During a STUN connectivity check phase, the SBC prioritizes the processing of STUN packets that match the source addresses received in the candidate lines of the ICE SDP received from the peer. The Source Address Filtering mechanism for ICE is enabled by default. The filtering mechanism is applicable to the following address types:
- RTP IPv6 Host Address
- RTP IPV4 Relay Address
- RTP IPV6 Relay Address
- RTP IPV4 Server Reflexive Address (for this address type the filtering is based on the provisioned Server Reflexive Prefix Length)
When the ICE Source Address Filtering is enabled, STUN packets that are received during the connectivity check phase and do not match the addresses sent by the peer are still processed but at a reduced rate. This allows Peer Reflexive Candidates to still be learned through STUN.
This has no impact during the stable call when only packets received from the learned source address are processed and rest are dropped by default.
To View and Edit Ice Source Address Filter Priority
On SBC main screen, go to All > Address Context > Zone > Sip Trunk Group > Services > Nat Traversal > Ice Source Address Filter Priority.
The Ice Source Address Filter Priority can be checked for each Address Context, for each Zone, for each Sip Trunk Group created or for all the Address Contexts, Zones and Sip Trunk Groups created. Use the drop-down box to select the desired Address Context, Zone and Sip Trunk Group.
The Edit Ice Source Address Filter Priority window is displayed.
Nat Traversal - Ice Source Address Filter Priority
The following parameters are displayed:
Sip Trunk Group - Media - Ice parameters
Parameter | Description |
|---|---|
State | Specifies the administrative state of the ICE related source address filtering mechanism. The options are:
|
Server Reflexive Prefix Length | Specifies the length (in bits) of the prefix for server reflexive IP address. The value ranges from 0 to 32 and the default value is 16. |
Overview
Content Tools