AudioCodes Mediant 600 - HTTPS Parameters; A.4.2 HTTPS Parameters

Version 6.4 569 March 2012
SIP User's Manual A. Configuration Parameters Reference
Parameter Description
For example:
AccessList 10 = mgmt.customer.com, , , 32, 0, 80, tcp, 1, OAMP, 0, 0, 0,
allow;
AccessList 22 = 10.4.0.0, , , 16, 4000, 9000, any, 0, , 0, 0, 0, block;
In the example above, Rule #10 allows traffic from the host
‘mgmt.customer.com’ destined to TCP ports 0 to 80 on interface OAMP
(OAMP). Rule #22 blocks traffic from the subnet 10.4.xxx.yyy destined to
ports 4000 to 9000.
Notes:
 This parameter can include up to 50 indices.
 To configure the firewall using the Web interface and for a description
of the parameters of this ini file table parameter, see 'Configuring
Firewall Settings' on page 131.
 For a description of configuring with ini file table parameters, see
'Configuring ini File Table Parameters' on page 84.
A.4.2 HTTPS Parameters
The Secure Hypertext Transport Protocol (HTTPS) parameters are described in the table
below.
Table A-20: HTTPS Parameters
Parameter Description
Web: Secured Web Connection
(HTTPS)
EMS: HTTPS Only
[HTTPSOnly]
Determines the protocol used to access the Web interface.
 [0] HTTP and HTTPS (default).
 [1] HTTPs Only = Unencrypted HTTP packets are blocked.
Note: For this parameter to take effect, a device reset is
required.
EMS: HTTPS Port
[HTTPSPort]
Defines the local Secured HTTPS port of the device. This
parameter allows secure remote device Web management from
the LAN. To enable secure Web management from the LAN,
configure the desired port.
The valid range is 1 to 65535 (other restrictions may apply within
this range).
The default port is 443.
Note: For this parameter to take effect, a device reset is
required.
EMS: HTTPS Cipher String
[HTTPSCipherString]
Defines the Cipher string for HTTPS (in OpenSSL cipher list
format). For the valid range values, refer to URL
http://www.openssl.org/docs/apps/ciphers.html.
The default value is ‘EXP’ (Export encryption algorithms). For
example, use ‘ALL’ for all ciphers suites (e.g., for ARIA
encryption for TLS). The only ciphers available are RC4 and
DES, and the cipher bit strength is limited to 56 bits.
Notes:
 If the “Strong Encryption” Software Upgrade Key is enabled,
the default of the HTTPSCipherString parameter is changed
to ‘RC4:EXP’, enabling RC-128bit encryption.

The value ‘ALL’ can be configured only if the “Strong