AudioCodes Mediant 3000 User Manual page 291

User's Manual
Parameter
SBC Parameters
Classify By Proxy Set
[IPGroup_ClassifyByProxySet]
Max. Number of Registered
Users
[IPGroup_MaxNumOfRegUsers
]
Inbound Message Manipulation
Set
[IPGroup_InboundManSet]
Version 6.8
Enables classification of incoming SIP dialogs (INVITEs) to Server-
type IP Groups based on Proxy Set (assigned using the
IPGroup_ProxySetName parameter).

[0] Disable

[1] Enable = (Default) The device searches the Proxy Set table
for a Proxy Set that is configured with the same source IP
address as that of the incoming INVITE (if host name, then
according to the dynamically resolved IP address list). If such a
Proxy Set is found, the device classifies the INVITE as
belonging to the IP Group associated with the Proxy Set.
Note:

The parameter is applicable only to Server-type IP Groups.

For security, it is recommended to classify SIP dialogs based on
Proxy Set only if the IP address of the IP Group is unknown. In
other words, if the Proxy Set associated with the IP Group is
configured with an FQDN. In such cases, the device classifies
incoming SIP dialogs to the IP Group based on the DNS-
resolved IP address. If the IP address is known, it is
recommended to use a Classification rule instead (and disable
the Classify by Proxy Set feature), where the rule is configured
with not only the IP address, but also with SIP message
characteristics to increase the strictness of the classification
process (see Configuring Classification Rules on page 529).
The reason for preferring classification based on Proxy Set
when the IP address is unknown is that IP address forgery
(commonly known as IP spoofing) is more difficult than
malicious SIP message tampering and therefore, using a
Classification rule without an IP address offers a weaker form of
security. When classification is based on Proxy Set, the
Classification table for the specific IP Group is ignored.

If you have assigned the same Proxy Set to multiple IP Groups,
disable the parameter and instead, use Classification rules to
classify incoming SIP dialogs to these IP Groups. If the
parameter is enabled, the device is unable to correctly classify
incoming INVITEs to their appropriate IP Groups.

Classification by Proxy Set occurs only if classification based on
the device's registration database fails (i.e., the INVITE is not
from a registered user).
Defines the maximum number of users in this IP Group that can
register with the device. By default, no limitation exists for
registered users.
Note: This field is applicable only to User-type IP Groups.
Assigns a Message Manipulation Set (rule) to the IP Group for SIP
message manipulation on the inbound message. To configure
Message Manipulation rules, see Configuring SIP Message
Manipulation on page 311.
Note: The IPGroup_SIPGroupName parameter overrides inbound
message manipulation rules (assigned to the
IPGroup_InboundManSet parameter) that manipulate the host
name in Request-URI, To, and/or From SIP headers. If you want to
manipulate the host name using message manipulation rules in any
of these SIP headers, you must apply your manipulation rule
291
18. Control Network
Description
Mediant 3000