Advanced Operational Features

Whitelist Proxy

To protect your IP phone network, you can configure a “Whitelist Proxy” feature that screens incoming call requests received by the IP phones. When this feature is enabled, an IP phone accepts call requests from a trusted proxy server only. The IP phone rejects any call requests from an untrusted proxy server.

The whitelist is dynamically updated (i.e. the phones are able to refresh and resync the whitelist [without a reboot] if the IP addresses corresponding to the proxy FQDNs are changed on the DNS server).

The IP phone monitors the following events and an update is triggered if required:

200 OK responses to REGISTER requests if the peer’s IP address is not currently in the whitelist.

200 OK responses to INVITE requests if the peer’s IP address is not currently in the whitelist.

INVITE requests from untrusted proxy servers.

Note:

An update will not be triggered for the following events:

200 OK responses to INVITE requests for an IP call.

When more than one INVITE requests are received from the same untrusted proxy server.

Configuring Whitelist Proxy Using the Configuration Files

You use the following parameter to configure the whitelist proxy feature using the configuration files:

sip whitelist

Configuration Files

For the specific parameters you can set in the configuration files for setting Whitelist Proxy, see Appendix A, the section, “Whitelist Proxy Setting” on page A-207.

41-001343-02 REV04 – 05.2014

6-15

Page 531
Image 531
Aastra Telecom 41-001343-02 manual Configuring Whitelist Proxy Using the Configuration Files, Sip whitelist