Table of Contents
Advertisement
You can route such untrusted ("unauthorized" or "guest") calls by creating a separate set of "guest" dial rules
used only for these untrusted calls. See
Depending on the SIP SBC and how it's configured, such calls can be distinguished in one of two ways:
● By port: The SBC routes untrusted calls to a specific port.
● By prefix: The SBC adds a specific prefix in the Request-URI of the first INVITE message for the call.
The RealPresence Access Director SBC supports only the prefix method. The Acme Packet Session Border
Controller SBC can be configured for either.
In the SIP Settings section of the page, you can add one or more ports, prefixes, or both for untrusted calls.
For each entry, you can specify whether authentication is required. Calls to an untrusted call prefix follow
the authentication setting for that prefix, not for the port on which they're received. For port entries, you can
also specify the transport, and if TLS, whether certificate validation is required (mutual TLS).
Note: Require certificate validations for TLS
If Unlock SIP Settings mutual authentication option on the Signaling Settings page is
unchecked on the Security Settings page, then Require mutual authentication (validation of
client certificates) is turned on for both authorized and unauthorized ports, and it can't be turned off.
See
Security
Signaling Settings Fields
The following table describes the fields on the Signaling Settings page.
Field
H.323 Settings
Enable H.323 signaling
Status
H.225 port
RAS port
H.245 open firewall ports
H.323 multicast
Polycom, Inc.
Dial
Rules.
Settings.
Description
Enables the system to receive H.323 calls.
Caution: Disabling H.323 terminates any existing H.323 calls. When you click
Update, the system prompts you to confirm.
Indicates whether the system's H.323 gatekeeper functions are active.
Specifies the port number the system's gatekeeper uses for call signaling.
We recommend using the default port number (1720), but you can use the
same value as the RAS port or any other value from 1024 to 65535 that's not
already in use.
Specifies the port number the system's gatekeeper uses for RAS
(Registration, Admission and Status).
We recommend using the default port number (1719), but you can use the
same value as the H.225 port or any other value from 1024 to 65535 that's not
already in use.
Shows the port range used for H.245 so you can configure your firewall
accordingly. This is display only.
Enables the system to support gatekeeper discovery (GRQ messages from
endpoints) as described in the H.323 and H.225.0 specifications.
Local Cluster Configuration
72
Advertisement
Table of Contents
