Phone SRTP <-> FusionPBX <-> Trunk no SRTP

[wouam31]

Hello everyone,
I would like to enable srtp between yealink and fusionpbx stations.

I thought I was in the right one, but when I try to make a call through the trunk, it does not work because it is not srtp (488)

It is possible to make the communication between the station and FusionPBX in srtp then the communication by the trunk in normal?

In variables I tested:
SIP
- rtp_allow_crypto_in_avp - true
- rtp_secure_media - optional
- sip_allow_crypto_in_avp - true
- sip_secure_media - optional

I didn't add anything in SIP Profile: External

SIP Profile: Internal
internal_auth_call - true
internal_sip_port - 5060
internal_ssl_enable - true
internal_tls_port - 5061
internal_ssl_dir - $${conf_dir}/tls

You have an idea?
Thank you so much.

 

[wouam31]

Hi,
As I don't want to do anything stupid and crash FusionPBX, can you confirm that if I add the following parameters in the variables, calls between phones will be encrypted but calls to the trunk operators will not be encrypted.
Thank you so much.


Variables:
SIP Profile: Internal
internal_auth_calls=true
internal_ssl_enable=false
rtp_secure_media=default


SIP Profile: External
external_auth_calls=false
external_ssl_enable=false

 

[wouam31]

Hi all!

I'm banging my head against the wall!

- If I call from my yealink extensions (5061)-> SRTP OK
- If I call from my extension registered in 5060, it works (5060 unencrypted, to yealink 5061 (crypted)
- If I call from one of my yealink extensions to a telephone registered in 5060, it does not work.
He denies me the call because I am offering crypto.
How can I not offer crypto for extensions registered in 5060?

Do you have an idea? Create two internal profiles, one for the 5060 and another for the 5061?

Thank you all!