Configures the authentication
method used by the CSCF service.
Product:
SCM (S-CSCF, SIP Proxy)
Syntax
authentication { aka-v1 value | allow-noauth [ invite | re-register| register ] | allow-noipauth [ invite | re-register| register ] | allow-unsecure | aor-auth |
md5 value }no authentication { aka-v1 | allow-noauth [ invite | re-register| register ] | allow-noipauth [ invite | re-register| register ] | allow-unsecure | aor-auth | md5 }
no
Disables the specified
authentication method for the CSCF service.
aka-v1 value
Specifies that AKA-v1
algorithm is used as the authentication type when accessing the
CSCF service.
value specifies
a preference - the lower the value, the higher the preference. value must
be an integer from 1 to 1000.
IMPORTANT:
In order to change
a priority level, you must remove the original value and configure
a new one.
allow-noauth [ invite | re-register| register ]
Specifies that access
to the CSCF service is allowed if authentication fails.
invite: Specifies
that access to the CSCF service is allowed if authentication fails
on INVITE requests only.
re-register:
Specifies that access to the CSCF service is allowed if authentication
fails on RE-REGISTER requests when the request is integrity-protected
only.
registration:
Specifies that access to the CSCF service is allowed if authentication
fails on REGISTER requests only.
allow-noipauth [ invite | re-register| register ]
Specifies that access
to the CSCF service is allowed if early IMS-based IP authentication
fails.
invite: Specifies
that access to the CSCF service is allowed if early IMS-based IP authentication
fails on INVITE requests only.
re-register:
Specifies that access to the CSCF service is allowed if authentication
fails on RE-REGISTER requests when the request is integrity-protected
only.
registration:
Specifies that access to the CSCF service is allowed if early IMS-based
IP authentication fails on REGISTER requests only.
allow-unsecure
Specifies that un-secure
access is allowed to the CSCF service.
aor-auth
Specifies that authentication
is based on the AoR when accessing the CSCF service.
md5 value
Specifies that the
MD5 algorithm is used as the authentication type for accessing the
CSCF service. value specifies
a preference - the lower the value, the higher the preference. value must be
an integer from 1 to 1000.
IMPORTANT:
In order to change
a priority level, you must remove the original value and configure
a new one.
Usage:
Use this command to
configure the authentication method used by the CSCF service.
IMPORTANT:
The S-CSCF supports
multiple authorization schemes, but this requires disabling all
authorization configured in the S-CSCF service so that it will send “Unknown” in
the Sip-Authorization-Scheme AVP. This allows the HSS to dictate
authorization. The following commands disable all authorization
configured in the S-CSCF service to allow HSS to control authorization:
authentication allow-noipauth
allow rfc3261-ua-interworking
no authentication
aka-v1
no authentication
md5
Example:
The following command
configures the authentication method used by the CSCF service to
MD5 with a preference of
3:
authentication md5 3