Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Moved caution to note

...

To create or modify an SDES-SRTP Profile:

Info

SDES-SRTP Profiles was previously named Media Crypto Profiles.

Excerpt Include
Managing SDES-SRTP Profiles
Managing SDES-SRTP Profiles
nopaneltrue

...

  1. Click the Create SDES-SRTP Profile ( ) icon at the top of the SDES-SRTP Profiles page.

    Panel
    borderStylenone

    Caption
    0Figure
    1Create Media Crypto SDES-SRTP Profile

     

    Anchor
    properties
    properties

SRTP Config - Field Definitions

...

...

Operation Option

...

...

0company

...

Operation Option

Panel
bgColor#FAFAFA
borderStylenone

Specifies the manner in which encryption is supported in the profile.

  • Required: This setting permits call connections only if encryption can be used for the call. If the peer device does not support SRTP (Secure Real Time Protocol) for voice encryption over the IP network, the call setup will fail.
  • Supported: This setting advertises to the peer device that the
    Spacevars
    0longproduct
    implements SRTP. However, a call connection is allowed in secure or unsecure mode depending on the peer preference and capability.
  • Off: This setting disables the use of SRTP for encrypted calling.
Info

Anytime Supported is selected in the Operation Option field and the SIP transport is TCP/UDP, the SDP Crypto attributes are sent in plain text.

Spacevars
0company
recommends the use of TLS to protect the keys.

Crypto Suite

Panel
bgColor#FAFAFA
borderStylenone

Specifies the crypto suite that the

Spacevars
0company
uses to negotiate with a peer device.

Available options:

  • AES_CM_128_HMAC_SHA1_80. A crypto suite algorithm which uses the 128 bit AES-CM encryption key and a 80 bit HMAC_SHA1 message authentication tag length.
  • AES_CM_128_HMAC_SHA1_32. A crypto suite algorithm which uses the 128 bit AES-CM encryption key and a 32 bit HMAC_SHA1 message authentication tag length.

Default option: AES_CM_128_HMAC_SHA1_80.

...