AudioCodes Mediant 800B User Manual page 1098

Parameter
[EnableMediaSecurity]
Media Security Behavior
configure voip > media
security > media-sec-bhvior
[MediaSecurityBehaviour]
Master Key Identifier (MKI)
Size
configure voip > media
security > srtp-tx-packet-mki-
size
[SRTPTxPacketMKISize]
Symmetric MKI Negotiation
configure voip > media
security > symmetric-mki
[EnableSymmetricMKI]
Offered SRTP Cipher Suites
configure voip > media
security > offer-srtp-cipher
[SRTPofferedSuites]
User's Manual

For the parameter to take effect, a device reset is required.
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also configure
this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of the
parameter and for configuring this functionality in the IP Profiles
table, see Configuring IP Profiles on page 436.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: The parameter is applicable only to the Gateway application.
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles (IpProfile_MKISize).
For a detailed description of the parameter and for configuring this
functionality in the IP Profiles table, see 'Configuring IP Profiles' on
page 436.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Global parameter that enables symmetric MKI negotiation. You can
also configure this functionality per specific calls, using IP Profiles
(IpProfile_EnableSymmetricMKI). For a detailed description of the
parameter and for configuring this functionality in the IP Profiles
table, see 'Configuring IP Profiles' on page 436.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.

[0] All = (Default) All available crypto suites.

[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.

[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.

[4] ARIA-CM-128-HMAC-SHA1-80 = device uses ARIA encryption
algorithm with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.

[8] ARIA-CM-192-HMAC-SHA1-80 = device uses ARIA encryption
algorithm with a 192-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note:

For enabling ARIA encryption, use the AriaProtocolSupport
parameter.

The parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with
two crypto lines containing HMAC_SHA1_80 and
HMAC_SHA_32, it uses the HMAC_SHA_32 key in its SIP 200
OK response if the parameter is set to 2.
1098
Mediant 800B Gateway & E-SBC
Description
Document #: LTRT-10632