Polycom 3725-76302-001LI manual Field Description

Signaling Settings Local Cluster Configuration

Table 4-5	Fields on the Signaling Settings page (continued)
Field		Description
Authorized ports
Unencrypted SIP		To permit unencrypted SIP connections, select either
port		TCP or UDP/TCP from the list. Select None to disallow
		unencrypted SIP connections.
		We recommend using the default port number (5060),
		but you can use any value from 1024 to 65535 that’s not
		already in use and is different from the TLS port and
		from any “unauthorized” or “guest” ports that your
		SBC(s) may be configured to use for calls to the system.
Enable		Check the box to turn on SIP device authentication for
authentication		unencrypted SIP.
		Click the Device authentication settings link to go to
		the Device Authentication page to configure SIP
		device authentication and add device authentication
		credentials (see “Device Authentication” on page 264).
		The settings on that page determine the realm used for
		authentication and whether the Call Server responds to
		unauthenticated requests with 401 (Unauthorized) or
		407 (Proxy Authentication Required).
TLS port		Specifies the port number the system uses for TLS.
		We recommend using the default port number (5061),
		but you can use any value from 1024 to 65535 that’s not
		already in use and is different from the UDP/TCP port
		and from any “unauthorized” or “guest” ports that your
		SBC(s) may be configured to use for calls to the system.
		If SIP signaling is enabled, TLS is automatically
		supported. Unless unencrypted SIP connections are
		specifically permitted, TLS must be used.
Enable		Check the box to turn on SIP device authentication for
authentication		encrypted SIP.
		Click the Device authentication settings link to go to
		the Device Authentication page to configure SIP
		device authentication and add device authentication
		credentials (see “Device Authentication” on page 264).
		The settings on that page determine the realm used for
		authentication and whether the Call Server responds to
		unauthenticated requests with 401 (Unauthorized) or
		407 (Proxy Authentication Required).
Require certificate		Check the box to enable mutual TLS (mTLS), requiring
validation for TLS		each caller to present a valid certificate.

Polycom, Inc. 75