Tls Support - Aastra 9000i Series Administrator's Manual

TLS Support

The IP Phones support a transport protocol called Transport Layer Security (TLS) and
Persistent TLS. TLS is a protocol that ensures communication privacy between the SIP phones
and the Internet. TLS ensures that no third party may eavesdrop or tamper with any message. An
Administrator can configure the following parameters for TLS Support.
Parameter
Parameter in
In
Aastra Web UI
IP Phone UI
N/A Transport Protocol
N/A N/A
3-70
Parameters in
Configuration Files
sip transport protocol Specifies the protocol that the RTP port on the IP phone
uses to send out SIP signaling packets. Default is USP.
Notes:
1.
phone checks to see if the "sips persistent tls" is
enabled. If it is enabled, the phone uses Persistent TLS on
the connection. If "sips persistent tls" is disabled, then
the phone uses TLS on the connection. If TLS is used, you
must specify the Root and Intermediate Certificates, the
Local Certificate, the Private Key, and the Trusted
Certificates.
2.
the Trusted Certificates; the Root and Intermediate
Certificates, the Local Certificate, and the Private Key are
optional.
For more information, see Chapter 6, the section,
"Transport Layer Security (TLS)"
sips persistent tls Enables or disables the use of Persistent Transport Layer
Security (TLS).
Persistent TLS sets up the connection to the server once
and re-uses that connection for all calls from the phone.
The setup connection for Persistent TLS is established
during the registration of the phone. If the phones are set
to use Persistent TLS, and a call is made from the phone,
this call and all subsequent calls use the same
authenticated connection. This significantly reduces the
delay time when placing a call.
Notes:
1.
and outbound proxy port parameters be configured in
either the configuration files or the Aastra Web UI
(Advanced Settings->Global SIP->Basic SIP Network
Settings). There can be only one persistent TLS
connection created per phone. The phone establishes the
TLS connection to the configured outbound proxy.
2.
must also specify the Trusted Certificate file to use. The
Root and Intermediate Certificates, Local Certificate, and
Private Key files are optional.
For more information, see Chapter 6, the section,
"Transport Layer Security (TLS)"
Description
If you set the value of this parameter to 4 (TLS), the
If the phone uses Persistent TLS, you MUST specify
Persistent TLS requires the outbound proxy server
If you configure the phone to use Persistent TLS, you
41-001343-01 Rev 02, Release 3.2.2
on page 6-26.
on page 6-26.