HP ProCurve 7102dl Reference Manual page 447

Secure router sros command line interface
Table of Contents

Advertisement

SROS Command Line Interface Reference Guide
Global Configuration Mode Command Set
ip sip proxy
Use the ip sip proxy command to enable the SROS SIP proxy server functionality for SIP packets to or
from User Agents (UAs) in the location database. The SIP proxy server is used to accept SIP packets on a
network, read the packet, route the packet, and maintain a database of information pertaining to SIP UAs
located on the network. To enable the SIP proxy server to intercept ALL SIP packets and route them
(regardless of whether the UA is registered in the database location), use this command in conjunction with
the ip firewall alg sip command. For more details on SIP operation, refer to the Technology Review section
of the command ip firewall alg [ftp | h323 | h323 timeout | pptp | sip] on page 399. Use the no form of this
command to disable the SIP proxy server.
Syntax Description
No subcommands.
Default Values
By default, the SIP stack is disabled. Refer to the Functional Notes section for more details on the default state
of SIP operation in the SROS.
Functional Notes
By default, the SROS SIP ALG is enabled. This ALG allows the firewall to examine the ALL SIP packets it
identifies and maintain knowledge of SIP transmissions on the network based on the SIP header. The SIP
ALG requires the use of the SIP stack and the SIP proxy server in order to properly route SIP calls and
maintain the SIP information. When the SIP ALG is enabled, the SIP stack and SIP proxy server are
automatically enabled. For proper SIP operation, the firewall must also be configured to allow for dynamic
holes for the RTP/RTCP traffic associated with SIP calls between User Agents (UAs). This functionality
must be manually enabled using the ip rtp firewall-traversal command.
To completely disable SIP operation in the SROS, the following commands should be entered: no ip
firewall alg sip, no ip sip, no ip sip proxy, and no ip rtp firewall-traversal. The no ip firewall alg sip
command disables the SIP ALG. The no ip sip command disables the SIP stack and frees all memory
allocated to the stack. The no ip sip proxy command disables the SIP proxy server. This command is not
necessary to disable SIP functionality (because the no ip sip effectively shuts the proxy server down by
disabling the stack), but should be entered for a cleaner configuration.
Usage Examples
The following example enables the proxy server:
ProCurve(config)#ip sip proxy
5991-2114
© Copyright 2007 Hewlett-Packard Development Company, L.P.
445

Advertisement

Table of Contents
loading

This manual is also suitable for:

Procurve secure router 7203dl j8753a j8753a

Table of Contents