Version 6.6 349 October 2014
Installation & Operation Manual 33. Configuring Security Settings
5. Configure the IPSEC Profile parameter to match the ID and name of the TP
IPSEC Profile configured above.
6. In the Actions bar, click Unlock to restore the service on the Media Gateway
board.
33.12 SIP over SSL/TLS (SIPS)
The Secure Socket Layer (SSL) / TLS (Transport Layer Security) protocol is used to
provide confidentiality, integrity and authenticity between two communicating
applications over TCP/IP.
The Mediant 8000 supports the use of the SSL/TLS protocol for encryption and
authentication of SIP call control traffic.
Specifications of the SSL/TLS implementation in Mediant 8000:
Supported transports: SSL 2.0, SSL 3.0, TLS 1.0
Supported ciphers: DES, RC4 compatible
Authentication: X.509 certificates
To enable SIP over SSL/TLS for a specific Media Gateway board:
1. Click
to access the Media Gateway status screen.
2. Select the desired Media Gateway Board.
3. In the Navigation pane, select SIP
SIP General and in the Configuration pane,
click SIP Protocol Settings; The SIP Protocol Settings screen is displayed.
4. Set the Transport Type parameter to TLS.
In this mode, the Media Gateway board initiates a TLS connection only for the
next network hop.
5. To enable TLS all the way to the destination (over multiple hops) set Enable
SIPS parameter to Enable and SIP Destination Port parameter to 5061.
6. If you wish the Media Gateway board to validate the certificate of the remote side,
set the parameter TLS Two-Way Authentication to Enable.
To Next Page
Loading...
