Configuring The Certificates - AudioCodes Mediant 2000 User Manual

SIP User's Manual
Parameter
Local Port Range
[AccessList_Start_Port]
[AccessList_End_Port]
Protocol
[AccessList_Protocol]
Packet Size
[AccessList_Packet_Size]
Byte Rate
[AccessList_Byte_Rate]
Burst Bytes
[AccessList_Byte_Burst]
Action Upon Match
[AccessList_Allow_Type]
Match Count
[AccessList_MatchCount]
3.3.4.4

Configuring the Certificates

The 'Certificates' page is used for both HTTPS and SIP TLS secure communication:

Replacing the server certificate (refer to ''Server Certificate Replacement''

Replacing the client certificates (refer to ''Client Certificates''

Regenerating Self-Signed Certificates (refer to ''Self-Signed Certificates''

Updating the private key (using HTTPSPkeyFileName, as described in the Product
Reference Manual ).
3.3.4.4.1 Server Certificate Replacement
The device is supplied with a working Secure Socket Layer (SSL) configuration consisting
of a unique self-signed server certificate. If an organizational Public Key Infrastructure (PKI)
is used, you may wish to replace this certificate with one provided by your security
administrator.
Version 6.0
255.255.0.0).

A value of 24 corresponds to IPv4 subnet class C (network mask
of 255.255.255.0).
The IP address of the sender of the incoming packet is trimmed in
accordance with the prefix length (in bits) and then compared to the
parameter 'Source IP'.
The destination UDP/TCP ports (on this device) to which packets are
sent.
The valid range is 0 to 65535.
Note: When the protocol type isn't TCP or UDP, the entire range must
be provided.
The protocol type (e.g., UDP, TCP, ICMP, ESP or 'Any'), or the IANA
protocol number (in the range of 0 (Any) to 255).
Note: This field also accepts the abbreviated strings 'SIP' and 'HTTP'.
Specifying these strings implies selection of the TCP or UDP
protocols, and the appropriate port numbers as defined on the device.
Maximum allowed packet size.
The valid range is 0 to 65535.
Note: When filtering fragmented IP packets, this field relates to the
overall (re-assembled) packet size, and not to the size of each
fragment.
Expected traffic rate (bytes per second).
Tolerance of traffic rate limit (number of bytes).
Action upon match (i.e., 'Allow' or 'Block').
A read-only field providing the number of packets accepted / rejected
by the specific rule.
81
3. Web-Based Management
Description
on page
on page 81 )
84 )
on page 85 )
March 2010