Cisco CP-7911G-CH1 System Administrator Manual page 226

How to Configure Secure Unified SRST
DETAILED STEPS
Command or Action
Step 1
voice register global
Example:
Router(config)# voice register global
Step 2
security-policy secure
Example:
Router(config-register-global)# security-policy
secure
Step 3
end
Example:
Router(config-register-global)# end
Configuring SIP User Agent for Secure SIP SRST
This section explains how the strict-cipher limits the allowed encryption algorithms.
SUMMARY STEPS
1.
2.
3.
4.
5.
Cisco Unified SCCP and SIP SRST System Administrator Guide
226
sip-ua
registrar ipv4:destination-address expires seconds
xfer target dial-peer
crypto signaling default trustpoint string [strict-cipher]
end
Configuring Secure SRST for SCCP and SIP
Purpose
Enters voice register global configuration mode.
Configures SIP registration security policy so that only
SIP/TLS/TCP connections are allowed.
For device-default mode, use the no security-policy
command.
Device-default mode allows non-secure devices to register
without using TLS.
Ends the current configuration session and returns to
privileged EXEC mode.
OL-13143-04