Version 6.6
341
October 2014
Installation & Operation Manual
33. Configuring Security Settings
33.11.3
Configuring IPSEC/IKE for Management Interfaces (on SC
boards)
IPSEC/IKE protocols may be used to secure communication between the Media
Gateway and SNMP managers, Syslog servers and NTP servers. The Transport
mode IPSEC/IKE association between the Media Gateway and the EMS server is
configured via the
tools ems
command (see
Configuring Connectivity between the
Media Gateway and the EMS Server on page
). IPSEC/IKE associations between
the Media Gateway and additional SNMP managers and/or tunnel mode IPSEC/IKE
associations are configured as decribed below.
To configure IPSEC/IKE association for management interfaces, the following
configuration entities (MOs) are used:
SC IPSEC Rule – represents a single IPSEC/IKE association on SC boards (that
handle all management traffic) ; up to 10 associations may be configured
SC IKE Proposal – represents an IKE proposal (a set of encryption and
authentication protocols) used for specific SC IPSEC Rule; up to 4 proposals may
be configured for each rule
When IPSEC/IKE associations are configured for SNMP managers (EMS, NMS,
OSS), the actual mode of operation is determined by the selected SNMP management
mode.
Table
33-6: SNMP Management Modes
SNMP Management Mode
Actual mode of Operation
SNMPv2
IPSEC/IKE associations
may
be configured for specific
SNMP managers. If such a configuration is performed,
management traffic between the Media Gateway and
specific
SNMP manager is encrypted.
Access to incoming SNMP port 161 on the Media Gateway
iis not protected. As a result, unsecured SNMP managers,
provisioned with the correct public and private keys, may
connect to it.
IPSEC
IPSEC/IKE associations
must
be configured for all SNMP
managers who access the Media Gateway’s MIB.
IPSEC/IKE encryption is enforced on the incoming SNMP
port 161, therefore unsecured SNMP managers can’t
connect to it.
Unsecured SNMP managers (without proper IPSEC/IKE
association configured) may be used to receive SNMP
notifications (traps) from the Media Gateway.
Содержание Mediant 8000
Страница 1: ...Media Gateway Mediant 8000 Installation Operation Maintenance Manual Version 6 6 Document LTRT 92224...
Страница 2: ......
Страница 28: ...Installation Operation Manual 28 Document LTRT 92224 Mediant 8000 This page is left blank intentionally...
Страница 32: ...Installation Operation Manual 32 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 33: ...Part I Hardware Overview This part describes the hardware overview of the Mediant 8000 chassis...
Страница 34: ......
Страница 36: ...Installation Operation Manual 36 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 38: ...Installation Operation Manual 38 Document LTRT 92224 Mediant 8000 Figure 3 2 Mediant 8000 Back View...
Страница 44: ...Installation Operation Manual 44 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 46: ...Installation Operation Manual 46 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 52: ...Installation Operation Manual 52 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 56: ...Installation Operation Manual 56 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 62: ...Installation Operation Manual 62 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 88: ...Installation Operation Manual 88 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 90: ......
Страница 108: ...Installation Operation Manual 108 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 126: ...Installation Operation Manual 126 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 156: ...Installation Operation Manual 156 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 158: ......
Страница 176: ...Installation Operation Manual 176 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 264: ......
Страница 276: ...Installation Operation Manual 276 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 292: ...Installation Operation Manual 292 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 302: ...Installation Operation Manual 302 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 400: ...Installation Operation Manual 400 Document LTRT 92224 Mediant 8000 This page is left intentionally blank...
Страница 416: ...Installation Operation Manual 416 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 458: ...Installation Operation Manual 458 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 526: ...Installation Operation Manual 526 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 544: ...Installation Operation Manual 544 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 546: ......
Страница 724: ...Installation Operation Manual 724 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 775: ...Part VI Maintenance This part describes the Mediant 8000 maintenance procedures...
Страница 776: ......
Страница 790: ...Installation Operation Manual 790 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 810: ...Installation Operation Manual 810 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 832: ...Installation Operation Manual 832 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 834: ......
Страница 844: ...Installation Operation Manual 844 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 856: ...Installation Operation Manual 856 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 870: ...Installation Operation Manual 870 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 876: ...Installation Operation Manual 876 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 878: ...Installation Operation Manual 878 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 879: ...Part VIII Appendices This part describes additional Mediant 8000 configuration procedures...
Страница 880: ......
Страница 890: ...Installation Operation Manual 890 Document LTRT 92224 Mediant 8000 Figure B 1 HSRP VRRP Configuration...
Страница 904: ...Installation Operation Manual 904 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 910: ...Installation Operation Manual 910 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 924: ...Media Gateway Mediant 8000 www audiocodes com Installation Operation Maintenance Manual...