Lucent Technologies 5ESS User Manual

SCTP Security
The 5ESS
®
switch uses SCTP layer security according to the SCTP
standards. SCTP provides for protection against:
• flooding,
• blind masquerade,
• improper monopolization of services, and
• fraud and repudiation.
SCTP uses a cookie mechanism which is started during initialization
to provide protection against security attacks. This is an advantage
over TCP and UDP because they do not have this application
function.
Cookie Mechanism
Figure 2-18, “Cookie Mechanism” (2-36) illustrates the cookie
mechanism.
1. The client, office A, sends a connection request (INIT) to the
server.
2. The server, office B, builds a cookie (INIT ACK) containing
TCB information and sends it to the client.
3. The client returns the TCB information to the server (COOKIE
ECHO).
4. The server validates the cookie and uses it to rebuild the TCB
that it returns to the client (COOKIE ACK).
The advantage of the cookie mechanism is that the server does not
reserve memory or resources until a COOKIE ECHO message is
received from the client. This protects the server from overload during
blind attacks.
Figure 2-18 Cookie Mechanism
5ESS Switch
R
5ESS Switch
R
Office A
Office B
IP Network
Association
Transmission
Control Block (TCB)
Created
Transmission
Control Block (TCB)
Created
INIT
INIT ACK
COOKIE ECHO
COOKIE ACK
SCTP
Endpoint
SCTP
Endpoint
Security View
Architecture
....................................................................................................................................................................................................................................
2-36
Lucent Technologies 235-200-118
Issue 3.02B, March 2007

Lucent Technologies 5ESS Specifications

General

Introduced	1982
Operating System	Proprietary
Manufacturer	Lucent Technologies (formerly AT&T Network Systems)
Features	Supports ISDN
Primary Use	Public switched telephone network (PSTN)

Summary

About this information product

Purpose

Describes the manual's purpose and scope, detailing supported features and offerings.

Safety labels

Details safety labels, including CAUTION, WARNING, and DANGER meanings and icons.

1 Overview

SIP for Packet Trunking

Describes the SIP for Packet Trunking feature and its components.

2 Architecture

Network View

Explains SIP architecture at the network level between elements.

System View

Details SIP architecture information within a 5ESS® switch.

Signaling View

Explains SIP signaling transports like SCTP and UDP.

3 Call Flow

Call Flow Overview

Explains how the 5ESS® switch routes calls using SIP signaling.

Network Architecture

Illustrates network architectures for Packet Trunking and PSTN Gateway.

Message Flows

Shows message flows for successful SIP calls across different configurations.

4 Engineering Considerations

Switch Considerations

Discusses switch-level considerations for engineering SIP for Packet Trunking.

Session Initiation Protocol - Protocol Handler (SIP PH) Considerations

Discusses engineering considerations for the SIP protocol handler (PH).

5 Provisioning

Provisioning Sequences

Covers startup procedures for provisioning SM connectivity and SIP signaling.

Select and Prepare Terminal

Provides instructions for selecting and preparing a terminal for RC/V activities.

Feature Activation (RC/V 8.22)

Describes activating Secured Feature IDs (SFIDs) for SIP for Packet Trunking.

6 Deprovisioning

Deprovisioning Sequence

Provides procedures for deprovisioning the SM connectivity and signaling.

Disable INVITE Requests (RC/V 5.81)

Prevents SIP calls from being originated or terminated on SIP packet groups.

Delete All SIP Packet Trunk Groups (RC/V 5.1)

Deletes all trunk groups used for SIP-T packet trunking.

Delete All SIP Call Processing SMs (RC/V 5.81)

Deletes all SM-2000 SIP-T call processing SMs.

7 Maintenance Considerations

Overview

Provides routine and corrective maintenance procedures unique to the SIP feature.

Resolve Protocol Handler Problems

Identifies methods to restore OOS PHE2s and PH33s.

Resolve GQPH QPipe Problems

Identifies methods to restore OOS General QLPS (GQPH) QPipes.

Analyze General Message Transport (GMT) Error Reports

Addresses failure reports of internal message transport detected by recovery software.