IX Workplace on SBC no sRTP between SBC and iPhone 1

[CHSun]

Dear,

I am setting IPO R11.0.4.2 with SBC 8.1 for TLS connection. TLS connection succeed. Making call from internal phone to IX Workplace on iPhone, only the path between IPO and SBC can establish sRTP, but SBC to iPhone is RTP only. Call from iPhone to IPO is full-path sRTP. What fault is it?

Note that Presence status and directory search on IX Workplace working fine. All steps following IPO for ASBEC R11.1 Manuals. Using IPO self-sign cert for testing.

Thanks for helping


CH

 

[janni78]

If you do a SIP trace on the SBC, is one side not supporting sRTP?

"Trying is the first step to failure..." - Homer

 

[derfloh]

Sounds like if the media interface is wrongly configured.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[CHSun]

I uploadad the screen capture of the SBC config for sharing.

Thanks.

 

[janni78]

I'm not that keen on opening docx files, call me paranoid but many exploits use that extension.

It's much better if you SSH to the box and use the traceSBC command to see the SIP messages.
It will then save the trace as a txt file which you can download with SCP.

You can also create a pcap from the webinterface by selecting the SBC, and Monitoring & Logging -> Trace

"Trying is the first step to failure..." - Homer

 

[CHSun]

Hi,

TraceSBC file is uploaded. Test sequence is:
1, Login IX Workplace from iPhone
2. Make call from IPO to iPhone
3. Make call from iPhone to IPO

Thanks!

CH

 

[janni78]

When call originates from IP Office the SBC doesn't include the SRTP information on the INVITE to the client.

Does your Media Rule say it prefers encrypted RTP?

"Trying is the first step to failure..." - Homer

 

[CHSun]

Hi,

The Media Encryption settings are:

Audio Encryption
Preferred Format #1: SRTP_AES_CM_128_HMAC_SHA1_80
Preferred Format #2: NONE
Preferred Format #3: NONE
SRTP Context Reset on SSRC Change: Unchecked
Encryption RTPC: Unchecked
MKI: Unchecked
Lifetime: None
Interworking: Checked
Video Encryption (Same as audio encryption)
Miscellaneous
Capability Negotiation: Checked

Any other setting needed?

Thanks!

CH

 

[CHSun]

Hi all,

Anyone can help?

CH

 

[janni78]

It should be that the Subscriber Flow doesn't you the right End Point Policy Group, or the settings in the Policy Group aren't correct.

"Trying is the first step to failure..." - Homer