AudioCodes Mediant 4000 SBC User Manual page 348

Parameter
Enable Un-Authenticated
Registrations
enable-un-auth-registrs
[SIPInterface_EnableUnAuthe
nticatedRegistrations]
User's Manual
requests only from registered users whose source address is the
same as that registered with the device (during the REGISTER
message process). All other requests are rejected. If the transport
protocol is UDP, the device verifies the IP address and port;
otherwise, it verifies only the IP address. The verification is
performed before any of the device's call handling processes (i.e.,
Classification, Manipulation and Routing).
Note:

The parameter is applicable only to calls belonging to User-type
IP Groups.

The feature is not applicable to REGISTER requests.

The option, Accept Registered Users from Same Source [2] does
not apply to registration refreshes. These requests are accepted
even if the source address is different to that registered with the
device.

When the device rejects a call, it sends a SIP 500 "Server Internal
Error" response to the user. In addition, it reports the rejection
(Dialog establish failure - Classification failure) using the Intrusion
Detection System (IDS) feature (see Configuring IDS Policies on
page 172), by sending an SNMP trap.

If you configure the parameter to any value other than default [-1],
it overrides the corresponding parameter in the SRDs table
(SRD_BlockUnRegUsersInterface) for the SRD associated with
the SIP Interface.
Enables the device to accept REGISTER requests and register them
in its registration database from new users that have not been
authenticated by a proxy/registrar server (due to proxy down) and
thus, re-routed to a User-type IP Group.
In normal operation scenarios in which the proxy server is available,
the device forwards the REGISTER request to the proxy and if
authenticated by the proxy (i.e., device receives a success
response), the device adds the user to its registration database. The
routing to the proxy is according to the SBC IP-to-IP Routing table
where the destination is the proxy's IP Group. However, when the
proxy is unavailable (e.g., due to network connectivity loss), the
device can accept REGISTER requests from new users if a matching
alternative routing rule exists in the SBC IP-to-IP Routing table
where the destination is the user's User-type IP Group (i.e., call
survivability scenarios) and if the parameter is enabled.

[-1] Not Configured = (Default) The corresponding parameter in
the SRDs table (SRD_EnableUnAuthenticatedRegistrations) of
the SRD associated with the SIP Interface is applied.

[0] Disable = The device rejects REGISTER requests from new
users that were not authenticated by a proxy server.

[1] Enable = The device accepts REGISTER requests from new
users even if they were not authenticated by a proxy server, and
registers the user in its registration database.
Note:

Regardless of the parameter, the device always accepts
registration refreshes from users that are already registered in its
database.

If configured to Disable or Enable, the parameter overrides the
'Enable Un-Authenticated Registrations' parameter settings of the
348
Mediant 4000 SBC
Description
Document #: LTRT-40203