User`s manual

Version 5.4 315 May 2008
SIP User's Manual 4. ini File Configuration
ini File Parameter Description
OCSPServerIP
Defines the IP address of the OCSP server.
The default IP address is 0.0.0.0.
OCSPServerPort
Defines the OCSP server's TCP port number.
The default port number is 2560.
OCSPDefaultResponse
Determines the default OCSP behavior when the server cannot be
contacted.
 [0] = Rejects peer certificate (default).
 [1] = Allows peer certificate.
TLSRemoteSubjectNam
e
Defines the Subject Name that is compared with the name defined in the
remote side certificate when establishing TLS connections.
If the SubjectAltName of the received certificate is not equal to any of the
defined Proxies Host names/IP addresses and is not marked as 'critical',
the Common Name (CN) of the Subject field is compared with this value. If
not equal, the TLS connection is not established.
The valid range is a string of up to 49 characters.
Note: This parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
EnableSecureStartup
Enables the Secure Startup mode. In this mode, downloading the *.ini file
to the device is restricted to a URL provided in initial configuration (see
parameter IniFileURL) or using DHCP.
 [0] Disable (default).
 [1] Enable = disables TFTP and allows secure protocols such as
HTTPS to fetch the device configuration.
Note: For a detailed explanation on Secure Startup, refer to the Product
Reference Manual.
SIPSRequireClientCerti
ficate
Determines the device's behavior when acting as a server for TLS
connections.
 [0] = The device does not request the client certificate (default).
 [1] = The device requires receipt and verification of the client certificate
to establish the TLS connection.
Notes:
 The SIPS certificate files can be changed using the parameters
HTTPSCertFileName and HTTPSRootFileName.
 This parameter cannot be changed on-the-fly and requires a device
reset.
IPSec Parameters
EnableIPSec
For a description of this parameter, refer to ''Configuring the General
Security Settings'' on page 123.
IPSecDPDMode
For a description of this parameter, refer to ''Configuring the General
Security Settings'' on page 123.
IPSEC_SPD_TABLE
This ini file table parameter configures the IPSec SPD table. The format of
this parameter is as follows:
[IPSEC_SPD_TABLE]
Format SPD_INDEX = IPSecMode, IPSecPolicyRemoteIPAddress,
IPSecPolicySrcPort, IPSecPolicyDStPort,IPSecPolicyProtocol,