Enable Client-Initiated Mode For Media Plane Security Negotiations; Parameters For Media Plane Security Negotiation - Cisco 8800 Series Manual

Enable Client-Initiated Mode for Media Plane Security Negotiations

Step 3
Click Submit All Changes.
Enable Client-Initiated Mode for Media Plane Security
Negotiations
To protect media sessions, you can configure the phone to initiate media plane security negotiations with the
server. The security mechanism follows the standards stated in RFC 3329 and its extension draft Security
Mechanism Names for Media (See https://tools.ietf.org/html/draft-dawes-sipcore-mediasec-parameter-08#ref-2).
The transport of negotiations between the phone and the server can use SIP protocol over UDP, TCP, and
TLS. You can limit that media plane security negotiation is applied only when the signaling transport protocol
is TLS.
You can also configure the parameters in the configuration file (cfg.xml). To configure each parameter, see
the syntax of the string in
Before you begin
Access the phone administration web page. See
Procedure
Step 1 Select Voice > Ext (n).
Step 2
In the SIP Settings section, set the MediaSec Request and MediaSec Over TLS Only field as defined in
Parameters for Media Plane Security Negotiation, on page 132
Step 3 Click Submit All Changes.

Parameters for Media Plane Security Negotiation

The following table defines the function and usage of the parameters for media plane security negotiation in
the SIP Settings section under the Voice> Ext (n) tab in the phone web interface. It also defines the syntax
of the string that is added in the phone configuration file (cfg.xml) with XML code to configure a parameter.
Cisco IP Phone 8800 Series Multiplatform Phone Administration Guide for Release 11.3(1) and Later
132
Parameters for Media Plane Security Negotiation, on page
Access the Phone Web Interface, on page
Cisco IP Phone Configuration
132.
104.