Description:

As of LCOS version 8.60, you can restrict the registration of SIP users at the Voice Call Manager over an Internet connection,
or prevent this altogether.


Requirements:


Procedure:

The configuration for the SIP user now includes a new parameter that controls this. You can allow unrestricted registration over the Internet, via VPN only, or you can prohibit this altogether.

1) In LANconfig, open the configuration dialog for the LANCOM router and switch to the menu item VoIP Call Manager-> Users -> SIP users.



2) Open the entry for a SIP user. In the drop-down menu Access from WAN you can make your choice as follows:
  • Denied The access from the Internet is prevented entirely.
  • Only via VPN Access is possible only via a previously established VPN tunnel.



Additional security for the registration is provided by a count of the number of times that a SIP user authenticates incorrectly at the LANCOM VoIP router.

Once the counter reaches a threshold value, the LANCOM router locks the SIP user's account for a certain time. During this period the SIP user cannot log on to the Voice Call Manager. The values for the threshold and the duration of the lock are fully adjustable.

Adjust the setting for the WAN login lock in the menu VoIP Call Manager -> General.