AudioCodes Mediant 3000, User Manual

Page: 671 / 872

Version 6.6 671 Mediant 3000
User's Manual 53. Configuration Parameters Reference
Parameter Description
[HTTPSRootFileName] Defines the name of the HTTPS trusted root certificate file to be loaded
using TFTP. The file must be in base64-encoded PEM (Privacy
Enhanced Mail) format.
The valid range is a 47-character string.
Note: This parameter is applicable only when the device is loaded using
BootP/TFTP.
[HTTPSPkeyFileName] Defines the name of a private key file (in unencrypted PEM format) to be
loaded from the TFTP server.
[HTTPSCertFileName] Defines the name of the HTTPS server certificate file to be loaded using
TFTP. The file must be in base64-encoded PEM format.
The valid range is a 47-character string.
Note: This parameter is only applicable when the device is loaded using
BootP/TFTP.
53.4.3 SRTP Parameters
The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
SRTP Parameters
Parameter Description
Web: Media Security
EMS: Enable Media
Security
[EnableMediaSecurity]
Enables Secure Real-Time Transport Protocol (SRTP).

[0] Disable = (Default) SRTP is disabled.

[1] Enable = SRTP is enabled.
Notes:

For this parameter to take effect, a device reset is required.

SRTP causes a reduction of 12.5% in available channels (i.e., 84
channels instead of 96 per DSP) when using DSP Template 0. In
other words, instead of 2,016 (21 * 96) channels, 1,764 (21 * 84) are
available. For a depopulated system, 504 channels are available (6 *
84). The DSP-depopulated blade is used for configurations with 21
spans and less. Therefore, no capacity reduction occurs in these
sizes for T1 configurations (504/24 = 21 T1s). However, only 15 E1s
instead of 16 (504/32 = 15.75) may be available.
Web/EMS: Media
Security Behavior
[MediaSecurityBehavio
ur]
Determines the device's mode of operation when SRTP is used (i.e.,
when the parameter EnableMediaSecurity is set to 1).

[0] Preferable = (Default) The device initiates encrypted calls.
However, if negotiation of the cipher suite fails, an unencrypted call is
established. Incoming calls that don't include encryption information
are accepted.

[1] Mandatory = The device initiates encrypted calls, but if negotiation
of the cipher suite fails, the call is terminated. Incoming calls that don't
include encryption information are rejected.

[2] Disable = The IP Profile for which this parameter is set does not
support encrypted calls (i.e., SRTP).

[3] Preferable - Single Media = The device sends SDP with a single
media ('m=') line only (e.g., m=audio 6000 RTP/AVP 4 0 70 96) with
RTP/AVP and crypto keys. The remote UA can respond with SRTP or