Nortel SMC 2450, Implementation Manual

Page: 117 / 262

Firewall deployment Page 117 of 260
Secure Multimedia Controller Implementation Guide
If servers are present in more than one security zone, then the Wizard
must be run for each zone.
5 Click Next .
6 Specify an ICMP rate limit for this rule.
CallPilot Desktop Messaging requires ICMP to flow between clients and
servers. Since this potentially could lead to ICMP flooding, the rule
requires a rate-limiting flow. The packet limit can be approximated by
estimating approximately 5 packets per second per Call Pilot Desktop
Messaging Client divided by 10, to represent 10% of clients connecting
simultaneously. You can either use a pre-existing flow on this page, or
have one created for you.
7 Click Next .
8 Specify the IP addresses of the Call Pilot Servers.
At this page, you can add servers and tie them to a network.
9 Click Finish .
10 Click Apply .
End of Procedure
Result : The CallPilot Desktop Messaging Wizard creates a new network for
the Desktop Messaging Servers and adds an appropriate rule to the designated
Security Zone. If a new flow was created, it would be added to the list of flows
as well. Note that the allow rule will be appended to the end of the current
Inbound Rule list for the Security Zone. If you have added an explicit deny
rule for this traffic prior to this rule, then the rules position may need to be
altered before the ICMP traffic is allowed.
Configuring Symposium multicast
Symposium uses multicast to send Real Time Data (RTD) to the Symposium
Web Client (SWC) Server and the SWC Server uses multicast to send RTD
to Web Clients. The Web Clients use HTTP (Port 80) or HTTPS (Port 443)
to connect to the SWC Server. These components of Symposium can be in the
same network or across multiple networks. If these components are across
multiple networks, all the routers in between these individual components