Table Of Contents

Secure Media Support

Contents

Information About Secure Media Support

How to Implement Secure Media Support

Implementing Secure Media Support

Additional References

Related Documents

Standards

MIBs

Technical Assistance

Secure Media Support

---

The SBC allows you to configure the DBE to accept secure media. By default, this feature is disabled.

When the DBE is configured to accept secure media, such as Session Real-Time Protocol (SRTP), Secure RTP Control Protocol (SRTCP), or Datagram Transport Layer Security (DTLS) packets, the SBC reserves additional bandwidth to ensure that the DBE allows these packets to pass through.

Feature History for Secure Media Support

Release	Modification
Release 3.5.1	This feature was introduced on Cisco XR 12000 Series Router.
Release 3.6.0	No modification.

Contents

This module contains the following sections:

•Information About Secure Media Support

•How to Implement Secure Media Support

•Additional References

Information About Secure Media Support

When the DBE is configured to accept secure media, it allows secure RTP packets to flow through without performing RTP packet checks. This feature enables 10% more bandwidth per flow to accommodate the increase in the packet size due to encryption. However, this increase is not reflected in the media flow statistics.

How to Implement Secure Media Support

This section contains the steps for implementing secure media support on the SBC:

Implementing Secure Media Support

SUMMARY STEPS

1. configure

2. sbc service-name

3. dbe

4. secure-media

5. commit

6. exit

DETAILED STEPS

	Command or Action	Purpose
Step 1	configure Example: RP/0/0/CPU0:router# configure	Enables global configuration mode.
Step 2	sbc service-name Example: RP/0/0/CPU0:router(config)# sbc mysbc	Enters the mode of an SBC service. •Use the service-name argument to define the name of the service.
Step 3	dbe Example: RP/0/0/CPU0:router(config-sbc)#dbe	Enters the mode of a DBE entity within an SBC service.
Step 4	secure-media Example: RP/0/0/CPU0:router(config-sbc-dbe)# secure-media	Configures the DBE to allow secure media, such as DTLS and SRTP packets, to pass through.
Step 5	commit Example: RP/0/0/CPU0:router(config-sbc-dbe)#commit	Saves configuration changes. Use the commit command to save the configuration changes to the running configuration file and remain within the configuration session.
Step 6	exit Example: RP/0/0/CPU0:router(config-sbc-dbe)# exit	Exits the DBE mode and returns to the SBC mode.

Additional References

The following sections provide references related to secure media support on the SBC.

Related Documents

Related Topic	Document Title
Cisco IOS XR master command reference	Cisco IOS XR Master Commands List
Cisco IOS XR SBC interface configuration commands	Cisco IOS XR Session Border Controller Command Reference
Initial system bootup and configuration information for a router using the Cisco IOS XR Software	Cisco IOS XR Getting Started Guide
Cisco IOS XR command modes	Cisco IOS XR Command Mode Reference

Standards

Standards	Title
No new or modified standards are supported by this feature, and support from existing standards has not been modified by this feature.	—

MIBs

MIBs	MIBs Link
—	To locate and download MIBs using Cisco IOS XR software, use the Cisco MIB Locator found at the following URL and choose a platform under the Cisco Access Products menu: http://cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

Technical Assistance

Description	Link
The Cisco Technical Support website contains thousands of pages of searchable technical content, including links to products, technologies, solutions, technical tips, and tools. Registered Cisco.com users can log in from this page to access even more content.	http://www.cisco.com/techsupport