User's Manual 532 Document #: LTRT-68822
Mediant 2000
Parameter Description
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
ï‚§ [2] CIPHER SUITES AES CM 128 HMAC SHA1 32 = device uses
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note: This parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with two
crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32, it
uses the HMAC_SHA_32 key in its SIP 200 OK response if the
parameter is set to 2.
Web: Disable Authentication
On Transmitted RTP
Packets
EMS: RTP
AuthenticationDisable Tx
[RTPAuthenticationDisabl
eTx]
Enables authentication on transmitted RTP packets in a secured RTP
session.
ï‚§ [0] Enable (default)
ï‚§ [1] Disable
Web: Disable Encryption On
Transmitted RTP Packets
EMS: RTP
EncryptionDisable Tx
[RTPEncryptionDisableTx]
Enables encryption on transmitted RTP packets in a secured RTP
session.
ï‚§ [0] Enable (default)
ï‚§ [1] Disable
Web: Disable Encryption On
Transmitted RTCP Packets
EMS: RTCP
EncryptionDisable Tx
[RTCPEncryptionDisableT
x]
Enables encryption on transmitted RTCP packets in a secured RTP
session.
ï‚§ [0] Enable (default)
ï‚§ [1] Disable
[ResetSRTPStateUponRek
ey]
Enables synchronization of the SRTP state between the device and a
server when a new SRTP key is generated upon a SIP session
expire. This feature ensures that the roll-over counter (ROC), one of
the parameters used in the SRTP encryption/decryption process of
the SRTP packets, is synchronized on both sides for transmit and
receive packets.
ï‚§ [0] = (Default) Disabled. ROC is not reset on the device side.
ï‚§ [1] = Enabled. If the session expires causing a session refresh
through a re-INVITE, the device or server generates a new key
and the device resets the ROC index (and other SRTP fields) as
done by the server, resulting in a synchronized SRTP.
Notes:
ï‚§ This feature can also be configured for an IP Profile.
ï‚§ If this feature is disabled and the server resets the ROC upon a
re-key generation, one-way voice may occur.