RedMax EXtreme EX-LRT Guide de dépannage Page 117

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 142
  • Table des matières
  • DEPANNAGE
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 116
Oracle SBC Security Guide
Note that in the case where the SIP traffic runs on a different IP/Subnet from media, then this
second security-policy for SIP signaling is not required.
In the security-policies configured below, note that SIP traffic is expected in 11.0.0.11 and port 5060,
using any transport-protocol (so both UDP and TCP SIP traffic is accepted), and SRTP traffic is also
configured for 11.0.0.11 (i.e. no signaling/media separation).
security-policy
name signaling
network-interface M00:0
priority 1
local-ip-addr-match 11.0.0.11
remote-ip-addr-match 0.0.0.0
local-port-match 5060
remote-port-match 0
trans-protocol-match ALL
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 0.0.0.0
action allow
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 0
trans-protocol-mask 0
valid enabled
vlan-mask 0xFFF
security-policy
name media
network-interface M00:0
priority 2
local-ip-addr-match 11.0.0.11
remote-ip-addr-match 0.0.0.0
local-port-match 0
remote-port-match 0
trans-protocol-match UDP
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 0.0.0.0
action srtp
ike-sainfo-name
outbound-sa-fine-grained-mask
local-ip-mask 0.0.0.0
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 65535
trans-protocol-mask 255
valid enabled
vlan-mask 0xFFF
Both RTP/SRTP support
Vue de la page 116
1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 141 142

Commentaires sur ces manuels

Pas de commentaire