Data Security
•
MKI: Not supported
•
KDR: Not supported
The Media Gateway should be configured as follows:
•
SRTP Preference: SRTP Only
Cipher Mode: AES Counter Mode
•
•
Authentication Type: SHA1
•
Authentication Tag Length: SHA1 32 bits or 80 bits
•
Master Key Index (MKI) on Transmit Stream: No
Key Derivation Enable: No
•
Key Derivation Rate (KDR): Not applicable
•
Example 2:
In this example, the Media Gateway is talking to an IP phone that does not support security:
•
SRTP Preference: RTP Only
•
Master Key Index (MKI) on Transmit Stream: Not applicable
Key Derivation Enable: Not applicable
•
•
Key Derivation Rate (KDR): Not applicable
•
Anti-replay window size hint: Not Applicable
•
Cipher Mode: Not applicable
Authentication Type: Not applicable
•
Authentication Tag Length: Not applicable
•
7.5
Installing Certificate Using Internet Explorer
This section describes the procedure for installing a certificate using Internet Explorer. Perform the
following steps:
1. Obtain a copy of the certificate that has already been installed or generated on the Media
Gateway.
2. Launch Internet Explorer.
3. Select Tools > Internet Options... from the Internet Explorer menu.
4. Select the Content tab.
5. Click the Certificates... button.
6. Select the Trusted Root Certificate Authorities tab.
7. Click the Import... button.
8. Click Next.
9. Browse to the .cer file.
10. Click Next. You should see the following screen:
178
®
Dialogic
1000 and 2000 Media Gateway Series User's Guide — September 2007
Dialogic Corporation