AudioCodes Mediant 500 MSBR, Руководство пользователя

Страница: 1217 / 1248

Version 7.2 1217 Mediant 500 MSBR
User's Manual 74. Configuration Parameters Reference
nonce
[AuthNonceDuration]
streams are not used in replay attacks).
The valid value range is 30 to 600. The default is 300.
Authentication Challenge
Method
configure voip > sbc
settings > auth-chlng-
mthd
[AuthChallengeMethod]
Defines the type of server-based authentication challenge.

[0] 0 = (Default) Send SIP 401 "Unauthorized" with a WWW-
Authenticate header as the authentication challenge response.

[1] 1 = Send SIP 407 "Proxy Authentication Required" with a Proxy-
Authenticate header as the authentication challenge response.
Authentication Quality of
Protection
configure voip > sbc
settings > auth-qop
[AuthQOP]
Defines the authentication and integrity level of quality of protection
(QoP) for digest authentication offered to the client. When the device
challenges a SIP request (e.g., INVITE), it sends a SIP 401 response
with the Proxy-Authenticate header or WWW-Authenticate header
containing the 'qop' parameter. The QoP offered in the 401 response
can be 'auth', 'auth-int', both 'auth' and 'auth-int', or the 'qop' parameter
can be omitted from the 401 response. In response to the 401, the
client needs to send the device another INVITE with the MD5 hash of
the INVITE message and indicate the selected auth type.

[0] 0 = The device sends 'qop=auth' in the SIP response, requesting
authentication (i.e., validates user by checking user name and
password). This option does not authenticate the message body
(i.e., SDP).

[1] 1 = The device sends 'qop=auth-int' in the SIP response,
indicating required authentication and authentication with integrity
(e.g., checksum). This option restricts the client to authenticating the
entire SIP message, including the body, if present.

[2] 2 = (Default) The device sends 'qop=auth, auth-int' in the SIP
response, indicating either authentication or integrity. This enables
the client to choose 'auth' or 'auth-int'. If the client chooses 'auth-int',
then the body is included in the authentication. If the client chooses
'auth', then the body is not authenticated.

[3] 3 = No 'qop' parameter is offered in the SIP 401 challenge
message.
SBC User Registration
Time
configure voip > sbc
settings > sbc-usr-rgstr-
time
[SBCUserRegistrationTi
me]
Global parameter that defines the duration (in seconds) of the periodic
registrations that occur between the user and the device (the device
responds with this value to the user). You can also configure this
feature per specific calls, using IP Profiles
(IpProfile_SBCUserRegistrationTime). For a detailed description of the
parameter and for configuring this feature in the IP Profiles table, see
Configuring IP Profiles on page 404.
Note: If this feature is configured for a specific IP Profile, the settings of
this global parameter is ignored for calls associated with the IP Profile.
SBC Proxy Registration
Time
configure voip > sbc
settings > sbc-prxy-rgstr-
time
[SBCProxyRegistrationTi
me]
Defines the duration (in seconds) for which the user is registered in the
proxy database (after the device forwards the REGISTER message).
This value is sent in the Expires header. When set to 0, the device
sends the Expires header's value as received from the user to the
proxy.
The valid range is 0 to 2,000,000 seconds. The default is 0.
configure voip > sbc
settings > sbc-rand-
expire
[SBCRandomizeExpires]
Defines a value (in seconds) that is used to calculate a new value for
the expiry time in the Expires header of SIP 200 OK responses for user
registration and subscription requests from users.
The expiry time value appears in the Expires header in REGISTER and