This profile specifies the type and behavior of security mechanism to apply to the Access Solution acting as P-CSCF.
Excerpt Include |
---|
| SIP Security Profile - CLI |
---|
| SIP Security Profile - CLI |
---|
nopanel | true |
---|
|
Include Page |
---|
| Transparency_Profile_Note |
---|
| Transparency_Profile_Note |
---|
|
To View Sip Security Profile
On SBC main screen, go to Configuration > Profile Management > Category: Service Profiles >Sip Security Profile.
The Sip Security Profile window is displayed.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile |
---|
|
Image Modified |
To Edit Sip Security Profile
To edit any of the Sip Security Profile in the list, click the radio button next to the specific Sip Security Profile name.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Highlighted |
---|
|
Image Modified |
The Edit Selected Sip Security Profile window is displayed below.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Edit Window |
---|
|
Image Modified |
Make the required changes and click Save at the right hand bottom of the panel to save the changes made.
To Create Sip Security Profile
To create a new Sip Security Profile, click New Sip Security Profile tab on the Sip Security Profile List panel.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Fields |
---|
|
Image Modified |
The Create New Sip Security Profile window is displayed.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Create Window |
---|
|
Image Modified |
The following fields are displayed:
Caption |
---|
0 | Table |
---|
1 | SIP Security Profile |
---|
|
Parameter | Description |
---|
Name
| Specifies the user name of this Security Profile. | Sbx Sec Mode | Use this parameter to define the SBC security mode for this SIP Security Profile. The options are: Sbc-pcscf : SBC acts as integrated SBC+PCSCF mode.Sbc-only : SBC-only mode. SBC disregards the configured security mechanism (ipsec-3gpp or tls ) in the profile, if any.
When Sbx Sec Mode is configured as sbc-only , you must configure a Transparency Profile for following headers in an egress trunk group. Refer to SIP Security Profile - CLI, Command Examples section to know more on how to configure a Transparency Profile. Refer to P-CSCF Security Mechanisms to know the functionality of this feature.
| Force Client
Security
| If enabled, while selecting the Security Mechanism, the precedence is given to the order of occurrence of mechanism-name values in the Security-Client header. The options are: | Reject Sec Unsupported Request
| Enable this flag to reject the incoming REGISTER when it does not contain "sec-agree" header value (in Require or Proxy-Require headers) or does not contain any supported mechanism-name (ipsec-3gpp) in "Security-Client" header. Use default setting "disabled" to process messages using "Digest without TLS" security mechanism. disabled (default) enabled
| Security Mechanism Type | Identifies the list of security mechanisms supported by and the corresponding precedence level for each security mechanism. | Precedence | Specifies the precedence value of this SIP Security Mechanism Type (lowest value has higher precedence). The value range from 1 to 65535. |
|
To Delete Sip Security Profile
To delete any of the created Sip Security Profile, click the radio button next to the specific Sip Security Profile which you want to delete.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Highlighted |
---|
|
Image Modified |
Click Delete at the end of the highlighted row. A delete confirmation message appears seeking your decision.
Caption |
---|
0 | Figure |
---|
1 | Profile Management - Service Profiles - Sip Security Profile Delete Confirmation |
---|
|
Image Modified |
Click OK to remove the specific Sip Security Profile from the list.