Data Security; System Client; Displaying, Adding And Configuring Pki Servers - Siemens HiPath 3000 Series Service Documentation

Nur für den internen Gebrauch
13.6.9.5

Data Security

The HG 1500 supports ESP to protect utility data during transmission over the VPN.
DES, Triple DES (3DES) and AES are available as encryption algorithms.
HMAC-SHA1 and HMAC-MD5 are supported as MAC algorithms (MAC – Message Authenti-
cation Code).
The HG 1500 supports X.509 certificates as well as DSA and RSA, two public key algorithms,
and pre-shared keys for authenticating VPN subscribers.
13.6.10

System Client

You can set up clients with payload switching ability. While calls are signaled via HiPath 3000,
voice transfer between two payload switching clients occurs directly via the LAN. Using this pro-
cedure saves DSP resources. The transfer can occur via HG 1500 and across all nodes pro-
vided the required conditions are met by all the stations involved.
Bandwidth Management
Bandwidth management controls the bandwidth for Voice over IP between two nodes with
HG 1500 which are routed via ISDN (not usually required for LAN connections).
Five simultaneous calls can be made via one B channel if the audio codec is set to "G.723".
However, the standard packetizing setting must be increased from 1 to 3. An additional B chan-
nel is automatically set up from the sixth call onwards (prerequisite: two or more channels are
entered for the ISDN partner). RTP compression is determined automatically and it cannot be
configured.
If data is transferred to a routed ISDN channel at the same time as Voice over IP, the "MTU
Size Fragmentation" of the relevant ISDN partner must be activated.
The compression of IP headers can be activated and the "PPP Default Header" can be deac-
tivated to save additional bytes.
13.6.11

Displaying, Adding and Configuring PKI Servers

If you want to create a PKI (Public Key Infrastructure), you must configure suitable PKI servers
in HG 1500. PKI server data includes the server's name and IP address and the server type
(LDAP).
A31003-H3590-S100-7-7620, 06/2012
HiPath 3000/5000 V9, Service documentation
HiPath 3000/5000 in the LAN Network
h3h5_in_the_lan.fm
HG 1500 Board
13-39