User's Manual 350 Document #: LTRT-89730
Mediant 3000
Parameter Description
SBC Operation Mode
[IPGroup_SBCOperationM
ode]
Defines the device's operational mode for the IP Group.
[-1] Not Configured = (Default)
[0] B2BUA = Device operates as a back-to-back user agent (B2BUA),
changing the call identifiers and headers between the inbound and
outbound legs.
[1] Call Stateful Proxy = Device operates as a Stateful Proxy, passing
the SIP message transparently between inbound and outbound legs.
In other words, the same SIP dialog identifiers (tags, Call-Id and
CSeq) occur on both legs (as long as no other configuration disrupts
the CSeq compatibleness).
[2] Microsoft Server = Operating mode for the One-Voice Resiliency
feature, whereby the device is deployed together with Lync-
compatible IP Phones at small remote branch offices in a Microsoft®
Lync™ environment.
For more information on B2BUA and Stateful Proxy modes, see B2BUA
and Stateful Proxy Operating Modes on page 549.
Note: If configured, the parameter overrides the 'SBC Operation Mode'
parameter in the SRD table.
Classify By Proxy Set
[IPGroup_ClassifyByProxy
Set]
Enables classification of incoming SIP dialogs (INVITEs) to Server-type
IP Groups based on Proxy Set (assigned using the
IPGroup_ProxySetName parameter).
[0] Disable
[1] Enable = (Default) The device searches the Proxy Set table for a
Proxy Set that is configured with the same source IP address as that
of the incoming INVITE (if host name, then according to the
dy
namically resolved IP address list). If such a Proxy Set is found, the
device classifies the INVITE as belonging to the IP Group associated
with the Proxy Set.
Note:
The parameter is applicable only to Server-type IP Groups.
For security, it is recommended to classify SIP dialogs based on
Proxy Set only if the IP address of the IP Group is unknown. In other
words, if the Proxy Set associated with the IP Group is configured
with an FQDN. In such cases, the device classifies incoming SIP
dialogs to the IP Group based on the DNS-resolved IP address. If the
IP address is known, it is recommended to use a Classification rule
instead (and disable the Classify by Proxy Set feature), where the
rule is configured with not only the IP address, but also with SIP
message characteristics to increase the strictness of the classification
process (see Configuring Classification Rules on page 595).
The reason for preferring classification based on Proxy Set when the
IP address is unknown is that IP address forgery (commonly known
as IP spoofing) is more difficult than malicious SIP message
tampering and therefore, using a Classification rule without an IP
address offers a weaker form of security. Wh
en classification is based
on Proxy Set, the Classification table for the specific IP Group is
ignored.
If you have assigned the same Proxy Set to multiple IP Groups,
disable the parameter and instead, use Classification rules to classify
incoming SIP dialogs to these IP Groups. If the parameter is enabled,
the device is unable to correctly classify incoming INVITEs to their
appropriate IP Groups.