Version 6.4 577 March 2012
SIP User's Manual A. Configuration Parameters Reference
Parameter Description
FORMAT IPsecProposalTable_Index =
IPsecProposalTable_EncryptionAlgorithm,
IPsecProposalTable_AuthenticationAlgorithm,
IPsecProposalTable_DHGroup;
[ \IPsecProposalTable ]
For example:
IPsecProposalTable 0 = 3, 2, 1;
IPsecProposalTable 1 = 2, 2, 1;
In the example above, two proposals are defined:
Proposal 0: AES, SHA1, DH group 2
Proposal 1: 3DES, SHA1, DH group 2
Notes:
Each row in the table refers to a different IKE peer.
To support more than one Encryption / Authentication / DH Group
proposal, for each proposal specify the relevant parameters in the
Format line.
The proposal list must be contiguous.
For a detailed description of this table and to configure the table using
the Web interface, see 'Configuring IP Security Proposal Table' on
page 135.
For configuring ini file table parameters, see 'Configuring ini File Table
Parameters' on page 84.
A.4.7 OCSP Parameters
The Online Certificate Status Protocol (OCSP) parameters are described in the table
below.
Table A-25: OCSP Parameters
Parameter Description
Web: Enable OCSP Server
EMS: OCSP Enable
[OCSPEnable]
Enables or disables certificate checking using OCSP.
[0] Disable (default).
[1] Enable.
For a description of OCSP, refer to the Product Reference Manual.
Web: Primary Server IP
EMS: OCSP Server IP
[OCSPServerIP]
Defines the IP address of the OCSP server.
The default IP address is 0.0.0.0.
Web: Secondary Server IP
[OCSPSecondaryServerIP]
Defines the IP address (in dotted-decimal notation) of the secondary
OCSP server (optional).
The default IP address is 0.0.0.0.
Web: Server Port
EMS: OCSP Server Port
[OCSPServerPort]
Defines the OCSP server's TCP port number.
The default port number is 2560.
Web: Default Response
When Server Unreachable
EMS: OCSP Default
Response
[OCSPDefaultResponse]
Determines the default OCSP behavior when the server cannot be
contacted.
[0] Disable = Rejects peer certificate (default).
[1] Enable = Allows peer certificate.