Noe Alg Configuration; Persistent Memory; Alcatel-Lucent Specific Overview - Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

NOE ALG C
ONFIGURATION
Alcatel-Lucent uses its proprietary protocols New Office Environmentl (NOE) for
IP phone signaling.
NOE provides rich graphical display facilities in the IP phones. Since NOE is
similar to other voice protocols like SIP for voice services, it carries dynamic data
port information in the control packets. ALG needs to be developed to open up
ports for data traffic.
The NOE ALG processing involves:
•
Register NOE ALG Constructor (based on packet type classification filter/DOS/
NAT/IDS policy)
•
Install NOE ALG vectors
•
Create pinhole and monitor NOE data traffic
•
ALG inspection and translation
•
Release of pinhole and call ALG destructor.
NOE ALG also gives user an option to configure policies (filter/DOS/NAT/IDS
policy) to precisely classify, permit only NOE/RTP/RTCP traffic between phones,
Call Server, Media Gateway, and drop other types of traffic between these
devices. These features will prevent attacks coming from internal networks
through VPN. Another benefit from NOE ALG is to precisely identify RTP and
RTCP traffic so that user can apply QoS on the voice traffic.
P M
ERSISTENT EMORY
When NOE phone request passes through OA-700, ALG assigns a unique sub
address to phone. This sub address is used to tell the call server about the
existence of multiple phone terminal behind NAT box. If ALG restarts, ALG may
not be able to give the same sub address to the phones as it would have lost all
the mappings. In this case, call server sees different sub address for the same
phone and it rejects the new request. This means that phone can never come up.
User may need to do some mapping cleanup on the server. With OmniAccess
device architecture, it is possible that during some package installation ALG may
get restarted, or there is possibility of data plane getting restarted. So its
necessary for ALG to keep this mapping in some kind of persistent storage. And
this persistent storage will be used after every restart to get the mapped sub
address information. This way there is no need to do any kind of cleanup on the
server.
A -L S
LCATEL UCENT PECIFIC
•
NOE ALG works with filter/DOS/NAT/IDS to adjust the data packets on-the-fly.
•
Provides NAT support for NOE ALG.
CLI Configuration Guide
Beta
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
O
VERVIEW
Alcatel-Lucent

NOE ALG Configuration

723
Beta