Configuring The Certificates - AudioCodes Mediant 1000 User Manual

SIP User's Manual
Parameter
Protocol
[AccessList_Protocol]
Packet Size
[AccessList_Packet_Size]
Byte Rate
[AccessList_Byte_Rate]
Burst Bytes
[AccessList_Byte_Burst]
Action Upon Match
[AccessList_Allow_Type]
Match Count
[AccessList_MatchCount]
3.3.4.4

Configuring the Certificates

The 'Certificates' page is used for both HTTPS and SIP TLS secure communication:

Replacing the server certificate (refer to ''Server Certificate Replacement''

Replacing the client certificates (refer to ''Client Certificates''

Regenerating Self-Signed Certificates (refer to ''Self-Signed Certificates''

Updating the private key (using HTTPSPkeyFileName, as described in the Product
Reference Manual ).
3.3.4.4.1 Server Certificate Replacement
The device is supplied with a working Secure Socket Layer (SSL) configuration consisting
of a unique self-signed server certificate. If an organizational Public Key Infrastructure (PKI)
is used, you may wish to replace this certificate with one provided by your security
administrator.

To replace the device's self-signed certificate:
1. Your network administrator should allocate a unique DNS name for the device (e.g.,
dns_name.corp.customer.com). This DNS name is used to access the device and
should therefore, be listed in the server certificate.
2. If the device is operating in HTTPS mode, then set the parameter 'Secured Web
Connection (HTTPS)' to 'HTTP and HTTPS' (0) (refer to ''Configuring the General
Security Settings''
in case the new certificate doesn't work. Restore the previous setting after testing the
configuration.
Version 6.0
The protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any'), or the IANA
protocol number (in the range of 0 (Any) to 255).
Note: This field also accepts the abbreviated strings 'SIP' and 'HTTP'.
Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the device.
Maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Expected traffic rate (bytes per second).
Tolerance of traffic rate limit (number of bytes).
Action upon match (i.e., 'Allow' or 'Block').
A read-only field providing the number of packets accepted / rejected
by the specific rule.
on page 93 ) to ensure you have a method of accessing the device
89
3. Web-Based Management
Description
on page
on page 89 )
92 )
on page 92 )
March 2010