Ua Extender 4051/4052; Ip Touch Security Feature - Alcatel-Lucent OmniPCX Enterprise Manual

APPENDIX 2
REMARKS & RESTRICTIONS
− INTIP3B board carries out a full DTM function for its own ACT. This means all DECT
synchronizations are broadcasted over the whole remote crystal including sub-level. In such case,
there is no more need to use an additional DECT synchro board in the shelf. It is forbidden in a
remote ACT to perform this DTM function on both INTIP3B and DECT board. INTIP3B switchover
preserves the DECT synchros.
10.6.

UA Extender 4051/4052

The use of UA Extender 4051/4052 is not available through IP.
11.

IP TOUCH SECURITY FEATURE

The IP Touch Security feature works with a secured patch, delivered in complement of the generic
version.
To get this secured patch, a request must be made on Alcatel-Lucent Business Partner Website.
This secured patch has the same name as the generic delivery to which it is referred preceded by the
letter S (for Security).
This secured patch contains only:
•
Secured binaries for IP Touch series 8
•
Secured GD binaries likely to encrypt the signaling directly
•
Secured GD3 / GA3 / INTIP3 binaries likely to encrypt both voice and signaling directly
• Binaries for IP Touch Security Module.
The installation of this secured patch is carried out in a second step after installation of the
generic version and patch.
In multi-SSM duplicated configuration:
•
The 4645 must be on a dedicated CPU protected by a MSM
•
The encryption of the OmniTouch UC server cannot be done by one of the two SSM but by
the use of a MSM
In multi-SSM spatial redundancy configuration (SSM in blocking mode), it is necessary to define a
specific link between IP physical address of each Call Server and main IP address of the other Call
Server.
In multi-SSM traditional duplication configuration (only one main address):
•
During module initialization if the Main address was defined on the plain and cipher port, in
established mode the module consider the Main address on its plain port (in normal state, IP
element cannot be at the same time on the plain port and cipher port)
•
In a result of the preceding point, the modules must remain in passing mode
Before moving a set of a secured system towards an unsecured system (moved within a ABC network
or changed on another system), unsecured manually the set and remove it from IP network before it
recover again the lanpbx.cfg protected file
After each change of mode (secured / unsecured), Call Server must be restarted.
TC1449
OmniPCX Enterprise
INSTALLATION PROCEDURE FOR VERSION
26
J1.410.34.c – RELEASE 10.0
Ed. 02 / 22 June 2011