DDoS Configuration Settings per Platform in Peering Environments
Below are the recommended parameters setting for each platform in a SIP Peering model.
Changes under media-manager require system reboot to take effect. Be sure to follow precautions to reboot SBC(s) to unnecessary service outage during this execution.
Acme Packet 4600 1000000 Flow Table 16G memory - copper single GigE
Platform: | AP 4600 |
Flow Table: | 1000000 |
Memory: | 16 GB |
Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 4600 and their settings on the core and peer realms.
parameter | Core realm-config | Peer Realm-config |
---|---|---|
access-control-trust-level | high | low |
average-rate-limit | 0 | 0 |
invalid-signal-threshold | 0 | 0 |
maximum-signal-threshold | 0 | 0 |
untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 4600 in the respective model.
Parameter | PBRB Model | SSNHTN Model | SNB Model |
---|---|---|---|
max-signaling-bandwidth | 2651610 | 2651610 | 2651610 |
max-untrusted-signaling | 1 | 1 | 1 |
min-untrusted-signaling | 1 | 1 | 1 |
tolerance-window | 30 | 30 | 30 |
Acme Packet 6100 1000000 Flow Table 16G memory - copper single GigE
Platform: | AP 6100 |
Flow Table: | 1000000 |
Memory: | 16 GB |
Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6100 and their settings on the core and peer realms.
parameter | Core realm-config | Peer Realm-config |
---|---|---|
access-control-trust-level | high | high |
average-rate-limit | 0 | 0 |
invalid-signal-threshold | 0 | 0 |
maximum-signal-threshold | 0 | 0 |
untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6100 in the respective model.
Parameter | PBRB Model | SSNHTN Model | SNB Model |
---|---|---|---|
max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
max-untrusted-signaling | 1 | 1 | 1 |
min-untrusted-signaling | 1 | 1 | 1 |
tolerance-window | 30 | 30 | 30 |
Acme Packet 6300 1000000 Flow Table 16G memory - copper single GigE
Platform: | AP 6300 |
Flow Table: | 1000000 |
Memory: | 16 GB |
Software Release: | SCZ8.1.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6300 and their settings on the core and peer realms.
parameter | Core realm-config | Peer Realm-config |
---|---|---|
access-control-trust-level | high | high |
average-rate-limit | 0 | 0 |
invalid-signal-threshold | 0 | 0 |
maximum-signal-threshold | 0 | 0 |
untrusted-signal-threshold | 0 | 0 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6300 in the respective model.
Parameter | PBRB Model | SSNHTN Model | SNB Model |
---|---|---|---|
max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
max-untrusted-signaling | 1 | 1 | 1 |
min-untrusted-signaling | 1 | 1 | 1 |
tolerance-window | 30 | 30 | 30 |
Acme Packet 6350 2000000 Flow Table 48G memory - copper single GigE
Platform: | AP 6350 |
Flow Table: | 2000000 |
Memory: | 48 GB |
Software Release: | SCZ8.0.0 |
The following table lists the five parameters germane to DDoS Configuration Settings in Peering Environments for the Acme Packet 6350 and their settings on the core and peer realms.
parameter | Core realm-config | Peer Realm-config |
---|---|---|
access-control-trust-level | high | low |
average-rate-limit | 0 | 0 |
invalid-signal-threshold | 0 | 1 |
maximum-signal-threshold | 0 | 4000 |
untrusted-signal-threshold | 0 | 2 |
The media-manager configuration should be set as suggested in the following table for the Acme Packet 6350 in the respective model.
Parameter | PBRB Model | SSNHTN Model | SNB Model |
---|---|---|---|
max-signaling-bandwidth | 7070960 | 7070960 | 7070960 |
max-untrusted-signaling | 15 | 13 | 12 |
min-untrusted-signaling | 14 | 12 | 11 |
tolerance-window | 30 | 30 | 30 |