Encryption IP Phone and Gateways

[Luciane de Medeiros Batista]

Hi,

I need also encryption between CUCM and SIP Gateways. So, I configured the SIP Gateways only the command "SRTP" globally, and the "SRTP Allowed - When this flag is checked, encrypted TLS needs to be configured in the network to Provide end to end security. Failure to so will expose the keys and Other information." in CUCM.

I do not set encryption for IP phones. When making a call to the PSTN no opening audio. This happened for not IP phones encryption?

I have some doubts and I could not implement security facilities.

Another question is about the TLS. For SIP Gateways I need to install certificates, right?

Regards,

Luciane de Medeiros

[Chris Deren · Accepted solution]

Luciane,

Encryption is not a simple one command, or a checkbox, you need to consider end to end security and its implications.  I suggest you start out by reviewing the following CUCM security guide:

http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/security/8_6_1/secugd/sec-861-cm.html

which should provide some enlightment.

HTH,

Chris

[Luciane de Medeiros Batista]

Hello, Chris.

Thank you for guidance.

One question: The softphone supports encryption and authentication? What is the class configuration? (Configuring Authentication and Encryption for CTI, JTAPI, and TAPI?)

Regards,

Luciane de Medeiros