Configuring Security, Quality, and Network Features
Setting Security Features
Cisco SPA 500 Series and WIP310 IP Phone Administration Guide
112
5
The IP phones use UDP as a standard for SIP transport, but they also support SIP
over TLS for added security.
To enable TLS for the phone:
STEP 1
Log in to the web administration interface.
STEP 2
Click Admin Login and advanced.
STEP 3
Click Ext <number>, then scroll to the
SIP Settings
section.
STEP 4
Select TLS from the
SIP Transport
drop-down box.
STEP 5
Click Submit All Changes.
SRTP and Securing Calls
Secure Real-Time Transport Protocol (SRTP) is a secure protocol for transporting
real-time data over networks. Cisco SPA 500 Series and Wireless IP Phones use
SRTP to securely send and receive real-time voice traffic from other phones and
gateways. Security Description (RFC 4568) is supported.
SRTP provides media encryption to ensure that media streams between devices
are secure and that only the intended devices receive and read the data.
When a call is secure, the voice conversation is encrypted so that others cannot
eavesdrop on the conversation. To enable this feature the IP phone must have a
mini-certificate installed.
The supplementary service Secure All Calls (*16)—Defaults to prefer to use
encrypted media (voice codecs). Audio packets in both directions of outbound
calls are encrypted using SRTP.
To use Secure Call on an extension, you must configure
Mini Certificate
and
SRTP
Private Key
for that extension. These parameters appear on the
Ext
tabs.
Secure Call Service activates secure encryption of RTP streams between the two
endpoints. You can disable this if the other endpoint (or gateway) does not
support this proprietary method.
