R0106-HP MSR Router Series Voice Configuration Guide(V7)

110
# Obtain the CA certificate and save it locally.
[RouterA] pki retrieve-certificate domain voice ca
# Submit a certificate request manually.
[RouterA] pki request-certificate domain voice
# Create an SSL server policy, and specify a PKI domain for the SSL server policy.
[RouterA] ssl server-policy server
[RouterA-ssl-server-policy-server] pki-domain voice
# Create an SSL client policy, and specify a PKI domain for the SSL client policy.
[RouterA] ssl client-policy client
[RouterA-ssl-client-policy-client] pki-domain voice
# Specify SSL policies to be used by TLS.
[RouterA] voice-setup
[RouterA-voice] sip
[RouterA-voice-sip] crypto ssl-server-policy server
[RouterA-voice-sip] crypto ssl-client-policy client
# Configure TLS as the global transport protocol for outgoing SIP calls.
[RouterA-voice-sip] session transport tcp tls
# Enable the TLS listening port.
[RouterA-voice-sip] transport tcp tls
[RouterA-voice-sip] quit
# Configure the destination IP address and port number as 192.168.2.2 and 5061 for VoIP entity
2222, and configure the called number as 2222.
[RouterA-voice] dial-program
[RouterA-voice-dial] entity 2222 voip
[RouterA-voice-dial-entity2222] address sip ip 192.168.2.2 port 5061
[RouterA-voice-dial-entity2222] match-template 2222
[RouterA-voice-dial-entity2222] quit
# Configure local number 1111 for POTS entity 1111, and bind FXS interface 2/2/1 to the POTS
entity.
[RouterA-voice-dial] entity 1111 pots
[RouterA-voice-dial-entity1111] line 2/2/1
[RouterA-voice-dial-entity1111] match-template 1111
2. Configure Router B:
# Configure an IP address for GigabitEthernet 2/1/1.
<RouterB> system-view
[RouterB] interface gigabitethernet 2/1/1
[RouterB-GigabitEthernet2/1/1] ip address 192.168.2.2 255.255.255.0
[RouterB-GigabitEthernet2/1/1] quit
# Create a PKI entity named aaa with the common name as RouterB.
[RouterB] pki entity aaa
[RouterB-pki-entity-aaa] common-name RouterB
[RouterB-pki-entity-aaa] quit
# Create a PKI domain named voice, and specify the name of the trusted CA as voice.
[RouterB] pki domain voice
[RouterB-pki-domain-voice] ca identifier voice