RedMax EXtreme EX-LRT Instrukcja Naprawy Strona 77

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
Przeglądanie stron 76
Oracle SBC Security Guide
Oracle recommends configuration of INVITE and REGISTER method rate constraints on session agents.
For SIP access deployments, rate constraints for individual method types along with a set of burst and
sustain rates should be considered. These constraints can help to avoid overloading the core network. In
addition, they restrain the load non-INVITE messages use, thus reserving capacity for INVITE-based
sessions and registrations.
In order to properly configure constraint limiting, either at SIP interface level or per Session-Agent (SA),
it’s essential to have an accurate understanding of the SIP Message flows that exist in the network.
Contributing factors include: factors such as which SIP requests are authenticated, what Call flows and
Session Agents require re-INVITEs, maximum CPS per SA, etc. The reason why these details are so
important is the SBC is making dynamic decisions and acting on this traffic in real time.
SNMP traps will be sent when constraints are exceeded. Constraint threshold crossing alarms or statistics
are not necessarily a security issue since legitimate traffic overloads or mass network restarts may also
cause them. It is up to the customer to assess if they should investigate alarms as possible security
incidents.
To monitor SIP interface and Session Agents, two commands are most useful. The following commands
include statistics on how many times the constraints were exceeded and the interface or session agent was
temporarily taken out of service.
show sipd interface <realm name> and show sipd agents <agent name>
ACMEPACKET# show sipd interface access
00:51:55-34
Sip Interface access
-- Period -- -------- Lifetime --------
Active High Total Total PerMax High
Inbound Sessions 9000 9002 1715 14244739 1501 9009
Rate Exceeded 5 5 5 5 5 5
Num Exceeded - - 0 0 0 -
Burst Rate 0 50 0 0 0 51
Outbound Sessions 0 0 0 0 0 0
Rate Exceeded - - 0 0 0 -
Num Exceeded - - 0 0 0 -
Burst Rate 0 0 0 0 0 0
Local Contacts 0 0 0 0 0 0
HNT Entries 0 0 0 0 0 0
Non-HNT Entries 0 0 0 0 0 0
Subscriptions 0 0 0 0 0 0
Out of Service - - 0 0 0 -
Trans Timeout 0 0 0 0 0 0
Requests Sent - - 0 284 1 -
Requests Complete - - 0 0 0 -
Seizure - - 0 0 0 -
Answer - - 0 0 0 -
ASR Exceeded - - 0 0 0 -
Messages Received - - 14097 114313292 12405 -
Latency=0.000; max=0.000
ACMEPACKET# show sipd agents 192.168.60.10
00:54:10-49
Przeglądanie stron 76
1 2 ... 72 73 74 75 76 77 78 79 80 81 82 ... 141 142

Komentarze do niniejszej Instrukcji

Brak uwag