You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Back to Table of Contents

Back to CLI Configure Mode

Back to Profiles - CLI

Back to Security - CLI

In this section:

Unable to render {include} The included page could not be found.

Crypto Suite profile is used to negotiate cryptographic algorithms when establishing unicast media streams involving Secure RTP/RTCP. The 

Unable to show "metadata-from": No such page "_space_variables"
{ includes the crypto suites and optional session parameters in one or more crypto attributes (a=crypto) of SDP offers and answers. Each crypto attribute describes a cryptographic suite, key parameters, and any optional session parameters. The most preferred crypto suite is listed first. A SIP call signals and negotiates cryptographic parameters for the media stream via the SDP m= line Crypto attribute. These parameters are mostly grouped into a "crypto-suite" field that describes the encryption and authentication algorithms for transport. The
Unable to show "metadata-from": No such page "_space_variables"
supports the crypto-suite "aes-cm-128 hmac-sha1-80." Secure RTP is requested by the presence of RTP/SAVP or RTP/SAVPF in the m= line. The appropriate crypto suite profile may also include valid combinations of the following session parameters:

  • unauthenticatedSRTP—Signals that the SRTP packet payloads are not authenticated.
  • unencryptedSRTP—Signals that the SRTP packet payloads are not encrypted.
  • unencryptedSRTCP—Signals that the SRTCP packet payloads are not encrypted.

By default, SRTP and SRTCP packet payloads are both authenticated and encrypted. The SRTP specification requires the use of message authentication for SRTCP, but not for SRTP. Use of unauthenticatedSRTP is not recommended. 

Command Syntax

% set profiles security cryptoSuiteProfile <profile name> 
	entry <priority> 
	cryptoSuite <cryptoSuite> 
	sessionParameterFlags <sessionParameterFlags> 

% show profiles security cryptoSuiteProfile <cryptoSuiteProfile> displaylevel <displaylevel> 

% delete profiles security cryptoSuiteProfile <cryptoSuiteProfile>

Command Parameters

The Crypto Suite Profile Parameters are as shown below:

Crypto Suite Profile Parameters

Parameter

Length/Range

Description

cryptoSuiteProfile

1-23

The name of the Crypto Suite Profile.

entry

N/A

Use this parameter to specify the priority of this profile.(default = 1).

cryptoSuite

N/A

A prioritized list of supported crypto suites that the 

Unable to show "metadata-from": No such page "_space_variables"
uses in one or more crypto attributes (a=crypto) of SDP offers and answers when negotiating Secure RTP calls using this profile.

  • AES-CM-128-HMAC-SHA1-32 
  • AES-CM-128-HMAC-SHA1-80
  • none

sessionParameterFlags

N/A

Use this parameter to specify authentication/encryption settings of the session parameter flags.

  • unauthenticatedSRTP – Enable to signal that the SRTP packet payloads are not authenticated.
    • disable (default)
    • enable
  • unencryptedSRTCP –Enable to signal that the SRTCP packet payloads are not encrypted.
    • disable (default)
    • enable
  • unencryptedSRTP– Enable to signal that the SRTP packet payloads are not encrypted.
    • disable (default)
    • enable

Command Example

% show profiles security cryptoSuiteProfile 
cryptoSuiteProfileTest DEFAULT  {
     entry 1 { 
	cryptoSuite AES-CM-128-HMAC-SHA1-80; 
	sessionParameterFlags { 
	    unencryptedSRTCP enable; 
	    unencryptedSRTP enable; 
	    unauthenticatedSRTP enable; 
        } 
    } 
}

  • No labels