Version 6.6
339
October 2014
Installation & Operation Manual
33. Configuring Security Settings
33.11
IPSEC and IKE
IPSEC and IKE protocols are part of IETF standards for a secured IP connection
between two applications. Providing security services at the IP layer, IKE and IPSEC
protocols are transparent to the IP applications.
IKE and IPSEC are used in conjunction to provide security for call control (e.g., MGCP
and MEGACO) and management (e.g., SNMP) protocols, but not for media (i.e., RTP,
RTCP and T.38).
The IKE protocol is responsible for obtaining the IPSEC encryption keys and
encryption profile (known as IPSec Security Association (SA).
IPSEC is responsible for securing the IP traffic. This is accomplished by using the
Encapsulation Security Payload (ESP) protocol to encrypt the IP payload (illustrated in
the figure below).
Figure
33-4: IPSec Encryption
IPSEC supports the following two modes of operation:
Transport mode – used for host-to-host communication (e.g. for communication
between the Media Gateway and the EMS server); encrypts the payload of the IP
packet, but leaves IP headers intact.
Tunnel mode – used to create Virtual Private Networks (VPNs) for network-to-
network or host-to-network communication (e.g. for communication between the
Media Gateway and the VPN gateway); the entire packet is encrypted and then
encapsulated in a new IP packet with a new IP header.
The Mediant 8000 Media Gateway implements the following IPSEC/IKE specifications:
33.11.1
For Management Interfaces (on SC boards)
This section describes the Management Interfaces (on SC boards.
33.11.1.1
IKE Protocol
Authentication: pre-shared key or X.509 certificate (*)
IKE Phase 1 exchange mode: main
IKE SA encryption algorithms: DES, 3DES and AES (*)
IKE SA hash types: SHA1, SHA256 (*), SHA384 (*), SHA512 (*) and MD5
Diffie-Helman groups: ModP768, ModP1024, ModP1536 (*), ModP2048 (*),
ModP3072 (*), ModP4096 (*), ModP6144 (*) and ModP8192 (*)
Dead-peer detection (as per RFC 3706) (*)
Содержание Mediant 8000
Страница 1: ...Media Gateway Mediant 8000 Installation Operation Maintenance Manual Version 6 6 Document LTRT 92224...
Страница 2: ......
Страница 28: ...Installation Operation Manual 28 Document LTRT 92224 Mediant 8000 This page is left blank intentionally...
Страница 32: ...Installation Operation Manual 32 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 33: ...Part I Hardware Overview This part describes the hardware overview of the Mediant 8000 chassis...
Страница 34: ......
Страница 36: ...Installation Operation Manual 36 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 38: ...Installation Operation Manual 38 Document LTRT 92224 Mediant 8000 Figure 3 2 Mediant 8000 Back View...
Страница 44: ...Installation Operation Manual 44 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 46: ...Installation Operation Manual 46 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 52: ...Installation Operation Manual 52 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 56: ...Installation Operation Manual 56 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 62: ...Installation Operation Manual 62 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 88: ...Installation Operation Manual 88 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 90: ......
Страница 108: ...Installation Operation Manual 108 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 126: ...Installation Operation Manual 126 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 156: ...Installation Operation Manual 156 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 158: ......
Страница 176: ...Installation Operation Manual 176 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 264: ......
Страница 276: ...Installation Operation Manual 276 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 292: ...Installation Operation Manual 292 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 302: ...Installation Operation Manual 302 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 400: ...Installation Operation Manual 400 Document LTRT 92224 Mediant 8000 This page is left intentionally blank...
Страница 416: ...Installation Operation Manual 416 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 458: ...Installation Operation Manual 458 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 526: ...Installation Operation Manual 526 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 544: ...Installation Operation Manual 544 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 546: ......
Страница 724: ...Installation Operation Manual 724 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 775: ...Part VI Maintenance This part describes the Mediant 8000 maintenance procedures...
Страница 776: ......
Страница 790: ...Installation Operation Manual 790 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 810: ...Installation Operation Manual 810 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 832: ...Installation Operation Manual 832 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 834: ......
Страница 844: ...Installation Operation Manual 844 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 856: ...Installation Operation Manual 856 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 870: ...Installation Operation Manual 870 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 876: ...Installation Operation Manual 876 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 878: ...Installation Operation Manual 878 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 879: ...Part VIII Appendices This part describes additional Mediant 8000 configuration procedures...
Страница 880: ......
Страница 890: ...Installation Operation Manual 890 Document LTRT 92224 Mediant 8000 Figure B 1 HSRP VRRP Configuration...
Страница 904: ...Installation Operation Manual 904 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 910: ...Installation Operation Manual 910 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 924: ...Media Gateway Mediant 8000 www audiocodes com Installation Operation Maintenance Manual...