AudioCodes Mediapack mp-11x, User Manual

Page: 198 / 390

SIP User's Manual 198 Document #: LTRT-65409
MediaPack Series
Table 5-40: General Security Settings Parameters
Parameter Description
Secured Web Connection
[HTTPSOnly]
Determines the protocol types used to access the Embedded Web
Server.
ƒ
[0]
HTTP and HTTPS (default).
ƒ
[1]
HTTPS only = Unencrypted HTTP packets are blocked.
HTTP Authentication Mode
[WebAuthMode]
Determines the authentication mode for the Embedded Web Server.
ƒ
[0]
Basic = Basic authentication (clear text) is used (default).
ƒ
[1]
Digest When Possible = Digest authentication (MD5) is used.
ƒ
[2]
Basic if HTTPS, Digest if HTTP = Digest authentication (MD5)
is used for HTTP, and basic authentication is used for HTTPS.
Note:
When RADIUS login is enabled (WebRADIUSLogin = 1), basic
authentication is forced.
TLS version
[TLSVersion]
Defines the supported versions of SSL/TLS (Secure Socket
Layer/Transport Layer Security.
ƒ
[0]
SSL 2.0-3.0 and TLS 1.0 = SSL 2.0, SSL 3.0, and TLS 1.0 are
supported (default).
ƒ
[1]
TLS 1.0 Only = only TLS 1.0 is used.
When set to
[0]
, SSL/TLS handshakes always start with SSL 2.0 and
switch to TLS 1.0 if both peers support it. When set to
[1]
, TLS 1.0 is
the only version supported; clients attempting to contact the device
using SSL 2.0 are rejected.
Voice Menu Password
[VoiceMenuPassword]
Password for the voice menu used for configuration and status. To
activate the menu, connect an analog telephone and dial *** (three
stars) followed by the password.
The default value is 12345.
For detailed information on the voice menu, refer to 'Assigning an IP
Address Using the Voice Menu Guidance' on page
50 .
RADIUS General Settings
Enable RADIUS Access
Control
[EnableRADIUS]
Enables / disables the RADIUS application.
ƒ
[0]
Disable = RADIUS application is disabled (default).
ƒ
[1]
Enable = RADIUS application is enabled.
Use RADIUS for Web/Telnet
Login
[WebRADIUSLogin]
Uses RADIUS queries for Web and Telnet interface authentication.
ƒ
[0]
Disable (default).
ƒ
[1]
Enable.
When enabled, logging in to the gateway's Web and Telnet
embedded servers is performed via a RADIUS server. The gateway
contacts a predefined server and verifies the given username and
password pair against a remote database, in a secure manner.
Notes:
ƒ
The parameter EnableRADIUS must be set to 1.
ƒ
RADIUS authentication requires HTTP basic authentication,
meaning the username and password are transmitted in clear text
over the network. Therefore, it's recommended to set the
parameter HttpsOnly to 1 to force the use of HTTPS, since the
transport is encrypted.