Cisco ONS 15454 DWDM - Scenario 8: Dual Gnes on a Subnet; Table 15-3 Proxy Server Firewall Filtering Rules; Table 15-4 Proxy Server Firewall Filtering Rules

15-17
Cisco ONS 15454 DWDM Reference Manual, R8.5
78-18343-02
Chapter 15 Management Network Connectivity
15.2.8 Scenario 8: Dual GNEs on a Subnet
If you implement the proxy server, note that all DCC-connected ONS 15454s on the same Ethernet
segment must have the same gateway setting. Mixed values produce unpredictable results, and might
leave some nodes unreachable through the shared Ethernet segment.
If nodes become unreachable, correct the setting by performing one of the following:
• Disconnect the craft computer from the unreachable ONS 15454. Connect to the ONS 15454
through another network ONS 15454 that has a DCC connection to the unreachable ONS 15454.
• Disconnect all DCCs to the node by disabling them on neighboring nodes. Connect a CTC computer
directly to the ONS 15454 and change its provisioning.
15.2.8 Scenario 8: Dual GNEs on a Subnet
The ONS 15454 provides GNE load balancing, which allows CTC to reach ENEs over multiple GNEs
without the ENEs being advertised over OSPF. This feature allows a network to quickly recover from
the loss of GNE, even if the GNE is on a different subnet. If a GNE fails, all connections through that
GNE fail. CTC disconnects from the failed GNE and from all ENEs for which the GNE was a proxy, and
then reconnects through the remaining GNEs. GNE load balancing reduces the dependency on the launch
GNE and DCC bandwidth, both of which enhance CTC performance.
Note Dual GNEs do not need special provisioning
Figure 15-13 shows a network with dual GNEs on the same subnet.
Table 15-3 Proxy Server Firewall Filtering Rules
Packets Arriving At: Are Accepted if the Destination IP Address is:
TCC2/TCC2P
Ethernet interface
• The ONS 15454 itself
• The ONS 15454’s subnet broadcast address
• Within the 224.0.0.0/8 network (reserved network used for standard
multicast messages)
• Subnet mask = 255.255.255.255
DCC interface
• The ONS 15454 itself
• Any destination connected through another DCC interface
• Within the 224.0.0.0/8 network
Table 15-4 Proxy Server Firewall Filtering Rules
Packets Arriving At: Are Rejected If:
TCC2/TCC2P
Ethernet interface
• User Datagram Protocol (UDP) packets addressed to
the SNMP trap relay port (391)
DCC interface
• Transmission Control Protocol (TCP) packets
addressed to the proxy server port (1080)