Ocsp Parameters - AudioCodes Mediant 4000 SBC User Manual

CHAPTER 60 Configuration Parameters Reference
Parameter
'Excluded Response Codes'
excluded-responses
[IDSExcludedResponseCode
s]

OCSP Parameters

The Online Certificate Status Protocol (OCSP) parameters are described in the table below.
'Enable OCSP Server'
configure network > ocsp > enable
[OCSPEnable]
'Primary Server IP'
configure network > ocsp > server-ip
[OCSPServerIP]
'Secondary Server IP'
configure network > ocsp > secondary-
server-ip
[OCSPSecondaryServerIP]
'Server Port'
configure network > ocsp > server-port
[OCSPServerPort]
'Default Response When Server Unreachable'
configure network > ocsp > default-
response
Defines the SIP response codes that are excluded form the
IDS count for SIP dialog establishment failures.
The valid value is 400 through to 699. The maximum length
is 100 characters. You can configure the parameter with
multiple codes, where each code is separated by a comma
(without spaces). The default is
408,422,423,480,481,486,487,500,501,502,503,504,505,60
0.
For more information, see
to Exclude from IDS
Note:
■ The parameter applies only to rejected responses
received from the remote network; not rejected
responses generated by the device (except for 404).
■ The response codes 401 and 407 are considered
authentication failures and therefore, are not applicable
to this parameter.
Table 60-27:OCSP Parameters
Parameter
- 914 -
Mediant 4000 SBC | User's Manual
Description
Configuring SIP Response Codes
on page 154.
Description
Enables or disables certificate
checking using OCSP.
■ [0] Disable (default)
■ [1] Enable
For a description of OCSP, see
Configuring Certificate Revocation
Checking (OCSP).
Defines the IP address of the OCSP
server.
The default IP address is 0.0.0.0.
Defines the IP address (in dotted-
decimal notation) of the secondary
OCSP server (optional).
The default IP address is 0.0.0.0.
Defines the OCSP server's TCP
port number.
The default port number is 2560.
Determines whether the device
allows or rejects peer certificates
when the OCSP server cannot be
contacted.