Scribd
Upload
128 views5 pages

Alcatel-Lucent Omnipcx Enterprise: Ip Touch Security: NGP Configuration

The document discusses configuring NGP boards for IP Touch Security in an Alcatel-Lucent OmniPCX Enterprise system. It covers declaring boards as SoftMSM or VoiceMSM in management applications, enabling the SoftMSM feature via the mgconfig tool, and messages displayed during board startup when the security feature is active.

Uploaded by

issa galal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
128 views5 pages

Alcatel-Lucent Omnipcx Enterprise: Ip Touch Security: NGP Configuration

The document discusses configuring NGP boards for IP Touch Security in an Alcatel-Lucent OmniPCX Enterprise system. It covers declaring boards as SoftMSM or VoiceMSM in management applications, enabling the SoftMSM feature via the mgconfig tool, and messages displayed during board startup when the security feature is active.

Uploaded by

issa galal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 5

Alcatel-Lucent OmniPCX Enterprise

IP Touch Security: NGP Configuration

All Rights Reserved © 2009, Alcatel-Lucent 1

OBJECTIVE

‹ To manage the Alcatel-Lucent with NGP boards in case of IP Touch Security solution

Alcatel-Lucent OmniPCX Enterprise – IP Touch Security: NGP Configuration


Ref. ENTP0534C26TEUS Issue 01
Focus on NGP boards

„ The NGP boards(1) allow to implement the IP Touch Security solution without
using MSM boxes

z The Thales VPN client and RTP library are included in the board binary

„ To allow a NGP board to handle itself the IP Touch Security feature, three
conditions have to be found:

z The board is declared as a SoftMSM/VoiceMSM(2) in MAO

z The board is configured as a SoftMSM (“mgconfig” tool use)

z The “lanpbx.cfg” uses the “PROTECT” as security mode

All Rights Reserved © 2009, Alcatel-Lucent 2

1) The NGP boards using the IP Touch Security Solution are: GD3/GA3 and INTIP3 a/b

2) Two types are available:


- SoftMSM is main board in a rack (e.g. a GD3)
- VoiceMSM is used for the other IP boards of the rack (e.g. a GA3). This second type allows the IP Touch Security feature for a
board without incrementing the OPS lock
(In the previous releases a single MSM-RM could handle up to 4 boards)

Alcatel-Lucent OmniPCX Enterprise – IP Touch Security: NGP Configuration


Ref. ENTP0534C26TEUS Issue 01
Focus on NGP boards
Management of NGP boards (MAO setup)

„ /Encryption/Addresses to protect

z GD3

† IP Address :(GD3 IP address)


† Type : SoftMSM

z GA3

† IP Address :(GA3 IP address)


† Type : VoiceMSM

z INTIP3

† IP Address :(INTIP3-a IP address)


† Type : SoftMSM/VoiceMSM(1)

All Rights Reserved © 2009, Alcatel-Lucent 3

1) SoftMSM for a main board (counts for “1” for OPS locks), and VoiceMSM for secondary boards (does not increment the OPS lock)

Alcatel-Lucent OmniPCX Enterprise – IP Touch Security: NGP Configuration


Ref. ENTP0534C26TEUS Issue 01
Focus on NGP boards
Management of NGP boards (board setup)

„ Connect to the board and activate the security function via “mgconfig” tool:

z 13. Encryption
Encryption menu
-------------

1. View SoftMSM feature


2. Enable/disable SoftMSM feature The actual SoftMSM feature value is : Disabled
0. Quit encryption menu
Enter new SoftMSM feature value :
1. Disable
2. Enable
0. Quit (no change)
2

SoftMSM feature set to : ENABLE

z The following questions/message are displayed when quiting “mgconfig”


SoftMSM feature configuration not saved - do you want to save now ? (y/n)

MGsec feature configuration saved (new value : enabled) [PRESS RETURN]

Do you want to reboot now ? (y/n)

All Rights Reserved © 2009, Alcatel-Lucent 4

Alcatel-Lucent OmniPCX Enterprise – IP Touch Security: NGP Configuration


Ref. ENTP0534C26TEUS Issue 01
Board startup

„ After the feature activation (and if all conditions are fulfilled) the following
information is displayed at the end of the board startup:

z INTIP3-b example

=== BIENVENUE TO INTIP 3 software Secu in INTIP3 / INTIPB role ===


WARNING: root account has no password
Use 'passwd root' to enter a valid password

(none) login: Secure version


MGSec and Encrytpion asked
Starting IKE process...
Wed Jul 29 11:26:43 UTC 2009
Entropy pool 583 bits
Entropy pool 583 bits
Wed Jul 29 11:26:43 UTC 2009
Net filtering : CIPHER_SIG_PORT = 32641
Thales encryption daemon started
IKEInterface is started
SoftMSM Voice is activated

Welcome to intip3
IP is 154.1.1.102
(none) login:

All Rights Reserved © 2009, Alcatel-Lucent 5

Alcatel-Lucent OmniPCX Enterprise – IP Touch Security: NGP Configuration


Ref. ENTP0534C26TEUS Issue 01

You might also like