RedMax EXtreme EX-LRT Anleitung zur Fehlerbehebung PDF herunterladen (Seite 108)

Oracle SBC Security Guide

Appendix L: SRTP Configuration and Troubleshooting

Introduction

The Secure Real-time Transport Protocol (SRTP) provides encryption and authentication for the call

content and call signaling streams. Authentication provides assurance that packets are from the purported

source, and that the packets have not been tampered with during transmission. Encryption provides

assurance that the call content and associated signaling has remained private during transmission.

SRTP/SDES-MIKEY is supported on the Net-Net 3800 and 4500 SBC.

RTP and RTCP traffic are encrypted as described in RFC 3711: The Secure Real-time Transport Protocol

(SRTP). The negotiation and establishment of keys and other cryptographic materials that support SRTP

is described in RFC 4568: Session Description Protocol (SDP) Security Description for Media Streams.

Cryptographic parameters are established with only a single message or in single round-trip exchange

using the offer/answer model defined in RFC 3264: An Offer/Answer Model with the Session Description

Protocol.

MIKEY defined in RFC 3830, and Session Description Protocol Security Descriptions for Media Streams

(SDES), defined in RFC 4568, provide alternative methods for creating keys used to encrypt Real-time

Transport Protocol (RTP) and Real-time Transport Control Protocol (RTCP) transactions.

This document should be used as a base reference only, outlining procedures to configure SRTP on the

SBC node from its base configuration. An Oracle Systems Engineer should be consulted with regards to

specific concerns as they apply to customer specific SBC configurations.

This document is based on features available in S-CX6.2.0m2 software release, unless noted otherwise,

and refers to other Oracle documentation for configuration detail. Configuration guides are available for

download from the Oracle Customer Support Portal (https://support.acmepacket.com). Please contact

your Oracle Systems Engineer for Best Current Practice (BCP) documentation.

SRTP Topologies

End-to-end SRTP was supported in previous releases, and the SBC was transparent to the SRTP key

negotiation and the SRTP flow. It was just adding its own IP to the media path and then relaying the

SRTP packets as it does with RTP flows, so in terms of functionality, RTP and SRTP caused no

difference in the SBC configuration and functionality.

However, release S-CX6.2.0 and higher includes support for termination of SRTP. This includes special

configuration and treatment of RTP and SRTP flows.

SRTP topologies can be reduced to three basic topologies:

 Single Ended SRTP Termination

SRTP enabled on inbound interface, disabled on outbound interface (or vice versa)

1 2 ... 103 104 105 106 107 108 109 110 111 112 113 ... 141 142

Keine Kommentare

RedMax EXtreme EX-LRT Anleitung zur Fehlerbehebung Seite 108