Version 6.6
303
October 2014
Installation & Operation Manual
33. Configuring Security Settings
33
Configuring Security Settings
The Mediant 8000 requires IP network connectivity for its normal operation and
therefore is subject to security attacks that may be launched by malicious users. To
ensure secure operation of the Mediant 8000 take the following steps:
Implement security features in the IP network to which the Mediant 8000 is
connected (e.g. by limiting physical access to the network and using firewalls).
Configure and maintain security features on the Mediant 8000 as described in
this chapter.
The Mediant 8000 provides the following security-related features:
Security for OAM (management) interfaces:
•
Secure Operation Mode
•
Secure access to the SNMP interface (via SNMPv3 and/or IPSEC)
•
Secure access to the CLI interface (via SSH and SFTP/SCP)
•
Disabled Remote Root Login
•
OS Hardening
•
OS Security Patches (on SC boards)
•
OS Auditing (on SC boards)
•
File Integrity Check
•
Firewall (on Media Gateway boards)
Security for Call Control interfaces:
•
MGCP/MEGACO over IPSEC/IKE
•
SIPS (TLS) with X.509 Certificates
•
Firewall (on Media Gateway boards)
Security for Media interfaces:
•
SRTP (with either ARIA or AES crypto suites)
•
Firewall (on Media Gateway boards)
In addition to the above list, subnet separation (as described in 'Configuring Network
Topology' on page
) may be used to separate between different types of traffic and
to implement additional security at the network level (by preventing access of
malicious users to specific network segments).
Summary of Contents for Mediant 8000
Page 2: ......
Page 33: ...Part I Hardware Overview This part describes the hardware overview of the Mediant 8000 chassis...
Page 34: ......
Page 90: ......
Page 158: ......
Page 264: ......
Page 546: ......
Page 775: ...Part VI Maintenance This part describes the Mediant 8000 maintenance procedures...
Page 776: ......
Page 834: ......
Page 879: ...Part VIII Appendices This part describes additional Mediant 8000 configuration procedures...
Page 880: ......
Page 924: ...Media Gateway Mediant 8000 www audiocodes com Installation Operation Maintenance Manual...