User's Manual 818 Document #: LTRT-10466
Mediant 500L MSBR
Parameter Description
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Web/EMS: Offered SRTP
Cipher Suites
CLI: offer-srtp-cipher
[SRTPofferedSuites]
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.
[0] All = (Default) All available crypto suites.
[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
[4] ARIA-CM-128-HMAC-SHA1-80 = device uses ARIA
encryption algorithm with a 128-bit key and HMAC-SHA1
message authentication with a 32-bit tag.
[8] ARIA-CM-192-HMAC-SHA1-80 = device uses ARIA
encryption algorithm with a 192-bit key and HMAC-SHA1
message authentication with a 32-bit tag.
Notes:
For enabling ARIA encryption, use the AriaProtocolSupport
parameter.
This parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer
with two crypto lines containing HMAC_SHA1_80 and
HMAC_SHA_32, it uses the HMAC_SHA_32 key in its SIP 200
OK response if the parameter is set to 2.
Web: Aria Protocol Support
CLI: ARIA-protocol-support
[AriaProtocolSupport]
Enables ARIA algorithm cipher encryption for SRTP. This is an
alternative option to the existing support for the AES algorithm.
ARIA is a symmetric key block cipher algorithm standard
developed by the Korean National Security Research Institute.
[0] Disable (default)
[1] Enable
Notes:
To configure the ARIA bit-key encryption size (128 or 192 bit)
with HMAC SHA-1 cryptographic hash function, use the
SRTPofferedSuites parameter.
The ARIA feature is available only if the device is installed with
a Software License Key that includes this feature. For installing
a Software License Key, see Software License Key on page
638.
Web: Disable Authentication On
Transmitted RTP Packets
EMS: RTP
AuthenticationDisable Tx
CLI: RTP-authentication-
disable-tx
[RTPAuthenticationDisableTx]
Enables authentication on transmitted RTP packets in a secured
RTP session.
[0] Enable (default)
[1] Disable
Web: Disable Encryption On
Transmitted RTP Packets
EMS: RTP EncryptionDisable
Tx
CLI: RTP-encryption-disable-tx
Enables encryption on transmitted RTP packets in a secured RTP
session.
[0] Enable (default)
[1] Disable