!
crypto pki trustpoint zerossl
!
crypto pki trustpoint ITSP_CA
 enrollment terminal
 revocation-check none
!
crypto pki certificate chain zerossl
XXXXXX
!
crypto pki certificate chain ITSP_CA
XXXX
!
!
voice service voip
 ip address trusted list
  ipv4 X.X.X.X
 callmonitor
 rtcp keepalive
 rtcp all-pass-through
 address-hiding
 media statistics
 media bulk-stats
 allow-connections sip to sip
 no supplementary-service sip refer
 supplementary-service media-renegotiate
 redirect ip2ip
 signaling forward none
 fax protocol pass-through g711ulaw
 trace
 call-quality
 stun
  stun flowdata agent-id 1 boot-count 4
  stun flowdata shared-secret 6 XXXX
 sip
  rel1xx disable
  header-passing
  registrar server expires max 3600 min 600
  asserted-id pai
  early-offer forced
  midcall-signaling passthru
  privacy-policy passthru
  no call service stop
!
!
voice class uri FromISTP sip
 host ipv4:x.x.x.x
!
!
! 
!
voice class tenant 1
  registrar ipv4:x.x.x.x expires 3600
  credentials xxxx
  authentication xxxx
  sip-server ipv4:x.x.x.x
  no pass-thru content custom-sdp
!
!
interface GigabitEthernet4
 ip address x.x.x.x 255.255.255.0
 negotiation auto
 no mop enabled
 no mop sysid
!
!
ip route x.x.x.x
!
!
!
dial-peer voice 9000 voip
 description *** Egress to ITSP  ***
 session protocol sipv2
 session target sip-server
 session transport tcp tls
 destination e164-pattern-map 9000
 voice-class sip tenant 1
 dtmf-relay rtp-nte
 srtp
 codec g711ulaw
 ip qos dscp cs3 signaling
 no vad
!
!
dial-peer voice 1 voip
 description *** Ingress from ITSP***
 session protocol sipv2
 session transport tcp tls
 incoming uri via FromISTP
 incoming uri from FromISTP
 dtmf-relay rtp-nte
 codec g711ulaw
 ip qos dscp cs3 signaling
 no vad
!
!
dial-peer voice 3212 voip
 description *** to ITSP Inbound Address ***
 session protocol sipv2
 session target ipv4:x.x.x.x:5061
 session transport tcp tls
 voice-class sip options-keepalive
 dtmf-relay rtp-nte
 srtp
 codec g711ulaw
 ip qos dscp cs3 signaling
 no vad
!
!
sip-ua 
 retry invite 2
 retry bye 1
 timers trying 150
 timers expires 60000
 timers connect 1000
 transport tcp tls v1.2
 crypto signaling default trustpoint zerossl    
!
!