Nortel SMC 2450, Руководство по внедрению

Страница: 151 / 262

Secure UNIStim deployment Page 151 of 260
Secure Multimedia Controller Implementation Guide
using the Servers page ( Administration > Monitor > UNIStim Security >
Servers ) page in the Web UI. On the monitoring page, you can see how many
connections are currently associated with a particular server. These
associated connection are terminated when the server is deleted.
IP client firmware management
The SMC operates in a heterogeneous environment with many different
phone types. Some versions of the phone images either support UNIStim
security in a limited fashion or do not support UNIStim security at all. Nortel
highly recommends that all phones in the SMC-protected network have
appropriate Secure UNIStim images.
In some environments, however, Secure UNIStim upgrade is not possible or
the current phone image UNIStim security support is present but limited. To
protect against phone firmware issues, you can specify which firmware types
fully support Secure UNIStim and what level that support includes. You can
specify this optional firmware checking in the IP phone policy.
See the release notes for a listing of support IP phone firmware. For release
notes, click the
Technical Documentation link under Support & Training
on the Nortel home page:
www.nortel.com
No firmware checking
If firmware checking is not defined within the IP phone policy, all IP phones
on the network with signaling that traverses the SMC are treated as if they
support security. The SMC handles all IP phones equally. If upgrade to
UNIStim security is enabled, as illustrated in Figure 26, all insecure
connections generate an upgrade attempt and all secure connections are
available for session caching. If the images do not support Secure UNIStim
features, attempts by the SMC are ignored and the phones continue to connect
insecurely.