Version 6.8 571 Mediant 2600 E-SBC
User's Manual 43. Configuration Parameters Reference
Parameter Description
Web/EMS: Offered SRTP
Cipher Suites
CLI: offer-srtp-cipher
[SRTPofferedSuites]
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.
[0] All = (Default) All available crypto suites.
[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note: This parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with
two crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32,
it uses the HMAC_SHA_32 key in its SIP 200 OK response if the
parameter is set to 2.
Web: Disable Authentication On
Transmitted RTP Packets
EMS: RTP
AuthenticationDisable Tx
CLI: RTP-authentication-
disable-tx
[RTPAuthenticationDisableTx]
Enables authentication on transmitted RTP packets in a secured
RTP session.
[0] Enable (default)
[1] Disable
Web: Disable Encryption On
Transmitted RTP Packets
EMS: RTP EncryptionDisable
Tx
CLI: RTP-encryption-disable-tx
[RTPEncryptionDisableTx]
Enables encryption on transmitted RTP packets in a secured RTP
session.
[0] Enable (default)
[1] Disable
Web: Disable Encryption On
Transmitted RTCP Packets
EMS: RTCP EncryptionDisable
Tx
CLI: RTCP-encryption-disable-
tx
[RTCPEncryptionDisableTx]
Enables encryption on transmitted RTCP packets in a secured
RTP session.
[0] Enable (default)
[1] Disable
CLI: srtp-state-behavior-mode
[ResetSRTPStateUponRekey]
Global parameter that enables synchronization of the SRTP state
between the device and a server when a new SRTP key is
generated upon a SIP session expire. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_ResetSRTPStateUponRekey). For a detailed description
of this parameter and for configuring this functionality in the IP
Profile table, see ''Configuring IP Profiles'' on page 297.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.