Security Features
120
Web UI
Settings > Auto Provision > Self-Define RSA Pri Key
Parameter static.auto_provision.rsa_pri_key.delete
<y0000000000xx>.cfg
Description It deletes the self-define RSA private key file.
Permitted
Values
http://localhost/all
Default
Blank
Supported
Devices
T57W, T54W, T53W, T53, T48U, T46U, T43U, T42U, T48S, T46S, T42S, T41S, T27G and CP920
[1]
X is an activation code ID. X=1-50.
[2]
If you change this parameter, the phone will reboot to make the change take effect.
Incoming Network Signaling Validation
Yealink phones support the following three optional levels of security for validating incoming network signaling:
l
Source IP address validation: ensure the request is received from an IP address of a server belonging to the set
of target SIP servers.
l
Digest authentication: challenge requests with digest authentication using the local credentials for the asso-
ciated registered account.
l
Source IP address validation and digest authentication: apply both of the above methods.
Topic
Incoming Network Signaling Validation Configuration
Incoming Network Signaling Validation Configuration
The following table lists the parameters you can use to configure the incoming network signaling validation.
Parameter sip.request_validation.source.list
<y0000000000xx>.cfg
Description
It configures the name of the request method for which source IP address validation will be applied.
Example:
sip.request_validation.source.list = INVITE, NOTIFY
Permitted
Values
INVITE, ACK, BYE, REGISTER, CANCEL, OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY,
REFER, PRACK, UPDATE
Default
Blank
Parameter sip.request_validation.digest.list
<y0000000000xx>.cfg
Description
It configures the name of the request method for which digest authentication will be applied.
Example:
sip.request_validation.digest.list = INVITE, SUBSCRIBE
Permitted
Values
INVITE, ACK, BYE, REGISTER, CANCEL, OPTIONS, INFO, MESSAGE, SUBSCRIBE, NOTIFY,
REFER, PRACK, UPDATE
Default
Blank
Parameter sip.request_validation.digest.realm
<y0000000000xx>.cfg
Description It configures the string used for the authentication parameter Realm when performing the digest