AudioCodes Mediant 4000 SBC, Руководство пользователя

Страница: 940 / 1037

CHAPTER 60 Configuration Parameters Reference
Mediant 4000 SBC | User's Manual
Parameter Description
'Master Key Identifier (MKI) Size'
configure voip > media security >
srtp-tx-packet-mki-size
[SRTPTxPacketMKISize]
Global parameter that defines the size (in
bytes) of the Master Key Identifier (MKI)
in SRTP Tx packets. You can also
configure this feature per specific calls,
using IP Profiles (IpProfile_MKISize). For
a detailed description of the parameter
and for configuring this feature in the IP
Profiles table, see
Configuring IP Profiles .
Note: If this feature is configured for a
specific IP Profile, the settings of this
global parameter is ignored for calls
associated with the IP Profile.
'Symmetric MKI Negotiation'
configure voip > media security >
symmetric-mki
[EnableSymmetricMKI]
Global parameter that enables symmetric
MKI negotiation. You can also configure
this feature per specific calls, using IP
Profiles (IpProfile_
EnableSymmetricMKI). For a detailed
description of the parameter and for
configuring this feature in the IP Profiles
table, see
Configuring IP Profiles .
Note: If this feature is configured for a
specific IP Profile, the settings of this
global parameter is ignored for calls
associated with the IP Profile.
'Offered SRTP Cipher Suites'
configure voip > media security >
offer-srtp-cipher
[SRTPofferedSuites]
Defines the offered crypto suites (cipher
encryption algorithms) for SRTP.
■ [0] All = (Default) All available crypto
suites.
■ [1] AES-CM-128-HMAC-SHA1-80 =
device uses AES-CM encryption with
a 128-bit key and HMAC-SHA1
message authentication with a 80-bit
tag.
■ [2] AES-CM-128-HMAC-SHA1-32 =
device uses AES-CM encryption with
a 128-bit key and HMAC-SHA1
message authentication with a 32-bit
tag.
■ [16] AES-256-CM-HMAC-SHA1-32 =
AES-CM encryption with a 256-bit key
and HMAC-SHA1 message
authentication with a 32-bit tag.
■ [32] AES-256-CM-HMAC-SHA1-80 =
AES-CM encryption with a 256-bit key
and HMAC-SHA1 message
authentication with an 80-bit tag.
Note:
- 907 -