DDoS Configuration Settings per Platform in Peering Environments
Below are the recommended parameters setting for each platform in a SIP Peering model.
Changes under media-manager require system reboot to take effect. Be sure to follow precautions to reboot SBC(s) to unnecessary service outage during this execution.
Acme Packet 4600 1000000 Flow Table 16G memory - copper single GigE
| Platform: | AP 4600 |
| Flow Table: | 1000000 |
| Memory: | 16 GB |
| Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 4600 and their settings on the core and peer realms.
| parameter | Core realm-config | Peer Realm-config |
|---|---|---|
| access-control-trust-level | high | low |
| average-rate-limit | 0 | 0 |
| invalid-signal-threshold | 0 | 0 |
| maximum-signal-threshold | 0 | 0 |
| untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 4600 in the respective model.
| Parameter | PBRB Model | SSNHTN Model | SNB Model |
|---|---|---|---|
| max-signaling-bandwidth | 2651610 | 2651610 | 2651610 |
| max-untrusted-signaling | 1 | 1 | 1 |
| min-untrusted-signaling | 1 | 1 | 1 |
| tolerance-window | 30 | 30 | 30 |
Acme Packet 6100 1000000 Flow Table 16G memory - copper single GigE
| Platform: | AP 6100 |
| Flow Table: | 1000000 |
| Memory: | 16 GB |
| Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6100 and their settings on the core and peer realms.
| parameter | Core realm-config | Peer Realm-config |
|---|---|---|
| access-control-trust-level | high | high |
| average-rate-limit | 0 | 0 |
| invalid-signal-threshold | 0 | 0 |
| maximum-signal-threshold | 0 | 0 |
| untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6100 in the respective model.
| Parameter | PBRB Model | SSNHTN Model | SNB Model |
|---|---|---|---|
| max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
| max-untrusted-signaling | 1 | 1 | 1 |
| min-untrusted-signaling | 1 | 1 | 1 |
| tolerance-window | 30 | 30 | 30 |
Acme Packet 6300 1000000 Flow Table 16G memory - copper single GigE
| Platform: | AP 6300 |
| Flow Table: | 1000000 |
| Memory: | 16 GB |
| Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6300 and their settings on the core and peer realms.
| parameter | Core realm-config | Peer Realm-config |
|---|---|---|
| access-control-trust-level | high | high |
| average-rate-limit | 0 | 0 |
| invalid-signal-threshold | 0 | 0 |
| maximum-signal-threshold | 0 | 0 |
| untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6300 in the respective model.
| Parameter | PBRB Model | SSNHTN Model | SNB Model |
|---|---|---|---|
| max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
| max-untrusted-signaling | 1 | 1 | 1 |
| min-untrusted-signaling | 1 | 1 | 1 |
| tolerance-window | 30 | 30 | 30 |
Acme Packet 6350 2000000 Flow Table 48G memory - copper single GigE
| Platform: | AP 6350 |
| Flow Table: | 2000000 |
| Memory: | 48 GB |
| Software Release: | SCZ8.0.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6350 and their settings on the core and peer realms.
| parameter | Core realm-config | Peer Realm-config |
|---|---|---|
| access-control-trust-level | high | low |
| average-rate-limit | 0 | 0 |
| invalid-signal-threshold | 0 | 1 |
| maximum-signal-threshold | 0 | 4000 |
| untrusted-signal-threshold | 0 | 2 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6350 in the respective model.
| Parameter | PBRB Model | SSNHTN Model | SNB Model |
|---|---|---|---|
| max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
| max-untrusted-signaling | 15 | 13 | 12 |
| min-untrusted-signaling | 14 | 12 | 11 |
| tolerance-window | 30 | 30 | 30 |