IMG 1010 - SRTP - Configuration
Overview:
Software version 10.5.3 adds to the IMG the ability to configure SRTP/SRTCP over SIP. Follow the procedure below to configure SRTP.
...
When initially configuring TLS, a SIP SGP pane was created for use with TLS. Since TLS is already configured on this profile, SRTP can be added to this SIP SGP pane. Within the SIP SGP Pane is the field SRTP Mode. Select from drop down menu whether SRTP encryption is disabled, Mandatory, or RTP fallback as displayed below:
Disable: The crypto information within the RTP packets will be analyzed. Any crypto information within an SRTP packet will be rejected with 488 Unacceptable Media.
Mandatory: The crypto information within the RTP packet will be rejected. Only crypto information within an SRTP packet will be analyzed.
RTP fallback: The crypto information within the SRTP packet will be analyzed. If crypto information within the SRTP packet is not acceptable (No SRTP encryption), fall back to SDP information within the RTP packetSee IMG 1010 - SIP Profile - 10.5.3 for more information on this pane
...
Right Click on the SIP SGP Pane from above and select New SIP SRTP Cryptosuite. A SIP SRTP Cryptosuite Pane will get created. See below:
Configure the Crypto-suite, Window Size Hint, and SRTCP Encryption Fields. See IMG 1010 - SIP SRTP CryptoSuite for more information on configuring this pane.
...
Select the Channel Groups that has the TLS configured on them. Right Click on the Channel Group and select New IP Network Element. Select the gateway configured earlier which has the TLS and SRTP configured on it. See screen capture below:
Execute above procedure for all Incoming/Outgoing Channel groups that TLS/SRTP will get configured on.
The screen capture below displays the ClientView Tree after configuration of TLS/SRTP:
...