AudioCodes Mediant 500 MSBR, User Manual

Page: 665 / 1248

Version 7.2 665 Mediant 500 MSBR
User's Manual 37. Routing SBC
a. Selects the Proxy Set whose IP address, port, and transport type match the
source of the incoming dialog.
b. If no match is found for a), it selects the Proxy Set whose IP address and
transport type match the source of the incoming dialog (if the 'Classification Input'
parameter is configured to
IP Address Only ).
c. If no match is found for b), it selects the Proxy Set whose IP address match the
source of the incoming dialog (if the 'Classification Input' parameter is configured
to
IP Address Only ).
If classification based on Proxy Set fails (or classification based on Proxy Set is
disabled), the device proceeds to classification based on the Classification table.
Note:
•
For security, it is recommended to classify SIP dialogs based on Proxy Set only if
the IP address of the Server-type IP Group is
unknown . In other words, if the
Proxy Set associated with the IP Group is configured with an FQDN. In such
cases, the device classifies incoming SIP dialogs to the IP Group based on the
DNS-resolved IP address. If the IP address is known, it is recommended to use a
Classification rule instead (and disable the Classify by Proxy Set feature), where
the rule is configured with not only the
IP address, but also with SIP message
characteristics to increase the strictness of the classification process. The
reason for preferring classification based on Proxy Set when the IP address is
unknown is that IP address forgery (commonly known as IP spoofing) is more
difficult than malicious SIP message tampering and therefore, using a
Classification rule without an IP address offers a weaker form of security. When
classification is based on Proxy Set, the Classification table for the specific IP
Group is ignored.
•
If multiple IP Groups are associated with the same Proxy Set, use Classification
rules to classify the incoming dialogs to the IP Groups (do
not use the Classify by
Proxy Set feature).
•
The device saves incoming SIP REGISTER messages in its registration database.
If the REGISTER message is received from a User-type IP Group, the device
sends the message to the configured destination.