AudioCodes Media Pack MP-124, Руководство пользователя

Страница: 450 / 584

User's Manual 450 Document #: LTRT-65422
MP-11x & MP-124
Parameter Description
[SRTPTxPacketMKISize] without MKI).
Notes:

The device only initiates the MKI size.

You can also configure MKI size in an IP Profile.
Web: Symmetric MKI
Negotiation
EMS: Enable Symmetric
MKI
[EnableSymmetricMKI]
Enables symmetric MKI negotiation.

[0] Disable = (Default) The device includes the MKI in its 200 OK
response according to the SRTPTxPacketMKISize parameter (if
set to 0, then it is not included; if set to any other value, it is
included with this value).

[1] Enable = The answer crypto line contains (or excludes) an MKI
value according to the selected crypto line in the offer. For
example, assume that the device receives an INVITE containing
the following two crypto lines in SDP:
a=crypto:2 AES_CM_128_HMAC_SHA1_80
inline:TAaxNnQt8/qLQMnDuG4vxYfWl6K7eBK/ufk04pR4|2^
31|1:1
a=crypto:3 AES_CM_128_HMAC_SHA1_80
inline:bnuYZnMxSfUiGitviWJZmzr7OF3AiRO0l5Vnh0kH|2^
31
The first crypto line includes the MKI parameter "1:1". In the 200
OK response, the device selects one of the crypto lines (i.e., '2' or
'3'). Typically, it selects the first line that supports the crypto suite. If
the device selects crypto line '2', it includes the MKI parameter in
its answer SDP, for example:
a=crypto:2 AES_CM_128_HMAC_SHA1_80
inline:R1VyA1xV/qwBjkEklu4kSJyl3wCtYeZLq1/QFuxw|2^
31|1:1
If the device selects a crypto line that does not contain the MKI
parameter, then the MKI parameter is not included in the crypto line
in the SDP answer (even if the SRTPTxPacketMKISize parameter
is set to any value other than 0).
Notes:

To enable symmetric MKI, the SRTPTxPacketMKISize parameter
must be set to any value other than 0.

You can also enable MKI negotiation per IP Profile.
Web/EMS: SRTP offered
Suites
[SRTPofferedSuites]
Defines the offered crypto suites (cipher encryption algorithms) for
SRTP.

[0] = (Default) All available crypto suites.

[1] CIPHER SUITES AES CM 128 HMAC SHA1 80 = device uses
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 80-bit tag.

[2] CIPHER SUITES AES CM 128 HMAC SHA1 32 = device uses
AES-CM encryption with a 128-bit key and HMAC-SHA1 message
authentication with a 32-bit tag.
Note: This parameter also affects the selection of the crypto in the
device's answer. For example, if the device receives an offer with two
crypto lines containing HMAC_SHA1_80 and HMAC_SHA_32, it uses
the HMAC_SHA_32 key in its SIP 200 OK response if the parameter is
set to 2.
Web: Disable Authentication
On Transmitted RTP
Packets Enables authentication on transmitted RTP packets in a secured RTP
session.

[0] Enable (default)