Srtp Configuration - Yealink VP59 Administrator's Manual

Administrator's Guide for VP59/SIP-T58A/CP960 IP Phones
m=audio 11780 RTP/SAVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:NGY4OGViMDYzZjQzYTNiOTNkOWRiYzRlMjM0Yzcz
a=sendrecv
a=ptime:20
a=fmtp:101 0-15
When SRTP is enabled on both phones, RTP streams will be encrypted, and a lock icon appears on the LCD
screen of each IP phone after a successful negotiation.
Note
: If you enable SRTP, then you should also enable TLS. This ensures the security of SRTP encryption. For more inform-
ation on TLS, refer to Transport Layer Security (TLS)
streams in SDP offers by "account.X.srtp.unencrypted_rtp.enable"/"account.X.srtp.unencrypted_rtcp.enable".
Topic

SRTP Configuration

SRTP Configuration
The following table lists the parameters you can use to configure the SRTP.
Parameter account.X.srtp_encryption
Description It configures whether to use audio/video encryption service.
0-Disabled
Permitted 1-Optional, the phone will negotiate with the other phone what type of encryption to use for the ses-
Values sion.
2-Compulsory, the phone must use SRTP during a call.
Default 0
Web UI Account > Advanced > RTP Encryption (SRTP)
Parameter account.X.srtp.unencrypted_rtp.enable
It enables or disables the phone's capability to include unencrypted RTP streams in SDP offers when
using SRTP.
Description
Note: It works only if "account.X.srtp_encryption" is set to 1 (Optional) or 2 (Compulsory).
0-Disabled
Permitted
1-Enabled, the phone offers both encrypted and unencrypted RTP streams (Unencrypted RTP
Values
streams carry UNENCRYPTED_SRTP session parameters) in SDP offers. After a successful nego-
tiation, whether the RTP stream is encrypted or not depends on the SDP answer.
Default
0
Parameter account.X.srtp.unencrypted_rtcp.enable
It enables or disables the phone's capability to include unencrypted RTCP streams in SDP offers
when using SRTP.
Description
Note: It works only if "account.X.srtp_encryption" is set to 1 (Optional) or 2 (Compulsory).
Permitted
0-Disabled
Values
104
. You can configure the IP phone to include unencrypted RTP/RTCP
[1]
[1]
[1]
<MAC>.cfg
<MAC>.cfg
<MAC>.cfg