Page History

...

1. Access the WebUI.

2. Click Settings > Media > Media Crypto Profile.

3. Create a Crytpo Profile with the settings below.

4. Click OK.

    

   Caption
   0 Figure 1 Create Crypto File

5. Click Media > Media List.
6. Select the desired Media List used by the CCE Signaling Group.

7. From the desired Crypto Profile ID drop down list, select the desired profile (the newly created Crypto Profile).
   
   

   Caption
   0 Figure 1 Media DSCP Option

   Caption
   0 Figure 1 Media List Configuration

8. Click Settings > Security > TLS Profiles.

9. Create a TLS profile with the following settings.
   

   TLS Protocol = TLS 1.2 Only

    Mutual Authentication = Enabled

    Handshake Inactivity Timeout = 30 secs

    Include all Client Ciphers

    Validate Server FQDN =  Enabled

    Validate Client FQDN = Disabled

   
   

10. Click OK.

    Note
    Validate Client FQDN must be set to DISABLED.

     

    Caption
    0 Figure 1 Create TLS Profile

11. Access Settings > Signaling Groups.

12. Edit the applicable CCE Signaling Group to add Listen Ports with the following parameters: Protocol: TLS, Port: 5067, and the TLS Profile created in the previous step.

    Caption
    0 Figure 1 Edit Signaling Group

13. Access Settings > SIP Server Tables.

14. Edit the applicable SIP Server Table to use the following parameters: Protocol: TLS, Port: 5067 and the applicable CCE TLS Profile.

    Caption
    0 Figure 1 Edit SIP Server Table
    Image RemovedImage Added

Exchange Certificates Between CCE and SBC

...