AudioCodes Mediant 4000 SBC User Manual page 347

User's Manual
Parameter
Security
TLS Context Name
tls-context-name
[SIPInterface_TLSContext]
TLS Mutual Authentication
tls-mutual-auth
[SIPInterface_TLSMutualAuth
entication]
Message Policy
message-policy-name
[SIPInterface_MessagePolicy
Name]
User Security Mode
block-un-reg-users
[SIPInterface_BlockUnRegUs
ers]
Version 7.2
The reason for the above is that in direct media, the device does
not interfere in the SIP signaling such as manipulation of IP
addresses, which is necessary for calls between LAN and WAN.

To enable direct media for all calls, use the global parameter
SBCDirectMedia. If enabled, even if the SIP Interface is disabled
for direct media, direct media is employed for calls belonging to
the SIP Interface.

If you enable direct media for the SIP Interface, make sure that
your Media Realm provides sufficient ports, as media may
traverse the device for mid-call services (e.g., call transfer).

For more information on direct media, see Direct Media on page
462.
Assigns a TLS Context (SSL/TLS certificate) to the SIP Interface.
The default TLS Context ("default" at Index 0) is assigned to the SIP
Interface by default.
Note:

For incoming calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call or
classification to an IP Group based on Proxy Set fails.

For outgoing calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call.

To configure TLS Contexts, see ''Configuring SSL/TLS
Certificates'' on page 103.
Enables TLS mutual authentication for the SIP Interface (when the
device acts as a server).

[0] Disable = Device does not request the client certificate for TLS
connection on the SIP Interface.

[1] Enable = Device requires receipt and verification of the client
certificate to establish the TLS connection on the SIP Interface.
By default, no value is defined and the SIPSRequireClientCertificate
global parameter setting is applied.
Assigns a SIP message policy to the SIP interface.
To configure SIP Message Policy rules, see ''Configuring SIP
Message Policy Rules''.
Defines the blocking (reject) policy for incoming SIP dialog-initiating
requests (e.g., INVITE messages) from registered and unregistered
users belonging to the SIP Interface.

[-1] Not Configured = (Default) The corresponding parameter in
the SRDs table (SRD_BlockUnRegUsers) of the SRD that is
associated with the SIP Interface is applied.

[0] Accept All = Accepts requests from registered and
unregistered users.

[1] Accept Registered Users = Accepts requests only from users
registered with the device. Requests from users not registered
are rejected.

[2] Accept Registered Users from Same Source = Accepts
347
17. Control Network
Description
Mediant 4000 SBC