error response is sent if it receives ice_errcode_disable_candidate the peer disables all candidate pairs associated with the local candidate for which the error response was received this mechanism is directed at reducing the connectivity check retry attempts for candidate pairs with restricted candidates for situations where the peer is not an ice policy enforcement capable endpoint the ice policy enforcement capable endpoint take on the role of the callee endpoint specified above this is useful for scenarios where the peer is a gateway that is not aware of ice or policy enforcement policy management may be done by the endpoint that has information about the peer 39 s ip address in most situations the callee has this information the remote candidate information is then sent to the policy server during the allocation of candidates on the callee the policy server determines the location policy settings of the caller and callee based on the allocate requests that are embedded with the policy attributes in the situation where the turn stun server 209 is an ice endpoint and the peer is a udp endpoint the ip address are known to the turn stun server since the turn stun server knows the peer 39 s candidate the policy management can be done by the turn stun server caller in this scenario even before sending out the invite this scenario also applies to other cases where the caller is ice and the callee is a udp endpoint and peer 39 s ip address is know before sending out the invite the turn stun server before sending the invite configures the media stack with the ip address and enables bandwidth management the media stack on the.