Survivable Branch Appliance
AudioCodes Enhanced Media Gateway
74
Document #: LTRT-18206
4.5
Configure Secure Real-Time Transport Protocol (SRTP)
If you configure TLS for the SIP transport link between the Media Gateway and the Mediation
Server, you must specify whether Secure RTP (SRTP) encryption is:
Required:
SRTP should be attempted, but do not use encryption if negotiation for SRTP is
unsuccessful.
Optional:
Attempt to negotiate the use of SRTP to secure media packets. Use RTP if SRTP
cannot be negotiated.
Not used:
Send media packets using RTP.
If you choose to configure the Mediation Server to use SRTP (Required or Optional), you need to
configure the Media Gateway to operate in the same manner.
¾
To configure the media security:
1.
Open the 'Media Security' page (
Configuration
tab >
Media Settings
menu >
Media
Security
).
Figure
4-19: Media Security Page
2.
From the ‘Media Security’ drop-down list, select “Enable”, to enable SRTP.
3.
From the ‘Media Security Behavior’ drop-down list, select:
•
“Mandatory” if Mediation Server is configured to SRTP Required
•
”Preferable-Single media” if Mediation Server is configured to SRTP Optional.
4.
In the ‘Master Key Identifier (MKI) Size’ field, enter ‘1’.
5.
Click
Submit
.
6.
Save (burn) the Media Gateway configuration and reset the Media Gateway, using the Web
interface’s ‘Maintenance Actions’ page (
Management Configuration
menu >
Maintenance
Actions
).
2
3
4