AudioCodes Mediant 500L User Manual page 360

Parameter
Pre Classification
Manipulation Set ID
preclassification-manset
[SIPInterface_PreClassificatio
nManipulationSet]
Media
Media Realm
media-realm-name
[SIPInterface_MediaRealm]
Direct Media
sbc-direct-media
[SIPInterface_SBCDirectMedi
a]
User's Manual
This feature is important for preventing Denial of Service (DoS)
attacks, typically initiated from the WAN. Malicious attackers can use
SIP scanners to detect ports used by SIP devices. These scanners
scan devices by sending UDP packets containing a SIP request to a
range of specified IP addresses, listing those that return a valid SIP
response. Once the scanner finds a device that supports SIP, it
extracts information from the response and identifies the type of
device (IP address and name) and can execute DoS attacks. A way
to defend the device against such attacks is to not send a SIP reject
response to these unclassified "calls" so that the attacker assumes
that no device exists at such an IP address and port.
Note:

The parameter is applicable only if you configure the device to
reject unclassified calls, which is done using the 'Unclassified
Calls' parameter (see Configuring Classification Rules on page
677).

The parameter is applicable only to the SBC application.
Assigns a Message Manipulation Set ID to the SIP Interface. This
lets you apply SIP message manipulation rules on incoming SIP
initiating-dialog request messages (not in-dialog), received on this
SIP Interface, prior to the Classification process.
By default, no Message Manipulation Set ID is defined.
To configure Message Manipulation rules, see Configuring SIP
Message Manipulation on page 415.
Note:

The Message Manipulation Set assigned to a SIP Interface that is
associated with an outgoing call, is ignored. Only the Message
Manipulation Set assigned to the associated IP Group is applied
to the outgoing call.

If both the SIP Interface and IP Group associated with the
incoming call are assigned a Message Manipulation Set, the one
assigned to the SIP Interface is applied first.

The parameter is applicable only to the SBC application.
Assigns a Media Realm to the SIP Interface.
By default, no value is defined.
To configure Media Realms, see ''Configuring Media Realms'' on
page 337.
Enables direct media (RTP/SRTP) flow (i.e., no Media Anchoring)
between endpoints associated with the SIP Interface.

[0] Disable = (Default) Media Anchoring is employed, whereby the
media stream traverses the device (and each leg uses a different
coder or coder parameters).

[1] Enable = No Media Anchoring. Media stream flows directly
between endpoints (i.e., does not traverse the device - no Media
Anchoring).

[2] Enable when Same NAT = No Media Anchoring. Media stream
flows directly between endpoints if they are located behind the
same NAT.
Note:
360
Mediant 500L Gateway & E-SBC
Description
Document #: LTRT-10532