No configuration is required when a media gateway is already registered and an administrator changes the IPSec state. In this case the IPSec information, which is the PSK and the allowed targets are uploaded to the MGC automatically. The PSK is stored securely on the MGC compact flash.
Otherwise, manual synchronization of IPSec configuration is required. This requirement protects Device Adapter from unauthorized MGC registrations.
Manual synchronization is required in the following scenarios:
A new media gateway is added while IPSec is turned on in the Device Adapter.
Media gateway boots from Gold image while IPSec is turned on in the Device Adapter. This happens after MGC compact flash is erased or when MGC is delivered from factory.
Media gateway is moved to another Avaya Aura® system where Device Adapter has the IPSec turned on.
Media gateway that is previously registered with Avaya Aura® (1) with IPSec turned on, is moved to Avaya Aura® (2) where IPSec is turned off.
There are MGC registration issues.
Caveats
Change in parameters such as On/Off status or PSK key leads to connection breach for several seconds. After that MGC servers reconnect with the new settings.
MGC restarts when primary or alternate cluster changes irrespective of whether IPSec is enabled or disabled. After restarting, MGC connects to a new Avaya Breeze® platform cluster.
Note:
When MGC with the old loadware tries to connect to Avaya Breeze® platform server with FIPS mode enabled and Avaya Device Adapter Snap-in installed, then you should upgrade the MGC loadware using steps mentioned in the MGC installation, upgrade, and registration process.
