Page History
...
| Add_workflow_for_techpubs |
|---|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
| Panel | ||||
|---|---|---|---|---|
In this section:
|
...
The
Lawful Intercept (LI) solution supports the following:Spacevars 0 company
- Encrypts media transferred from Session Border Controller (SBC) to the collection device to avoid security issues.
- Supports Internet Protocol Security (
...
- IPsec) encapsulation of Call Data interface (X3).
- Enables
...
- IPsec encapsulation on the Call Content (media) interface for LI security.
- Associates
...
- IPsec to the IP interface group configured in the CDC.
- Manages
...
- IPsec at the application level.
This page describes how to configure IPsec support.
| Excerpt |
|---|
Access the SBC Configuration Manager |
...
|
...
|
...
...
|
...
|
...
|
...
|
...
Create cluster. For more information, see Creating an SBC SWe Cluster.
...
Click Configurations tab.
...
|
|
...
|
...
Select the version of the configuration from the Version drop-down menu.
...
Select an SBC Configurator instance from the Master Configurator drop-down menu.
This node is used to create the configuration. The SBC Configurator nodes are displayed based on the version selected. Only unlocked SBC Configurator nodes are listed.
Enter a name for the configuration in the Configuration Name field. The SBC configuration name can contain only letters, numbers, dashes (-), apostrophes ('), underscores (_), colons (:) and spaces.
| Note |
|---|
The cluster ID is set as the default name for the first configuration. You can modify the name. The name must be unique. The subsequent configurations are named with a combination of cluster name and some unique identifying information. The default name varies based on how the configuration is created. |
|
...
|
...
|
...
|
...
|
...
Creating an IKE Protection Profile
In the SBC
...
Configuration Manager window
...
:
- Click Configuration > Profile Management.
- On the navigation pane, choose Security Profiles as the Category.
Click IKE Protection Profile > New IKE Protection Profile.
...
| Caption | ||||
|---|---|---|---|---|
| ||||
The Create New IKE
...
Protection Profile window is displayed
...
.
...
Caption 0 Figure 1 Creating New IKE Protection Profile Use the following table to configure the profile and click Save.
| Caption | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
...
|
...
|
...
|
...
Configuring the Algorithm for the Profile
In the SBC Configuration Manager window:
- Click Configuration > Profile Management.
- On the navigation pane, choose Security Profiles as Category.
Click IKE Protection Profile > New IKE Protection Profile > Algorithms
...
. The Algorithms window is displayed.
Choose the
...
name of your IKE protection profile in IKE Protection Profile.
Caption 0 Figure 1 New IKE Protection Profile - Algorithms Use the following table to configure algorithm parameters for the profile and click Save.
Caption 0 Table 1 New IKE Protection Profile - Algorithms Parameters Parameter
Description
Encryption
The IKE Protection
...
profile encryption cipher. You can select multiple encryptions.
Options are:
- _3DesCbc
- aesCbc128 (default)
Integrity
The IKE Protection
...
profile integrity
...
cipher. You can select multiple parameters.
Options are:
- hmacMd5 (default)
- hmacSha1
- hmacsha256
Dh Group Specifies the DH group(s) supported in the IKE exchange. The options are:
- modp768
...
- modp1024 (default)
- modp1536
- modp2048
...
Creating an IPsec - Peer
...
This object creates an entry in the IKE Peer Database (IPD). The IPD is a list of remote devices that may become
...
IPsec peers. The IPD establishes the authentication and other phase 1 criteria for the peer-to-peer negotiation to eventually reach an IKE Security Association (SA) between this specific peer and the SBC.
...
In the SBC Configuration Manager window:
- Click All > Address Context > IPsec > Peer. The Peer window opens and the Peer List is displayed.
Choose an address context to which you want to add the peer from the Address Context list and click New Peer. The Create New Peer window opens
Creating a Peer
...
.
Caption 0 Figure 1
...
Create New Peer Window
...
Use the following table to configure the peer and click Save.
| Caption | |
|---|---|
|
...
...
|
...
|
...
|
...
|
| Spacevars | ||
|---|---|---|
|
|
...
|
...
|
...
|
...
|
...
| Note |
|---|
The |
|
Viewing a Peer
- On the navigation pane, choose Address Context > IPsec > Peer.
In Address Context drop-down menu, choose the Peer. The Peer List is displayed.
Caption 0 Figure 1 Viewing Peer
Editing a Peer
Click the radio button adjacent to Peer name.
| Caption | ||||
|---|---|---|---|---|
| ||||
...
Modify the relevant parameters, and click Save.
| Caption | ||||
|---|---|---|---|---|
| ||||
Copying a Peer
Click the radio button adjacent to the Peer. Click Copy Peer.
| Caption | ||||
|---|---|---|---|---|
| ||||
...
Type the relevant parameters, and click Save.
| Caption | ||||
|---|---|---|---|---|
| ||||
...
|
...
Deleting a Peer
Click the radio button adjacent to the Peer. Click Delete.
Caption 0 Figure 1 Deleting Peer A delete confirmation message appears. Click Yes.
Caption 0 Figure 1 Deleting Peer Prompt
Peer - Local Identity
The object specifies the local identity type that
| Spacevars | ||
|---|---|---|
|
Viewing and Editing Local Identity
...
On the navigation pane, choose Address Context > IPsec > Peer > Local Identity. The Local Identity window is displayed.
| Caption | ||||
|---|---|---|---|---|
| ||||
...
In Address Context drop-down menu, choose the Local Identity.
...
IN Peer drop-down menu, choose the Peer.
...
Configuring the Peer Remote Identity
This object specifies the remote IKE identity that is authorized to be negotiated with during phase I negotiation.
In the SBC Configuration Manager window:
- Click All > Address Context > IPsec > Peer > Remote Identity. The Remote Identity window opens.
- In the drop-down lists, select the Address Context and Peer names for the peer you are configuring.
Select a Type of identifier in the drop-down list and then provide the specific value in the adjacent entry field. Option are:
- IP v4Addr (default)
- IP v4Addr
- FQDN
...
Click Save.
| Caption | |
|---|---|
|
...
|
...
|
...
...
Parameter | Description | ||||
|---|---|---|---|---|---|
ipV6Addr <ipAddress> | This parameter specifies that the local identity will be presented in IPv6 address hexadecimal/colon format, taking as its value the IP address of the
|
| Note |
|---|
The |
Peer - Remote Identity
The object specifies the remote Identity that
| Spacevars | ||
|---|---|---|
|
Viewing and Editing Remote Identity
...
On the navigation pane, choose Address Context > IPsec > Peer > Remote Identity. The Remote Identity window is displayed.
| Caption | ||||
|---|---|---|---|---|
| ||||
...
In Address Context drop-down menu, choose the Remote Identity.
...
IN Peer drop-down menu, choose the Peer.
...
Creating an IPsec - SPD
This object is an IPsec Security Policy Database (SPD) entry. The IPsec SPD is an ordered list of entries ("rules") that specify sets of packets and determine whether or not to permit, deny, or protect packets between the SBC and the peer that is referenced from the entry. If the packets are to be protected, this entry references information that specifies how to protect them. The
...
| Caption | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
IPsec - SPD
...
SPD establishes the phase 2 criteria for the negotiation between the SBC and the IKE peer. The successful completion of this negotiation results in a Security Association (SA).
Creating an SPD
...
In the SBC Configuration Manager window:
Click All > Address Context > IPsec > SPD. The SPD window is displayed.
...
Choose an address context to which you want to add the SPD from the Address Context list. The Create New SPD window opens.
Caption 0 Figure 1 Creating New SPD Use the following table to configure the SPD and click Save.
| Caption | ||||
|---|---|---|---|---|
| ||||
|
...
Length/Range
|
...
1-23
|
...
| Spacevars | ||
|---|---|---|
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
|
...
Local Ip Addr Var
...
N/A
...
Specifies the local IPv4 or IPv6 address of the SPD traffic selector.
|
Saving and Activating the Configuration in the Cluster
Once you have completed making configuration changes, click Apply Saved Changes and Close at the top-right of the SBC Configuration Manager window. When prompted, confirm that you want to save and activate your configuration changes. The SBC Configuration Manager window closes. The OAM node notifies the SBC nodes in the cluster of the configuration changes and stores a record of the updated configuration back to the EMS.
Viewing an SPD
- On the SBC Configuration Manager page, click All.
On the navigation pane, choose Address Context > IPsec > SPD. The SPD window is displayed.
Caption 0 Figure 1 Viewing an SPD In Address Context drop-down menu, choose the appropriate address context to view the SPD.
Editing an SPD
Click the radio button adjacent to SPD name.
Caption 0 Figure 1 Editing an SPD The Edit Selected SPD window is displayed.
Modify the relevant parameters, and click Save.
Caption 0 Figure 1 Editing Selected SPD Parameters
Copying an SPD
Click the radio button adjacent to SPD name. Click Copy SDP.
| Caption | ||||
|---|---|---|---|---|
| ||||
|
...
Type the relevant parameters, and click Save.
| Caption | ||||
|---|---|---|---|---|
| ||||
Deleting an SPD
...
Click the radio button adjacent to the SPD. Click Delete.
| Caption | ||||
|---|---|---|---|---|
| ||||
A delete confirmation message appears. Click Yes.
...
| 0 | Figure |
|---|---|
| 1 | Deleting SPD Prompt |
...
| Pagebreak |
|---|
Overview
Content Tools