RedMax EXtreme EX-LRT Guía para resolver problemas Pagina 52
- Pagina / 142
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Oracle SBC Security Guide
The following are Media Manager parameters that have platform specific defaults. For this appendix,
these defaults will be used and are indicated in the platform results by system model.
Parameter
min-media-allocation
min-trusted-allocation
deny-allocation
Realm Configuration
The following realm-config parameters are used in the basic DDoS configuration. Only the bold
values are changes from the default configuration
Parameter
Access Realm
Core Realm
access-control-trust-level
low
high
invalid-signal-threshold
1
0
average-rate-limit
0
0
maximum-signal-threshold
4000
0
untrusted-signal-threshold
1
0
Note that the maximum-signal-threshold of 4000 is very high so as not to impact service. It should be
reduced to a number close to the maximum number of signaling messages from one client within the
tolerance-window on the realm, which by default is 30 seconds. Base the threshold on an actual trace to
account for the extraneous messages that are normally not considered, and make sure to account for
network loss and/or renegotiations.
SIP Interface
The following sip-interface->sip-ports parameter should be used for access environments.
Parameter
Access Realm
Core Realm
allow-anonymous
registered
all
DDoS-2 for software release S-CX6.3.0 and above
Software release S-CX6.3.0F2 and above introduces DDoS-2 for platforms: Acme Packet 3820, Acme
Packet 4500 CPU-1, Acme Packet 4500 CPU-2. DDoS-2 increases the number of trusted endpoints to a
maximum of 250K for Acme Packet 4500 and 125K for Acme Packet 3820. It also increases the number
of denied endpoints to a maximum 32K for Acme Packet 4500 and 16K for Acme Packet 3820. In the
new design, instead of providing a dedicated Traffic Manager flow for each endpoint, it provides 1024
TM-flows for each physical interface. A group of endpoints share one of the TM-flows. Dynamic trusted
endpoints are stored in the HASH table. Dynamic denied endpoints are stored in the CAM table.
show commands
The command show acl info provides information about present usage of the HASH table.
- SECURITY GUIDE 1
- Contents 3
- Related Documentation 7
- Part 1: Overview 8
- Figure 1: Net-SAFE Framework 9
- General Security Principles 10
- Monitor System Activity 11
- Session Border Controller 13
- Unified Session Manager 14
- Core Session Manager 15
- Session Router 16
- Realm Design Considerations 16
- Management Interfaces 17
- Passwords 18
- Boot Flags 18
- System ACLs 19
- Telnet/SSH 19
- FTP/SFTP 19
- GUI Management 19
- Resiliency 20
- Physical Link Redundancy 21
- Part 3: Security Features 22
- Security Specific Licenses 24
- Features 26
- Configuring AAA Integration 27
- SIP Interface Security 28
- Service ACLs 29
- TLS for SIP 31
- IPsec for SIP 33
- Call Admission Control (CAC) 34
- Media Policing 35
- DoS/DDoS Prevention 35
- Attack Tool Prevention 36
- Lawful Interception 36
- Part 4: Appendices 37
- Appendix B: Port Matrix 38
- Configuration Models: 40
- Supported platforms 40
- Configuration Parameters 40
- Realm Configuration 41
- SIP Interface 41
- Observations/Limitations 49
- Overview 61
- Deployment Archetypes 61
- Scanner Mitigation 63
- Peering Environments 68
- IDS License Details 70
- Dependencies 70
- Statistics 71
- SNMP MIB OIDS 71
- SNMP Traps 72
- Constraints Limiting 75
- Session-Constraints 75
- Rate constraints 76
- Message Rejections 78
- SNMP support 79
- Log Action 79
- Blacklist Table Maintentance 86
- SNMP OIDs 88
- System Management Statistics 88
- Realm Statistics 89
- Environmental Statistics 90
- Enterprise SNMP Traps 90
- SNMP Traps in HA environment 93
- Appendix I: Syslog 94
- Call Detail Records (CDR) 102
- Oracle SBC Security Guide 103
- System Statistics 106
- Application Statistics 106
- Introduction 108
- SRTP Topologies 108
- Requirements 110
- Design Aspects 111
- Secured/Unsecured Network 114
- Troubleshooting 122
- References 142
Relacionado con productos y manuales para Cortadoras De Césped RedMax EXtreme EX-LRT
Cortadoras De Césped RedMax GZ25N Especificaciones
(32 paginas)
(32 paginas)
Cortadoras De Césped RedMax CHT2301 Especificaciones
(36 paginas)
(36 paginas)
Cortadoras De Césped RedMax BC250 Especificaciones
(52 paginas)
(52 paginas)
Cortadoras De Césped RedMax HE2601 Especificaciones
(26 paginas)
(26 paginas)
Cortadoras De Césped RedMax CHT2200 Especificaciones
(32 paginas)
(32 paginas)
Cortadoras De Césped RedMax LRT2300 Especificaciones
(26 paginas)
(26 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.053 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales