[cisco-voip] UC Security "IPSEC Tunnel"

[Ahmed Elnagar]

We are deploying SRTP for all voice traffic in the network...we need
also to secure signaling messages between CUCM and gateways as SRTP
encryption key is negotiated in the signaling phase and we don't want
this to be in clear text.

I did it before for CUCM cluster with only 2 gateways and it is working
okay...but now I have more than 30 gateway "and could be more in the
future" so I am concerned of CUCM server processing.

 

 Best Regards;

  Ahmed Elnagar

  Senior Network PS Engineer

  Mob: +2019-0016211

  CCIE#24697 (Voice)

  

 

From: Dennis Heim [mailto:Dennis.Heim at cdw.com] 
Sent: Friday, November 05, 2010 3:01 AM
To: Ahmed Elnagar; cisco-voip at puck.nether.net
Subject: RE: UC Security "IPSEC Tunnel"

 

What is driving the security requirement?

 

Dennis Heim
Network Voice Engineer
CDW  Advanced Technology Services
11711 N. Meridian Street, Suite 225
Carmel, IN  46032

317.569.4255 Office/Home Office
317.569.4201 Fax
317.694.6070 Cell

dennis.heim at cdw.com
cdw.com/content/solutions/unified-communications/
<http://www.cdw.com/content/solutions/unified-communications/> 

 

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Ahmed Elnagar
Sent: Thursday, November 04, 2010 7:58 PM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] UC Security "IPSEC Tunnel"

 

Hello all;

 

I want to secure signaling traffic between CUCM and MGCP, H323 gateways
and I know that the only way is to configure IPSEC...I want to know how
many IPSEC tunnels CUCM can handle...do Cisco has any sizing documents
for this.

 

  Best Regards;

  Ahmed Elnagar

  Senior Network PS Engineer

 

 

  RAYA Building El Motamiez District, 6th of October, Egypt 

 

  Mob: +2019-0016211

  Phone: +202 3827 6000 Ext.2475

  Website: www.rayacorp.com <http://www.rayacorp.com/> 

  E-mail: ahmed_elnagar at rayacorp.com

  CCIE#24697 (Voice)

 

 

 

Disclaimer: NOTICE The information contained in this message is
confidential and is intended for the addressee(s) only. If you have
received this message in error or there are any problems please notify
the originator immediately. The unauthorized use, disclosure, copying or
alteration of this message is strictly forbidden. Raya will not be
liable for direct, special, indirect or consequential damages arising
from alteration of the contents of this message by a third party or as a
result of any malicious code or virus being passed on. Views expressed
in this communication are not necessarily those of Raya.If you have
received this message in error, please notify the sender immediately by
email, facsimile or telephone and return and/or destroy the original
message. 

Disclaimer: NOTICE The information contained in this message is confidential and is intended for the addressee(s) only. If you have received this message in error or there are any problems please notify the originator immediately. The unauthorized use, disclosure, copying or alteration of this message is strictly forbidden. Raya will not be liable for direct, special, indirect or consequential damages arising from alteration of the contents of this message by a third party or as a result of any malicious code or virus being passed on. Views expressed in this communication are not necessarily those of Raya.If you have received this message in error, please notify the sender immediately by email, facsimile or telephone and return and/or destroy the original message. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20101105/e9d1f133/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1801 bytes
Desc: image002.jpg
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20101105/e9d1f133/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 2210 bytes
Desc: image003.jpg
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20101105/e9d1f133/attachment-0001.jpg>