Nortel SMC 2450, Руководство по внедрению

Страница: 147 / 262

Secure UNIStim deployment Page 147 of 260
Secure Multimedia Controller Implementation Guide
Procedure 41
Exporting the private key
You can export private keys, corresponding public keys, and public key
fingerprints from the SMC to a file for storage or transfer to another SMC
cluster.
1 Log on to the Web UI.
2 Navigate to the Multimedia Security > UNIStim Security > Private
Keys > Display Private Key/Public Key/Fingerprint page.
3 Specify a password to encrypt an exported private key.
End of Procedure
Secure UNIStim rules
The SMC auto-generates firewall rules for the different security zones that it
protects; however, you can customize the firewall rules.
By default, the autogenerated rules allow UNIStim traffic through the SMC
for both the CS 1000 and the MCS 5100, enabling insecure UNIStim phones
to work by default.
Signaling servers
CS 1000 signaling sessions typically involve a connection to an initial server,
termed
primary in this document, followed by automatic redirections to
secondary servers. The primary server typically uses port 4100 and the
secondary servers, which can be the same device, typically uses ports 7300
and 5100. In this context, a server is a combination IP address and port.
Figure 25 illustrates a standard redirection in a CS 1000 system.