Srtp Configuration - Yealink SIP-T3 Administrator's Manual

Administrator's Guide for SIP-T2 /T3 /T4 /T5 /CP920 IP Phones
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:NGY4OGViMDYzZjQzYTNiOTNkOWRiYzRlMjM0Yzcz
a=sendrecv
a=ptime:20
a=fmtp:101 0-15
When SRTP is enabled on both phones, RTP streams will be encrypted, and a lock icon appears on the LCD
screen of each IP phone after a successful negotiation.
Note
: If you enable SRTP, then you should also enable TLS. This ensures the security of SRTP encryption. For more inform-
ation on TLS, refer to Transport Layer Security (TLS)
streams in SDP offers by "account.X.srtp.unencrypted_rtp.enable"/"account.X.srtp.unencrypted_rtcp.enable".
Topic

SRTP Configuration

SRTP Configuration
The following table lists the parameters you can use to configure the SRTP.
Parameter account.X.srtp_encryption
Description It configures whether to use audio encryption service.
0-Disabled
Permitted 1-Optional, the phone will negotiate with the other phone what type of encryption to use for the ses-
Values sion.
2-Compulsory, the phone must use SRTP during a call.
Default 0
Web UI Account > Advanced > RTP Encryption (SRTP)
Parameter account.X.srtp_lifetime
It configures the lifetime of the master key used for the cryptographic parameter in SDP. The value spe-
cified is the number of SRTP packets.
When the lifetime is set, a re-invite with a new key is sent when the number of SRTP packets sent for
Description
an outgoing call exceeds half the value of the master key lifetime.
Note: Setting this parameter to a non-zero value may affect the performance of the phone. It works
only if "account.X.srtp_encryption" is set to 1 (Optional) or 2 (Compulsory).
Integer greater than or equal to 0
0-the master key lifetime is not set.
Permitted
1 to 1024-the master key lifetime is 1024.
Values
1025 to 2^48-the master key lifetime is the configured value.
A value greater than 2^48-the master key lifetime is 2^48.
Default 0
Parameter account.X.srtp.unencrypted_rtp.enable
Description It enables or disables the phone's capability to include unencrypted RTP streams in SDP offers when
125
. You can configure the IP phone to include unencrypted RTP/RTCP
[1]
[1]
[1]
<MAC>.cfg
<MAC>.cfg
<MAC>.cfg