Cisco 521SG Administration Guide - Page 132
Securing Voice Traffic with SRTP, Authorizing Secure Calls with a Mini-certification
UPC - 882658248993
View all Cisco 521SG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 132 highlights
Configuring Security, Quality, and Network Features Setting Security Features 5 Securing Voice Traffic with SRTP Secure Real-Time Transport Protocol (SRTP) is a secure protocol for transporting real-time data over networks. It provides media encryption to ensure that media streams between devices are secure and that only the intended devices receive and read the data. Cisco SPA IP phones use SRTP to securely send and receive voice traffic to and from phones and gateways that support SRTP. (Security Description (RFC-4568) is supported.) When a call is secured with SRTP, the voice conversation is encrypted so that others cannot eavesdrop on the conversation. To enable this feature, Cisco SPA IP phones must have a mini-certificate installed. Defaults to prefer to use encrypted media (voice codecs). Audio packets in both directions of outbound calls are encrypted by using SRTP. Authorizing Secure Calls with a Mini-certification The phone can encrypt calls to protect them from eavesdroppers. The dial pad codes for encrypting calls are: • *16-Secures all calls. • *17-Disable the call security the user enabled by dialing *16. • *18-Secures an individual call when dialed before or during a call. Using this star code is redundant if all outbound calls are already secure by default or from having dialed *16. To enable call encryption on the phone web user interface: STEP 1 Obtain the Generate Mini-Cert tool from your service provider. STEP 2 Navigate to Admin Login > advanced > Voice > Ext_n. STEP 3 Under Subscriber Information, enter the Mini Certificate and the SRTP Private Key that provide secure encryption of RTP streams between two endpoints on an extension. STEP 4 To enable the secure call service, navigate to Admin Login > advanced > Voice > Phone. STEP 5 Under Supplementary Services verify that Secure Call Serv is set to yes. (This feature can also be configured in the User tab under Supplementary Services.) Cisco Small Business SPA300 Series, SPA500 Series, and WIP310 IP Phone Administration Guide 131