al-peer that sends out outgoing video call (with codecs from voice-class 2). Calls altered by the Tcl script (prepended 3 in the dial string) match this outgoing dial-peer. A translation rule removes the "3" from the dialed string before the call exits on the SIP trunk. Example 10-12 shows the incoming (with no SDP) and outgoing (with SDP) INVITES on CUBE for a call that is audio only. Example 10-12 Audio-only INVITE INVITE from Cisco UCM to Cisco UBE: INVITE sip: 6802005345060 SIP/2.0 To: <sip: 680200534@192.x.x.x> Contact: <sip: 1004@192.168.10.207:5060:transport=tcp> INVITE from Cisco UBE to the SIP Trunk: INVITE sip: 680200534@192 X.X.X : 5060 SIP/2.0 m=audio 18978 RTP/AVP 0 18 19 a=rtpmap: PCMU/8000 a=rtpmap: 18 G729/8000 a=fmtp:18 annexb=no a=rtpmap: 19 CN/8000 Example 10-13 shows the incoming (with no SDP) and outgoing INVITES (with SDP) on CUBE for a video call. 232 SIP Trunking Example 10-13 Video INVITE INVITE from Cisco UCM to Cisco UBE: INVITE sip: 680200534@192. X.X.X:5060 SIP/2.0 Contact: <sip: :1004@192.X.X.X:5060 transport=tcp> ; video; audio INVITE from Cisco UBE to the SIP Trunk: INVITE sip: 680200534@192. X.X.X:5060 SIP/2.0 m=audio 16972 RTP/AVP 0 19 a=rtpmap:0 PCMU/8000 a=rtpmap: 19 CN/8000 a=ptime 20 m=video 17792 RTP/AVP 119 a=rtpmap : 119 H264/90000 CUBE Using SIP TLS to CUCM CUBE can protect the security of SIP connections with TLS. One or both of the call legs of a SIP-to-SIP call can be individually configured for TLS. No current SIP Trunk offering for PSTN access offers TLS as an option, but the leg to CUCM can be used with TLS, and in the future, perhaps the SP SIP trunk leg. Example 10-14 shows a TLS configuration between CUCM and CUBE. Example 10-14 CUBE TLS Configuration voice service voip allow-connections sip to sip url sips (1) crypto pki trustpoint ca-server (2) enrollment url http://10.x.x.x:80 serial-number revocation- - check crl rsakeypair kkp crypto pki certificate chain ca-server certificate 04 3082020D 30820176 A0030201 02020104 300D0609 2A864886 F70D0101 04050030 certifi