Samsung Ubigate iBG2016 Configuration Manual page 459

Configuring S/MIME support
This section describes how to set S/MIME which ensures security by
encrypting and delivering SIP message body. S/MIME encodes and delivers a
SIP message body after signing or enveloping it, and the receiving party
decodes the encrypted message body. It requires its own certificate and private
key for SIP signaling including S/MIME; and to do this, a certificate and
private key should be specified for each POTS Dial-peer. The certificate of a
counterpart is obtained via SIP Signaling.
Prerequisites for S/MIME Configuration
Before specifying a certificate and private key to POTS Dial-peer, a certificate
and private key should be saved in the file system of Ubigate iBG2016 in a
PEM format.
How to Configure S/MIME Support
You can specify the certificate and private key to a desired dial-peer where
S/MIME will be used, in the following way.
Configuration Steps
configure terminal
−
dial-peer voice pots
−
smime
−
exit
−
Detailed Steps
Step
1
2
3
© SAMSUNG Electronics Co., Ltd.
Command
configure terminal
Example)
# configure terminal
dial-peer voice {pots | voip} tag
Example)
/configure# dial-peer voice pots 11
smime prvkey file-name cert file-name
[forced]
Example)
configure/ dial-peer/voice/pots
11#smime prvkey prvkey11.pem cert
cert11.pem
Ubigate iBG2016 Configuration Guide/Ed.00
Purpose
Enters global configuration mode.
Enters POTS dial-peer
configuration mode
Specifies file names of certificate
and private key for S/MIME.
405