1 / 7

Feature Preventing Phantom Calls (TGP500/550)

Panasonic PSNA TGP 5XX Technical Bulletin 082011-1. REV 12.10. Feature Preventing Phantom Calls (TGP500/550). Page1. What are Phantom Calls?.

leonard-hunt
Download Presentation

Feature Preventing Phantom Calls (TGP500/550)

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Panasonic PSNA TGP 5XX Technical Bulletin 082011-1 REV 12.10 Feature Preventing Phantom Calls (TGP500/550) Page1

  2. What are Phantom Calls? Phantom Calls are SIP INVITES from an unexpected place with the incorrect route. INVITE is sent and not closed correctly, When TGP is answered only silence will be heard. This phenomena is known as “DoS (Denial Of Service)” or INVITE Flood. Phenomena of Phantom Calls: 1. Ringing, hook off and answer it but no voice, just silence. 2. Sometimes anonymous caller id. 3. Sometimes Request URI address is invalid. 4. Sometimes Come from different SIP server. Ringing INVITE phenomena INVITE phenomena Phantom Calls This document describes the TGP5XX functions of preventing phantom calls and how to set these functions. Page 2

  3. The feature preventing Phantom Calls in TGP5xx TGP5xx has the following 2 features to prevent phantom calls. 1. SSAF (SIP Source Address Filter) : Block INVITE from unregistered server. If you turn on this function, TGP will not accept the call from unknown address, which are not set in the SIP servers (Register, Proxy, Presence, Outbound proxy). Registered server address Incorrect From unknown server. Call Register : aaa.example1.net Proxy : bbb.example2.net Presence : ccc.example3.net Outbound : ddd.example4.net eee.unknown.net discard From registered server. Call Correct Accept aaa.example1.net 2. Check username in “Request URI” in INVITE : Block INVITE with invalid username. If you turn on this function, TGP will check username of SIP URI in “Request URI” header in INVITE against registered Line ID or Phone Number. If it is not correct, TGP return 404 not found. With wrong username INVITE sip:99999@aaa.example.com Incorrect Setting : Registered phone number OR Line ID :12345 Reject “404 Not found” INVITE sip:12345@aaa.example.com With correct username Correct Accept “100 Trying”, “180 Ringing” Page 3

  4. Function summary Caution : *Some carriers may change Request URI, source address intentionally, please be careful not to reject the calls even it comes from official route/procedure. *Please back up your configuration file before updating. *Please do prior evaluation before applying these settings. Page 4

  5. brief overview Turn ON SSAF (SIP Source Address Filter) How to turn on “SSAF” Via Web user interface 2 3 4 5 • 1. Enter the IP address into a PC's Web Browser. • (refer to final page “How to access Web User Interface”) • 2. Login as “Administrator”. • 3. Move to [VoIP ] – [Line 1] screen. • 4. Select “Yes” at “Enable SSAF(SIP Source Address Filter)”” • 5. Click [Save]. • 6. Set [Line 2] – [Line 8] in a similar way. Page 5

  6. brief overview Turn ON SSAF (SIP Source Address Filter) Via Configuration file SIP_DETECT_SSAF_1="Y" SIP_DETECT_SSAF_2="Y" SIP_DETECT_SSAF_3="Y" SIP_DETECT_SSAF_4="Y" SIP_DETECT_SSAF_5="Y" SIP_DETECT_SSAF_6="Y" SIP_DETECT_SSAF_7="Y" SIP_DETECT_SSAF_8="Y“ • Please back up current configuration file before updating. • Add or change the above-mentioned setting to existing configuration file. • Note:If the same parameter is specified in a configuration file more than once, the value specified first is applied. • Apply Configuration file into TGP5xx Caution : *Some carriers may change Request URI, source address intentionally, please be careful not to reject the calls even it comes from official route/procedure. *Please do prior evaluation before applying these settings. Page 6

  7. Turn ON “Request URI” username check Via Configuration file SIP_RCV_DET_REQURI_1="Y“ SIP_RCV_DET_REQURI_2="Y" SIP_RCV_DET_REQURI_3="Y" SIP_RCV_DET_REQURI_4="Y" SIP_RCV_DET_REQURI_5="Y" SIP_RCV_DET_REQURI_6="Y" SIP_RCV_DET_REQURI_7="Y" SIP_RCV_DET_REQURI_8="Y" • Please back up current configuration file before updating. • Add or change the above-mentioned setting to existing configuration file. • Note:If the same parameter is specified in a configuration file more than once, the value specified first is applied. • Apply Configuration file into TGP5xx Caution : *Some carriers may change Request URI, source address intentionally, In such case, this function discard incoming call even it is correct one. Please be careful not to reject the calls even it comes from official route/procedure. *Please do prior evaluation before applying these settings. Page 7

More Related