AudioCodes Mediant 4000 SBC User Manual page 354

Parameter
SBC General
Classify By Proxy Set
classify-by-proxy-set
[IPGroup_ClassifyByProxyS
et]
SBC Operation Mode
sbc-operation-mode
[IPGroup_SBCOperationMo
de]
User's Manual
at least one of them is "alive", the displayed status is "Connected".
To view the connected proxy server, see ''Viewing Proxy Set
Status'' on page 720.

The "Connected" status also applies to scenarios where the device
rejects calls with the IP Group due to low QoE (e.g., low MOS),
despite connectivity.
Enables classification of incoming SIP dialogs (INVITEs) to Server-
type IP Groups based on Proxy Set (assigned using the
IPGroup_ProxySetName parameter).

[0] Disable

[1] Enable = (Default) The device searches the Proxy Sets table for
a Proxy Set that is configured with the same source IP address as
that of the incoming INVITE (if host name, then according to the
dynamically resolved IP address list). If such a Proxy Set is found,
the device classifies the INVITE as belonging to the IP Group
associated with the Proxy Set.
Note:

The parameter is applicable only to Server-type IP Groups.

For security, it is recommended to classify SIP dialogs based on
Proxy Set only if the IP address of the IP Group is unknown. In
other words, if the Proxy Set associated with the IP Group is
configured with an FQDN. In such cases, the device classifies
incoming SIP dialogs to the IP Group based on the DNS-resolved
IP address. If the IP address is known, it is recommended to use a
Classification rule instead (and disable the Classify by Proxy Set
feature), where the rule is configured with not only the IP address,
but also with SIP message characteristics to increase the strictness
of the classification process (see Configuring Classification Rules
on page 491).
The reason for preferring classification based on Proxy Set when
the IP address is unknown is that IP address forgery (commonly
known as IP spoofing) is more difficult than malicious SIP message
tampering and therefore, using a Classification rule without an IP
address offers a weaker form of security. When classification is
based on Proxy Set, the Classification table for the specific IP
Group is ignored.

If you have assigned the same Proxy Set to multiple IP Groups,
disable the parameter and instead, use Classification rules to
classify incoming SIP dialogs to these IP Groups. If the parameter
is enabled, the device is unable to correctly classify incoming
INVITEs to their appropriate IP Groups.

Classification by Proxy Set occurs only if classification based on
the device's registration database fails (i.e., the INVITE is not from
a registered user).
Defines the device's operational mode for the IP Group.

[-1] Not Configured = (Default)

[0] B2BUA = Device operates as a back-to-back user agent
(B2BUA), changing the call identifiers and headers between the
inbound and outbound legs.

[1] Call Stateful Proxy = Device operates as a Stateful Proxy,
passing the SIP message transparently between inbound and
354
Mediant 4000 SBC
Description
Document #: LTRT-40203