Design Reference

management virtual IP address. This configuration is true for all traps routed out on the I/O ports or
on the out-of-band management Ethernet port.
SNMPv3 support
SNMP version 1 and version 2 are not secure because communities are not encrypted.
Avaya strongly recommends that you use SNMP version 3. SNMPv3 provides stronger
authentication services and the encryption of data traffic for network management.
Other security equipment
Avaya offers other devices that increase the security of your network.
For sophisticated state-aware packet filtering (real stateful inspection), you can add an external
firewall to the architecture. State-aware firewalls can recognize and track application flows that use
not only static TCP and UDP ports, like Telnet or HTTP, but also applications that create and use
dynamic ports, such as FTP, and audio and video streaming. For every packet, the state-aware
firewall finds a matching flow and conversation.
The following figure shows a typical configuration used in firewall load balancing.
Figure 58: Firewall load balancing configuration
Use this configuration to redirect incoming and outgoing traffic to a group of firewalls and to
automatically load balance across multiple firewalls. The benefits of such a configuration are:
• Increased firewall performance
• Reduced response time
• Redundant firewalls ensure Internet access
Virtual private networks (VPN) replace the physical connection between the remote client and
access server with an encrypted tunnel over a public network. VPN technology employs IP security
(IPsec) and Secure Sockets Layer (SSL) services.
Several Avaya products support IPSec and SSL, including Avaya VPN Gateway and Secure Router.
Additional information
The following organizations provide the most up-to-date information about network security attacks
and recommendations about good practices:
• The Center of Internet Security Expertise (CERT)
System and network stability and security
124 Network Design Reference for Avaya VSP 4000 Series December 2014
Comments? [e-mail]