Srtp Parameters - AudioCodes Mediant 1000B User Manual

59.4.3 SRTP Parameters

The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Parameter
Media Security
media-security-
enable
[EnableMediaSecurity]
Media Security Behavior
media-sec-bhvior
[MediaSecurityBehaviour
]
Master Key Identifier
(MKI) Size
SRTP-tx-packet-
MKI-size
[SRTPTxPacketMKISize]
Symmetric MKI
Negotiation
symmetric-mki
[EnableSymmetricMKI]
Offered SRTP Cipher
Suites
offer-srtp-cipher
[SRTPofferedSuites]
User's Manual
Table 59-24: SRTP Parameters
Enables Secure Real-Time Transport Protocol (SRTP).

[0] Disable (default)

[1] Enable
Note: For the parameter to take effect, a device reset is required.
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of the
parameter and for configuring this functionality in the IP Profile table, see
Configuring IP Profiles on page 385.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with the
IP Profile.
Note: The parameter is applicable only to the Gateway application.
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles (IpProfile_MKISize). For
a detailed description of the parameter and for configuring this
functionality in the IP Profile table, see 'Configuring IP Profiles' on page
385.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with the
IP Profile.
Global parameter that enables symmetric MKI negotiation. You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_EnableSymmetricMKI). For a detailed description of the
parameter and for configuring this functionality in the IP Profile table, see
'Configuring IP Profiles' on page 385.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with the
IP Profile.
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.

[0] All = (Default) All available crypto suites.

[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM encryption
with a 128-bit key and HMAC-SHA1 message authentication with a
80-bit tag.

[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM encryption
with a 128-bit key and HMAC-SHA1 message authentication with a
32-bit tag.
Note: The parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with two
crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32, it uses
the HMAC_SHA_32 key in its SIP 200 OK response if the parameter is
set to 2.
918
Mediant 1000B Gateway and E- SBC
Description
Document #: LTRT-27044