In this section:
Use the Crypto Suite Profile window to define crypto-suite profiles. The Crypto Suite Profile is used to negotiate cryptographic algorithms when establishing unicast media streams involving Secure RTP/RTCP. The SBC includes the crypto suites and optional session parameters in one or more crypto attributes (a=crypto) of SDP offers and answers. Each crypto attribute describes a cryptographic suite, key parameters, and any optional session parameters. The most preferred crypto suite is listed first. A SIP call signals and negotiates cryptographic parameters for the media stream via the SDP m= line Crypto attribute. These parameters are mostly grouped into a "crypto-suite" field that describes the encryption and authentication algorithms for transport. The appropriate crypto suite profile may include valid combinations of the following session parameters:
By default, SRTP and SRTCP packet payloads are both authenticated and encrypted. The SRTP specification requires the use of message authentication for SRTCP, but not for SRTP. Use of Unauthenticated SRTP is not recommended.
The configuration of Crypto Suite Profiles begins on this window and is completed using its two subordinate windows
On the SBC main screen, go to Configuration > Profile Management > Category: Security Profiles > Crypto Suite Profile.
The Crypto Suite Profile window open.
To create and name a new Crypto Suite Profile:
Click New Crypto Suite Profile. The Create New Crypto Suite Profile window is displayed.