R2511-HP MSR Router Series Voice Configuration Guide(V5)

172
[RouterA-voice-dial] quit
2. Configure Router B:
# Configure the IP address of the Ethernet interface.
<RouterB> system-view
[RouterB] interface ethernet 2/1
[RouterB-Ethernet2/1] ip address 192.168.2.2 255.255.255.0
[RouterB-Ethernet2/1] quit
# Create a PKI entity aaa, enter its view, and then configure the common name of the entity as
RouterB.
[RouterB] pki entity aaa
[RouterB-pki-entity-aaa] common-name RouterB
[RouterB-pki-entity-aaa] quit
# Create a PKI domain voice, enter its view, and then specify the trusted CA as voice.
[RouterB] pki domain voice
[RouterB-pki-domain-voice] ca identifier voice
# Specify the URL of the registrar for certificate request. The URL is in the format of
http://host:port/Issuing Jurisdiction ID, where Issuing Jurisdiction ID is a hexadecimal character
string generated on the CA server. Then, specify the authority for certificate request as CA, and
specify the entity for certificate request as HP.
[RouterB-pki-domain-voice] certificate request url
http://192.168.0.88:446/bd0683e5a369eb4edbb4ef502eaca6ec42d24e97
[RouterB-pki-domain-voice] certificate request from ca
[RouterB-pki-domain-voice] certificate request entity aaa
[RouterB-pki-domain-voice] quit
# Create local RSA key pairs.
[RouterB] public-key local create rsa
# Retrieve the CA certificate from the certificate issuing server.
[RouterB] pki retrieval-certificate ca domain voice
# Request a local certificate from the CA.
[RouterB] pki request-certificate domain voice
# Create an SSL server policy named server and configure the policy to use PKI domain voice.
[RouterB] ssl server-policy server
[RouterB-ssl-server-policy-server] pki-domain voice
# Create an SSL client policy named client and configure the policy to use PKI domain voice.
[RouterB] ssl client-policy client
[RouterB-ssl-client-policy-server] pki-domain voice
# Reference the created SSL server and client policies for SIP, and then specify TLS as the transport
layer protocol for both outgoing and incoming SIP calls.
[RouterB] voice-setup
[RouterB-voice] sip
[RouterB-voice-sip] crypto ssl-server-policy server
[RouterB-voice-sip] crypto ssl-client-policy client
[RouterB-voice-sip] listen transport tls
[RouterB-voice-sip] transport tls
[RouterB-voice-sip] quit
# Configure the voice entities.