Networking security provides policies such as security domain division and firewall isolation to protect the OSS network.

The following networking policies are adopted to ensure system security:

• Isolate the internal network from the external network.

  • Core Network Assistant Platform (CNAP) server isolation: The CNAP server is connected to the internal and external networks using different physical ports.
  • LAN switch isolation: A LAN switch uses different VLANs to access the internal and external networks. It uses the layer 3 routing function on the external network if necessary.

• The service and management planes use different VLANs to isolate from each other.

• The system uses an independent VLAN to connect to the Web client to perform maintenance. In this way, the external maintenance is isolated from internal communications. This prevents security risks brought by the external network.
• To ensure the security of data transmission between data sources of the CNAP and defend against attacks from external networks, the CNAP needs to be deployed on the dedicated network in a carriers equipment room. In later versions, the CNAP is planned to be deployed on a Virtual Private Network (VPN).
• The SIM Box anti-fraud plan on the CNAP requires the cooperation of Information technology (IT) equipment, including the RH2288 and SIP server, and Communication technology (CT) equipment, including the MSOFTX3000 and UMG8900. To ensure connection security and facilitate deployment, install the IT and CT equipment in a CT equipment room supplied with direct current (DC) power.

This document is very well done

Another good post ..thanks.

very useful

nice one , thanks.

useful document, thanks