Srtp Parameters - AudioCodes Mediant 800 MSBG User Manual

SIP User's Manual
Parameter

12.4.3 SRTP Parameters

The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Parameter
Web: Media Security
EMS: Enable Media Security
[EnableMediaSecurity]
Web/EMS: Media Security
Behavior
[MediaSecurityBehaviour]
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
[SRTPTxPacketMKISize]
Web/EMS: SRTP offered Suites
[SRTPofferedSuites]
Version 6.2
Notes:
For this parameter to take effect, a device reset is required.
For a description on implementing client certificates, see
''Client Certificates'' on page 71.
Table 12-18: SRTP Parameters
Enables Secure Real-Time Transport Protocol (SRTP).
[0] Disable = SRTP is disabled (default).
[1] Enable = SRTP is enabled.
Notes: For this parameter to take effect, a device reset is required.
Determines the device's mode of operation when SRTP is used
(i.e., when the parameter EnableMediaSecurity is set to 1).
[0] Preferable = The device initiates encrypted calls. If
negotiation of the cipher suite fails, an unencrypted call is
established. Incoming calls that don't include encryption
information are accepted. (default)
[1] Mandatory = The device initiates encrypted calls, but if
negotiation of the cipher suite fails, the call is terminated.
Incoming calls that don't include encryption information are
rejected.
[2] Disable = The profile does not support encrypted calls (i.e.,
SRTP).
[3] Preferable - Single Media = The device sends SDP with a
single media ('m=') line only (e.g., m=audio 6000 RTP/AVP 4 0
70 96) with RTP/AVP and crypto keys. If the remote SIP UA
does not support SRTP, it ignores the crypto lines.
Notes:
Before configuring this parameter, set the EnableMediaSecurity
parameter to 1.
This parameter can also be configured per IP Profile, using the
IPProfile parameter (see ''Configuring IP Profiles'' on page 143).
Determines the size (in bytes) of the Master Key Identifier (MKI) in
SRTP Tx packets.
The range is 0 to 4. The default value is 0.
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.
[0] All = All available crypto suites (default)
[1] AES_CM_128_HMAC_SHA1_80 = device uses AES-CM
673
12. Configuration Parameters Reference
Description
Description
February 2011