CUBE High Availability w/ SIP-TLS & SRTP

[Daniel Lucas]

Does CUBE High Availability (via Redundancy Group Infrastructure Protocol) work with SIP-TLS/SRTP? I have a situation in which we need to encrypt the RTP stream between our CUBEs and the SIP carrier. We would like to deploy the CUBEs in an HA pair for redundancy, but I can find any documentation saying if HA is support when doing SIP-TLS & SRTP.

Platform is a 4431 ISR.

-Thanks

[R0g22]

It should support it. However, during switchover, SIP-TLS/SRTP-RTP conversion if needed/present, won't be preserved.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-stateful-switchover.html

https://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-border-element/112095-cube-hsrp-config-00.html

[Daniel Lucas]

Thank you for the response,

So any active SRTP streams terminating on the CUBE would be dropped during a failover event?

-Thanks

[R0g22 · Accepted solution]

The below PPT from Cisco Live explains some of this more confusing stuff not updated in the documents -
https://cisco.app.box.com/v/cube/file/28807515776

SRTP-SRTP is partially supported. SRTP passthrough is completely supported where packets just pass through without any encryption/de-cryption.

[Daniel Lucas]

Thanks for the info,

Seems Cisco documentation isn't consistent on this - in the first document link you shared it clearly states that SRTP-Passthrough, and RTP-SRTP isn't supported:

 

Perhaps someone at Cisco can lab this up, and write a how-to document :)

[R0g22]

The previous document is not updated. The one I shared later is from a Cisco Live event by the TME himself. So, you can take that as a more accurate documentation.