In networks where connections to an Avaya Aura® Device Services instance go through Avaya SBC placed in a DMZ, some additional configurations are required for the reverse proxy.
|
No.
|
Task
|
Notes
|
 |
|
1
|
Configure Avaya Aura® Device Services with the appropriate front end certificate.
|
The Front-end IP or address configured during installation is used as the common name for the nginx certificate and published during resource discovery. The front-end certificate is used on port 443 and is located at /opt/Avaya/DeviceServices/<version>/CAS/<version>/nginx/certs/nginx.crt.
|
|
|
2
|
Generate certificate request on Avaya SBC by using the Avaya Aura® Device Services front-end FQDN.
|
|
|
|
3
|
Issue certificate from Certificate Authority.
|
|
|
|
4
|
Ensure port 443 is open on both sides of Avaya SBC.
|
|
|
|
5
|
Install server certificates on Avaya SBC.
|
|
|
|
6
|
Install client certificates on Avaya SBC.
|
-
-
If you use Avaya Aura® Device Services in an environment without Avaya Aura®, obtain your third-party CA root certificate and install it as described in Installing a CA certificate.
|
|
|
7
|
Create client and server TLS profiles.
|
|
|
|
8
|
Add reverse proxy.
|
|
|