AudioCodes Mediant 500 E-SBC, User Manual

Page: 728 / 920

User's Manual 728 Document #: LTRT-10437
Mediant 500 E-SBC
54.4.3 SRTP Parameters
The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Table 54-24: SRTP Parameters
Parameter Description
Web: Media Security
EMS: Enable Media Security
CLI: media-security-enable
[EnableMediaSecurity]
Enables Secure Real-Time Transport Protocol (SRTP).

[0] Disable (default)

[1] Enable
Note: For this parameter to take effect, a device reset is required.
Web/EMS: Media Security
Behavior
CLI: media-sec-bhvior
[MediaSecurityBehaviour]
Global parameter that defines the handling of SRTP (when the
EnableMediaSecurity parameter is set to 1). You can also
configure this functionality per specific calls, using IP Profiles
(IpProfile_MediaSecurityBehaviour). For a detailed description of
this parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page
304 .
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Note: This parameter applies only to the Gateway application.
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
CLI: SRTP-tx-packet-MKI-size
[SRTPTxPacketMKISize]
Global parameter that defines the size (in bytes) of the Master Key
Identifier (MKI) in SRTP Tx packets. You can also configure this
functionality per specific calls, using IP Profiles
(IpProfile_MKISize). For a detailed description of this parameter
and for configuring this functionality in the IP Profile table, see
''Configuring IP Profiles'' on page
304 .
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Web: Symmetric MKI
Negotiation
EMS: Enable Symmetric MKI
CLI: symmetric-mki
[EnableSymmetricMKI]
Global parameter that enables symmetric MKI negotiation. You can
also configure this functionality per specific calls, using IP Profiles
(IpProfile_EnableSymmetricMKI). For a detailed description of this
parameter and for configuring this functionality in the IP Profile
table, see ''Configuring IP Profiles'' on page
304 .
Note: If this functionality is configured for a specific IP Profile, the
settings of this global parameter is ignored for calls associated with
the IP Profile.
Web/EMS: Offered SRTP
Cipher Suites
CLI: offer-srtp-cipher
[SRTPofferedSuites]
The offered crypto suites (cipher encryption algorithms) for SRTP.

[0] All = (Default) All available crypto suites.

[1] AES-CM-128-HMAC-SHA1-80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.

[2] AES-CM-128-HMAC-SHA1-32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.

[4] ARIA-CM-128-HMAC-SHA1-80 = device uses ARIA
encryption algorithm with a 128-bit key and HMAC-SHA1
message authentication with a 32-bit tag.

[8] ARIA-CM-192-HMAC-SHA1-80 = device uses ARIA
encryption algorithm with a 192-bit key and HMAC-SHA1
message authentication with a 32-bit tag.