MGCP Call Encryption

[Flo.Matalis]

Hi Experts,

CUCM: 11.5

I am planning to implement secured calls between our MGCP gateways and CUCM and Phones. Does this below document specify the things to do? So if we are using MGCP, it is a mandatory step that we need to set up IPSEC tunnel between MGCP gateway and CUCM?

https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/118886-config-mgcp-00.html

What are these IP addresses for? Where can we get?

KRK-UC-2x2811-2(cs-server)#cdp-url http://209.165.201.10/IOS_CA.crl

KRK-UC-2x2811-2(ca-trustpoint)#enrollment url http://209.165.201.10:80

 Any response will be appreciated. Thanks!

[Dennis Mink]

Yes you would need to use IPSEC because MGCP does not support signalling encryption natively like SIP would through TLS/SSL. if you use IPSEC it will protect all traffic between CUCM and the voicegateway

[Flo.Matalis]

Thanks Dennis for your confirmation.