Limiting Sbc Call Duration; Sbc Authentication; Sip Authentication Server Functionality - AudioCodes Mediant 800B User Manual

User's Manual
to detect for faxes (CNG tone) immediately after the establishment of a voice channel
(i.e., after 200 OK) and within a user-defined interval. If detected, it can then handle
the subsequent fax renegotiation by sending re-INVITE messages to both SIP entities
(originating and terminating faxes). For more information, see the parameter in
Configuring IP Profiles on page 304.
Note:
independent of the fax-related coder configuration, with the exception of the G.711
coder. If the G.711 coder is restricted by the Allowed Coders Group table, it is not
used for fax processing even if it is listed in the Coders Group Settings table for faxes.
However, support for G.711 coders for voice is not dependent upon which fax coders
are listed in the Coders Group Settings table.
28.6

Limiting SBC Call Duration

You can define a maximum allowed duration (in minutes) for SBC calls. If an established
call reaches this user-defined limit, the device terminates the call. This feature ensures
calls are properly terminated, allowing available resources for new calls. This feature is
configured using the MaxCallDuration parameter.
28.7

SBC Authentication

The device can authenticate SIP servers and SBC users (clients). The different methods of
support for this functionality is described in the following subsections.

28.7.1 SIP Authentication Server Functionality

The device can function as an Authentication server for authenticating received SIP
message requests, based on HTTP authentication Digest with MD5. Alternatively, such
requests can be authenticated by an external, third-party server.
When functioning as an Authentication server, the device can authenticate the following
SIP entities:

SIP servers: This is applicable to Server-type IP Groups. This provides protection
from rogue SIP servers, preventing unauthorized usage of device resources and
functionality. To authenticate remote servers, the device challenges the server with a
user-defined username and password that is shared with the remote server. When the
device receives an INVITE request from the remote server, it challenges the server by
replying with a SIP 401 Unauthorized response containing the WWW-Authenticate
header. The remote server then re-sends the INVITE containing an Authorization
header with authentication information based on this username-password combination
to confirm its identity. The device uses the username and password to authenticate
the message prior to processing it.

SIP clients: These are clients belonging to a User-type IP Group. This support
prevents unauthorized usage of the device's resources by rogue SIP clients. When the
device receives an INVITE or REGISTER request from a client (e.g., SIP phone) for
SIP message authorization, the device processes the authorization as follows:
1. The device challenges the received SIP message only if it is configured as a SIP
method (e.g., INVITE) for authorization. This is configured in the IP Group table,
using the 'Authentication Method List' parameter.
Version 6.8
The voice-related coder configuration (Allowed and Extended coders) is
501 Mediant 800B Gateway and E-SBC
28. SBC Overview