Sip Minimumtlsversion; Sip Preferredipsignaling; Sip Proxy [N] Address; Sip Tlsverify - Cisco TelePresence SX10 Quick Set Administrator's Manual

Cisco TelePresence SX10 Quick Set

Introduction

SIP MinimumTLSVersion

Set the lowest version of the TLS (Transport Layer Security) protocol that is allowed.
Requires user role: ADMIN
Default value: TLSv1.0
Value space: TLSv1.0/TLSv1.1/TLSv1.2
TLSv1.0: Support TLS version 1.0 or higher.
TLSv1.1: Support TLS version 1.1 or higher.
TLSv1.2: Support TLS version 1.2 or higher.

SIP PreferredIPSignaling

Define the preferred IP version for signaling (audio, video, data). Only applicable when both
Network IPStack and Conference CallProtocolIPStack are set to Dual, and the network does
not have a mechanism for choosing the preferred IP version. It also determines the priority
of the A/AAAA lookups in DNS, so that the preferred IP version is used for registration.
Requires user role: ADMIN
Default value: IPv4
Value space: IPv4/IPv6
IPv4: The preferred IP version for signaling is IPv4.
IPv6: The preferred IP version for signaling is IPv6.

SIP Proxy [n] Address

n: 1..4
The Proxy Address is the manually configured address for the outbound proxy. It is possible
to use a fully qualified domain name, or an IP address. The default port is 5060 for TCP and
UDP but another one can be provided.
Requires user role: ADMIN
Default value: ""
Value space: String (0..255)
A valid IPv4 address, IPv6 address or DNS name.
D15330.14 SX10 Administrator Guide CE9.7, APRIL 2019.
Configuration Peripherals Maintenance

SIP TlsVerify

For TLS connections a SIP CA-list can be uploaded to the video system. This can be done
from the web interface.
Requires user role: ADMIN
Default value: Off
Value space: Off/On
Off: Set to Off to allow TLS connections without verifying them. The TLS connections
are allowed to be set up without verifying the x.509 certificate received from the server
against the local CA-list. This should typically be selected if no SIP CA-list has been
uploaded.
On: Set to On to verify TLS connections. Only TLS connections to servers, whose x.509
certificate is validated against the CA-list, will be allowed.

SIP Turn DiscoverMode

Define the discover mode to enable/disable the application to search for available Turn
servers in DNS. Before making calls, the system will test if port allocation is possible.
Requires user role: ADMIN
Default value: On
Value space: Off/On
Off: Set to Off to disable discovery mode.
On: When set to On, the system will search for available Turn servers in DNS, and before
making calls the system will test if port allocation is possible.

SIP Turn DropRflx

DropRflx will make the endpoint force media through the Turn relay, unless the remote
endpoint is on the same network.
Requires user role: ADMIN
Default value: Off
Value space: Off/On
Off: Disable DropRflx.
On: The system will force media through the Turn relay when the remote endpoint is on
another network.
www.cisco.com — Copyright © 2019 Cisco Systems, Inc. All rights reserved.
140
Administrator Guide
System settings System settings Appendices