When the device rejects a call, it sends a SIP 500 "Server Internal
Error" response to the user. In addition, it reports the rejection (Dialog
establish failure - Classification failure) using the Intrusion Detection
System (IDS) feature (see Configuring IDS Policies on page 156), by
sending an SNMP trap.

If you configure the parameter to any value other than default [-1], it
overrides the corresponding parameter in the SRDs table
(SRD_BlockUnRegUsersInterface) for the SRD associated with the
SIP Interface.