AudioCodes Mediant 1000 User Manual page 315

SIP User's Manual
ini File Parameter
OCSPServerIP
OCSPServerPort
OCSPDefaultResponse Determines the default OCSP behavior when the server cannot be
TLSRemoteSubjectNam
e
EnableSecureStartup
SIPSRequireClientCerti
ficate
IPSec Parameters
EnableIPSec
IPSecDPDMode
IPSEC_SPD_TABLE
Version 5.4
Defines the IP address of the OCSP server.
The default IP address is 0.0.0.0.
Defines the OCSP server's TCP port number.
The default port number is 2560.
contacted.
[0] = Rejects peer certificate (default).
[1] = Allows peer certificate.
Defines the Subject Name that is compared with the name defined in the
remote side certificate when establishing TLS connections.
If the SubjectAltName of the received certificate is not equal to any of the
defined Proxies Host names/IP addresses and is not marked as 'critical',
the Common Name (CN) of the Subject field is compared with this value. If
not equal, the TLS connection is not established.
The valid range is a string of up to 49 characters.
Note: This parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
Enables the Secure Startup mode. In this mode, downloading the *.ini file
to the device is restricted to a URL provided in initial configuration (see
parameter IniFileURL) or using DHCP.
[0] Disable (default).
[1] Enable = disables TFTP and allows secure protocols such as
HTTPS to fetch the device configuration.
Note: For a detailed explanation on Secure Startup, refer to the Product
Reference Manual.
Determines the device's behavior when acting as a server for TLS
connections.
[0] = The device does not request the client certificate (default).
[1] = The device requires receipt and verification of the client certificate
to establish the TLS connection.
Notes:
The SIPS certificate files can be changed using the parameters
HTTPSCertFileName and HTTPSRootFileName.
This parameter cannot be changed on-the-fly and requires a device
reset.
For a description of this parameter, refer to ''Configuring the General
Security Settings'' on page 123.
For a description of this parameter, refer to ''Configuring the General
Security Settings'' on page 123.
This ini file table parameter configures the IPSec SPD table. The format of
this parameter is as follows:
[IPSEC_SPD_TABLE]
Format SPD_INDEX = IPSecMode, IPSecPolicyRemoteIPAddress,
IPSecPolicySrcPort, IPSecPolicyDStPort,IPSecPolicyProtocol,
Description
315
4. ini File Configuration
May 2008