Motorola solutions MCC 7100 IP, Setup And User Manual

Page: 35 / 170

PRX 7000 Console Proxy
Use the PRX 7000 Console Proxy when MCC 7100 IP Dispatch Consoles are deployed outside the
ASTRO
®
25 Radio Network Infrastructure (RNI). Due to routing issues, multicast audio packets are
unable to be sent outside of the ASTRO
®
25 RNI into the customer network and ultimately over the
Internet. The PRX 7000 Console Proxy is located at a traditional console site or in a conventional
subsystem. The PRX 7000 Console Proxy is an application that converts multicast audio packets
(delivered inside the ASTRO
®
25 RNI) to unicast audio packets, and sends them outside of the
ASTRO
®
25 RNI to an MCC 7100 IP Dispatch Console. The PRX 7000 Console Proxy is also used to
perform link maintenance inside the ASTRO
®
25 RNI on behalf of the MCC 7100 IP Dispatch Consoles
when deployed outside of the ASTRO
®
25 RNI.
Console Site Control Room Firewall
The SSG 140 control room firewall used at a console site allows secured communications with outside
networks. It is configured for Network Address Translation (NAT) functionality to help eliminate conflicts
between an IP address in a Customer Enterprise Network (CEN) and an IP address in the ASTRO
®
25
Radio Network Infrastructure (RNI). The control room firewall is configured to allow only dispatch
console-related traffic to and from the CEN. The control room firewall communicates with the CEN
interior gateway using Internet Protocol version 4 (IPv4).
The PRX 7000 Console Proxy communicates to the remote MCC 7100 IP Dispatch Console through a
firewall. The firewall the console site allows traffic to/from the PRX 7000 Console Proxy and CEN. The
user must provide any VPN functionality in the CEN.
The interior gateway in the CEN and the console site control room firewall share the link from the
console site to the zone core.
A control room firewall can be installed at any console site in the system. Multiple control room firewalls
can be in a system; one at each console site. The control room firewall is the demarcation point for the
ASTRO
®
25 network. The user provides the networking equipment used to establish a path to a remote
MCC 7100 IP Dispatch Console.
NOTICE:
An Intrusion Detection System (IDS) is not required at each console site, but is an
option for security conscious users.
License Server
The license server is a web server used to generate a license file for activating an MCC 7100 IP
Dispatch Console during installation. This file contains the required licensing information as well as the
number of connections that the PRX 7000 Console Proxy supports. The license server is not part of
the ASTRO
®
25 Radio Network Infrastructure (RNI) or the Customer Enterprise Network (CEN).
Motorola hosts the license server.
NOTICE:
The Motorola Licensing group generates license files, and provides instructions on
how to allocate and download license files.
Key Management Facility for MCC 7100 IP Dispatch Console
The Key Management Facility (KMF) is the centralized key manager in the ASTRO
®
25 system. The
KMF delivers keys securely, using the Over-the-Ethernet-Keying (OTEK) feature, to the MCC 7100 IP
Dispatch Consoles configured with hardware-based encryption. For MCC 7100 IP Dispatch Consoles
configured with software-based encryption, the KMF exports a file used to import keys into the console.
NOTICE:
The KMF does not support Advanced Digital Privacy (ADP) keys.
MN000672A01-E
Chapter 1: MCC 7100 IP Dispatch Console Description
Send Feedback 35