Security-Policy for SRTP
I hope you are ok.
I would like someone can help me to understand the difference between
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.0.0
and
outbound-sa-fine-grained-mask
local-ip-mask 0.0.0.0
remote-ip-mask 255.255.0.0
And I was trying to understand the difference between the value:
trans-protocol-mask 255---- for SRTP
and
trans-protocol-mask 0 -----For IPsec
generally described with the above values in the Guide.
I was through the Guide and really still I am not clear and when to use it and how define it.
security-policy
name tls_srtp
network-interface M00:200
priority 1
local-ip-addr-match 201.1.1.2
remote-ip-addr-match 52.1.1.2
local-port-match 0
local-port-match-max 65535
remote-port-match 0
remote-port-match-max 65535
trans-protocol-match UDP
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.0.0
action srtp
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 0.0.0.0
remote-ip-mask 255.255.0.0
local-port-mask 0