Cisco CP-7911G-CH1 System Administrator Manual page 225

Configuring Secure SRST for SCCP and SIP
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
voice service voip
Example::
Router(config)# voice service voip
Step 4
sip
Example:
Router(config-voi-serv)# sip
Step 5
url sip | sips
Example:
Router(conf-serv-sip)# url sips
Step 6
srtp negotiate cisco
Example:
Router(conf-serv-sip)# srtp negotiate cisco
Step 7
end
Example:
Router(conf-serv-sip)# end
Configuring SIP SRST Security Policy
This section explains how to secure mode to block registration of non-secure phones to the SRST router.
SUMMARY STEPS
1.
2.
3.
OL-13143-04
voice register global
security-policy secure | no security-policy
end
Purpose
Enables privileged EXEC mode.
Enter your password if prompted.
•
Enters global configuration mode.
Enters voice service configuration mode.
Enters SIP configuration mode.
To configure secure mode, use the sips keyword to generate
URLs in SIP secure (SIPS) format for VoIP calls.
To configure device-default mode, use the sip keyword to
generate URLs in SIP format for VoIP calls.
Enables a Cisco IOS SIP gateway to negotiate the sending
and accepting of RTP profiles in response to SRTP offers.
Ends the current configuration session and returns to
privileged EXEC mode.
Cisco Unified SCCP and SIP SRST System Administrator Guide
How to Configure Secure Unified SRST
225