AudioCodes Mediant 4000 SBC User Manual page 362

Parameter
Authentication Mode
authentication-mode
[IPGroup_AuthenticationMod
e]
Authentication Method List
authentication-method-list
User's Manual
all the registered users. This single port is configured for the SIP
Interface ('UDP Port' parameter) associated with the Proxy Set of
the proxy server.

[1] Enable = The device assigns each registered user a unique
local port, chosen from a configured UDP port range. The port
range is configured for the SIP Interface ('Additional UDP Ports'
parameter) associated with the proxy server.
The device assigns a unique port upon the first REGISTER request
received from the user. Subsequent SIP messages other than
REGISTER messages (e.g., INVITE) from the user are sent to the
proxy server on this unique local port. The device rejects the SIP
request if there is no available unique port for use (due to the
number of registered users exceeding the configured port range).
The same unique port is also used for registration refreshes. The
device de-allocates the port for registration expiry. For SIP
requests from the proxy server, the local port on which they are
received is irrelevant (unique port or any other port); the device
does not use this port to identify the registered user.
Note:

This feature does not apply to SIP requests received from non-
registered users. For these users, the device sends all requests to
the proxy server on the single port configured for the SIP Interface
('UDP Port' parameter).

For HA systems, the unique port assigned to a registered user is
also used after an HA switchover.

This feature is applicable only if the user initiates registration (i.e.,
user sends the REGISTER request). In other words, the
'Registration Mode' parameter of the IP Group of the user must be
configured to User Initiates Registration.
Defines the authentication mode.

[0] User Authenticates = (Default) The device does not handle the
authentication, but simply forwards the authentication messages
between the SIP user agents.

[1] SBC as Client = The device authenticates as a client. It receives
the 401/407 response from the proxy requesting for authentication.
The device sends the proxy the authorization credentials (i.e.,
username and password) according to one of the following:
1)Account configured in the Accounts table (only if authenticating
Server-type IP Group), 2) global username and password
parameters (only if authenticating Server-type IP Group), 3) User
Information file, or 4) sends request to users requesting credentials
(only if authenticating User-type IP Group). For more information
on Accounts, see Configuring Registration Accounts on page 377.

[2] SBC as Server = The device acts as an Authentication server:

Authenticates SIP clients, using the usernames and passwords
in the User Information table (see SBC User Information for
SBC User Database on page 635). This is applicable only to
User-type IP Groups.

Authenticates SIP severs. This is applicable only to Server-
type IP Groups.
Defines SIP methods received from the IP Group that must be
challenged by the device when the device acts as an Authentication
server. If no methods are configured, the device doesn't challenge any
362
Mediant 4000 SBC
Description
Document #: LTRT-40203