During a STUN connectivity check phase, the SBC prioritizes the processing of STUN packets that match the source addresses received in the candidate lines of the ICE SDP received from the peer. The Source Address Filtering mechanism for ICE is enabled by default. The filtering mechanism applies to the following address types:

  • RTP IPv6 Host Address
  • RTP IPv4 Relay Address
  • RTP IPv6 Relay Address
  • RTP IPv4 Server Reflexive Address (For this address type, the filtering is based on the provisioned Server Reflexive Prefix Length)


When the ICE Source Address Filtering is enabled, STUN packets that are received during the connectivity check phase and do not match the addresses sent by the peer are still processed but at a reduced rate. This allows learning Peer Reflexive Candidates through STUN.

This has no impact during the stable call when only packets received from the learned source address are processed, and the rest are dropped by default.

To View and Edit Ice Source Address Filter Priority

On SBC main screen, go to All > Address Context > Zone > SIP Trunk Group > Services > NAT Traversal > Ice Source Address Filter Priority.

The Ice Source Address Filter Priority can be checked for each Address Context, for each Zone, for each Sip Trunk Group created or for all the Address Contexts, Zones and Sip Trunk Groups created. Use the drop-down box to select the desired Address Context, Zone and Sip Trunk Group.

The Edit Ice Source Address Filter Priority window is displayed.

Nat Traversal - Ice Source Address Filter Priority


Ice parameters

Parameter

Description

State

Specifies the administrative state of the ICE-related source address filtering mechanism. The options are:

  • Disabled
  • Enabled (default)
Server Reflexive Prefix LengthSpecifies the prefix's length (in bits) for the server reflexive IP address. The value ranges from 0 to 32, and the default value is 16.

  • No labels