Nortel 1110 User Guide
448
Features overview
ATTENTION
Phase I IP Phones do not support SRTP.
ATTENTION
The IP Softphone 2050 supports media security for CS 1000 Release 5.0
and later. The IP Softphone 2050 supports UNIStim key (USK) SRTP media
encryption only.
and later. The IP Softphone 2050 supports UNIStim key (USK) SRTP media
encryption only.
Operating parameters
The Media Security feature has the following operating parameters
•
During a firmware upgrade, the Media security is automatically disabled.
•
Media security does not support duplicate media streams encryption,
such as IP Call Recording.
such as IP Call Recording.
•
Pre-Shared key (PSK) SRTP media encryption negotiates after the call
is setup. The first few seconds of the call can sometimes be unsecured;
after the lock icon displays the call is secure. UNIStim key (USK)
SRTP media encryption is negotiated before the call is setup so no
delays occur. In both versions of SRTP the call is secure when the
lock displays.
is setup. The first few seconds of the call can sometimes be unsecured;
after the lock icon displays the call is secure. UNIStim key (USK)
SRTP media encryption is negotiated before the call is setup so no
delays occur. In both versions of SRTP the call is secure when the
lock displays.
When USK SRTP negotiates, an outlined lock icon and Encrypted
appears on the display. When PSK SRTP negotiates, a solid lock icon
displays but Encrypted does not display.
appears on the display. When PSK SRTP negotiates, a solid lock icon
displays but Encrypted does not display.
•
SRTP PSK does not negotiate if you use 10ms G.729, due to the small
payload size. The call remains in RTP. All other payloads are supported
for PSK SRTP. USK SRTP supports all payloads.
payload size. The call remains in RTP. All other payloads are supported
for PSK SRTP. USK SRTP supports all payloads.
Configuration
For CS 1000 Release 5.0 or later, you can configure a system-wide
configuration setting (USK SRTP), which controls whether or not the CS
1000 system is capable of providing Media Security.
configuration setting (USK SRTP), which controls whether or not the CS
1000 system is capable of providing Media Security.
It is possible to enable both PSK SRTP on the IP Phone and configure USK
SRTP at the Call Server. If USK SRTP does not negotiate for a call, PSK
SRTP attempts to negotiate during a call. If the two endpoints for the call
have PSK SRTP enabled, the call is encrypted using PSK SRTP.
SRTP at the Call Server. If USK SRTP does not negotiate for a call, PSK
SRTP attempts to negotiate during a call. If the two endpoints for the call
have PSK SRTP enabled, the call is encrypted using PSK SRTP.
By default, Media Security is enabled on the system. To configure USK
SRTP, see
SRTP, see
. To configure PSK SRTP
on the IP Phone, see
.
Nortel Communication Server 1000
IP Phones Fundamentals
NN43001-368
02.01
Standard
Release 5.0
7 December 2007
Copyright © 2003–2007, Nortel Networks
.