AudioCodes Mediant 1000B User Manual page 351

User's Manual
Parameter
Security
TLS Context Name
tls-context-name
[SIPInterface_TLSContext]
TLS Mutual Authentication
tls-mutual-auth
[SIPInterface_TLSMutualAuth
entication]
Message Policy
message-policy-name
[SIPInterface_MessagePolicy
Name]
User Security Mode
block-un-reg-users
[SIPInterface_BlockUnRegUs
ers]
Version 7.2
the SIP Interface.

If you enable direct media for the SIP Interface, make sure that
your Media Realm provides sufficient ports, as media may
traverse the device for mid-call services (e.g., call transfer).

For more information on direct media, see Direct Media on page
656.

The parameter is applicable only to the SBC application.
Assigns a TLS Context (SSL/TLS certificate) to the SIP Interface.
The default TLS Context ("default" at Index 0) is assigned to the SIP
Interface by default.
Note:

For incoming calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call or
classification to an IP Group based on Proxy Set fails.

For outgoing calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call.

To configure TLS Contexts, see ''Configuring SSL/TLS
Certificates'' on page 109.
Enables TLS mutual authentication for the SIP Interface (when the
device acts as a server).

[0] Disable = Device does not request the client certificate for TLS
connection on the SIP Interface.

[1] Enable = Device requires receipt and verification of the client
certificate to establish the TLS connection on the SIP Interface.
By default, no value is defined and the SIPSRequireClientCertificate
global parameter setting is applied.
Assigns a SIP message policy to the SIP interface.
To configure SIP Message Policy rules, see ''Configuring SIP
Message Policy Rules''.
Defines the blocking (reject) policy for incoming SIP dialog-initiating
requests (e.g., INVITE messages) from registered and unregistered
users belonging to the SIP Interface.

[-1] Not Configured = (Default) The corresponding parameter in
the SRDs table (SRD_BlockUnRegUsers) of the SRD that is
associated with the SIP Interface is applied.

[0] Accept All = Accepts requests from registered and
unregistered users.

[1] Accept Registered Users = Accepts requests only from users
registered with the device. Requests from users not registered
are rejected.

[2] Accept Registered Users from Same Source = Accepts
requests only from registered users whose source address is the
same as that registered with the device (during the REGISTER
message process). All other requests are rejected. The device
verifies whether the IP address and port are different only if the
transport protocol is UDP; otherwise, the device verifies only the
IP address. The verification is performed before any of the
351
17. Control Network
Description
Mediant 1000B Gateway & E-SBC