Cisco SPA 501G Administration Guide

Configuring Security, Quality, and Network Features
Setting Security Features
Cisco SPA 500 Series and WIP310 IP Phone Administration Guide 110
5
The IP phones use UDP as a standard for SIP transport, but they also support SIP
over TLS for added security.
To enable TLS for the phone:
STEP 1 Log in to the web administration interface.
STEP 2 Click Admin Login and advanced.
STEP 3 Click Ext <number>, then scroll to the SIP Settings section.
STEP 4 Select TLS from the SIP Transport drop-down box.
STEP 5 Click Submit All Changes.
SRTP and Securing Calls
Secure Real-Time Transport Protocol (SRTP) is a secure protocol for transporting
real-time data over networks. Cisco SPA 500 Series and Wireless IP Phones use
SRTP to securely send and receive real-time voice traffic from other phones and
gateways. Security Description (RFC 4568) is supported.
SRTP provides media encryption to ensure that media streams between devices
are secure and that only the intended devices receive and read the data.
When a call is secure, the voice conversation is encrypted so that others cannot
eavesdrop on the conversation. To enable this feature the IP phone must have a
mini-certificate installed.
The supplementary service Secure All Calls (*16)—Defaults to prefer to use
encrypted media (voice codecs). Audio packets in both directions of outbound
calls are encrypted using SRTP.
To use Secure Call on an extension, you must configure
Mini Certificate and SRTP
Private Key
for that extension. These parameters appear on the Ext tabs.
Secure Call Service activates secure encryption of RTP streams between the two
endpoints. You can disable this if the other endpoint (or gateway) does not
support this proprietary method.

Cisco SPA 501G Specifications

General

Brand	Cisco
Model	SPA 501G
Category	IP Phone
Language	English