Cisco CP-7911G-CH1 System Administrator Manual page 227

Configuring Secure SRST for SCCP and SIP
DETAILED STEPS
Command or Action
Step 1
sip-ua
Example:
Router(config)# sip-ua
Step 2
registrar ipv4:destination-address expires
seconds
Example:
Router(config-sip-ua)# registrar
ipv4:192.168.2.10 expires 3600
Step 3
xfer target dial-peer
Example:
Router(config-sip-ua)# xfer target dial-peer
Step 4
crypto signaling default trustpoint string
[strict-cipher]
Example:
Router(config-sip-ua)# crypto signaling default
trustpoint 3745-SRST strict-cipher
Step 5
end
Example:
Router(config-sip-ua)# end
Verifying the Configuration
The following examples show a sample configuration displayed by the show sip-ua status registrar
command and the show voice register global command.
The show sip-ua status registrar command in privileged EXEC mode displays all SIP endpoints that
are currently registered with the contact address.
Router# show sip-ua status registrar
OL-13143-04
Line destination
transport call-id
peer
============ ===============
3029991 192.168.2.108
TLS 00120014-4ae40064-f1a3e9fe-8d301072@192.168.2.1
40004
3029993 192.168.2.103
TCP 001bd433-1c840052-655cd596-4e992eed@192.168.2.1
40011
Purpose
Enters SIP user-agent configuration mode.
Enables the gateway to register E.164 telephone numbers
with primary and secondary external SIP registrars.
destination-address is the IP address of the primary SIP
registrar server.
Specifies that SRST should use the dial-peer as a transfer
target instead of what is in the message body.
Identifies the trustpoint string keyword and argument used
during the TLS handshake. The trustpoint string keyword
and argument refer to the gateway's certificate generated as
part of the enrollment process, using Cisco IOS public-key
infrastructure (PKI) commands. The strict-cipher keyword
restricts support to TLS RSA encryption with the Advanced
Encryption Standard-128 (AES-128) cipher-block-chaining
(CBC) Secure Hash Algorithm (SHA)
(TLS_RSA_WITH_AES_128_CBC_SHA) cipher suite.
To configure device-default mode, omit the strict-cipher
keyword.
Ends the current configuration session and returns to
privileged EXEC mode.
expires(sec) contact
============ ===============
388 192.168.2.108
382 192.168.2.103
Cisco Unified SCCP and SIP SRST System Administrator Guide
How to Configure Secure Unified SRST
227