Subtitle |
---|
Prefix | figure |
---|
SubtitleText | "Edit Sip Trunk" form |
---|
AnchorName | edit sip trunk form |
---|
|
Image Modified
|
In
Xref |
---|
AnchorName | edit sip trunk form |
---|
|
you can see an example configuration for creating a SECURE
Inbound ZRTP SIP Trunk. The mandatory values are:
- NAME: a meaningful name for this trunk
- HOST: IP address/hostname of the SIP server provided by ITSP
- PORT: this is 5061 by RFC
- TRANSPORT: TLS
- ENCRYPTION: check it disabled
We do also suggest the following values to be set:
- Audio Tones: No audio tones
- DTMFMODE: choose your values considering the PBX on the other end of the Trunk. Usually we suggest to choose the value INFO
- DIRECTMEDIA: enabled (checked)
- SENDRPID: enabled (checked)
- Allow: amr:100
- Disallow: all
- Trusted: enabled (checked)
Other fields in the form depend by your network topology and by the features on the other end PBX.
When you are done with your changes, commit them by clicking on the Update icon.
4.
12.1 Certificate Management
In order to validate a TLS peer for establishing an Encrypted SIP Trunk, you generally have to import the other party CA Root. This is important because the peer TLS certificate could not match
actual Certificate Chain and thus the validation would fail.
Info |
---|
comes with a bundle of the most known CA Roots certificates ready to be used. So this section is useful for minor certificate authorities and/or for self signed certificates. |
Please read 2.3.3 Add certification authority to understand how to import a new CA Root certificate.
...