Extension Security; Sip/Iax Password; Strategy Of Ip Access Control; Example: Local Subnet Only - Grandstream Networks UCM Series Security Manual

SIP/IAX Password

When creating a new SIP/IAX extension, the UCM administrator is required to configure "SIP/IAX Password"
which will be used for account registration authentication.
If "Enable Random Password" (on web GUIPBX SettingsGeneral Settings) is enabled, "SIP/IAX
Password" is automatically filled with a randomly generated secure password when creating the extension
on the UCM.
If "Enable Strong Password" (on web GUI PBX SettingsGeneral Settings) is enabled, the password
must be alphanumeric which should contain numeric digit and at least one lower case alphabet or upper-
case alphabet, or special character.
It is recommended to use random password and strong password to reduce the chance that the password
being guessed or cracked out.

Strategy of IP Access Control

The UCM administrator could control what IP address(s) is allowed to register to a certain extension by
editing "strategy" option under extension configuration dialog"Media" tag.
"strategy" option to the smallest set to block registration attempts from anyone that doesn't need to register
to the account.
The strategy options are:
•
"Local Subnet Only": allows register requests from local IPs only. By default, the local subnet where the
UCM is location is allowed. User could also add more local subnets where devices are allowed to
register to this extension.
•
"A Specific IP Address": allows register requests from one user specified IP only.
•
"Allow All": the registration address is the entire Internet which is least recommended.

Example: Local Subnet Only

1. Assuming there are multiple subnets within the office and the devices in all subnets can reach each
other. The network administrator would like to allow only devices in 192.168.40.x network to register to
this UCM.
2. Under UCM web UI extension dialog, configure "Local Subnet Only" for "Strategy" option and
192.168.40.0 for "Local Subnet".

EXTENSION SECURITY

UCM Security Manual
Make sure to configure the
P a g e | 11