Nortel SMC 2450, Implementation Manual

Page: 25 / 262

Description Page 25 of 260
Secure Multimedia Controller Implementation Guide
• Secure UNIStim proxy
• High Availability (HA) configurations (active/standby)
• Administrative tools
The following sections describe these features in detail.
Security zones
Configuration of the SMC is built around the concept of multimedia security
zones. A security zone is a protected subnet connected to the SMC through a
port on the device. Multimedia infrastructure components, such as the
signaling and media servers, are located in the zones. All traffic into and out
of the zones flows through the multimedia controller. The SMC has six ports
and supports up to four secure multimedia zones. The two remaining ports are
used for management and intranet/untrusted traffic.
Two networks are mandatory in each SMC system installation:
• Management subnet: The management subnet transmits clustering and
synchronization traffic between two SMC devices in a cluster. You can
access the browser-based interface (BBI) through the management
subnet.
• Intranet subnet: The intranet subnet represents the non-secure corporate
intranet, which is the non-secure side of the SMC where the IP phones
generally reside.
Four optional primary subnets, referred to as secure multimedia zones (SMZ),
interface with the SMC:
• ELAN subnet: The Embedded LAN (ELAN) subnet, which is the
management LAN for CS 1000, isolates critical telephony signaling
between the Call Server and other components.
• TLAN subnet: The Telephony LAN (TLAN) subnet, which is the voice
LAN for CS 1000, carries telephony, voice, and signaling traffic to and
from IP clients and gateways.