User's Manual

Using the TLS to connect to the SIP proxy
The IP
Deskphone can establish a connection with the proxy after the appropriate
configurations are made for the TLS. After the IP Deskphone registers with the SIP Proxy, the
user can detect if a secure connection is established by the presence of a security icon
(padlock) on the idle screen.
Figure 36: Security icon enabled
Note:
Connecting to the server requires that the IP
Deskphone uses, at a minimum,
TLS_RSA_WITH_AES_128_CBC_SHA, and as an objective,
TLS_RSA_WITH_AES_256_CBC_SHA. Because this is a server-specific configuration, the
IP Deskphone must be prepared to handle both. There is no difference in screen indication,
regardless of the type of cipher used.
The following table describes the configurations that affect the presence of the security icon
on the idle screen of the IP Deskphone.
Configuration Result Idle Screen Security Icon
Display
Default: UDP + TCP SIP is unsecured. No
UDP only SIP is unsecured. No
TCP only SIP is unsecured. No
TLS only Connection is only
established if SIP
is secure.
Yes
UDP + TLS: unsupported Unsupported. Unsupported
TCP + TLS Connection is established
with either TCP or TLS.
Yes – only if TLS connection
is used
TCP/TLS operation overview
SIP Software for Avaya 1100 Series IP Deskphones-Administration November 2012 211