Configuring Secure SRST for SCCP and SIP
How to Configure Secure Unified SRST
225
Cisco Unified SCCP and SIP SRST System Administrator Guide
OL-13143-04
DETAILED STEPS
Configuring SIP SRST Security Policy
This section explains how to secure mode to block registration of non-secure phones to the SRST router.
SUMMARY STEPS
1.
voice register global
2.
security-policy secure
|
no security-policy
3.
end
Command or Action
Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode.
•
Enter your password if prompted.
Step 2
configure
terminal
Example:
Router# configure terminal
Enters global configuration mode.
Step 3
voice service voip
Example::
Router(config)# voice service voip
Enters voice service configuration mode.
Step 4
sip
Example:
Router(config-voi-serv)# sip
Enters SIP configuration mode.
Step 5
url
sip
|
sips
Example:
Router(conf-serv-sip)# url sips
To configure secure mode, use the
sips
keyword to generate
URLs in SIP secure (SIPS) format for VoIP calls.
To configure device-default mode, use the
sip
keyword to
generate URLs in SIP format for VoIP calls.
Step 6
srtp negotiate
cisco
Example:
Router(conf-serv-sip)# srtp negotiate cisco
Enables a Cisco IOS SIP gateway to negotiate the sending
and accepting of RTP profiles in response to SRTP offers.
Step 7
end
Example:
Router(conf-serv-sip)# end
Ends the current configuration session and returns to
privileged EXEC mode.