Sip Tls For External Gateway; Applications; Omnivista 4760 - Alcatel-Lucent OmniPCX Enterprise Manual

INSTALLATION PROCEDURE FOR VERSION
J1.410.34.c – RELEASE 10.0
To customize GD3 / INTIP3B board with Soft-MSM feature (PSK
Center has to be used. GA3 and INTIP3A boards don't have to be customized and must be
configured with Voice MSM type instead of SoftMSM type (to be used only for GD3 and INTIP3B).
Only boards with SoftMSM type (ie GD3, INTIP3B) are taken into account by software lock 348.
Before activating Soft-MSM feature on a NGP board, it is mandatory for the board to perform an
initial boot without encryption (MG type selected in "Addresses to protect" MAO object).
12.

SIP TLS FOR EXTERNAL GATEWAY

Before OmniPCX Enterprise Release 10.0, only IPsec/SRTP protocols were supported to protect
UA/NOE communications. The IPsec protocol protects UA/NOE signaling and the SRTP protocol
protects the sent and received voice flows.
As of OmniPCX Enterprise Release 10.0, SIP TLS/SRTP protocols are supported to secure SIP Trunks
configured on the OXE to a Carrier or Service Provider network (Public SIP Trunking in ISDN mode).
The TLS protocol protects SIP signaling and the SRTP protocol protects voice flows.
Depending on Carrier/Service Provider capabilities, voice media can also be encrypted using SRTP.
Each Public SIP Trunk can be configured at OXE level with SIP TLS&RTP or SIP TLS&SRTP. The voice
media can be end-to-end encrypted (using SRTP) from the IP Touch set in the customer's network up
to the Carrier's gateway.
Restrictions whatever the system configuration:
• The minimum OXE Release is 10.0 (J1.410.34.c).
•
SSM boxes model and MSM boxes model are not compatible with the SIP TLS feature. These
boxes must be replaced by new Server Security Modules SSM-RM and Media Security
Modules MSM-RM in front of PCS.
• SIP TLS with SIP devices or SIP extensions is not supported.
•
For duplicated Com Server configuration, spatial redundancy is mandatory (2 different Main
IP addresses for each CPU).
As of Release 10.0, IPsec/SRTP and SIP TLS/SRTP protocols can be used simultaneously in the
different configurations detailed in PCS Form.
13.

APPLICATIONS

13.1.

OmniVista 4760

− Blind attendant can't reach the 4760 directory through Internet Explorer although it was possible
with the A4755.
− From Release 7.1, the OmniVista 4760 R4.2 application allows the remote download of patches
on OmniPCX Enterprise and PCS (Passive Communication Server) in a simplified and scheduled
process.
− Software download and OmniVista 4760.
Ed. 02 / 22 June 2011
OmniPCX Enterprise
27
APPENDIX 2
REMARKS & RESTRICTIONS
), the version 1.2.01 of Security
mg
TC1449