Include Page |
---|
| _SBC7000_only |
---|
| _SBC7000_only |
---|
|
The parameter IPsec For Media in the IP Interface Group EMA screen supports media over IPsec. The IPsec For Media parameter works in conjunction with the IPsec state parameter already available in the same screen. The IPsec Admin State field enables or disables IPsec on the LIF Group as a whole.
Info |
---|
|
To support media over IPsec, you must enable both the IPsec and IPsec for Media parameters. Calls using this IP Interface Group will only succeed if the media packets match a media SPD entry. |
Whenever IPsec For Media is disabled, only media SAs are deleted. If only IPsec is disabled, then only the signaling/LI SAs are deleted.
Currently, whenever IPsec is disabled on a LIF group, isakmp ports on the interfaces belonging to the LIF group are closed. If IPsec is disabled on LIF group but IPsec for Media is enabled, then isakmp ports are not closed, and vice versa.
To establish IPsec SAs for media traffic, enable IPsec For Media of a media IP Interface Group as well as the administrative "state" of media IPsec SPD.