AudioCodes Mediant 4000 SBC User Manual page 377

CHAPTER 18 Core Entities
'TLS Mutual Authentication'
tls-mutual-auth
[SIPInterface_
TLSMutualAuthentication]
'Message Policy'
message-policy-name
[SIPInterface_MessagePolicyName]
'User Security Mode'
block-un-reg-users
[SIPInterface_BlockUnRegUsers]
Parameter Description
■ To configure TLS Contexts, see
SSL/TLS Certificates.
Enables TLS mutual authentication for the SIP
Interface (when the device acts as a server).
■ [0] Disable = Device does not request the client
certificate for TLS connection on the SIP
Interface.
■ [1] Enable = Device requires receipt and
verification of the client certificate to establish the
TLS connection on the SIP Interface.
By default, no value is defined and the
SIPSRequireClientCertificate global parameter
setting is applied.
Assigns a SIP message policy to the SIP interface.
To configure SIP Message Policy rules, see
Configuring SIP Message Policy
Defines the blocking (reject) policy for incoming SIP
dialog-initiating requests (e.g., INVITE messages)
from registered and unregistered users belonging to
the SIP Interface.
■ [-1] Not Configured = (Default) The
corresponding parameter in the SRDs table
(SRD_BlockUnRegUsers) of the SRD that is
associated with the SIP Interface is applied.
■ [0] Accept All = Accepts requests from
registered and unregistered users.
■ [1] Accept Registered Users = Accepts
requests only from users registered with the
device. Requests from users not registered are
rejected.
■ [2] Accept Registered Users from Same
Source = Accepts requests only from registered
users whose source address is the same as that
registered with the device (during the REGISTER
message process). All other requests are
rejected. If the transport protocol is UDP, the
device verifies the IP address and port;
otherwise, it verifies only the IP address. The
verification is performed before any of the
device's call handling processes (i.e.,
Classification, Manipulation and Routing).
Note:
■ The parameter is applicable only to calls
belonging to User-type IP Groups.
■ The feature is not applicable to REGISTER
requests.
- 344 -
Mediant 4000 SBC | User's Manual
Configuring
Rules.