Avaya SIP Software 4.0 for 1200 Series Manual do Utilizador descarregar pdf (Página 236)

both communicating parties. Both the server and the end point device certificates are

"signed" by well-known trusted certificate authorities.

• Server authentication occurs when a server has a certificate signed by a certificate

authority. The certificate is only used for the client to validate the identity of the server it

is connected to. After the TLS connection is established, the server can identify the IP

Deskphone through a user name and password.

How TLS impacts SIP

TLS impacts SIP

in the following ways:

• URIs – contain transport parameters used to indicate the preferred method of contact.

For example,

Contact: Bob<sip:[email protected];transport=tls>

Important:

A transport parameter of TLS indicates that the server or client prefers TLS to be used

for communication.

SIP Software Release 3.2 adds transport=tls to the contact header when using TCP or

TLS.

• VIA header – contains the transport protocol used to send a request. For example, Via:

SIP4.0/TLSbob.company.com;....;alias

The IP Deskphone attempts to downgrade the allowed protocols if connection attempts

are made and fail. In order to avoid the IP Deskphone using an unsecure protocol, only

TLS is enabled.

The order of preference for protocols is always: TLS, TCP, and UDP.

You must enable the SIP TLS Listening port for incoming TLS connections to be made.

Certificate requirements

For the IP

Deskphone to validate that the server certificate provided by the TLS-enabled proxy

matches the connected address, the certificate must contain the IP Addresses of the IP

Deskphone.

The server certificate has a Subject Alternative Name field, which contains the IPv4 and IPv6

IP addresses that correspond with the proxy. For example:

subjectAltName=IP:192.168.100.100subjectAltName=IP:

2001:0db8:0000:0000:0000:0000:1428:5 7ab

Security

236 SIP Software for Avaya 1200 Series IP Deskphones-Administration November 2012

1 2 ... 231 232 233 234 235 236 237 238 239 240 241 ... 323 324

Sem comentários

Avaya SIP Software 4.0 for 1200 Series Manual do Utilizador Página 236