Administrator’s Guide for SIP-T3xG IP Phones
190
The sample of the RTP encryption algorithm carried in the SDP of the 200 OK message
for reference:
m=audio 11780 RTP/SAVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:NGY4OGViMDYzZjQzYTNiOTNkOWRiYzRlMjM0Yzcz
a=sendrecv
a=ptime:20
a=fmtp:101 0-15
You can configure the SRTP feature on a per-account basis. When SRTP is enabled on
both phones, the RTP streams will be encrypted, and a lock icon appears on the LCD
screen of each IP phone after the successful negotiation.
Note
Procedure
SRTP can be configured using the configuration files or locally.
Configure the SRTP feature on a
per-account basis.
For more information, refer to
SRTP on page 307.
Configure the SRTP feature on a
per-account basis.
Navigate to:
http://<phoneIPAddress>/cgi-bin/
cgiServer.exx?page=Account-Ad
v.htm&acc=<x>
For T38G, x ranges from 0 to 5.
For T32G, x ranges from 0 to 2.
To configure the SRTP feature via web user interface:
1. Click on Account->Basic.
2. Select the desired account from the pull-down list of Account.
3. Click on Advanced.
If you enable SRTP, then you should also enable TLS. This ensures the security of SRTP
encryption. For more information on TLS, refer to Transport Layer Security on page 183 .