AudioCodes mediapack MP-500, User Manual

Page: 310 / 574

SIP User's Manual 310 Document #: LTRT-12801
MP-500 MSBG
Parameter Description
[HTTPSRequireClientCertificate] Requires client certificates for HTTPS connection. The client
certificate must be preloaded to the device, and its matching
private key must be installed on the managing PC. Time and
date must be correctly set on the device, for the client certificate
to be verified.
ƒ
[0] = Client certificates are not required (default).
ƒ
[1] = Client certificates are required.
Note: For this parameter to take effect, a device reset is
required.
[HTTPSPkeyFileName] Defines the name of a private key file (in unencrypted PEM
format) to be loaded from the TFTP server.
6.4.2 SRTP Parameters
The Secure Real-Time Transport Protocol (SRTP) parameters are described in the table
below.
Table 6-16: SRTP Parameters
Parameter Description
Web: Media Security
EMS: Enable Media Security
[EnableMediaSecurity]
Enables Secure Real-Time Transport Protocol (SRTP).
ƒ
[0] Disable = SRTP is disabled (default).
ƒ
[1] Enable = SRTP is enabled.
Note: For this parameter to take effect, a device reset is required.
Web/EMS: Media Security
Behavior
[MediaSecurityBehaviour]
Determines the device's mode of operation when SRTP is used
(i.e., when EnableMediaSecurity is set to 1).
ƒ
[0] Preferable = The device initiates encrypted calls. If
negotiation of the cipher suite fails, an unencrypted call is
established. Incoming calls that don't include encryption
information are accepted. (default)
ƒ
[1] Mandatory = The device initiates encrypted calls, but if
negotiation of the cipher suite fails, the call is terminated.
Incoming calls that don't include encryption information are
rejected.
Web: Master Key Identifier
(MKI) Size
EMS: Packet MKI Size
[SRTPTxPacketMKISize]
Determines the size (in bytes) of the Master Key Identifier (MKI) in
SRTP Tx packets.
The range is 0 to 4. The default value is 0.
SRTP offered Suites
[SRTPofferedSuites]
Defines the offered SRTP crypto suites.
ƒ
[0] All = All available crypto suites (default)
ƒ
[1] AES_CM_128_HMAC_SHA1_80 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.
ƒ
[2] AES_CM_128_HMAC_SHA1_32 = device uses AES-CM
encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.