Nortel SMC 2450, Implementation Manual

Page: 58 / 262

Page 58 of 260 Overview of the deployment process
553-3001-225 Standard 1.00 May 2006
3 Incorporate the SMC into the network with the firewall unhooked
(disabled) and UNIStim security turned off. All traffic passes through the
box unhindered so that you can verify network connectivity. See “Firewall
deployment” on
page 103 .
4 Hook (enable) the firewall on the SMC and validate that baseline
connectivity for back-end multimedia services(such as CS 1000, MCS,
Call Pilot, and Symposium) is not hindered. During this step, you can
enhance and update the firewall rules to protect the devices in the secure
multimedia zone. To ensure that packets do not drop due to incorrect
firewall rules, view the firewall logs for events of dropped communication.
5 Turn on Secure UNIStim security for a subset of clients to troubleshoot
UNIStim connectivity and populate the secure UNIStim server tables with
the redirect information. See “Secure UNIStim deployment” on
page 121 .
6 Turn on Secure UNIStim for all clients. See “Configuring the IP clients” on
page 139 .
IMPORTANT!
If you encounter basic network connectivity problems during this step,
verify the initial configuration of the SMC and the external routing of
traffic through the SMC.
Ensure that the routes on the core intranet router are configured to send
all Voice over IP (VoIP) traffic through the SMC and the VoIP equipment
has the SMC interface designated as its default gateway.
WARNING
Prior to turning on UNIStim security, upgrade the image
on all IP phones that interface with servers that the SMC
proxies. Prior to enabling UNIStim security, upgrade the
firmware on all IP Phones that connect to CS 1000E and
MCS 5100 systems behind the SMC.