Use this object to support local authentication autonomously on a per-IP trunk group basis in situations where an IP-PBX does not perform a registration and the service provider does not require/want registrations. Refer to IP Trunk Group Authentication for additional feature functionality.


Note

If the IP Trunk Group (IPTG) authentication is configured for both ingress sipTrunkGroup and ingress IP Peer, the IP Peer configuration will take precedence.

If you wish to use the intChallengeResponse and incInternalCredentials flags solely on the sipTrunkGroup level, the IP addresses of the IP Peers from which the SBC receives SIP messages must not match any IP address of the configured IP peers in the ingress signaling zone. If the source IP address of received SIP messages matches the IP address of any IP Peer in the signaling zone, the intChallengeResponse and incInternalCredentials flags on the ipPeer level will take precedence.

To View and Edit Authentication

On the SBC main screen, go to All > Address Context > Zone > SIP Trunk Group > Signaling > Authentication. The Authentication window is displayed.

The Authentication can be checked for each Address Context, for each Zone, for each SIP Trunk Group created or for all the Address Contexts, Zones and SIP Trunk Groups created. Use the drop-down box to select the desired Address Context, Zone and SIP Trunk Group.

The Edit Authentication window is displayed.


Authentication parameters

ParameterDescription
Auth User PartUserpart to create Authorization Digest or Proxy-Authorization headers for trunk group authentication. The SBC uses these credentials when replying to local authentication requests.
Auth PasswordPassword to create Authorization Digest or Proxy-Authorization headers for trunk group authentication. The SBC uses these credentials when replying to local authentication requests.
Int Challenge Response

Enable this flag on the ingress IP Trunk Group (IPTG), respective to the request, to allow the SBC to reply locally to egress IPTG authentication challenges. If this flag is disabled, the SBC will not reply to authentication challenges locally even if credentials are configured on the egress IPTG. The options are:

  • Disabled (default) – If this flag is disabled, Inc Internal Credentials is not used.
  • Enabled
Inc Internal Credentials

Enable this flag on the ingress IP Trunk Group, respective to the request, to allow egress IPTG authentication to be internally created using the authorization information in mid-dialogue without being challenged. The options are:

  • Disabled (default)
  • Enabled 

Make the required changes and click Save.