DO NOT SHARE THESE DOCS WITH CUSTOMERS!
This is an LA release that will only be provided to a select number of PLM-sanctioned customers (PDFs only). Contact PLM for details.
In this section:
Use the DTLS Profile window to configure various DTLS parameters to attach to a SIP trunk group in support of WebRTC functionality.
Similar to TLS, the Datagram Transport Layer Security (DTLS) protocol provides authentication, data integrity, and confidentiality for communications between two applications over an unreliable User Datagram Protocol (UDP) connection. The Secure Real-time Transport Protocol (SRTP) provides encryption, message authentication and integrity, and replay protection to the RTP data in both unicast and multicast applications. DTLS-SRTP is an extension to the DTLS protocol, where DTLS acts as the key management protocol. DTLS protocol is also extended to negotiate the SRTP crypto suites and parameters for use with those keys. WebRTC is a signaling protocol defined for real-time communication between web browsers. WebRTC uses the DTLS-SRTP protocol for media exchange between browsers. The SBC includes the following functionality: The SBC includes crypto suites that define a set of ciphers (algorithms used for encrypting data) which allow the selection of an appropriate level of security. When a DTLS connection is established, the client and server exchange information about which cipher suites they have in common.
On the SBC main screen, go to All > Profiles > Security > DTLS Profile.
The DTLS Profile window opens.
To create a new DTLS Profile:
Click New DTLS Profile. The Create New DTLS Profile window opens.
Parameter | Description |
---|---|
Name | Specifies the name of the DTLS Profile created. The value ranges up to 23 characters. |
Handshake Timer | Specifies the time in which the DTLS handshake must be completed. The timer starts when the TCP connection is established. Must be 1 - 60 seconds; default is 5. |
Session Resump Timer | Specifies the DTLS session resumption period for which cached sessions are retained (in seconds). DTLS allows successive connections to be created within one DTLS session and the resumption of a session after a DTLS connection is closed or after a server card failover, without repeating the entire authentication and other setup steps for each connection, except when the space must be reclaimed for a new session. Must be 0 - 86,400 seconds; default is 300. |
Cipher Suite1 | Use this parameter to specify the first DTLS Cipher Suite choice for this profile.
* To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile. ** To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile and SSL certificates must be created using ECC keys. Warning: When The SBC releases 7.2.x and 10.1.3 are compliant with FIPS-140-2 and FIPS-140-3 respectively. To verify the current status of FIPS certification, contact the Global Support Assistance Center: Ribbon Support Portal: https://ribboncommunications.com/services/ribbon-support-portal Voice: +1-833-RIBBON1 (1-833-742-2661) |
Cipher Suite2 | Use this parameter to specify the second DTLS Cipher Suite choice for this profile.
* To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile. ** To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile and SSL certificates must be created using ECC keys. Warning: When |
Cipher Suite3 | Use this parameter to specify the third DTLS Cipher Suite choice for this profile.
* To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile. ** To use this cipher, DTLS version 1.2 must be enabled in the DTLS Profile and SSL certificates must be created using ECC keys. Warning: When |
DTLS Role | Specifies the allowed DTLS roles of this DTLS profile. The options are:
|
Hash Type | Specifies the allowed DTLS hash function for a specified DTLS profile. The options are:
|
Cert Name | Specifies the name of the certificate referred by a specified DTLS profile. The default value is defaultDtlsSBCCert . |
Cookie Exchange | Specifies the state that is, enabled or disabled cookie exchange.
|
V1_0 | DTLS protocol version 1.0.
|
V1_1 | DTLS protocol version 1.1.
|
V1_2 | DTLS protocol version 1.2.
|
To edit a DTLS Profile:
To copy a DTLS Profile and make minor changes:
To delete a DTLS Profile: