AudioCodes Mediant 4000 SBC - Page 1010

CHAPTER60 Configuration Parameters Reference
Mediant 4000 SBC | User's Manual
Parameter Description
■ [0] = (Default) Authentication is done by
the device (locally).
■ [1] = Authentication is done by an RFC
5090 compliant RADIUS server.
■ [2] = Authentication is done according to
the Draft Sterman-aaa-sip-01 method.
Note:
■ Currently, option [1] is not supported.
■ The parameter is overridden by the IP
Group parameter, 'SBC Server
Authentication' (IPGroup_
TypeSBCServerAuthType).
'Lifetime of nonce'
configure voip > sbc settings >
lifetime-of-nonce
[AuthNonceDuration]
Defines the lifetime (in seconds) that the
current nonce is valid for server-based
authentication. The device challenges a
message that attempts to use a server
nonce beyond this period. The parameter is
used to provide replay protection (i.e.,
ensures that old communication streams
are not used in replay attacks).
The valid value range is 30 to 600. The
default is 300.
'Authentication Challenge Method'
configure voip > sbc settings >
auth-chlng-mthd
[AuthChallengeMethod]
Defines the type of server-based
authentication challenge.
■ [0] 0 = (Default) Send SIP 401
"Unauthorized" with a WWW-
Authenticate header as the
authentication challenge response.
■ [1] 1 = Send SIP 407 "Proxy
Authentication Required" with a Proxy-
Authenticate header as the
authentication challenge response.
'Authentication Quality of Protection'
configure voip > sbc settings >
auth-qop
[AuthQOP]
Defines the authentication and integrity
level of quality of protection (QoP) for digest
authentication offered to the client. When
the device challenges a SIP request (e.g.,
INVITE), it sends a SIP 401 response with
the Proxy-Authenticate header or WWW-
Authenticate header containing the 'qop'
parameter. The QoP offered in the 401
response can be 'auth', 'auth-int', both 'auth'
and 'auth-int', or the 'qop' parameter can be
omitted from the 401 response. In response
to the 401, the client needs to send the
device another INVITE with the MD5 hash
of the INVITE message and indicate the
selected auth type.
- 977 -