AudioCodes Mediant 500 E-SBC, Руководство пользователя

Страница: 730 / 920

User's Manual 730 Document #: LTRT-10437
Mediant 500 E-SBC
54.4.4 TLS Parameters
The Transport Layer Security (TLS) parameters are described in the table below.
Table 54-25: TLS Parameters
Parameter Description
Web: TLS Contexts Table
CLI: configure system > tls #
[TLSContexts]
Defines SSL/TLS certificates.
The format of the ini file table parameter is as follows:
[ TLSContexts ]
FORMAT TLSContexts_Index = TLSContexts_Name,
TLSContexts_TLSVersion, TLSContexts_ServerCipherString,
TLSContexts_ClientCipherString, TLSContexts_OcspEnable,
TLSContexts_OcspServerPrimary,
TLSContexts_OcspServerSecondary,
TLSContexts_OcspServerPort,
TLSContexts_OcspDefaultResponse;
[ \TLSContexts ]
For a detailed description of this table, see Configuring TLS
Certificate Contexts on page
91 .
Web: TLS Client Re-Handshake
Interval
EMS: TLS Re Handshake Interval
CLI: tls-re-hndshk-int
[TLSReHandshakeInterval]
Defines the time interval (in minutes) between TLS Re-
Handshakes initiated by the device.
The interval range is 0 to 1,500 minutes. The default is 0 (i.e.,
no TLS Re-Handshake).
Web: TLS Mutual Authentication
EMS: SIPS Require Client
Certificate
[SIPSRequireClientCertificate]
Defines the device's mode of operation regarding mutual
authentication and certificate verification for TLS connections.

[0] Disable = (Default)

Device acts as a client: Verification of the server’s
certificate depends on the VerifyServerCertificate
parameter.

Device acts as a server: The device does not request
the client certificate.

[1] Enable =

Device acts as a client: Verification of the server
certificate is required to establish the TLS connection.

Device acts as a server: The device requires the receipt
and verification of the client certificate to establish the
TLS connection.
Notes:

For this parameter to take effect, a device reset is required.

This feature can be configured per SIP Interface (see
Configuring SIP Interfaces on page
259 ).

The SIPS certificate files can be changed using the
parameters HTTPSCertFileName and
HTTPSRootFileName.
Web/EMS: Peer Host Name
Verification Mode
[PeerHostNameVerificationMode]
Determines whether the device verifies the Subject Name of a
remote certificate when establishing TLS connections.

[0] Disable (default).

[1] Server Only = Verify Subject Name only when acting as
a client for the TLS connection.

[2] Server & Client = Verify Subject Name when acting as a
server or client for the TLS connection.
When the device receives a remote certificate and this