Design Reference

Control plane security
The control plane physically separates management traffic using the in-band interface. The control
plane facilitates High Secure mode, management access control, access policies, authentication,
SSH and Secure Copy, and SNMP.
Management port
Avaya Virtual Services Platform 4000 Series requires one port to be configured as the management
port. This port separates user traffic from management traffic in highly sensitive environments, such
as brokerages and insurance agencies. By using this dedicated network (see
Figure 54: Dedicated
Ethernet management link on page 119) to manage the switch, and by configuring access policies
(if you enable routing), you can manage the switch in a secure fashion. You can also use terminal
servers to access the console port on the CP module (see
Figure 55: Terminal server access on
page 120).
Figure 54: Dedicated Ethernet management link
Control plane security
December 2014 Network Design Reference for Avaya VSP 4000 Series 119
Comments? [e-mail]