VoIP Security - Revision history

Hans.zeiner: /* IEEE 802.1X */

2021-10-20T13:27:34Z

‎IEEE 802.1X

2021-10-20T11:17:30Z

‎IEEE 802.1X

2011-05-31T07:40:33Z

2011-01-10T09:52:26Z

Mentioned Systems updated

2009-07-16T11:07:03Z

Moved outdated Certificate Management to bottom; added DLS Technical Description

2009-06-23T13:28:51Z

‎Signalling and Payload Encryption (SPE)

2009-06-23T13:28:42Z

‎Documentation

2009-06-23T13:28:33Z

‎Documentation

2009-06-23T13:28:26Z

‎Certificate Management

2009-06-23T13:28:11Z

‎Documentation

← Older revision		Revision as of 13:27, 20 October 2021
Line 42:		Line 42:
	How to configure IEEE 802.1X by [[DLS]]:		How to configure IEEE 802.1X by [[DLS]]:
	* {{File-DL\|IEEE 802.1X Configuration Management\|pdf}}		* {{File-DL\|IEEE 802.1X Configuration Management\|pdf}}
−	* {{File-DL\|IEEE 802.1X Konfigurations-Management\|pdf\|de}}

← Older revision		Revision as of 11:17, 20 October 2021
Line 44:		Line 44:
	* {{File-DL\|IEEE 802.1X Konfigurations-Management\|pdf\|de}}		* {{File-DL\|IEEE 802.1X Konfigurations-Management\|pdf\|de}}

−	~~Associated DLS Technical Description:~~
−	* {{File-DL\|DLS - Certificate Management for 802 1x\|pdf}}

	Basic Requirements For 802.1x Certificates		Basic Requirements For 802.1x Certificates

← Older revision		Revision as of 07:40, 31 May 2011
Line 14:		Line 14:

	== Signalling and Payload Encryption (SPE) ==		== Signalling and Payload Encryption (SPE) ==
		+
		+	=== Activate Signalling and Payload Encryption (SPE) on a [[OpenStage]] HFA Phone ===
		+
		+	To enable security support on the optipoint HFA phones following settings must be done via local configuration or administration web page.
		+	*Configure transport mode LocalAdmin: Administration -> System -> Security -> Signalling main = TLS
		+	*Configure transport mode WEB: Admin -> System -> Security -> Secure H.235 main = TLS
		+	**Configure C-TC TLS port in accordance to the CGW configuration (AMO-CGWB: (…), TYP=globif, TLSP=<C-TC TLS port>;), default: 4061
		+	**H.225 TLS port: 1300 (fixed)
		+	**Transport mode: TLS
		+	**Certificate validation main can now be enabled, in this case certificate must be downloaded via DLS
		+	**If you use the feature SRSR. And the standby System is using SPE too, then please configure also Secure H.235 standby(WEB) -or- Signalling standby(LocalAdmin). And Certificate validation standby (if used)
		+	[[Image:SPE_config_OST_HFA.jpg]]
		+

	=== Activate Signalling and Payload Encryption (SPE) on a [[optiPoint]] HFA Phone ===		=== Activate Signalling and Payload Encryption (SPE) on a [[optiPoint]] HFA Phone ===

@@ Line 4: / Line 4: @@
 Buzzwords to improve the above mentioned properties are [[Signalling and Payload Encryption|SPE]], [[TLS]], [[SRTP]] and [[PKI]].
-HiPath platforms like [[HiPath 2000]] or [[HiPath OpenOffice ME]] use the most current technology to protect voice and signalling data from unauthorized access.
+HiPath platforms like [[HiPath 3000]] or [[OpenScape Office MX]] use the most current technology to protect voice and signalling data from unauthorized access.
 How to use secure [[VoIP]] on optiPoint [[SIP]] phones in general: {{File-DL|Gesicherte Sprachübertragung in SIP 7|pdf|de}}

@@ Line 24: / Line 24: @@
 **Certificate check can now be enabled, in this case certificate must be downloaded via DLS
 [[Image:SPE_config_HFA.jpg]]
 == IEEE 802.1X ==
@@ Line 36: / Line 30: @@
 * {{File-DL|IEEE 802.1X Configuration Management|pdf}}
 * {{File-DL|IEEE 802.1X Konfigurations-Management|pdf|de}}
 Basic Requirements For 802.1x Certificates
 * {{en}} [[802.1x Certificates]]
 * {{de}} [[802.1x Zertifikate]]

← Older revision		Revision as of 13:28, 23 June 2009
Line 14:		Line 14:

	== Signalling and Payload Encryption (SPE) ==		== Signalling and Payload Encryption (SPE) ==
−
−

	=== Activate Signalling and Payload Encryption (SPE) on a [[optiPoint]] HFA Phone ===		=== Activate Signalling and Payload Encryption (SPE) on a [[optiPoint]] HFA Phone ===

@@ Line 15: / Line 15: @@
 == Signalling and Payload Encryption (SPE) ==
-=== Documentation ===
 === Activate Signalling and Payload Encryption (SPE) on a [[optiPoint]] HFA Phone ===

← Older revision		Revision as of 13:28, 23 June 2009
Line 28:		Line 28:

	== Certificate Management ==		== Certificate Management ==
−
−	~~=== Documentation ===~~

	How to implement and set up a secure environment and provide [[optiPoint]] phones with configuration data by the use of XML files via secure Web server (note, that this type of interface is not provided by [[OpenStage]] phones):		How to implement and set up a secure environment and provide [[optiPoint]] phones with configuration data by the use of XML files via secure Web server (note, that this type of interface is not provided by [[OpenStage]] phones):

@@ Line 34: / Line 34: @@
 * {{File-DL|Certificate over secure link|pdf}}
 * {{File-DL|Zertifikate über gesicherte Verbindung|pdf|de}}
 == IEEE 802.1X ==