User's Manual 67. Configuration Parameters Reference
Version 6.8 817 Mediant 500L MSBR
Parameter Description
Web: Requires Client Certificates
for HTTPS connection
CLI: req-client-cert
[HTTPSRequireClientCertificate]
Enables the requirement of client certificates for HTTPS
connection.
[0] Disable = (Default) Client certificates are not required.
[1] Enable = Client certificates are required. The client
certificate must be preloaded to the device and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device for the client
certificate to be verified.
Notes:
For this parameter to take effect, a device reset is required.
For a description on implementing client certificates, see ''
for Remote Device Management'' on page 128.
67.4.3 SRTP Parameters
The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Table 67-23: SRTP Parameters
Parameter Description
Web: Media Security
EMS: Enable Media Security
CLI: media-security-enable
[EnableMediaSecurity]
Enables Secure Real-Time Transport Protocol (SRTP).
[0] Disable (default)
[1] Enable
Note: For this parameter to take effect, a device reset is required.
Web/EMS: Media Security
Behavior
CLI: media-sec-bhvior
[MediaSecurityBehaviour]
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of
this parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page 332.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: This parameter is applicable only to the Gateway
application.
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
CLI: SRTP-tx-packet-MKI-size
[SRTPTxPacketMKISize]
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_MKISize). For a detailed description of this parameter
and for configuring this functionality in the IP Profile table, see
''Configuring IP Profiles'' on page 332.
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Web: Symmetric MKI
Negotiation
EMS: Enable Symmetric MKI
CLI: symmetric-mki
[EnableSymmetricMKI]
Global parameter that enables symmetric MKI negotiation. You can
also configure this functionality per specific calls, using IP Profiles
(IpProfile_EnableSymmetricMKI). For a detailed description of this
parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page
332.