User`s manual

SIP User's Manual 13. Security
Version 5.0 291 October 2006
The figure below is an example of a host file:
Figure 13-8: Example of a Host File
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# Location: C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
#
127.0.0.1 localhost
10.31.4.47 ACL_280152
13.2.3 Secured Telnet
To enable the embedded Telnet server on the gateway, set the parameter
TelnetServerEnable (described in Table
6-3 on page 143) to 1 (standard mode) or 2 (SSL
mode); no information is transmitted in the clear when SSL mode is used.
If the Telnet server is set to SSL mode, a special Telnet client is required on your PC to
connect to the Telnet interface over a secured connection; examples include C-Kermit for
UNIX, Kermit-95 for Windows, and AudioCodes' acSSLTelnet utility for Windows (that
requires prior installation of the free OpenSSL toolkit). Contact AudioCodes to obtain the
acSSLTelnet utility.
13.2.4 Server Certificate Replacement
The gateway is supplied with a working SSL configuration consisting of a unique self-
signed server certificate. When the gateway is upgraded to a later firmware version, a
unique self-signed server certificate is created. If an organizational Public Key
Infrastructure (PKI) is used, you may wish to replace this certificate with one provided by
your security administrator.
¾ To replace the gateway's self-signed certificate, take these 9 steps:
1. Your network administrator should allocate a unique DNS name for the gateway (e.g.,
dns_name.corp.customer.com). This name is used to access the device, and should
therefore be listed in the server certificate.
2. Open the ‘Certificate’ screen (Advanced Configuration menu > Security Settings
submenu > Certificates option); the ‘Certificates’ screen is displayed (Figure 13-9).