AudioCodes Mediant 800B User Manual page 223

User's Manual
the device adjusts these parameters according to the remote offering. Unsupported
session parameters are ignored, and do not cause a call failure.
Below is an example of crypto attributes usage:
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:PsKoMpHlCg+b5X0YLuSvNrImEh/dAe
a=crypto:2 AES_CM_128_HMAC_SHA1_32
inline:IsPtLoGkBf9a+c6XVzRuMqHlDnEiAd
The device also supports symmetric MKI negotiation, whereby it can forward the MKI size
received in the SDP offer 'a=crypto' line in the SDP answer. You can enable symmetric
MKI globally (using the EnableSymmetricMKI parameter) or per SIP entity (using the IP
Profile
IpProfile_SBCEnforceMKISize). For more information on symmetric MKI, see 'Configuring
IP Profiles' on page 436.
You can configure the enforcement policy of SRTP, using the EnableMediaSecurity
parameter for Gateway calls and IpProfile_SBCMediaSecurityBehaviour parameter for
SBC calls. For example, if negotiation of the cipher suite fails or if incoming calls exclude
encryption information, the device can be configured to reject the calls.
Note:
•
For a detailed description of the SRTP parameters, see 'Configuring IP Profiles' on
page 436 and 'SRTP Parameters' on page 1097.
•
When SRTP is used, the channel capacity may be reduced.
The procedure below describes how to configure SRTP through the Web interface.

To enable and configure SRTP:
1. Open the Media Security page (Setup menu > Signaling & Media tab > Media
folder > Media Security).
2. From the 'Media Security' drop-down list (EnableMediaSecurity), select Enable to
enable SRTP.
3. Configure the other SRTP parameters as required.
4. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
Version 7.2
parameter, IpProfile_EnableSymmetricMKI
Figure 14-11: Configuring Media Security
223 Mediant 800B Gateway & E-SBC
14. Media
and for SBC calls,