Secure RTP em Gateways SIP

Luciane de Medeiros Batista · ‎11-21-2012

Pessoal,

Preciso habilitar criptografia (Somente SRTP) em Gateways utilizando o IOS c3900-universalk9-mz.SPA.151-4.M2.bin, com uck9.

Habilitei somente o comando a seguir. (Observação: Não identifiquei nenhum outro comando para Secure RTP.)

voice service voip

ip address trusted list

ipv4 0.0.0.0 0.0.0.0

allow-connections h323 to h323

allow-connections h323 to sip

allow-connections sip to h323

allow-connections sip to sip

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback cisco

sip

bind control source-interface Loopback0

bind media source-interface Loopback0

session transport tcp

srtp negotiate cisco

!

Utilizo sinalização SIP em todos os Gateways. E tenho as dúvidas a seguir:

- Estou configurando corretamente?

- Qual o comando mais apropriado para verificar o SRTP?

- Verifiquei a saída do comando show call active voice e o parâmetro SRTP está igual a off.

Desde já agradeço.

--

Luciane de Medeiros

paolo bevilacqua · ‎11-22-2012

Unless you post in English, your chances of getting a good answer, are very diminished.

Luciane de Medeiros Batista · ‎11-22-2012

Hi Paolo,

I need to enable encryption (SRTP Only) in Gateways using IOS c3900-universalk9-mz.SPA.151-4.M2.bin with uck9.

I enabled only the following command. (Note: I have not identified any other commands for Secure RTP.)

voice service voip
ip address trusted list
   ipv4 0.0.0.0 0.0.0.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback cisco
sip
   bind control source-interface Loopback0
   Average bind source-interface Loopback0
   session transport tcp
   srtp negotiate cisco
!

The SIP protocol is used on all Gateways. And I have the following questions:

- I configured correctly?

- What is the most appropriate command to check the SRTP?

- I checked the output of the show call active voice command and the parameter SRTP is equal off.

Thank you.