AudioCodes Media Pack MP-124, User Manual

Page: 449 / 584

Version 6.6 449 MP-11x & MP-124
User's Manual 43. Configuration Parameters Reference
43.4.3 SRTP Parameters
The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Table 43-22: SRTP Parameters
Parameter Description
Web: Media Security
EMS: Enable Media Security
[EnableMediaSecurity]
Enables Secure Real-Time Transport Protocol (SRTP).

[0] Disable = (Default) SRTP is disabled.

[1] Enable = SRTP is enabled.
Notes:

For this parameter to take effect, a device reset is required.

SRTP reduces the number of available channels.

MP-124: 18 available channels

MP-118: 6 available channels

MP-114: 3 available channels

MP-112: No reduction
Web/EMS: Media Security
Behavior
[MediaSecurityBehaviour]
Determines the device's mode of operation when SRTP is used (i.e.,
when the parameter EnableMediaSecurity is set to 1).

[0] Preferable = (Default) The device initiates encrypted calls.
However, if negotiation of the cipher suite fails, an unencrypted call
is established. Incoming calls that don't include encryption
information are accepted.

[1] Mandatory = The device initiates encrypted calls, but if
negotiation of the cipher suite fails, the call is terminated. Incoming
calls that don't include encryption information are rejected.

[2] Disable = The IP Profile for which this parameter is set does not
support encrypted calls (i.e., SRTP).

[3] Preferable - Single Media = The device sends SDP with a single
media ('m=') line only (e.g., m=audio 6000 RTP/AVP 4 0 70 96)
with RTP/AVP and crypto keys. The remote UA can respond with
SRTP or RTP parameters:

If the remote SIP UA does not support SRTP, it uses RTP and
ignores the crypto lines.

In the opposite direction, if the device receives an SDP offer
with a single media (as shown above), it responds with SRTP
(RTP/SAVP) if the EnableMediaSecurity parameter is set to 1.
If SRTP is not supported (i.e., EnableMediaSecurity is set to 0),
it responds with RTP.
Notes:

Before configuring this parameter, set the EnableMediaSecurity
parameter to 1.

If this parameter is set to Preferable [3] and two 'm=' lines are
received in the SDP offer, the device prefers the SAVP (secure
audio video profile) regardless of the order in the SDP.

Option [2] Disable is applicable only to IP Profiles.

This parameter can also be configured per IP Profile, using the
IPProfile parameter (see 'Configuring IP Profiles' on page
194 ).
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size Defines the size (in bytes) of the Master Key Identifier (MKI) in SRTP
Tx packets.
The range is 0 to 4. The default is 0 (i.e., new keys are generated