Oracle SBC Security Guide
(media-sec-policy)# show
media-sec-policy
name removeCrypto
pass-through disabled
inbound
profile
mode rtp
protocol none
outbound
profile
mode rtp
protocol none
(media-sec-policy)#
This is mostly used in single ended SRTP termination configurations, where this media-sec-policy
removes the SRTP component part from the SDP to offer/accept only SRTP. This media-sec-policy
should be applied under the realm where only RTP is desired.
realm-config
identifier backbone
description
addr-prefix 0.0.0.0
network-interfaces
M10:0
…
media-sec-policy removeCrypto
…
In the case of RTP only, no sdes/mikey-profile and no security-policy are needed.
SRTP Only
The “mode” parameter under the media-sec-policy should be set to SRTP. The “profile” parameter should
be set to the configured sdes/mikey-profile, and the protocol should be set to either SDES or MIKEY,
depending on which one is used in the implementation.
In this case, only SRTP is accepted in the realm. An INVITE arriving to the realm without SRTP
capabilities is rejected by the SBC with a “488 Not Acceptable Here”.
(media-sec-policy)# show
media-sec-policy
name SRTP1
pass-through disabled
inbound
profile sdes1
mode srtp
protocol SDES
outbound
profile sdes1
mode srtp
protocol SDES
(media-sec-policy)#
Comentarios a estos manuales