This profile specifies the flag parameters associated with secure Rtp RTCP.

To View and Edit Flags

On the SBC main screen, go to Configuration > Profile Management > Category: Media Profiles > Packet Service Profile > Secure Rtp RTCP > Flags.

Select the desired Packet Service Profile from the drop-down list to view its respective Flags parameters.

The Flags window is displayed.

Profile Management - Media Profiles - Packet Service Profile - Secure Rtp Rtcp - Flags

Flags Parameters:

Parameter

Description

Allow Fallback

When the check box is selected, the SBCfalls back to standard RTP/RTCP when crypto attribute negotiation fails. The options are:

  • Disable (default)
  • Enable

Enable SRTP

When the check box is selected, Secure RTP/RTCP is enabled on the SBC.

  • Disable (default)
  • Enable

The SBC supports SRTP media pass-through for SRTP and SRTCP media streams. The SBC does not terminate the SDP security description or SRTP media streams and passes them through without authenticating, decrypting, and encrypting. If Enable SRTP and Allow Passthru flags are enabled, The SBC treats SRTP media as plain text RTP pass-through media.


Reset ROCOn SRTPRekey

Enable this flag to reset the SRTP Roll Over Counter when the session key changes.

  • Disable (default)
  • Enable
Reset Enc Dec ROCOn Dec Key ChangeEnable this flag to reset Roll Over Counter for encryption and decryption when the decryption key changes.
  • Disable (default)
  • Enable
Update Crypto Keys On Modify

For an SRTP call, if this flag is enabled in Packet Service Profile and call leg mode is changed from sendonly/inactive/recvonly to sendrecv, the SBC generates a new set of crypto attributes.

  • Disable (default)
  • Enable
Allow Passthru

When enabled, this flag allows the SBC to pass through SRTP media without authenticating, decrypting, and encrypting it internally. When selected, this flag prioritizes SRTP pass-through media over terminated SRTP media.

When this flag is disabled, the SBC terminates all SRTP and SRTCP media for authentication, encryption, or decryption.

To configure this flag, SRTP you must enable the Enable SRTP flag.

  • Disable (default)
  • Enable


Make the required changes and click Save.

  • No labels