Ukukhusela uQhagamshelwano phakathi kweCisco Unity
UQhagamshelwano, Cisco Unxibelelwano oluManyeneyo
Umphathi, kunye neeFowuni ze-IP
• Ukukhusela uQhagamshelwano phakathi kweCisco Unity Connection, uMphathi wezoNxibelelwano weCisco, kunye neeFowuni ze-IP, kwiphepha 1
Ukukhusela uQhagamshelwano phakathi kweCisco Unity Connection, uMphathi wezoNxibelelwano weCisco, kunye neeFowuni ze-IP
Intshayelelo
Kwesi sahluko, uya kufumana iinkcazo zemiba enokubakho yokhuseleko enxulumene nokunxibelelana phakathi kweCisco Unity Connection, uMphathi wezoNxibelelwano oManyeneyo weCisco, kunye neefowuni ze-IP; ulwazi ngawo nawaphi na amanyathelo ekufuneka uwathathe; iingcebiso ezikuncedayo ukwenza izigqibo; ingxoxo ngeziphumo zezigqibo ozenzayo; kunye neendlela ezingcono.
Imiba yoKhuseleko yoQhagamshelwano phakathi koQhagamshelwano loManyano, iCisco Unified Umphathi woNxibelelwano, kunye neeFowuni ze-IP
Indawo enokuthi ibe sengozini yenkqubo yoQhagamshelwano lweCisco Unity kukudityaniswa phakathi kwe-Unity Connection yemiyalezo yelizwi izibuko (ukudibanisa i-SCCP) okanye amaqela e-port (ukudibanisa i-SIP), uMphathi wezoNxibelelwano oManyeneyo weCisco, kunye neefowuni ze-IP.
Izoyikiso ezinokubakho ziquka:
- Ukuhlaselwa komntu phakathi (xa ukuhamba kolwazi phakathi kweCisco Unified CM kunye noQhagamshelwano loManyano lujongwa kwaye luguqulwe)
- I-Network traffic sniffing (xa isoftware isetyenziselwa ukubamba iincoko zefowuni kunye nolwazi lokubonisa oluhamba phakathi kweCisco Unified CM, Unity Connection, kunye neefowuni ze-IP ezilawulwa yiCisco Unified CM)
- Ukuguqulwa kophawu lomnxeba phakathi koQhagamshelwano loBumbano kunye neCisco Unified CM
- Ukulungiswa kosasazo lweendaba phakathi koQhagamshelwano loManyano kunye nesiphelo (ngokomzekeloample, ifowuni ye-IP okanye isango)
- Ubusela besazisi soQhagamshelwano loManyano (xa isixhobo soQhagamshelwano olungelulo luManyano luzibonakalisa kwiCisco Umanyano lweCM njengomncedisi woQhagamshelwano loManyano)
- Ubusela besazisi se-Cisco Unified CM umncedisi (xa umncedisi we-CM ongeyo-Cisco uzibonakalisa kuQhagamshelwano loManyano njengomncedisi we-Cisco Unified CM)
ICiscoUnifiedCommunicationsManagerSecurityFeatures forUnity Connection izibuko zokuthumela umyalezo ngelizwi
I-Cisco Unified CM inokukhusela unxibelelwano kunye noQhagamshelwano loBumbano ngokuchasene nezoyikiso ezidweliswe kwiMiba yoKhuseleko yoQhagamshelwano phakathi koQhagamshelwano loBumbano, uMphathi wezoNxibelelwano oManyeneyo weCisco, kunye neeFowuni ze-IP.
Iimpawu zokhuseleko zeCisco eziManyeneyo ze-CM ezinokuthi uQhagamshelwano loBumbano luthathe i-advantage of zichazwe kwiThebhile 1: Cisco Unified CM Iimpawu zoKhuseleko ezisetyenziswa Cisco Unity Connection.
Itheyibhile 1: Cisco Unified CM Iimpawu zoKhuseleko ezisetyenziswa yiCisco Unity Connection
| Uphawu loKhuseleko | Inkcazo |
| Uqinisekiso lomqondiso | Inkqubo esebenzisa i-Transport Layer Security (TLS) protocol ukuqinisekisa ukuba akukho tampI-ring yenzeke kwiipakethi zomqondiso ngexesha lothumelo. Ukuqinisekiswa koMqondiso kuxhomekeke ekwenziweni koLuhlu lweSiqinisekiso seCisco Certificate Trust (CTL) file. Olu phawu lukhusela: • Uhlaselo lomntu ophakathi oluguqula ukuhamba kolwazi phakathi kwe-Cisco Unified CM kunye ne-Unity Connection. • Ukuguqulwa kophawu lwefowuni. • Ukubiwa kwesazisi seseva yoQhagamshelwano loManyano. • Ubusela besazisi seseva yeCisco Unified CM. |
| Ungqinisiso lwesixhobo | Inkqubo eqinisekisa isazisi sesixhobo kwaye iqinisekisa ukuba iziko liyile nto libanga ukuba liyiyo. Le nkqubo yenzeka phakathi kweCisco Unified CM kunye nokuba Udibaniso loManyano lwamazibuko emiyalezo yelizwi (yokudityaniswa kweSCCP) okanye amaqela ezibuko loManyano loQhagamshelwano (udibaniso lwe-SIP) xa isixhobo ngasinye samkela isatifikethi sesinye isixhobo. Xa izatifikethi zamkelwe, uqhagamshelwano olukhuselekileyo phakathi kwezixhobo lusekiwe. Ukuqinisekiswa kwesixhobo kuxhomekeke ekwenziweni koLuhlu lweSiqinisekiso seCisco seSiqinisekiso (CTL) file. Olu phawu lukhusela: • Uhlaselo lomntu ophakathi oluguqula ukuhamba kolwazi phakathi kwe-Cisco Unified CM kunye ne-Unity Connection. • Uhlengahlengiso losasazo lweendaba. • Ukubiwa kwesazisi seseva yoQhagamshelwano loManyano. • Ubusela besazisi seseva yeCisco Unified CM. |
| Ubhalo oluntsonkothileyo | Inkqubo esebenzisa iindlela ze-cryptographic ukukhusela (ngokusebenzisa i-encryption) imfihlo yazo zonke i-SCCP okanye i-SIP yokubonisa imiyalezo ethunyelwa phakathi kwe-Unity Connection kunye ne-Cisco Unified CM. Ubhalo lomqondiso luqinisekisa ukuba ulwazi olubhekiselele kumaqela, amadijithi e-DTMF angenwe ngamaqela, isimo sokufowuna, izitshixo ze-encryption zemidiya, njalo njalo zikhuselwe ekufikeleleni okungacetywanga okanye okungagunyaziswanga. Olu phawu lukhusela: • Uhlaselo lomntu ophakathi olubona ukuhamba kolwazi phakathi kweCisco Unified CM kunye noQhagamshelwano loBumbano. • I-Network traffic sniffing ejonga ukuhamba kolwazi lokubonisa phakathi kweCisco Unified CM kunye noQhagamshelwano loManyano. |
| Uguqulelo oluntsonkothileyo lwemidiya | Inkqubo apho ukugcinwa kwemfihlo kweendaba kwenzeka ngokusetyenziswa kweenkqubo ze-cryptographic. Le nkqubo isebenzisa iProtocol yeSecure Real Time (SRTP) njengoko ichaziwe kwi-IETF RFC 3711, kwaye iqinisekisa ukuba kuphela umamkeli ocetywayo unokutolika imijelo yeendaba phakathi koQhagamshelwano loManyano kunye nesiphelo (for example, ifowuni okanye isango). Inkxaso ibandakanya imisinga yomsindo kuphela. I-encryption yeMedia iquka ukudala i-Media Player iqhosha eliphambili kwizixhobo, ukuhambisa izitshixo kwi-Unity Connection kunye nesiphelo, kunye nokukhusela ukuhanjiswa kwezitshixo ngelixa izitshixo zihamba. UQhagamshelwano loManyano kunye nesiphelo sebenzisa izitshixo ukubethela kunye nokucima umjelo weendaba. Olu phawu lukhusela: • Ukuhlaselwa kwe-Man-in-middle-middle ephulaphula ukusasazwa kweendaba phakathi kwe-Cisco Unified CM kunye ne-Unity Connection. • I-Network traffic sniffing elalela iincoko zefowuni ezihamba phakathi kwe-Cisco Unified CM, i-Unity Connection, kunye neefowuni ze-IP ezilawulwa yi-Cisco Unified CM. |
Uqinisekiso kunye noguliso lomqondiso lusebenza njengezona mfuno zisezantsi zoguqulelo oluntsonkothileyo lwemidiya; Oko kukuthi, ukuba izixhobo azixhasi ufihlo lomqondiso kunye noqinisekiso, ufihlo lwemidiya alunakwenzeka.
Cisco Unified CM yokhuseleko (ubuqinisekiso kunye nofihlo) ikhusela kuphela iminxeba kuQhagamshelwano loManyano. Imiyalezo erekhodiweyo kwivenkile yomyalezo ayikhuselwanga yiCisco Unified CM yoqinisekiso kunye neempawu zofihlo kodwa inokukhuselwa yi Unity Connection yabucala ekhuselekileyo yomyalezo. Ukuze ufumane iinkcukacha ngoQhagamshelwano loManyano olukhuselekileyo lwemiyalezo, jonga i-Handling Messages Ephawulwe bucala kwaye iKhusekile.
Ukuzifihla ngokuqhuba
Cisco Unity Connection ikwaxhasa self-encrypting drives (SED). Oku kukwabizwa ngokuba yiFull Disk Encryption (FDE). I-FDE yindlela yokufihlakele esetyenziselwa ukufihla yonke idatha ekhoyo kwi-hard drive.
Idatha ibandakanya files, inkqubo yokusebenza kunye neenkqubo zesoftware. I-hardware ekhoyo kwidiski ifihla yonke idatha engenayo kwaye ikhuphe yonke idatha ephumayo. Xa i-drive ivaliwe, iqhosha le-encryption lenziwa kwaye ligcinwe ngaphakathi. Yonke idatha egcinwe kule drive iguqulelwe ngokuntsonkothileyo kusetyenziswa elo qhosha kwaye igcinwe kwifom efihliweyo. I-FDE ine-ID yesitshixo kunye neqhosha lokhuseleko.
Ukuze ufumane inkcazelo engakumbi, bona https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/2-0/b_Cisco_UCS_C-series_GUI_Configuration_Guide_201/b_Cisco_UCS_C-series_GUI_Configuration_Guide_201_chapter_010011.html#concept_E8C37FA4A71F4C8F8E1B9B94305AD844.
Izicwangciso zeMowudi yoKhuseleko kuMphathi woNxibelelwano oManyeneyo weCisco kunye noManyano Uqhagamshelwano
Cisco Umanejala woNxibelelwano oluManyeneyo kunye noQhagamshelwano lweCisco Unity luneendlela zokhuseleko ezikhethiweyo eziboniswe kwiThebhile 2: Iinketho zeMowudi yoKhuseleko kwiizibuko zemiyalezo yelizwi (zokudibanisa i-SCCP) okanye amaqela ezibuko (ukudibanisa i-SIP).
Isilumkiso
Isetingi yeNdlela yoKhuseleko yeCluster yoQhagamshelwano loManyano lwemiyalezo yelizwi kumazibuko (ye SCCP indibaniselwano) okanye amaqela ezibuko (ulungelelwaniso lwe-SIP) kufuneka luhambelane noseto lwemowudi yokhuseleko kwizibuko zeCisco Unified CM.
Ngaphandle koko, uqinisekiso lweCisco Unified CM kunye nofihlo aluphumeleli.
Itheyibhile 2: Iinketho zeNdlela yoKhuseleko
| Ukumisela | Isiphumo |
| Ayikhuselekanga | Ingqibelelo kunye nobumfihlo bemiyalezo ye-call-signaling ayiqinisekiswanga kuba imiyalezo yokufowuna ithunyelwa njengombhalo ocacileyo (ongafihlwanga) oqhagamshelwe kwi-Cisco Unified CM ngezibuko elingangqinisiswanga kune-TLS port eqinisekisiweyo. Ukongeza, umjelo weendaba awunakuguqulelwa ngokuntsonkothileyo. |
| Ingqinisisiwe | Ukunyaniseka kwemiyalezo yokufowuna kuqinisekisiwe kuba iqhagamshelwe kwi-Cisco Unified CM ngokusebenzisa i-TLS port eqinisekisiweyo. Nangona kunjalo, i ubumfihlo bemiyalezo ye-call-signaling ayiqinisekiswanga kuba ithunyelwa njengokubhaliweyo okucacileyo (okungafihlwanga). Ukongeza, umjelo weendaba awufihlwanga. |
| Iguqulelwe ngokuntsonkothileyo | Ukunyaniseka kunye nobumfihlo bemiyalezo ye-call-signaling iyaqinisekiswa kuba idibaniswe ne-Cisco Unified CM nge-port ye-TLS eqinisekisiweyo, kunye nemiyalezo ye-call-signaling ifihliwe. Ukongeza, umjelo weendaba unokubethelwa. Zombini iindawo zokuphela kufuneka zibhaliswe ngendlela entsonkothileyo ukuze usasazo lweendaba lubhalwe ngokuntsonkothileyo. Nangona kunjalo, xa isiphelo esinye simiselwe indlela engakhuselekanga okanye eqinisekisiweyo kwaye enye indawo yokugqibela imiselwe imo efihliweyo, umjelo wemidiya awuguqulelwanga ngokuntsonkotha. Kwakhona, ukuba isixhobo esingenelelayo (esifana ne-transcoder okanye isango) ayenziwanga ukuba isebenze kuguqulelo oluntsonkothileyo, umjelo wemidiya awuguqulelwanga ngokuntsonkotha. |
IiNdlela ezilungileyo zokuKhusela uQhagamshelwano phakathi koQhagamshelwano loBumbano, uMphathi wezoNxibelelwano oManyeneyo weCisco, kunye neeFowuni ze-IP
Ukuba ufuna ukwenza uqinisekiso kunye noguqulelo oluntsonkothileyo kumazibuko omyalezo welizwi kuzo zombini uQhagamshelwano lweCisco Unity kunye noManejala woNxibelelwano Cisco Unified, bona Cisco Umphathi woNxibelelwano oluManyeneyo lwe-SCCP Isikhokelo soManyano lwe-Unity Connection Release 12.x, ekhoyo
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/12x/integration/guide/cucm_sccp/b_12xcucintcucmskinny.html
Ukukhusela uQhagamshelwano phakathi kweCisco Unity Connection, uMphathi wezoNxibelelwano weCisco, kunye neeFowuni ze-IP
Amaxwebhu / Izibonelelo
 |
UMlawuli woNxibelelwano oluManyeneyo lweCISCO [pdf] Isikhokelo somsebenzisi UMphathi woNxibelelwano oluManyanisiweyo, uMphathi woNxibelelwano oManyanisiweyo, uMphathi woNxibelelwano oManyeneyo, uMphathi woNxibelelwano, uMphathi. |