© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration : Unit 10 Slide 1 Unit 10 Designing and Implementing VoIP Networks - Security and Management Considerations

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 2 Objectives Provide security considerations for H.323 networks.  Define the security elements for a VoIP Network.  Describe H.323 RAS Authentication.  Describe the importance of network access security in a VoIP Network.  Define and describe device security. Describe how IPSec is used for security.  Describe IPSec.  Describe the limitation of using IPSecs in voice and data networks. Describe how to manage a SLA.  Describe the functions f network management.  Identify the requirements in a VoIP Service Level Agreement (SLA).  Identify the need for collecting management data.  Collect, filter and correlate management data.  Present and report collected management data.

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 3 Registration security Call Flow

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 4 Authentication for an H.225 Setup Request

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 5 TMN Framework

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 6 VoIP SLA Management Architecture

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 7 VoIP Management Data Sources

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 8 Local Collection Architecture

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 9 SA Agent Architecture

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 10 Netflow Scenario

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 11 Operational Level Fault and Performance Information Type of Fault and Performance Information What it includes General Network and System Faults Number of critical network alarms Number of minor network alarms Number of network alarms per alarm cause code CPU utilization, memory and disk space use on routers, switches, and gateways Physical Port Level Total number of active ports per gateway or domain Total number of disabled ports per gateway or domain Total number of ports in use per gateway or domain Average packet received and transmitted by port gateway or domain Maximum port use per gateway or domain Minimum port use per gateway or domain Trunk Level Trunk bandwidth use Frame synchronization state Number of errored seconds Number of failed seconds Number of code violations Number of slips

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 12 MRTG Daily Graph of DS-3 Link

© 2006 ITT Educational Services Inc. IT412 Voice and Data Integration: Unit 10 Slide 13 Web Based Report of Bandwidth usage