| Configuring the Security Features | 246
Remote\Local Compulsory Optional Disabled
Compulsory SRTP Call SRTP Call Fail to establish a call
Optional SRTP Call SRTP Call RTP Call
Disabled Fail to establish a call RTP Call RTP Call
Example of the INVITE message carried with the RTP encryption algorithm in the SDP is described as
below:
m=audio 11780 RTP/SAVP 0 8 18 9 101
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:NzFlNTUwZDk2OGVlOTc3YzNkYTkwZWVkMTM1YWFj
a=crypto:2 AES_CM_128_HMAC_SHA1_32
inline:NzkyM2FjNzQ2ZDgxYjg0MzQwMGVmMGUxMzdmNWFm
a=crypto:3 F8_128_HMAC_SHA1_80 inline:NDliMWIzZGE1ZTAwZjA5ZGFhNjQ5YmEANTMzYzA0
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:9 G722/8000
a=fmtp:101 0-15
a=rtpmap:101 telephone-event/8000
a=ptime:20
a=sendrecv
The callee receives the INVITE message with the RTP encryption algorithm, and then answers the call by
replying the 200 OK message which carries the negotiated RTP encryption algorithm.
Example of the 200 message carried with the RTP encryption algorithm in the SDP is described as below:
m=audio 11780 RTP/SAVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=crypto:1 AES_CM_128_HMAC_SHA1_80
inline:NGY4OGViMDYzZjQzYTNiOTNkOWRiYzRlMjM0Yzcz
a=sendrecv
a=ptime:20
a=fmtp:101 0-15
Note:
If you enable SRTP and you can also enable TLS, which can ensure the security of SRTP
encryption. For more information about TLS, refer to TLS Transport Protocol.
• Configuring SRTP