Alejandro Guerrieri schrieb:
Sowmi,

The SMPP traffic will be encapsulated inside the tunnel, son afaik no
specific rules needs to be done. The firewall should only allow the VPN
traffic to pass through, the firewall won't "see" the SMPP but an encrypted
stream going through the VPN.

now, the VPN is the pure "secured" trasport layer, like IP in the non-VPN way. But I guess they still want to secure the end-points of the VPNs where the packet packing/unpacking happens.

Sowmi, generally speaking: the server port is "fix", so you have to allow your client-side to connect to the IP:port of the operator, to bind the transceiver session.

The client side will have a random socket port assigned, so the operator won't be able to limit based on your client IP:port, but ONLY on your client IP.

So you have this factors to obey:

 operator(IP:port) <----SMPP----> client(IP)

you (client) regulate the operator(IP:port)
they (operator) regulate the client(IP)

Stipe

-------------------------------------------------------------------
Kölner Landstrasse 419
40589 Düsseldorf, NRW, Germany

tolj.org system architecture      Kannel Software Foundation (KSF)
http://www.tolj.org/              http://www.kannel.org/

mailto:st_{at}_tolj.org           mailto:stolj_{at}_kannel.org
-------------------------------------------------------------------

Reply via email to