Nortel SMC 2450, Руководство по внедрению

Страница: 133 / 262

Secure UNIStim deployment Page 133 of 260
Secure Multimedia Controller Implementation Guide
By default, the voip_users network matches all subnets so all traffic
flowing through the SMC is insecure. To segment out a particular network
for security, you must perform the following steps:
a. Add a network for the subnet(s) you want to secure. Networks are
added in the Web UI at the
Multimedia Security > Networks page.
b. Create a rule by associating the network to a policy. Rules are
applied in order of display and since the default rule matches all
networks, it is always called if it is first in the list. You will need to
re-order the Rule list to place the new more restrictive Rule first.
14 Extract the private key to a secure location.
a. Navigate to the Multimedia Security > UNIStim Security > Private
Keys page .
b. Select the key to display.
c. Click Display Private Key/Public Key/Fingerprint .
d. Click Private Key .
You are prompted to specify a password. The password is optional
but recommended since this key is critical for communication with all
Secure UNIStim phones proxied by the SMC. This password is
required when the key is imported back into the SMC.
e. Specify a password.
f. Cut and paste the key into a file for storage.
15 Click Apply .
IMPORTANT!
Maintain the private key in a safe location. It may be needed for another
SMC install.