[Freeswitch-users] Authenticating end points by IP

[Ahmed Naji]

People,

Please do excuse me if this is a FAQ.

I've so far not worked out a way to implement IP authentication effectively.
I have a number of gateways/end points/...etc. hitting the switch without
registration and originating calls to a number of upstreams I have
configured.

So far, everything is smooth and FREESwitch is legendary in every way. Over
10,000 simultaneous sessions at 120cps, on a dual-Xeon machine running
CentOS and CPU usage is barely a blip.

My problem is authentication. I need a method to authenticate end points
based only on their IP addresses. I am currently filtering access through
the firewalls, but I would really like to delegate this task to FS in prep
for an SBC setup I'm working on. If I remove the firewall filters, then
anyone is able to get in.

I could't workout precisely how ACLs work in FS from the WiKi and the
documentation, and I haven't been able to make sense of how Digest functions
either.

Can anyone shed some light on those two areas ? I would like to really get
to the bottom of this and update the WiKi pages with the working setup once
done.

Regards,

Ahmed.



-- 
Ahmed A. Ibrahim-Naji Al-Alousi
Ph.D., MIEE, MBCS
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20091220/688baec0/attachment-0002.html