NEC UNIVERGE SV9100 Manual page 78

78
Encryption - Handset Programming
On each DT800/DT700
Enter configuration menu (menu 0) followed by the password.
Option 2. SIP Settings.
Option 7. Encryption.
Option 1. Authentication Mode = Enable
Option 2. One Time Password = (As entry in PRG10-46-09) - Save
The handset will reboot and attempt to authenticate with the SV9100, if it is successful it will show
'Authentication Accepted'.
The handset will reboot again and show the normal display information once it has registered.
If RTP encryption is enabled, any call that has encrypted RTP will be indicated with the symbol of a key in
the display during the call.
Encryption – CAUTION
The system and the handset use the one time password to create an authentication key. The
authentication key is then used to encrypt the signalling and RTP packets.
In the unlikely event that this password or key is compromised it may be required to delete the key and
create a new one.
The key can be deleted by using PRG90-45-01.
BEWARE, using this comand will remove the authentication key used by every IP extension that has
encryption enabled. Each handset will then require reprogramming.
This programming command is only available through handset programming.
If encryption is in use, it may no longer be possible to troubleshoot any problems using network monitoring
software e.g. Wireshark. If you need to use Wireshark to diagnose a problem it is recommended to
disable encryption.
If NetLink is in operation, the DT800/DT700 must be registered to the Primary system to be able to use the
Encryption feature.
SV9100 Requirements
The following information provides requirements for Encryption.
Handset Firmware
Encryption is supported with V2.2.1.0 DT700 handset firmware or later.
Hardware
The SV9100 requires the following hardware:
GCD-CP10
GPZ-IPLE
License
The system must be licensed for this feature with a BE114068 (License 0030).
The system must be licensed for DT800/DT700 ITL Terminals.
SIP MLT NAPT
The NAPT (Network Address Port Translation) feature gives the SV9100 the ability to "traverse" its own
subnet. With NAPT used in the SV9100, the network administrator can place the GCD-CP10 and the GPZ-
IPLE in the customers LAN while still making it accessible to DT800/DT700 users outside the local LAN