HP VCX Software manual Remote SIP Connectivity, Remote NAT Traversal, Remote NAT traversal

Page 52

Chapter 5. SIP Configuration

When you select this, the Telecommuting Module makes no checks of incoming SIP URIs. It becomes possible in theory to trick the Telecommuting Module to send SIP packets any- where, so security is drastically reduced.

Keep username in URIs will make the Telecommuting Module keep the original username pare of the Contact URI, and only replace the domain part.

When you select this, it will be impossible for the remote SIP server to tell if requests for a certain user belong to one or several clients, as it has no means of telling the client registrations for a user apart. This means that if a user registers from two clients, and then unregisters from one of them, the SIP server will remove its only registration record for that user.

The Telecommuting Module also makes no checks of incoming SIP URIs. It becomes possi- ble in theory to trick the Telecommuting Module to send SIP packets anywhere, so security is drastically reduced.

Remote SIP Connectivity

Remote NAT Traversal

If your SIP client is not STUN-capable, you can use the built-in Remote NAT traversal fea- ture of the Telecommuting Module. The client must register on the Telecommuting Module (or through it).

The SIP client needs to re-REGISTER, or respond to OPTIONS packets, rather often for this to work. The exact period for this depends on the NAT-ing device, but 20 seconds should be enough to get across most NAT boxes.

Remote NAT traversal

Switch this function on or off.

Remote Clients Signaling Forwarding

Many SIP servers need to separate signaling to and from remote clients from signaling to and from the SIP Trunk. For this purpose, you can specify which IP address and port the remote clients will connect to. This can’t be the same IP address and port as what the SIP provider uses!

44

Image 52
Contents 3Com VCX IP Telecommuting Module Getting started GuidePage 3Com VCX IP Telecommuting Module Getting started Guide Page Table of Contents Page Part I. Installation of the 3Com VCX IP Telecommuting Module Page What is a Telecommuting Module? IntroductionConfiguration alternatives DMZ ConfigurationDMZ/LAN Configuration Standalone ConfigurationOverview of the Installation About settings in 3Com VCX IP Telecommuting Module License ConditionsInstalling 3Com VCX IP Telecommuting Module InstallationInstallation with magic ping Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting ModuleInstalling 3Com VCX IP Telecommuting Module Part II. Configuring 3Com VCX IP Telecommuting Module Page Network Configuration Telecommuting Module TypeNetwork Configuration Telecommuting Module Type configuration Interface Network Interface 1General Directly Connected Networks Physical deviceStatus Interface nameName DNS Name Or IP AddressIP address Netmask/BitsAlias Routed network Static RoutingRouter Default Gateway CancelMain Default Gateways SavePolicy For Packets From Unused Gateways Gateway Reference HostsDynamic InterfaceNetworks and Computers Subgroup NameLower Limit Upper Limit Interface/VLANDelete Row CreateSurroundings SurroundingsNetwork Additional NegotiatorsData Interfaces Default domain IP Policy Basic ConfigurationName of this Telecommuting Module Policy For Ping To Your 3Com VCX IP Telecommuting ModuleDNS Servers Reverts all the above fields to their previous configuration Network Configuration Basic Settings Additional SIP Signaling PortsSIP Configuration SIP ModuleProvisioning Relay SIP Media Port RangeTransport CommentSIP Servers To Monitor Public IP address for NATed Telecommuting ModuleServer Log class for SIP signaling SIP LoggingLog class for SIP packets Log class for SIP license messagesLog class for SIP errors RoutingDNS Override For SIP Requests Log class for SIP media messagesDomain Relay ToFiltering Sender IP Filter RulesFrom Network ActionDefault Policy For SIP Requests Content TypesContent Type URI Encoding InteroperabilityAllow Remote Clients Signaling Forwarding Remote SIP ConnectivityRemote NAT Traversal Remote NAT traversalNAT timeout for TCP NAT timeout for UDPNAT keepalive method Media Route Access Control Administration of the Telecommuting ModuleConfiguration Allowed Via Interface User Authentication For Web Interface Access Configuration TransportConfiguration Computers Configuration via HttpConfiguration via Https Configuration via SSHNetmask/Bits Range DNS Name Or Network AddressVia IPsec Peer SSH Log ClassDuration of limited test mode Save/Load ConfigurationTest Preliminary Configuration Apply configurationShow Message About Unapplied Changes BackupSave to diskette Save/Load CLI Command File Abort All Edits Revert to Old ConfigurationsReload Factory Configuration Administration of the Telecommuting Module DMZ type Firewall and Client ConfigurationFirewall SIP clients DMZ/LAN typeOther Standalone type SIP clients Index Apply
Related manuals
Manual 446 pages 4.55 Kb