IMG 1010 - TLS - Configuration
Overview:
License Installation.
...
Right Click on IMG EMS and select New Profiles. This will create a database that will contain the different secure profiles that will get created.
Right Click on Profiles object and select New Secure Profile.
In the pane that appears you will be able to select which Certificate Entry will be assigned to this Secure Profile. Select the number of the Trust ID from the Trust ID field drop down menu. Click on (Secure Profile Pane). For more information on Secure Profiles click on the following link IMG 1010 - Secure ProfileCreate the IP Bearer profiles that the channel groups will use. Right Click on Profiles Object and select New IP Bearer Profile. See the Link for more information on configuring this pane.
Create the SIP SGP Profile by right clicking on the Profiles object and selecting New SIP SGP. If configuring TLS and want to either enable or disable SIPS, select True or False from the drop down menu in the SIPS field:
Create the SIP Signaling Object and assign Secure Profiles etc:
Right click on the Physical IMG object in the object tree and select New Signaling. A signaling pane will appear. See IMG 1010 - Signaling Object for more information
Right Click on The Signaling object and select New SIP. A SIP Signaling Pane will appear. Optionally in the Default Transport Type field, select TLS from the drop down menu. This transport type is used when the current IMG is used as an external gateway by another IMG. Once TLS is selected, this will highlight the Secure Profile field. Select from drop down menu which Secure Profile that will be used:
The Default port that the IMG will use to communicate withe the external gateways when TLS is enabled will be 5061 as shown in the 'Local TLS Port' field of the SIP signaling object. The port number can be changed by clicking in the Local TLS Port field and entering a different port number.
The Default Secure Profile field is used when a SIP call comes in over the Secure Profile Port but the external gateway sending the call is not using TLS security. If the field is set to 'Not Used' the call will be rejected. There is a drop down menu of all the secure profiles created in this field as well. Select a profile so the calls will not get rejected. See the IMG 1010 - SIP Signaling Object Link for more information on the SIP Signaling Pane.
...
Right Click on IMG EMS and select New External Network Elements. Under this object the external Gateways can get created. See IMG 1010 - External Network Elements link for more information on this object.
Right Click on External Gateways object and select New External Gateways. This object will create a database of all the gateways configured. See IMG 1010 - External Gateways link for more information.
Right Click on External Gateways link and select New External Gateway. In the Name field give this gateway a unique name that identifies it. See IMG 1010 - External Gateway link for more information.
In the Gateway Signaling Field select SIP from the Drop Down Menu.
If the IMG will be communicating using TLS, select TLS from the drop down menu in the Gateway Transport Type field. At this point a new Secure Profile field will appear. Select the Secure Profile that will be used to communicate with this specific gateway:
You can create multiple gateways communicating with IMG using TLS and each gateway can have a different Secure Profile.
...
To configure SIPS you must first have a SIP SGP profile configured. The SIP SGP profile was already configured above under the heading "Create the Secure Profiles, IP Profiles, and SIP SGP Profile:"
To enable SIPS on this individual profile, scroll down to the Enable SIPS field. Click in the field and a drop down menu will offer the selections True and False. The Default is True. See IMG 1010 - SIP Profile - 10.5.3 link for more information.
Configure Routing:
...