Network Security & Priority - LG iPECS Feature Description & Operation

IPECS Release 5
Feature Description & Operation
Administrative operations are covered in the iPECS NMS Manual
Conditions
1. iPECS NMS is subject to the conditions outlined in the iPECS NMS Manual.
Programming
S
YSTEM
Related Features
Diagnostic/Maintenance
Hardware
2.58 N S
ETWORK
Description
Each iPECS device (gateway Module or Terminal) supports several security and priority protocols.
iPECS devices incorporate a Web server, which will deliver the Module Web Admin pages to a
standard browser or the Module Admin may be accessed in the Terminal mode through the RS-232
port of the Module. Characteristics that can be established are:
IEEE 802.1p/Q, VLAN – sets Virtual LAN tag and priority for Ethernet frame
Diffserv – sets Diffserv Code Point priority for IP packet
IPSec – enables IPSec to establish IPSec tunnel and encryption of IP packet
SRTP – enables Secure RTP for RTP packet payload using AES (Advanced Encryption
Service).
Operation
System
Operation of Security and priority is automatic once configured
Conditions
1. For Web Admin, the password is encrypted using the LG-Nortel Java Virtual Encryption plug-in.
A Java Virtual Machine (MS or Sun) must be installed in the user's PC to support password
encryption.
2. Security and priority characteristics can be set for all devices, local or remote.
3. SRTP support is available only with the Phase 4 or higher modules. The devices must be on
the same LAN to support SRTP.
4. iPECS implementation of IPSec employs a proprietary Key exchange protocol from the MFIM
to the iPECS device.
5. IEEE 802.1 VLAN priority and ID are set at each device using the device Web interface.
Diffserv, IPSEC and SRTP treatments may also be set in the device via the local Web interface.
For the MFIM, VLANs are configured via the maintenance interface of the RS-232 port.
Programming
B
OARD
1. SNMP Attributes (PGM 197-Web only)
& P
ECURITY RIORITY
1. SRTP (PGM 132-Btn 4)
2-106
5.0