In this section:
Use the Crypto Suite Profile window to define crypto-suite profiles. The Crypto Suite Profile is used to negotiate cryptographic algorithms when establishing unicast media streams involving Secure RTP/RTCP. The SBC includes the crypto suites and optional session parameters in one or more crypto attributes (a=crypto) of SDP offers and answers. Each crypto attribute describes a cryptographic suite, key parameters, and any optional session parameters. The most preferred crypto suite is listed first. A SIP call signals and negotiates cryptographic parameters for the media stream via the SDP m= line Crypto attribute. These parameters are mostly grouped into a "crypto-suite" field that describes the encryption and authentication algorithms for transport. The appropriate crypto suite profile may include valid combinations of the following session parameters:
- Unauthenticated SRTP—Signals that the SRTP packet payloads are not authenticated.
- Unencrypted SRTP—Signals that the SRTP packet payloads are not encrypted.
- Unencrypted SRTCP—Signals that the SRTCP packet payloads are not encrypted.
By default, SRTP and SRTCP packet payloads are both authenticated and encrypted. The SRTP specification requires the use of message authentication for SRTCP, but not for SRTP. Use of Unauthenticated SRTP is not recommended.
The configuration of Crypto Suite Profiles begins on this window and is completed using its two subordinate windows
To View Crypto Suite Profiles
On the SBC main screen, go to Configuration > Profile Management > Category: Security Profiles > Crypto Suite Profile.
The Crypto Suite Profile window open.
Figure 1: Crypto Suite Profile
To Create a Crypto Suite Profile
To create and name a new Crypto Suite Profile:
Click New Crypto Suite Profile. The Create New Crypto Suite Profile window is displayed.
- Enter a name for the new profile and click Save.
After creating and naming the profile, continue to define its parameters on the subordinate windows:
Entry window – refer to Crypto Suite Profile - Entry
Session Parameter Flags window – refer to Entry - Session Parameter Flags
To Delete a Crypto Suite Profile
- To delete any of the created Crypto Suite Profiles, click the radio button next to the name of the profile you want to delete.
- Click the Delete (X) icon at the end of the row.
- Confirm the deletion when prompted.