AudioCodes Mediant 1000B - TLS Parameters

Version 7.2 1039 Mediant 1000B Gateway & E-SBC
User's Manual 65. Configuration Parameters Reference
Parameter Description
configure voip > media
security > offer-srtp-cipher
[SRTPofferedSuites]
SRTP.
 [0] All = (Default) All available crypto suites.
 [1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
 [2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note: The parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with two
crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32, it
uses the HMAC_SHA_32 key in its SIP 200 OK response if the
parameter is set to 2.
Disable Authentication On
Transmitted RTP Packets
configure voip > media
security > RTP-
authentication-disable-tx
[RTPAuthenticationDisableTx]
Enables authentication on transmitted RTP packets in a secured RTP
session.
 [0] Enable (default)
 [1] Disable
Disable Encryption On
Transmitted RTP Packets
configure voip > media
security > RTP-encryption-
disable-tx
[RTPEncryptionDisableTx]
Enables encryption on transmitted RTP packets in a secured RTP
session.
 [0] Enable (default)
 [1] Disable
Disable Encryption On
Transmitted RTCP Packets
configure voip > media
security > RTCP-encryption-
disable-tx
[RTCPEncryptionDisableTx]
Enables encryption on transmitted RTCP packets in a secured RTP
session.
 [0] Enable (default)
 [1] Disable
configure voip > sip-definition
settings > srtp-state-behavior-
mode
[ResetSRTPStateUponRekey]
Global parameter that enables synchronization of the SRTP state
between the device and a server when a new SRTP key is generated
upon a SIP session expire. You can also configure this functionality
per specific calls, using IP Profiles
(IpProfile_ResetSRTPStateUponRekey). For a detailed description of
the parameter and for configuring this functionality in the IP Profiles
table, see ''Configuring IP Profiles'' on page 423.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
65.4.4 TLS Parameters
The Transport Layer Security (TLS) parameters are described in the table below.