Yeastar Technology MyPBX Standard V6, Руководство администратора

Страница: 151 / 219

MyPBX Standard V6/V7 Administrator's Guide
www.yeastar.com Page 151
1.2.5 TLS registry (Optional)
Introduction
Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL),
are cryptographic protocols that provide communication security over the
Internet. They use asymmetric cryptography for authentication of key exchange,
symmetric encryption for confidentiality and message authentication codes for
message integrity. Several versions of the protocols are in widespread use in
applications such as web browsing, electronic mail, Internet faxing, instant
messaging and Voice-over-IP (VoIP).
TLS is supported in MyPBX for security SIP registry; you can also register SIP
trunks to VoIP providers via TLS. We need to upload the certificate into MyPBX
and the IP phones together for authorization.
Hackers send the register request to PBX for registry via UDP generally, if it‘s
TLS enabled in MyPBX, hacker cannot register extension without the CA, the
registry request will be refused directly.
Refer to
Appendix J to get the detailed steps of how to use TLS in MyPBX.
Note: TLS is disabled in MyPBX by default; we need to enable it in ―SIP settings‖
page in advance before using it.
2. Firewall configuration