LCOS supports Voice over Secure IP (VoSIP). This function enables you to encrypt the signaling and voice data. From LCOS version 9.20, you can use VoSIP on all LANCOM business VoIP routers.
- Signaling encryption
- This setting determines the protocol used for signaling encryption (SIP/SIPS) for communications with the provider.
- Automatic
- NAPTR (Naming Address Pointer) records are used for DNS resolution. In the DNS data, the provider specifies the use of transport protocols such as UDP, TCP or TLS. The provider can also specify weights or priorities. If TLS is specified as the transport protocol for signaling encryption by NAPTR, voice encryption is also used automatically, regardless of the explicit configuration setting of voice encryption.
- No (UDP)
- All SIP packets are transmitted connectionless. Most providers support this setting.
- No (TCP)
- All SIP packets are transmitted connection-oriented. The device establishes a TCP connection to the provider and maintains it for as long as it stays registered. Specialized providers, such as the providers of SIP trunks, support or force this setting.
- TLS
- Transmission is the same as with TCP, but all of the SIP packets are encrypted all the way to the provider. The TLS version selected in the configuration is taken as the minimum requirement for TLS encryption.
- Speech encryption
- This setting determines if and how the speech data (RTP/SRTP) is encrypted when communicating with the provider.
Speech encryption Reject Encryption is not available for outgoing calls. Incoming calls with an encryption proposal are rejected. The speech channel is not encrypted. Ignore Encryption is not available for outgoing calls. Incoming calls with an encryption proposal are accepted. The speech channel is not encrypted. Prefer Encryption is offered for outgoing calls. Incoming calls without an encryption proposal are accepted. The speech channel is only encrypted if the remote peer also supports encryption. Force Encryption is offered for outgoing calls. Incoming calls without an encryption proposal are rejected. The speech channel is either encrypted or is not established. Note: If you require the encrypted transmission of speech data, the signaling must also use an encrypted channel. Please note that the use of SRTP is no guarantee of end-to-end encryption.
