Encrypted RTP with SRTP media-security-policy or with IPsec security-policy configuration
Hi fellows,
I hope everybody is ok.
I would like you can help me to be clear with the following questions:
When we configure a ipsec connection in the security-policy under the option = action you have the following options = <allow, ipsec, srtp, srtcp, discard>
Here you can read the following:
The srtp option is similar to the ipsec option save for the sad sub-option that provides data for only SRTP SAs.
security-policy
name p2
network-interface private:0
priority 10
local-ip-addr-match 172.16.1.3
remote-ip-addr-match 172.16.1.10
local-port-match 0
remote-port-match 0
trans-protocol-match UDP
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
action ipsec
My questions are the following:
1-When I define my security-policy with action=ipsec, all traffic will be encrypted (SIP and RTP)?