Codec Tieline ViA User Manual page 162

162 ViA User Manual v3
into non-standard port numbers. Adjust ports using the Options panel in the Toolbox
HTML5 Web-GUI, or see
4. By default SIP interfaces are disabled to avoid unwanted traffic. The SIP Filter Lists panel
in the Toolbox HTML5 Web-GUI allows filtering of SIP URIs and User Agents to provide
greater security when using SIP. See
information.
5. An SSL security certificate can be installed on each codec in your network to ensure it is a
trusted device within your network. See
6. Firewall settings to enable or disable a range of firewall-related network services, or limit ping
to only work in a local subnet. Adjust settings using the Options panel in the Toolbox
HTML5 Web-GUI, or see
7. Implementation of CSRF protection (Cross-Site Request Forgery). Enable and disable this
setting using the Options panel in the Toolbox HTML5 Web-GU, or see
Security
Be sure to document any port changes because this information will be required if you need to
contact Tieline or other online support services.
Understanding SIP Terminology
What is a URI?
A Uniform Resource Identifier (URI) is a string of characters identifying a name or resource on the
internet. A Uniform Resource Locator (URL) is a URI specifying where an identified resource is
available (e.g. network location) and the mechanism for retrieving it. E.g. http://twitter.com, where
http:// is the protocol used to retrieve information from "twitter.com" which is the network location.
What is a SIP URI?
SIP URIs can be used to whitelist or blacklist devices from connecting to a codec. A SIP URI is the
address or characters used to call another person via SIP. A SIP URI is essentially a user's 'contact
address' and is used by VoIP phones and other devices to call using SIP. An example of a SIP URI
is: "sip:tieline_test1@getonsip.com". When dialing using Tieline codecs "sip:" is automatically
placed in the dial string and does not need to be entered. SIP URIs can be used to whitelist or
blacklist devices from connecting to a codec.
Important Notes:
· The default UDP audio port when using SIP for a peer-to-peer connection is 5004 in
Tieline codecs.
· Enter the IP address or SIP URI, then a full colon and the session port number to
change the session port from the default setting of UDP port 5060, e.g.
"sip:tieline_test1@getonsip.com:5070"
· Tieline codecs automatically add "sip:" to the address entered in the Address field
when dialing, so it's not necessary to add this.
· To only allow a predefined list of codecs to connect, add them to the URI Whitelist and
add a wildcard (asterisk) * to the URI Blacklist: all incoming calls will be blocked
except for codecs in the Whitelist.
What is a SIP User Agent?
A user agent is a software agent acting on behalf of a user. Hackers use SIP user agents or
'botnets' to scan for open ports on the internet. When they locate open ports they can force their
way into SIP servers and scan for valid accounts to use for fraudulent purposes, like making free
international calls. Known user agents like "sipvicious" and "friendly-scanner" can be added to a
User Agent Blacklist in Tieline codecs to stop them from accessing them.
Configuring TCP/UDP
Firewall
for more info.
Ports.
Configure SIP White and Blacklists
Installing a Security Certificate
Configuration.
for more
for more information.
Enabling CSRF
© Tieline Research Pty. Ltd. 2020