Medias Mediatrix 1204, Справочное руководство

Страница: 249 / 390

SIP Trusted Sources Reference Manual (SIP Version)
Mediatrix 1204 223
2. Restart the Mediatrix 1204 so that the changes may take effect.
SIP Trusted Sources
You can configure the Mediatrix 1204 so that it only accepts SIP messages coming from one of six trusted IP
addresses. All other SIP messages are ignored. This source address validation takes place at the IP level and
does not depend on the SIP header or body.
X
To configure the SIP trusted sources feature:
1. In the sipMIB , set the sipTrustedSourcesIpAddress variable with the IP address of a trusted source
of SIP messages.
You can enter up to six addresses.
2. Enable the SIP trusted sources feature by setting the sipTrustedSourcesEnable to enable .
If you set the variable to disable , the Mediatrix 1204 does not validate the source address of SIP
messages at the IP level.
NAT Traversal
The Mediatrix 1204 may be used in a private domain that is not directly connected to the IP network. For
instance, this may be the case for ITSP (Internet Telephony Service Provider) clients that have a small private
network. This private network is connected to the public IP network through the NAT (Name Address
Translation) technology.
Currently only one Mediatrix unit can be deployed behind a standard NAT.
You can configure the Mediatrix 1204 with the public IP address of the NAT system, which allows to reach the
unit. SIP packets sent by the Mediatrix 1204 contain the NAT address configured as SIP contact. If the NAT
service is not activated, the real IP address of the Mediatrix 1204 is used.
This method is recommended when the public IP address of the NAT system is static or does not change
regularly since it would cause downtime until it is changed manually.
Mediatrix 1204 Configuration
This section describes how to activate the NAT service of the Mediatrix 1204.
X
To activate the NAT service:
1. In the ipAddressConfig folder, set the localHostWanAddressSelectConfigSource variable to static .
Network Address Translation
Network Address Translation (NAT) is a method of connecting multiple computers to the Internet (or any
other IP network) by using one IP address. This allows home users and small businesses to cheaply and
efficiently connect their network to the Internet. The basic purpose of NAT is to multiplex traffic from the
internal network and present it to the Internet as if it was coming from a single computer having only one
IP address.
NAT automatically provides firewall-style protection without any special set-up because it only allows
connections originating on the inside network. This means, for instance, that an internal client can
connect to an outside FTP server, but an outside client cannot connect to an internal FTP server because
it would have to originate the connection, and NAT does not allow that.
Note:
If you want to do NAT traversal, you cannot use a PPPoE connection.