RedMax EXtreme EX-LRT Guía para resolver problemas Pagina 43

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 142
  • Tabla de contenidos
  • SOLUCIÓN DE PROBLEMAS
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 42
Oracle SBC Security Guide
Define a number to set the maximum rate of call (per second) this session agent will allow. Once
the rate limit is reached, the SBC will start rejecting new service with 503 Exceed Constraints
until the number of seconds in time-to-resume has elapsed.
max-sustain-rate - Z
In general, set this to the average call rate (per second) which that SA can sustain. Once the
average rate limit calculated in
(Calls made in current + previous window) / Delta (current second start of previous window),
exceeds the limit Z , the SBC will be start rejecting new service with 503 Exceed Constraints
until the number of seconds in time-to-resume has elapsed.
session-router->access-control
Parameter
Realm
Realm
realm-id
peer
core
source-address
n.n.n.n/[mask bit is
optional]
(peer SA IP, or non-SA IP)
[m.m.m.m]/ [mask bit is
optional]
(core SA IP or non-SA IP)
application-protocol
SIP
SIP
transport
ALL
ALL
access
permit
permit
trust-level
high
high
minimum-reserved-bandwidth
0
0
invalid-signal-threshold
0
0
maximum-signal-threshold
0
0
untrusted-signal-threshold
0
0
deny-period
30
30
In core realm, it is recommended to configure an access-control on per session-agent basis instead of
putting it into a single source-subnet/mask. That will give the core session-agent its own flow versus
sharing one flow for multiple devices or the entire subnet.
DDOS Configuration Parameter Settings
Below are the recommended parameters setting for each platform in a SIP Peering model. The non-
default values are in bold.
Changes under media-manager require system reboot to take effect. Be sure to follow precautions to
reboot SBC(s) to unnecessary service outage during this execution.
Vista de pagina 42
1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 141 142

Comentarios a estos manuales

Sin comentarios