AudioCodes Mediant 500L - Page 361

Version 7.2 361 Mediant 500L Gateway & E-SBC
User's Manual 17. Control Network
Parameter Description

If the parameter is enabled for direct media and the two endpoints
belong to the same SIP Interface, calls cannot be established if
the following scenario exists:
a. One of the endpoints is defined as a foreign user (for
example, “follow me service”)
b. and one endpoint is located on the WAN and the other on the
LAN.
The reason for the above is that in direct media, the device does
not interfere in the SIP signaling such as manipulation of IP
addresses, which is necessary for calls between LAN and WAN.
 To enable direct media for all calls, use the global parameter
SBCDirectMedia. If enabled, even if the SIP Interface is disabled
for direct media, direct media is employed for calls belonging to
the SIP Interface.
 If you enable direct media for the SIP Interface, make sure that
your Media Realm provides sufficient ports, as media may
traverse the device for mid-call services (e.g., call transfer).
 For more information on direct media, see Direct Media on page
650.
 The parameter is applicable only to the SBC application.
Security
TLS Context Name
tls-context-name
[SIPInterface_TLSContext]
Assigns a TLS Context (SSL/TLS certificate) to the SIP Interface.
The default TLS Context ("default" at Index 0) is assigned to the SIP
Interface by default.
Note:
 For incoming calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call or
classification to an IP Group based on Proxy Set fails.
 For outgoing calls: The assigned TLS Context is used if no TLS
Context is configured for the Proxy Set associated with the call.
 To configure TLS Contexts, see ''Configuring SSL/TLS
Certificates'' on page 113.
TLS Mutual Authentication
tls-mutual-auth
[SIPInterface_TLSMutualAuth
entication]
Enables TLS mutual authentication for the SIP Interface (when the
device acts as a server).
 [0]
Disable = Device does not request the client certificate for TLS
connection on the SIP Interface.
 [1] Enable = Device requires receipt and verification of the client
certificate to establish the TLS connection on the SIP Interface.
By default, no value is defined and the SIPSRequireClientCertificate
global parameter setting is applied.
Message Policy
message-policy-name
[SIPInterface_MessagePolicy
Name]
Assigns a SIP message policy to the SIP interface.
To configure SIP Message Policy rules, see ''Configuring SIP
Message Policy Rules''.
User Security Mode
block-un-reg-users
[SIPInterface_BlockUnRegUs
ers]
Defines the blocking (reject) policy for incoming SIP dialog-initiating
requests (e.g., INVITE messages) from registered and unregistered
users belonging to the SIP Interface.
 [-1] Not Configured = (Default) The corresponding parameter in
the SRDs table (SRD_BlockUnRegUsers) of the SRD that is