Transport Layer Security; Configure Sip Over Tls Signaling Encryption; Configure Ldap Over Tls - Cisco 7800 Series Administration Manual

Transport Layer Security

Transport Layer Security
Transport Layer Security (TLS) is a standard protocol for securing and authenticating communications over
the Internet. SIP over TLS encrypts the SIP messages between the service provider SIP proxy and the end
user. SIP over TLS encrypts only the signaling messages, not the media.
TLS has two layers:
• TLS Record Protocol—Layered on a reliable transport protocol, such as SIP or TCH, this layer ensures
• TLS Handshake Protocol—Authenticates the server and client, and negotiates the encryption algorithm
The Cisco IP Phone uses UDP as the standard for SIP transport, but the phone also supports SIP over TLS
for added security.

Configure SIP Over TLS Signaling Encryption

Before you begin
Access the phone administration web page. See
Procedure
Step 1 Select Voice > Ext(n), where n is an extension number.
Step 2
In the SIP Settings section, select TLS from the SIP Transport drop-down list box.
Step 3 Click Submit All Changes.

Configure LDAP over TLS

You can configure LDAP over TLS (LDAPS) to enable secure data transmission between the server and a
specific phone.
Attention
Cisco recommends leaving the authentication method to the default value of None. Next to the server field
is an authentication field that uses the values None, Simple, or DIGEST-MD5. There is no TLS value for
authentication. The software determines the authentication method from the ldaps protocol in the server string.
Before you begin
Access the phone administration web page. See
Cisco IP Phone 7800 Series Multiplatform Phones Administration Guide
122
that the connection is private through use of symmetric data encryption and it ensures that the connection
is reliable.
and cryptographic keys before the application protocol transmits or receives data.
Access the Phone Web Page, on page
Access the Phone Web Page, on page
Cisco IP Phone Administration
80.
80.