Secured Connection Support - Aastra 6700i Series Configuration Manual

Active and Passive notification is currently supported for the following parameters:
• Global parameters:
– sip user name
– sip proxy ip
– sip proxy port
– sip registrar ip
– sip registrar port
– sip auth name
– sip password
– sip stun ip
– sip stun port
– dhcp
– ip
• Parameters for Line 0 to 9 (where N is the line number):
– sip lineN user name
– sip lineN proxy ip
– sip lineN proxy port
– sip lineN registrar ip
– sip lineN registrar port
– sip lineN auth name
– sip lineN password

Secured Connection Support

The following parameters have been introduced in Release 3.3.1 allowing Administrators the ability configure a secure
connection between the CPE and ACS:
• tr69 trusted certificates
• tr69 private key
• tr69 server authentication required
Each of these parameters are described as follows:
Parameter –
tr69 trusted certificates
Description
Format
Default Value
Range
Example
41-001373-01 REV02 – 05.2014
Configuration Files aastra.cfg, mac.cfg
Specifies a file name for a .PEM file located on the configuration server.
This file contains the User-provided certificates in PEM format. These cer-
tificates are used to validate peer certificates.
Note:
The parameter "tr69 server authentication required" must be enabled in
order for the phone to do a Client-authenticated TLS handshake.
Alphanumeric String
Empty
Not Applicable
tr69 trusted certificates: ftp://admin:admin!@1.2.3.4:50/path/tr69CA.pem
Note:
In the above example, "path" represents the directory and "tr69CA.pem"
represents the filename.
TR-069 Protocol Support
9