Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

 

Use this flag to allow the 

Spacevars
0product
 to select the GIBA security mechanism when a REGISTER message is received without specific security headers. The 
Spacevars
0product
 validates Source IP Address against Via header IP Address and transparently passes UEs Via header in egress messages towards network entities. If REGISTER message is received with "sec-agree" in Proxy-Require header along with Auth headers, and no IP Sec profile is configured, the 
Spacevars
0product
 rejects the message with "4xx Bad Extension" error response irrespective of the accessClass flag setting.

When GIBA security mechanism is selected and Via header is configured to pass transparently to egress leg, 

Spacevars
0product
 inserts a “received” parameter with the source IP address of the PDU if the host portion of the UE’s Via header does not equate to the source IP address seen by the 
Spacevars
0product
.

Command Syntax

Code Block
languagenone
% set addressContext <name> zone <name> sipTrunkGroup <name> signaling accessClass <3GPP | none>

Command Parameters

Caption
0Table
1Access Class Parameter
3Access Class Parameter
ParameterDescription
accessClass

Select 3GPP to select GIBA security mechanism when a REGISTER message is received without specific security headers. Otherwise, select none for the

Spacevars
0product
to use SIP Digest without TLS authentication.

  • 3GPP  
  • none (default)
 

Pagebreak