3Com TP-1610, Руководство пользователя

Страница: 176 / 496

176
V6100 and V7122 User Guide
Security Parameters
Table 45
Security Parameter
ini File Field Name
Web Parameter Name
Valid Range and Description
EnableIPSec
[Enable IP Security]
Enables / disables the Secure Internet Protocol (IPSec) on the gateway.
0 = Disable (default).
1 = Enable.
EnableMediaSecurity
[Enable Media Security]
Enables or disables the Secure Real-Time Transport Protocol (SRTP).
0 = SRTP is disabled (default).
1 = SRTP is enabled.
SRTP is available only if DSPVersionTemplateNumber = 0 or 2.
Use of SRTP reduces the number of available channels.
TP-1610, V7122, TP-260:
Template 0, 200 channels are available (per TPM).
Template 2, 120 channels are available (per TPM).
V6100:
100 channels for 4-spans.
MediaSecurityBehaviour
[Media Security Behavior]
Determines the gateway’s mode of operation when SRTP is used
(EnableMediaSecurity = 1).
0 (Must) = The gateway initiates encrypted calls. If negotiation of the cipher
suite fails, the call is terminated. Incoming calls that don’t include encryption
information are rejected (default).
1 (Prefer) = The gateway initiates encrypted calls. If negotiation of the cipher
suite fails, an unencrypted call is established. Incoming calls that don’t include
encryption information are accepted.
EnableSIPS
[Enable SIPS]
Enables secured SIP (SIPS) connections over multiple hops.
0 = Disabled (default).
1 = Enabled.
When SIPTransportType = 2 (TLS) and EnableSIPS is disabled, TLS is used
for the next network hop only.
When SIPTransportType = 2 (TLS) or 1 (TCP) and EnableSIPS is enabled,
TLS is used through the entire connection (over multiple hops).
If SIPS is enabled and SIPTransportType = UDP, the connection
fails.
TLSLocalSIPPort
[SIP TLS Local Port]
Local TLS port used to receive SIP messages.
The default value is 5061.
The value of ‘TLSLocalSIPPort’ must be different to the value of
‘TCPLocalSIPPort’.
SIPSRequireClientCertificat
e
0 = The gateway doesn’t require client certificate (default).
1 = The gateway (when acting as a server for the TLS connection) requires
reception of client certificate to establish the TLS connection.
The SIPS certificate files can be changed using the parameters
‘HTTPSCertFileName’ and ‘HTTPSRootFileName’.
Secure Hypertext Transport Protocol (HTTPS) Parameters
HTTPSOnly
[Secured Web Connection]
Determines the protocol types used to access the Embedded Web Server.
0 = HTTP and HTTPS (default).
1 = HTTPS only (unencrypted HTTP packets are blocked).