but this device doesn’t have any encryption capacity. They need to communicate with any devices, internal and PSTN. The real issue resides with the 7937, those phones are strategic, these are meeting rooms phones. In this case VG are only used to connect analog phones with only internal calls so we can leave them alone and forget about it for now. Signalisation is SIP, encryption will be TLS.įor media encryption it will be SRTP with AES128.īefore getting to keyboard and mouse to conquest webadmins and CLIs we need to check that everybody involve supports encryption and should work together.ĬuCM is fine with it, even better starting 8.6 even th MoH is encrypted if necessary (need to be activated in the parameters), CuCM handle to encrypt or not depending on devices capabilities.ĭevices … even if the VG224 are capable to encrypt communications this is often complex and can impact fax machines and modems. The data after the SBC cannot be encrypted as the PSTN provider does not offer this service. This study objective is to encrypt all the calls on the customer network with compatible devices, this includes internal call between IP Phones registered to CuCM and calls to PSTN so between the IP Phone and the SBC. In this inventory there is one important point to notice for our purpose here, 7937 do not have any encryption feature, as they are meeting room devices they need to make call to PSTN. In this specific case the E-SBC is mostly a security device, the only PSTN access in place is a SIP Trunk with the PSTN provider, the customer wanted to keep the security on this IP interconnection under control. We are dealing with a standard infrastructure, a CuCM v10.5 cluster, Oracle E-SBC 3820 and Cisco IP Phones. Pour la version française vous pouvez simplement cliquer sur le lien de l’article ici. We will enter a world of media negotiation, security certificates and cryptokey exchange, and for this we will have the chance to play a little bi with security’s rock stars Alice and Bob !!!

You may think that encryption of ToIP is easy, well known and under control, security is always somehow complicated and involve a lot of interesting things.

I want to show the steps in this project and how it was conducted. This project is now closed, nonetheless I will present the whole study and the results that I obviously already know. Some time ago, one of my customer ask me to study the encryption of calls between Cisco UCM and Oracle E-SBC.

Cisco cucm 8.6 end of support