General Parameters

'Web Server Name'

configure system > web > web-hostname

[WebHostname]

Defines a hostname (FQDN) for the device's Web interface. This can be used to access the Web interface instead of the device's IP address.

By default, no value is defined.

For more information, see Configuring a Hostname for Web Interface.

Note: If not configured, the device uses the [Hostname] parameter.

'Hostname'

configure system > hostname

[Hostname]

Defines a hostname for the device, which is used for various functionality such as the CLI prompt name.

The valid value is a string of up to 18 characters. By default, no value is defined.

For more information, see Configuring a Hostname for the Device.

Note: To configure a hostname for accessing the device's Web interface, use the [WebHostname] parameter.

[WebLoginBlockAutoComplete]

Disables autocompletion when entering the management login username in the 'Username' field of the device's Web interface. Disabling autocompletion may be useful for security purposes by hiding previously entered usernames and thereby, preventing unauthorized access to the device's management interface.

■

[0] Disable = (Default) Autocompletion is enabled and the 'Username' field automatically offers previously logged in usernames.

■

[1] Enable = Autocompletion is disabled.

configure system > web > enforce-password-complexity

[EnforcePasswordComplexity]

Enables the enforcement of password complexity requirements for management users (see Configuring Management User Accounts), SNMP Community Strings (see Configuring SNMP Community Strings), and SNMPv3 users (see Configuring SNMPv3 Users).

■

[0] Disable (default)

■

[1] Enable = Password complexity is enforced. The password must contain the following:

✔

At least eight characters.

✔

At least two uppercase letters (A to Z).

✔

At least two lowercase letters (a to z).

✔

At least two numbers (0 to 9).

✔

At least two symbols (non-alphanumeric characters, e.g., $, #, %).

✔

At least four new characters that were not used in the previous password.

Note:

■

If you enable password complexity, you can also configure the minimum length (number of characters) of the password, using the [MinWebPasswordLen] parameter.

■

For the device's CLI, password complexity applies to both Basic User command mode and Privileged User command mode (> enable). In addition to the rules listed above, password complexity for CLI also includes the following requirements:

✔

The username and password must be different.

✔

The username and password can't be the opposite of each other (e.g., "admin" and "nimda", respectively).

configure system > web > min-web-password-len

[MinWebPasswordLen]

Defines the minimum length (number of characters) of the management user's login password when password complexity is enabled (using the [EnforcePasswordComplexity] parameter).

The valid value is a string of 8 to 20 characters. The default is 8.

configure system > web > check-password-history

[CheckPasswordHistory]

Enables the device to enforce password history policy (reuse an old password), which prohibits a user from changing its password to any of the user's four previous passwords.

■

[0] = (Default) Disable

■

[1] = Enable

Note: The parameter is not applicable to the password for the CLI privileged mode (> enable).

'Use OAuth for Web Login'

configure system > mgmt-auth > oauth-web-login

[OAuthWebLogin]

Enables user login authentication based on OAuth 2.0.

■

[0] Disable = (Default) Disables OAuth-based login authentication.

■

[1] Enable with local login = Enables both OAuth-based login authentication and local authentication (using the Local Users table as described in Configuring Management User Accounts).

■

[2] Enable without local login = Enables OAuth-based login authentication only (without local authentication).

For more information, see Enabling OAuth-based User Login Authentication.

'Local Users Table can be Empty'

configure system > web > local-users-table-can-be-empty

[AllowRemoveLocalUsersTable]

Enables (allows) the deletion of all users in the Local Users table (see Configuring Management User Accounts). This is used when an external, third-party service (e.g., LDAP. RADIUS, or OAuth) is used to authenticate users.

■

[0] Disable (default)

■

[1] Enable

For more information, see Deleting All Users in Local Users Table.

'Lock'

admin state lock

[AdminState]

Locks the device, whereby existing calls are terminated (optionally, after a graceful period) and new calls are rejected.

■

[0] Lock

■

[2] Unlock (default)

For more information, see Locking and Unlocking the Device.

'Graceful Option'

admin state lock graceful

[AdminStateLockControl]

Defines a graceful period (in seconds) before the device locks. During this period, the device doesn't accept any new calls, allowing only existing calls to continue until the timeout expires. If all existing calls end before the timeout expires, the device locks. If there are still existing calls when the timeout expires, the device terminates them and then locks.

The valid value is 0 to 32,768 seconds. The default is 0, meaning no graceful lock (i.e., immediate lock). A value of -1 means that the device locks only after all the existing calls end (on their own accord).

For more information, see Locking and Unlocking the Device.

'Disconnect Client Connections'

admin state lock no-graceful disconnect-client-connections

[AdminStateRestrictConnections]

Enables the device to close existing TLS/TCP client connections and reject incoming TLS/TCP client connections when the device is in locked state.

■

[0] Disable (default)

■

[1] Enable

For more information, see Locking and Unlocking the Device.

'Floating License'

configure system > floating-license > floating-license

[EnableFloatingLicense]

Enables the device to operate with the Floating License.

■

[0] Disable (default)

■

[1] Enable

For more information, see Floating License Model.

Note: For the parameter to take effect, a device restart is required.

'Allocation Profile'

configure system > floating-license > allocation-profile

[AllocationProfile]

Defines an SBC capacity profile (Allocation Profile) for the Floating License feature.

■

[0] SIP Trunking = (Default) Profile suited for SIP Trunking applications.

■

[1] Registered Users = Profile suited for applications requiring registered users.

■

[2] Custom = Customized Allocation Profile.

Note: For the parameter to take effect, a device restart is required.

'Allocation - Far End Users'

configure system > floating-license > allocation-registered-users

[AllocationRegisteredUsers]

Defines registered users capacity for a customized Allocation Profile for the Floating License feature.

Note:

■

For the parameter to take effect, a device restart is required.

■

The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Allocation – SBC Media Sessions'

configure system > floating-license > allocation-media-sessions

[AllocationMediaSessions]

Defines SBC media session capacity for a customized Allocation Profile for the Floating License feature.

Note:

■

For the parameter to take effect, a device restart is required.

■

The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Allocation – SBC Signaling Sessions'

configure system > floating-license > allocation-signaling-sessions

[AllocationSignalingSessions]

Defines SBC signaling session capacity for a customized Allocation Profile for the Floating License feature.

Note:

■

For the parameter to take effect, a device restart is required.

■

The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Allocation – SIPREC Streams'

configure system > floating-license > allocation-siprec-sessions

[AllocationSIPRecStreams]

Defines SIPREC session capacity for a customized Allocation Profile for the Floating License feature.

Note:

■

For the parameter to take effect, a device restart is required.

■

The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit - Far End Users'

configure system > floating-license > limit-registered-users

[LimitRegisteredUsers]

Defines a limit of the registered user capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – SBC Media Sessions'

configure system > floating-license > limit-media-sessions

[LimitMediaSessions]

Defines a limit of the SBC media session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – SBC Signaling Sessions'

configure system > floating-license > limit-signaling-sessions

[LimitSignalingSessions]

Defines a limit of the SBC SIP signaling session capacity for a customized Allocation Profile for the Floating License feature. Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – Transcoding Sessions'

configure system > floating-license > limit-transcoding-sessions

[LimitTranscodingSessions]

Defines a limit of the transcoding session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

'Limit – SIPREC Streams'

configure system > floating-license > limit-siprec-sessions

[LimitSIPRecStreams]

Defines a limit of the SIPREC session capacity for a customized Allocation Profile for the Floating License feature.

Note: The parameter is applicable only when the 'Allocation Profile' is configured to Custom.

[CustomerSN]

Defines a serial number (S/N) for the device.

Note: The device's original S/N is automatically added at the end of the configured S/N. For example, if the original S/N is 8906721 and the configured S/N is "abc123", the resultant S/N is "abc1238906721".