AudioCodes Mediant 2000 User Manual page 279

SIP User's Manual
Parameter
Secure Hypertext Transport Protocol (HTTPS) Parameters
HTTPSOnly
HTTPSPort
HTTPSCipherString
WebAuthMode
HTTPSRequireClientCertificate
Version 5.6
[IPSec_IKEDB_Table]
Format IKE_DB_INDEX = IKEPolicySharedKey,
IKEPolicyProposalEncryption_0,
IKEPolicypRoposalAuthentication_0,
IKEPolicyProposalDHGroup_0, IKEPolicyProposalEncryption_1,
IKEPolicyProposalAuthentication_1,
IKEPolicyProposalDHGroup_1, IKEPolicyLifeInSec,
IkePolicyAuthenticationMethod;
IPSEC_IKEDB_TABLE 0 = 123456789, 1, 2, 0, 2, 2, 1, 28800, 0;
[\IPSEC_IKEDB_TABLE]
In the example above, a single IKE peer is configured and a pre-
shared key authentication is selected. Its pre-shared key is
123456789. Two security proposals are configured:
DES/SHA1/786DH and 3DES/SHA1/1024DH
Notes:
Each row in the table refers to a different IKE peer.
To support more than one Encryption / Authentication / DH
Group proposal, for each proposal specify the relevant
parameters in the Format line.
The proposal list must be contiguous.
To configure the IKE table using the Web interface, refer to
''Configuring the IKE Table'' on page 117.
For an explanation on using ini file table parameters, refer to
''Structure of ini File Table Parameters'' on page 257.
For a description of this parameter, refer to ''Configuring the
General Security Settings'' on page 109.
Determines the local Secured HTTPS port of the device.
The valid range is 1 to 65535 (other restrictions may apply within
this range).
The default port is 443.
Defines the Cipher string for HTTPS (in OpenSSL cipher list
format). For the valid range values, refer to URL
http://www.openssl.org/docs/apps/ciphers.html. The default is
EXP:RC4.
For a description of this parameter, refer to ''Configuring the
General Security Settings'' on page 109.
Requires client certificates for HTTPS connection. The client
certificate must be preloaded to the device, and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device, for the client certificate
to be verified.
[0] = Client certificates are not required (default).
[1] = Client certificates are required.
279
4. ini File Configuration
Description
November 2008