Srtp And Securing Calls - Cisco SPA 525G2 Administration Manual

Configuring Security, Quality, and Network Features
Setting Security Features
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
Cisco Small Business SPA 300 Series, SPA 500 Series, and WIP310 IP Phone Administration Guide
The IP phones use UDP as a standard for SIP transport, but they also support SIP
over TLS for added security.
To enable TLS for the phone:
Log in to the configuration utility.
Click Admin Login and advanced.
Click Ext <number>, then scroll to the
SIP Transport
Select TLS from the
Click Submit All Changes.

SRTP and Securing Calls

Secure Real-Time Transport Protocol (SRTP) is a secure protocol for transporting
real-time data over networks. Cisco SPA IP Phones use SRTP to securely send
and receive real-time voice traffic from other phones and gateways. Security
Description (RFC 4568) is supported.
SRTP provides media encryption to ensure that media streams between devices
are secure and that only the intended devices receive and read the data.
When a call is secure, the voice conversation is encrypted so that others cannot
eavesdrop on the conversation. To enable this feature the IP phone must have a
mini-certificate installed.
The supplementary service Secure All Calls (*16)—Defaults to prefer to use
encrypted media (voice codecs). Audio packets in both directions of outbound
calls are encrypted using SRTP.
To use Secure Call on an extension, you must configure
Private Key
for that extension. These parameters appear on the
Secure Call Service activates secure encryption of RTP streams between the two
endpoints. You can disable this if the other endpoint (or gateway) does not
support this proprietary method.
SIP Settings
section.
drop-down box.
5
Mini Certificate SRTP
and
Ext
tabs.
118