ShoreTel 4500 Installation Manual page 44

Configuring the VPN Concentrator
Parameter
Enable Stunnel Server
Timeout
Stunnel Server Tunnel
Timeout
Enable TCP No Delay
MAC Whitelist Validation
MAC Blacklist Validation
38
Description
This option enables/disables the Stunnel server timeout
feature on the system. By default this feature is disabled.
If enabled, the "Stunnel Server Tunnel Timeout" will be
set to a default value of 86400 seconds.
Specify the timeout value (in seconds) for all SSL VPN
sessions. The default value is 86400 seconds (one day).
Any SSL VPN session established for the number of
seconds specified in this parameter will be terminated.
If enabled, the Stunnel server will send packets to
remote clients without delay (as fast as it receives them)
rather than coalescing packets to save overhead. This is
important for voice traffic since it is very sensitive to
delay. The trade off is more overhead and therefore, more
network traffic. By default, TCP No Delay is enabled.
If enabled, the switch ensures validation of the MAC
Address received in the client request against the
configured MAC whitelist. If the client MAC Address
does not match any entry in the whitelist, the request is
rejected. MAC Whitelist is configurable using the 'MAC
Whitelist' submenu of Stunnel. If both Blacklist and
Whitelist validations are enabled, then Blacklist
validation precedes Whitelist validation.
See See "Configuring the Stunnel MAC Whitelist
Database" on page 47. to configure the MAC whitelist
database.
If enabled, the switch ensures validation of the MAC
Address received in the client request against the
configured MAC blacklist. If the client MAC Address
matches any entry in the blacklist, the request is
rejected. MAC Blacklist is configurable using the 'MAC
Blacklist' submenu of Stunnel. If both Blacklist and
Whitelist validations are enabled, then Blacklist
validation precedes Whitelist validation.
See Section Configuring the Stunnel MAC Address
Blacklist Database on page 48
blacklist database.
Chapter 4
to configure the MAC