User`s manual

SIP User's Manual 6. Gateway's ini File Configuration
Version 5.0 145 October 2006
6.9 Security Parameters
Table 6-4: Security Parameter (continues on pages 145 to 146)
ini File Field Name
Web Parameter Name
Valid Range and Description
EnableIPSec
[Enable IP Security]
Enables / disables the Secure Internet Protocol (IPSec) on the gateway.
0 = Disable (default).
1 = Enable.
EnableMediaSecurity
[Enable Media Security]
Enables or disables the Secure Real-Time Transport Protocol (SRTP).
0 = SRTP is disabled (default).
1 = SRTP is enabled.
Note 1: SRTP is available only if DSPVersionTemplateNumber = 0 or 2.
Note 2: Use of SRTP reduces the number of available channels.
TP-1610, Mediant 2000, TP-260:
Template 0, 200 channels are available (per TPM).
Template 2, 120 channels are available (per TPM).
MediaSecurityBehaviour
[Media Security Behavior]
Determines the gateway’s mode of operation when SRTP is used
(EnableMediaSecurity = 1).
0 (Prefer) = The gateway initiates encrypted calls. If negotiation of the cipher
suite fails, an unencrypted call is established. Incoming calls that don’t include
encryption information are accepted.
1 (Must) = The gateway initiates encrypted calls. If negotiation of the cipher suite
fails, the call is terminated. Incoming calls that don’t include encryption
information are rejected (default).
EnableSIPS
[Enable SIPS]
Enables secured SIP (SIPS) connections over multiple hops.
0 = Disabled (default).
1 = Enabled.
When SIPTransportType = 2 (TLS) and EnableSIPS is disabled, TLS is used for
the next network hop only.
When SIPTransportType = 2 (TLS) or 1 (TCP) and EnableSIPS is enabled, TLS
is used through the entire connection (over multiple hops).
Note: If SIPS is enabled and SIPTransportType = UDP, the connection fails.
TLSLocalSIPPort
[SIP TLS Local Port]
Local TLS port used to receive SIP messages.
The default value is 5061.
Note: The value of ‘TLSLocalSIPPort’ must be different to the value of
‘TCPLocalSIPPort’.
SIPSRequireClientCertificat
e
0 = The gateway doesn’t require client certificate (default).
1 = The gateway (when acting as a server for the TLS connection) requires
reception of client certificate to establish the TLS connection.
Note: The SIPS certificate files can be changed using the parameters
‘HTTPSCertFileName’ and ‘HTTPSRootFileName’.
Secure Hypertext Transport Protocol (HTTPS) Parameters
HTTPSOnly
[Secured Web Connection]
Determines the protocol types used to access the Embedded Web Server.
0 = HTTP and HTTPS (default).
1 = HTTPS only (unencrypted HTTP packets are blocked).
HTTPSPort
Determine the local Secured HTTPS port of the device.
The valid range is 1 to 65535 (other restrictions may apply within this range).
The default port is 443.
WebAuthMode
[HTTP Authentication Mode]
Determines the authentication mode for the Embedded Web Server.
0 = Basic authentication (clear text) is used (default).
1 = Digest authentication (MD5) is used.
2 = Digest authentication (MD5) is used for HTTP, and basic authentication is
used for HTTPS.
Note that when RADIUS login is enabled (WebRADIUSLogin = 1), basic
authentication is forced.