Nortel SMC 2450, Implementation Manual

Page: 155 / 262

Secure UNIStim deployment Page 155 of 260
Secure Multimedia Controller Implementation Guide
phones must be transitioned to the new key fingerprint within a bounded
period of time. Within five minutes of a key update, the SMC automatically
updates the private key for IP phones currently connected to the device;
however, additional phones that may be offline at the time of the transition,
this update occurs at a later time, after they re-establish connectivity.
Because of the possibility of delayed private key updating, Nortel
recommends that the primary and secondary keys co-exist for the length of
time equal to the maximum session timeout plus the master key timeout. The
phones using session caching do not touch the key when they reconnect and,
therefore, are not updated). They will, however, have their fingerprints
replaced when they change their session keys.
Licensing
The SMC requires a license to support the total number of Secure UNIStim
users. Without a license key, the SMC supports 50 Secure UNIStim users;
however, you can purchase licenses 250, 500, 1000, 3000, and 5000
simultaneous users. There is no license limitation on non-secure UNIStim
users or other traffic that traverses the SMC.
Using the MAC address of the first Ethernet port, licensing is defined
separately for each SMC. In a HA configuration, a license is required for each
SMC. Licenses are not cumulative; a 3000-user license applied to an SMC
that has a 1000-user license allows for 3000 users.
You can apply purchased licenses to the system using either the BBI or the
CLI:
• In the BBI, navigate to the Cluster > Host > License page.
WARNING
When the license is exceeded and the policy does not
require security, additional phones are allowed through
insecurely. If the policy requires security, the license
prevents any additional phones from connecting
insecurely.