...
To create or modify a Media Crypto Profile:
| Excerpt Include |
|---|
| Managing Media Crypto SDES-SRTP Profiles |
|---|
| Managing Media Crypto SDES-SRTP Profiles |
|---|
| nopanel | true |
|---|
|
Modifying a Media Crypto Profile
...
| Note |
|---|
|
Anytime Supported is selected in the Operation Option field and the SIP transport is TCP/UDP, the SDP Crypto attributes are sent in plain text. Sonus recommends the use of TLS to protect the keys. |
...
| Panel |
|---|
| bgColor | #FAFAFA |
|---|
| borderStyle | none |
|---|
|
Specifies the manner in which encryption is supported in the profile. - Required: This setting permits call connections only if encryption can be used for the call. If the peer device does not support SRTP (Secure Real Time Protocol) for voice encryption over the IP network, the call setup will fail.
- Supported: This setting advertises to the peer device that the Sonus SBC 1000/2000 implements SRTP. However, a call connection is allowed in secure or unsecure mode depending on the peer preference and capability.
- Off: This setting disables the use of SRTP for encrypted calling.
|
...
| Panel |
|---|
| bgColor | #FAFAFA |
|---|
| borderStyle | none |
|---|
|
Specifies the crypto suite that the Sonus SBC 1000/2000 uses to negotiate with a peer device.Available options: - AES_CM_128_HMAC_SHA1_80. A crypto suite algorithm which uses the 128 bit AES-CM encryption key and a 80 bit HMAC_SHA1 message authentication tag length.
- AES_CM_128_HMAC_SHA1_32. A crypto suite algorithm which uses the 128 bit AES-CM encryption key and a 32 bit HMAC_SHA1 message authentication tag length.
Default option: AES_CM_128_HMAC_SHA1_80. |
...