Tls Parameters - AudioCodes MP-11x User Manual

Parameter
Web: Disable Authentication On
Transmitted RTP Packets
EMS: RTP AuthenticationDisable
Tx
[RTPAuthenticationDisableTx]
Web: Disable Encryption On
Transmitted RTP Packets
EMS: RTP EncryptionDisable Tx
[RTPEncryptionDisableTx]
Web: Disable Encryption On
Transmitted RTCP Packets
EMS: RTCP EncryptionDisable
Tx
[RTCPEncryptionDisableTx]
[ResetSRTPStateUponRek
ey]

44.4.4 TLS Parameters

The Transport Layer Security (TLS) parameters are described in the table below.
Parameter
Web/EMS: TLS Version
[TLSVersion]
User's Manual
message authentication with a 80-bit tag.

[2] CIPHER SUITES AES CM 128 HMAC SHA1 32 = device
uses AES-CM encryption with a 128-bit key and HMAC-SHA1
message authentication with a 32-bit tag.
Note: This parameter also affects the selection of the crypto in
the device's answer. For example, if the device receives an offer
with two crypto lines containing HMAC_SHA1_80 and
HMAC_SHA_32, it uses the HMAC_SHA_32 key in its SIP 200
OK response if the parameter is set to 2.
Enables authentication on transmitted RTP packets in a secured
RTP session.

[0] Enable (default)

[1] Disable
Enables encryption on transmitted RTP packets in a secured RTP
session.

[0] Enable (default)

[1] Disable
Enables encryption on transmitted RTCP packets in a secured
RTP session.

[0] Enable (default)

[1] Disable
Enables synchronization of the SRTP state between the device and
a server when a new SRTP key is generated upon a SIP session
expire. This feature ensures that the roll-over counter (ROC), one of
the parameters used in the SRTP encryption/decryption process of
the SRTP packets, is synchronized on both sides for transmit and
receive packets.

[0] = (Default) Disabled. ROC is not reset on the device side.

[1] = Enabled. If the session expires causing a session refresh
through a re-INVITE, the device or server generates a new key
and the device resets the ROC index (and other SRTP fields) as
done by the server, resulting in a synchronized SRTP.
Notes:

This feature can also be configured for an IP Profile.

If this feature is disabled and the server resets the ROC upon a
re-key generation, one-way voice may occur.
Table 44-24: TLS Parameters
Determines the supported versions of SSL/TLS (Secure Socket
Layer/Transport Layer Security.

[0] SSL 3.0, TLS 1.0, TLS 1.1 and TLS 1.2 (Default)

[1] TLS 1.0 Only
508
MP-11x & MP-124
Description
Description
Document #: LTRT-65432