SIP Advanced Configuration

Gateway Clustering Support for SIP

Synchronizing SIP Connections

SIP calls can be made across a ClusterXL gateway cluster or a third-party gateway cluster.

The Synchronize connections on Cluster option must be selected for:

• ClusterXL
• Third party gateway clusters
• When SIP connections must be synchronized across gateways
• All services used in rules that secure SIP connections through the gateway cluster

To confirm that SIP connections through a gateway cluster are synchronized:

1. Open SmartConsole.
2. Go to Object Explorer > Services.
3. Locate your service with the search box and double-click on it.
4. Select the Advanced tab.
5. Make sure the Synchronize connections on Cluster box is checked.

   Note - The Synchronize connections on Cluster option is enabled by default

6. Click OK.
7. Install the policy.

Load Sharing of SIP Connections

SIP calls can be made across a ClusterXL gateway in High Availability Mode or Load Sharing Mode. In Load Sharing Mode, the Sticky Decision Function must be enabled. For more on the Sticky Decision Function, see the R80.10 ClusterXL Administration Guide.

Configuring SIP-T Support

To configure support for RFC 3372 Session Initiation Protocol for Telephones (SIP-T):

1. In the $FWDIR/lib/user.def file on the Security Management Server (see sk98239), add this line:

   sipt_hosts = { <first_ip, second_ip> , <first_ip, second_ip> , .... ...., <first_ip, second_ip> } ;

   first_ip and second_ip are the IP addresses between which (bidirectional) SIP-T are allowed.

   For example, to allow SIP-T between 192.1.1.1 and 192.1.1.2, and between 192.1.1.1 and 192.1.1.3, add this line:

   sipt_hosts = { <192.1.1.1, 192.1.1.2> , <192.1.1.1, 192.1.1.3> } ;

   If the file does not exist, create it.

2. Save the file.
3. Install the Security Policy.