Avaya G860, Installing And Operating

Page: 115 / 214

Issue 1 October 2007 115
12. Configuring & Operating the Media Gateway
12.8.4 Setting OAM Security in the EMS
A Security Profile must be defined for each SNMP manager to be used in the system.
The security profile includes the security tunnel to be used between the SNMP
Managers and the Avaya G860 Media Gateway. The security profiles must be
designated for each of the SNMP Managers (NMS, OSS and APS).
12.8.4.1 Configuring Security Profiles for SNMP Managers
¾
To add and configure Security Profiles, take these 6 steps:
1. On the MG Status screen of the EMS (showing a graphic representation of the
Avaya G860 Media Gateway, click the Properties link. The Media Gateway
Parameters Provisioning screen appears.
2. From the Parameters List, select the OAM Service Profiles tab. The OAM Service
Profiles table appears.
3. To add a new security profile, click . A new row appears.
4. Modify each field as needed. To modify a field, click on the field.
a. In the Profile Name field, enter a unique profile name.
b. In the IKE Pre-Shared Key field, enter a value. The value is hidden and
asterisks (******) appear in the field.
Note: Be sure to keep a record of the assigned Pre-Shared Keys in a secure
location.
c. From the IKE Encryption dropdown list, select one of the following:
♦
any - auto-negotiates with the other equipment on the other side of the
connection, matching the type of IKE encryption it requires (Default setting)
♦
des - Sets the IKE Encryption to DES (Digital Encryption Standard) Protocol
♦
des 3 - Sets the IKE Encryption to the Triple DES encryption algorithm
d. In the IKE Lifetime (sec) and IPSec Lifetime (sec) fields, enter the timeout
duration in seconds.
♦
IKE Lifetime (sec) default = 28800
♦
IPSec Lifetime (sec) default = 3600
5. Click Apply and then Close .
6. Use this procedure to add Security Profiles for each additional SNMP manager to
be used in the system.
Each Security Profile defined here appears as an option on the Security Profile
dropdown lists for each SNMP Manager defined in the system.