Cisco Systems D14659.03 Network Router User Manual


 
Configuring encryption settings
Cisco TelePresence ISDN Gateway 2.1 Online help (Printable format) 86 of 135
Configuring encryption settings
You can configure the Cisco TelePresence ISDN Gateway to encrypt the IP "leg", the ISDN leg or both
legs of a call. The encryption technology that the ISDN Gateway uses is Advanced Encryption
Standard (AES).
To use encryption, you must have the Encryption feature key present on the ISDN Gateway. For
information about installing feature keys, refer to
Upgrading the firmware.
When encryption is in use, the ISDN Gateway will encrypt audio, video, and content media (rather
than control encryption or authentication encryption).
To access encryption settings, choose Settings > Encryption. After making any configuration
changes, click Apply changes.
You can:
configure the ISDN Gateway to advertise its ability to encrypt connections, such that it will use
encryption on the IP leg if an H.323 endpoint can use AES encryption
configure the ISDN Gateway to advertise its ability to encrypt connections, such that it will use
encryption on the ISDN leg if an ISDN endpoint can use AES encryption
configure each dial plan rule to require encryption or to use it optionally if an H.323 or ISDN
endpoint can use AES encryption. Note that if encryption is required on either leg of the call
but the appropriate endpoint cannot use it, the call will be disconnected
configure each dial plan rule to use transparent encryption. When transparent encryption is
used, the ISDN Gateway will simulate point-to-point encryption. That is, it will set the
encryption state (enabled/disabled) used on the received call as that to be used on the
outgoing call. That is, the ISDN Gateway will attempt to match the encryption state for the
outgoing call to that of the incoming call. For more information, see
Adding and updating dial
plan rules.
Field
Field description Usage tips
IP
encryption
status
Whether the ISDN Gateway is
able to use encryption on the IP
leg of a call or not.
When Enabled, the ISDN Gateway advertises itself as
being able to use encryption for IP. With IP encryption
enabled, for each dial plan you must select whether
encryption is required or optional when using that dial
plan. See
Adding and updating dial plan rules.
Note that if you disable encryption here but leave it as
Required in a dial plan rule, then all calls using that
rule will be rejected.
ISDN
encryption
status
Whether the ISDN Gateway is
able to use encryption on the
ISDN leg of a call or not.
When Enabled, the ISDN Gateway advertises itself as
being able to use encryption for ISDN. With encryption
enabled, for each dial plan you must select whether
encryption is required or optional when using that dial
plan. See
Adding and updating dial plan rules.
Note that if you disable encryption here but leave it as
Required in a dial plan rule, then all calls using that
rule will be rejected.