Encryption - Thales

shantanu · Post by **shantanu** » 10 Jul 2010 02:42

There are few doubt i have on Security feature if implementing in OXE R9.1,

1. What is the connectivity diagram between Appliance Server, SSM-RM & Data Switch in case of duplicated link & duplicated server (active & standby) require?

2. Can OXE single Appliance Server connect with two SSM-RM module in case of we need duplicated IP link to data switch?

3. What is the BHCC in case of SSM-RM module connect with Appliance Server?

Post by **frank** » 13 Jul 2010 21:29

Hi ,

If you have 2 CPUs, they can both be connected to the same SSM. But if you want redundancy, it is good practice to have one SSM per CPU.
A CPU cannot be connected to 2 SSM as far as I know.
Not sure what you mean by BHCC

shantanu · Post by **shantanu** » 14 Jul 2010 00:11

thanx frank.

This means that Active Appliance Server (DL320G6) is connected with single SSM-RM & single encrypted link connected to any one of the duplicated switch. And in case of duplication, Redundant Appliance Server (DL320G6) is also connected to another SSM-RM & single encrypted link connected to any one of the duplicated switch.

Can we connect duplicated SSM-RM to Active Appliance Server (DL320G6) as this server having dual Ethernet port and client needs duplicated link from server to data switch?
Similarly duplicated SSM-RM to Redundant Appliance Server (DL320G6) & duplicated encrypted link from server to data switch at different location.

If not, what is the limitation or restriction or reason not to connect duplicated SSM-RM on single Appliance Server (DL320G6)?

As per my knowledge, there are some limitation of simultaneous call/signalling flow in case of connect SSM-RM to appliance server (250 simultaneous call & 240 signalling). This is limitation of Thales Box. The BHCC is the "Busy Hour Call Completion" & i.e. 3,00,000 per Appliance Server. This is w/o SSM-RM or MSM-RM connected to server & gateway. The BHCC will be reduced by connecting Security box becuz limitation of Thales Box.
Share some document/release note if you have on this. This helps me lot to design solution for large traffic or Call Center scenario.

regds...shantanu.

Post by **frank** » 15 Jul 2010 08:49

Encryption and ethernet redundancy are not compatible. So you can't have 2 boxes for 1 CPU.

The restrictions you are talking about are regarding the number of IP COM calculated depending on the number of compressors available on the MG.
There will be no issues with the number of simultaneous calls since it will use the dedicated hardware for compression.
The latest SSM-RM boxes support up to 15,000 simultaneous ip sig, so you won't have an issue I guess.