AudioCodes Mediant 1000B User Manual page 750

Parameter
[EnableMediaSecurity]
Web/EMS: Media Security
Behavior
CLI: media-sec-bhvior
[MediaSecurityBehaviour]
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
CLI: SRTP-tx-packet-MKI-size
[SRTPTxPacketMKISize]
Web: Symmetric MKI
Negotiation
EMS: Enable Symmetric MKI
CLI: symmetric-mki
[EnableSymmetricMKI]
Web/EMS: Offered SRTP
Cipher Suites
CLI: offer-srtp-cipher
[SRTPofferedSuites]
Web: Disable Authentication On
Transmitted RTP Packets
EMS: RTP
AuthenticationDisable Tx
CLI: RTP-authentication-
disable-tx
[RTPAuthenticationDisableTx]
Web: Disable Encryption On
User's Manual
Note:

For this parameter to take effect, a device reset is required.
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of
this parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page 302.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: This parameter is applicable only to the Gateway
application.
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_MKISize). For a detailed description of this parameter
and for configuring this functionality in the IP Profile table, see
''Configuring IP Profiles'' on page 302.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Global parameter that enables symmetric MKI negotiation. You can
also configure this functionality per specific calls, using IP Profiles
(IpProfile_EnableSymmetricMKI). For a detailed description of this
parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page 302.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.

[0] All = (Default) All available crypto suites.

[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.

[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note: This parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with
two crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32,
it uses the HMAC_SHA_32 key in its SIP 200 OK response if the
parameter is set to 2.
Enables authentication on transmitted RTP packets in a secured
RTP session.

[0] Enable (default)

[1] Disable
Enables encryption on transmitted RTP packets in a secured RTP
750
Mediant 1000B Gateway & SBC
Description
Document #: LTRT-27034