Huawei 7910 - Esight Redundancy; Authentication Server Redundancy (Only in EC6.X and IMS+UC); Directory Server Redundancy (Only in EC6.X and IMS+UC); NTP Server Redundancy

Huawei 7910 IP Phone
Product Overview
2 Features and Functions
Issue 02 (2017-12-29)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
12
2.7.2 eSight Redundancy
Huawei 7910 supports eSight redundancy. The domain name configured on the DNS server is
mapped to two eSight IP addresses, one active and one standby. When Huawei 7910 receives
the IP addresses resolved by the DNS server, Huawei 7910 first initiates a connection request
to the active eSight. If the active eSight fails to respond, Huawei 7910 connects to the standby
eSight.
2.7.3 Authentication Server Redundancy (Only in EC6.X and
IMS+UC)

In the EC6.X network environment, Huawei 7910 supports uPortal server redundancy.
During Huawei 7910 login authentication, if the active uPortal server fails, Huawei 7910
automatically switches to the standby uPortal server to ensure functional services.

In the IMS+UC network environment, Huawei 7910 supports AA server redundancy.
During Huawei 7910 login authentication, if the active AA server fails, Huawei 7910
automatically switches to the standby AA server to ensure functional services.
2.7.4 Directory Server Redundancy (Only in EC6.X and IMS+UC)
Huawei 7910 supports directory server redundancy. During directory query, if the active
directory server fails, Huawei 7910 automatically switches to the standby directory server for
a query.
2.7.5 NTP Server Redundancy
Huawei 7910 supports NTP server redundancy. During time update, if the active NTP server
fails, Huawei 7910 automatically switches to the standby NTP server for time
synchronization.
2.8 Security
To ensure the security of user information, Huawei 7910 provides the following security
protection measures:

Different permissions for administrators and common users. Users can perform advance
settings only when they provide the correct administrator password.

Encryption of media streams by using 128-bit key size Advanced Encryption Standard
(AES), preventing any unauthorized eavesdropping during a conversation.

Encryption of SIP signaling based on Transport Layer Security (TLS).

Web-based service configuration using HTTPS, ensuring secure access.

802.1x authentication by account and password, allowing secure access to Ethernet
switches.

Certificate-based 802.1x authentication.

Import of multiple certificates for identity authentication.

Encrypted data transmission using LDAPs.

Secure system access using 802.1x Logoff-Proxy, protecting the enterprise network
against unauthorized intrusion.