Typical Connection Scenarios

Mediation Engine and Operations Monitor Probe Are on the Same Machine

For setups with a Mediation Engine machine with an embedded Probe, a cleartext connection is automatically added to the ME connection list. For cleartext connections, no certificates are exchanged.

One Mediation Engine and Two Operations Monitor Probes

For setups with one Mediation Engine and two Operations Monitor Probes, the self-signed server certificates of both Operations Monitor Probes are uploaded as trusted certificates on the Mediation Engine, and the self-signed server certificate of the Mediation Engine is uploaded on both Operations Monitor Probes as a trusted certificate. On each Operations Monitor Probe, the IP of the Mediation Engine is added to the ME connection list with TLScheck box selected.

The following table describes the actions to configure the connections between one Mediation Engine and two Operations Monitor Probes.

Table 3-1 One Mediation Engine and Two Operations Monitor Probes

Machine	Action
Mediation Engine	Download the Server Certificate. Upload the Server Certificate of the Operations Monitor Probe1 to Trusted Certificate. Upload the Server Certificate of the Operations Monitor Probe2 to Trusted Certificate.
Operations Monitor Probe 1	Download the Server Certificate. Upload the Server Certificate of the Mediation Engine to Trusted Certificate. Add IP of the Mediation Engine to the ME Connection List, with TLS connection.
Operations Monitor Probe 2	Download Server Certificate. Upload Server Certificate of the Mediation Engine to Trusted Certificate. Add IP of Mediation Engine to ME Connection List, with TLS connection.

Two Mediation Engines and One Operations Monitor Probe

For setups with two Mediation Engines and one Operations Monitor Probe, the self-signed server certificate of the Operations Monitor Probe is uploaded as trusted certificate on both Mediation Engines, and the self-signed server certificates of the Mediation Engine are uploaded on the Operations Monitor Probe as a trusted certificate. On the Operations Monitor Probe, the IPs of the Mediation Engines are both added to the ME connection list with TLScheck box selected.

The following table describes the actions to configure the connections between two Mediation Engines and one Operations Monitor Probe.

Table 3-2 Two Mediation Engines and One Operations Monitor Probe

Machine	Action
Mediation Engine 1	Download the Server Certificate. Upload the Server Certificate of the Operations Monitor Probe to Trusted Certificate.
Mediation Engine 2	Download the Server Certificate. Upload the Server Certificate of the Operations Monitor Probe to Trusted Certificate.
Operations Monitor Probe	Download the Server Certificate. Upload the Server Certificate of Mediation Engine 1 to Trusted Certificate. Upload the Server Certificate of Mediation Engine 2 to Trusted Certificate. Add IP of Mediation Engine 1 to ME Connection List, with TLS connection. Add IP of Mediation Engine 2 to ME Connection List, with TLS connection.

All Other Scenarios

For setups with more than two Operations Monitor Probes or Mediation Engines, Oracle recommends that you use PKI (Public Key Infrastructure) with root certificates as described in Oracle Communications Session Monitor Security Guide.