Grandstream Networks UCM6510, User Manual

Page: 383 / 483

P a g e | 382
UCM6510 IP PBX User Manual
Version 1.0.20.31
how to construct a certificate for SIP, please refer to the following document:
http://tools.ietf.org/html/draft-ietf-sip-domain-certs
TLS Do Not Verify
If enabled, the TLS server's certificate will not be verified when acting as a
client. The default setting is "Yes".
TLS Self-Signed CA
This is the CA certificate if the TLS server being connected to requires self-
signed certificate, including server's public key. This file will be renamed as
"TLS.ca" automatically.
Note:
The size of the uploaded ca file must be under 2MB.
TLS Cert
This is the Certificate file (*.pem format only) used for TLS connections. It
contains private key for client and signed certificate for the server.
This file will be renamed as "TLS.pem" automatically.
Note:
The size of the uploaded certificate file must be under 2MB.
TLS CA Cert
This file must be named with the CA subject name hash value. It contains
CA's (Certificate Authority) public key, which is used to verify the accessed
servers.
Note:
The size of the uploaded CA certificate file must be under 2MB.
TLS CA List Display a list of files under the CA Cert directory.
SIP Settings/NAT
Table 121: SIP Settings/NAT
External Host
Configure a static IP address and port (optional) used in outbound SIP
messages if the UCM6510 is behind NAT. If a hostname is used, it will be
looked up only once.
Use IP address in SDP
If enabled, the SDP connection will use the IP address resolved from the
external host.
External TCP Port
Configure the externally mapped TCP port when the UCM6510 is behind a
static NAT or PAT.
External TLS Port
Configures the externally mapped TLS port when UCM6510 is behind a
static NAT or PAT.
Local Network Address
Specify a list of network addresses that are considered inside of the NAT
network. Multiple entries are allowed. If not configured, the external IP
address will not be set correctly.
A sample configuration could be as follows:
192.168.0.0/16