Aastra 9000i Series Administrator's Manual page 158

Parameter
Parameter in
In
Aastra Web UI
IP Phone UI
NA NA
N/A Root and
Intermediate
Certificates
Filename
41-001343-01 Rev 02, Release 3.2.2
Parameters in
Configuration Files
sip persistent tls keep Allows you to configure the keep-alive feature for
alive persistent TLS connections only. When this feature is
configured, the phone will send keep-alive pings to the
proxy server at configured intervals.
The keep-alive feature for persistent TLS connections
performs the following functionalities:
•
•
•
•
sips root and Allows you to specify the SIP Root and Intermediate
intermediate Certificate files to use when the phone uses the TLS
certificates transport protocol to setup a call.
The Root and Intermediate Certificate files contain one
root certificate and zero or more intermediate certificates
which must be placed in order of certificate signing with
root certificate being the first in the file. If the local
certificate is signed by some well known certificate
authority, then that authority provides the user with the
Root and Intermediate Certificate files (most likely just CA
root certificate).
This parameter is required when configuring TLS (optional
for Persistent TLS.)
Note: The certificate files must use the format ".pem". To
create custom certificate files to use on your IP phone,
contact Aastra Technical Support.
For more information, see Chapter 6, the section,
"Transport Layer Security (TLS)"
Description
After a persistent TLS connection is established or
re-established, activate the keep-alive, which will send
CRLF to peer periodically.
The phone will retry the connection automatically when
a persistent TLS connection is down.
When a persistent TLS connection is re-established
(primary is up or primary is down and backup is up),
refresh registration of the accounts associated with the
connection.
When a persistent TLS connection to primary is down,
switch to backup if connection to backup is working.
on page 6-26.
3-71