Secure or non Secure SCCP and RTP?

paulblohm · ‎09-27-2007

Hello,

Just a very quick one here...

Using CCM 4.3 and SCCP Signalling.

Can somebody please let me know the answer to the following?

We aim to use authenticated signalling and media (voice Stream)with the CAPF CTL Client Application with Locally Significant Certificates on our 7941 and 7961 Handsets.

Because we are using authenticated signalling and media is this classed as Secure SCCP ie tcp port 2443 and Secure RTP or would this still be SCCP tcp port 2000 and normal RTP ie is is only classed as Secure SCCP and Secure RTP if we were to encrypt both signalling and Media Streams (Voice).

Is TLS used for the authentication of signalling and Media?

Thanks in advance.

vmoopeung · ‎10-04-2007

After you install and configure the Cisco CTL client, verify that a certificate exists in the phone, and configure the device for authentication or encryption, the phone establishes a TLS connection through a TLS SCCP port, which is a configured port number added to (+) 443. By default, the phone connects to port 2443 by using TLS. The handshake authenticates the certificates and establishes a secure connection.

Mixed mode allows authenticated or encrypted Cisco IP Phones and nonauthenticated Cisco IP Phones to register with Cisco CallManager. In this mode, Cisco CallManager ensures that authenticated or encrypted devices use a secure SCCP port.

Cisco CallManager disables auto-registration if you configure the cluster for mixed mode.

http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/4_2/sec_vir/ae/sec421/secuauth.htm