Alcatel-Lucent ALE M3 - Secure Real-Time Transport Protocol (SRTP)

ALE M3-M5-M7-M8 DeskPhones Administrator Guide
57
• AmazonRootCA4.pem
• Geotrust_PCA_G3_Root.pem
• VerizonPublicSureServerCAG14_SHA2.pem
• VeriSign_Class_1_Public_Primary_Certification_Authority_G3.pem
• EquifaxSecureGlobaleBusinessCA1.pem
Note: ALE endeavors to maintain a built-in list of the most commonly used CA Certificates. If you are using a
certificate from a commercial Certificate Authority, which is not in the list above, you can send a request to
ALE technical support team, and ALE will evaluate if this certificate could be added into later firmware
release. At this point, you can also upload your specific CA certificate into your phone.
5.4.3 TLS Configuration
The following table lists the parameters you can use to configure TLS.
Parameter
AccountXServer1Transport
config.xml
Description
It configures the type of transport protocol.
Permitted
Values
0 - UDP
1 - TCP
2 - TLS
3 - DNS-NAPTR. If no server port is given, the IP phone performs the DNS NAPTR and
SRV queries for the service type and port.
Default
0
Web UI
Account → Basic → Transport Mode
Parameter
SIPTlsVersion
config.xml
Description
It configures the TLS version the IP phone uses to authenticate with the server.
Permitted
Values
0 - All
1 - TLS1.0
2 - TLS1.2
Default
0
Parameter
SIPTlsPeerVerify
config.xml
Description
It enables or disables the peer verify for sip server.
Permitted
Values
false - disable
true - enable
Default
false
Web UI
SIP Features → General → SIPs Peer Verify
Parameter
SIPCertificateUrl
config.xml
Description
It configures the URL to download SIP server certificate.
Default
Blank
Web UI
Maintenance → Certificate Management → Upload Customer Certificate
5.5 Secure Real-Time Transport Protocol (SRTP)
Secure Real-Time Transport Protocol (SRTP) encrypts the audio streams during VoIP phone calls to avoid
interception and eavesdropping. The parties participating in the call must enable SRTP feature