Signaling Settings Local Cluster Configuration
Polycom, Inc. 75
Authorized ports
Unencrypted SIP
port To permit unencrypted SIP connections, select either
TCP or UDP/TCP from the list. Select None to disallow
unencrypted SIP connections.
We recommend using the default port number (5060),
but you can use any value from 1024 to 65535 that’s not
already in use and is different from the TLS port and
from any “unauthorized” or “guest” ports that your
SBC(s) may be configured to use for calls to the system.
Enable
authentication Check the box to turn on SIP device authentication for
unencrypted SIP.
Click the Device authentication settings link to go to
the Device Authentication page to configure SIP
device authentication and add device authentication
credentials (see “Device Authentication” on page 264 ).
The settings on that page determine the realm used for
authentication and whether the Call Server responds to
unauthenticated requests with 401 (Unauthorized) or
407 (Proxy Authentication Required).
TLS port Specifies the port number the system uses for TLS.
We recommend using the default port number (5061),
but you can use any value from 1024 to 65535 that’s not
already in use and is different from the UDP/TCP port
and from any “unauthorized” or “guest” ports that your
SBC(s) may be configured to use for calls to the system.
If SIP signaling is enabled, TLS is automatically
supported. Unless unencrypted SIP connections are
specifically permitted, TLS must be used.
Enable
authentication Check the box to turn on SIP device authentication for
encrypted SIP.
Click the Device authentication settings link to go to
the Device Authentication page to configure SIP
device authentication and add device authentication
credentials (see “Device Authentication” on page 264 ).
The settings on that page determine the realm used for
authentication and whether the Call Server responds to
unauthenticated requests with 401 (Unauthorized) or
407 (Proxy Authentication Required).
Require certificate
validation for TLS Check the box to enable mutual TLS (mTLS), requiring
each caller to present a valid certificate.
Table 4-5 Fields on the Signaling Settings page (continued)
Field Description