Avaya Aura Session Border Controller powered by Acme Packet Administrator's Guide 2010-10

12
Managing the HP Avaya SBC Product
Completing Additional Recommended Configuration
In addition to the basic configuration, which is covered in the HP AllianceONE
Services zl Module for Avaya Aura Session Border Controller powered by
Acme Packet Installation and
Getting Started Guide, there is other config-
ur
ation that you should consider
Hardware Security Configuration: The HP AllianceONE Services zl Mod-
ule has a Module Shutdown button and a USB port on its front panel. If the
switch in which the module is installed is not in a secure location, these
features can create a security risk. You can disable these features from the
switch CLI with the services <slot-ID> devices commands.
To disable the Module Shutdown button, in the switch CLI global config-
uration context, you would enter the command:
no services <slot-ID> devices shutdown
To disable the USB port, you would enter the command:
no services <slot-ID> devices usb
Software Security Configuration: Because the HP Avaya SBC Product is
located between the public network and your private network, often referred
to as the DMZ, it may pose a security risk. To reduce this risk, you can modify
the configuration of specific networking protocols. For information on this
configuration, see the document Hardening ProCurve Switches, Technical
White Paper at:
http://www.hp.com/rnd/pdfs/Hardening_ProCurve_Switches_White_Paper.pdf
Configuration
Notes
Redundancy: Redundancy features in the Avaya Aura System Platform are
not supported by the HP AllianceONE Services zl Module hardware.
Licensing: SBC product licensing is performed through the Avaya Aura soft-
ware interfaces. You may notice that there is a licensing command available
in the switch CLI services <slot-ID> <index 1> list of options, but this is not
supported by the HP Avaya SBC Application. For this application, activation
licensing is included with the product.