RedMax EXtreme EX-LRT Guía para resolver problemas Pagina 117

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 142
  • Tabla de contenidos
  • SOLUCIÓN DE PROBLEMAS
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 116
Oracle SBC Security Guide
Note that in the case where the SIP traffic runs on a different IP/Subnet from media, then this
second security-policy for SIP signaling is not required.
In the security-policies configured below, note that SIP traffic is expected in 11.0.0.11 and port 5060,
using any transport-protocol (so both UDP and TCP SIP traffic is accepted), and SRTP traffic is also
configured for 11.0.0.11 (i.e. no signaling/media separation).
security-policy
name signaling
network-interface M00:0
priority 1
local-ip-addr-match 11.0.0.11
remote-ip-addr-match 0.0.0.0
local-port-match 5060
remote-port-match 0
trans-protocol-match ALL
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 0.0.0.0
action allow
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 0
trans-protocol-mask 0
valid enabled
vlan-mask 0xFFF
security-policy
name media
network-interface M00:0
priority 2
local-ip-addr-match 11.0.0.11
remote-ip-addr-match 0.0.0.0
local-port-match 0
remote-port-match 0
trans-protocol-match UDP
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 0.0.0.0
action srtp
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 0.0.0.0
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 65535
trans-protocol-mask 255
valid enabled
vlan-mask 0xFFF
Both RTP/SRTP support
Vista de pagina 116
1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 141 142

Comentarios a estos manuales

Sin comentarios