Srtp Parameters - AudioCodes Mediant 800B User Manual

Parameter
Web: Requires Client Certificates
for HTTPS connection
CLI: req-client-cert
[HTTPSRequireClientCertificate]

56.4.3 SRTP Parameters

The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Parameter
Web: Media Security
EMS: Enable Media Security
CLI: media-security-enable
[EnableMediaSecurity]
Web/EMS: Media Security
Behavior
CLI: media-sec-bhvior
[MediaSecurityBehaviour]
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
CLI: SRTP-tx-packet-MKI-size
[SRTPTxPacketMKISize]
Web: Symmetric MKI
Negotiation
User's Manual
Note: If you enable RADIUS login (i.e., the WebRADIUSLogin
parameter is set to 1), you must set the WebAuthMode
parameter to Basic Mode [0].
Determines whether client certificates are required for HTTPS
connection.

[0] Disable = (Default) Client certificates are not required.

[1] Enable = Client certificates are required. The client
certificate must be preloaded to the device and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device for the client
certificate to be verified.
Notes:

For this parameter to take effect, a device reset is required.

For a description on implementing client certificates, see TLS
for Remote Device Management on page 101.
Table 56-26: SRTP Parameters
Enables Secure Real-Time Transport Protocol (SRTP).

[0] Disable (default)

[1] Enable
Note: For this parameter to take effect, a device reset is required.
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of
this parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page 304.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: This parameter is applicable only to the Gateway
application.
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_MKISize). For a detailed description of this parameter
and for configuring this functionality in the IP Profile table, see
''Configuring IP Profiles'' on page 304.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Global parameter that enables symmetric MKI negotiation. You can
also configure this functionality per specific calls, using IP Profiles
770
Mediant 800B Gateway and E-SBC
Description
Description
Document #: LTRT-10286