Inter-Tel AXXESS - 16 Adtran Netvanta Switch;Router Example; Private Network with Near-End NAT Traversal

Page F-30
Appendix F – Network Topology
INTER-TEL
®
AXXESS
®
MANUAL VERSION 11.0 – May 2008
Adtran NetVanta Switch/Router Example
16. ADTRAN NETVANTA SWITCH/ROUTER EXAMPLE
16.1 Adtran
®
provides a family of products (NetVanta
®
) that are a combination of switch,
router, and firewall
7
. The security considerations are independent of the router vendor, but the
implementation of the DMZ using Adtran NetVanta products is slightly different. Instead of
simply designating an Ethernet port on a router as the DMZ, you must first create a new
VLAN containing one or more Ethernet ports. The VLAN creates a logical partition of the
switch that can only communicate with the rest of the switch using the router/firewall function-
ality. Each set of VLAN Ethernet ports function as a single router interface. In addition, the
following example makes use of access policies that allow you to apply multiple access control
lists to a specific interface. These commands are not intended to be complete; they are only
a guideline.
A. PRIVATE NETWORK WITH NEAR-END NAT TRAVERSAL
16.2 The following diagram shows an example configuration (this is the same configuration
used in the Cisco example on page F-25).
16.3 The following commands define the VLANs within the switch. This is necessary to be
able to route/firewall between the LAN and the Internet.
vlan 1
name "Default"
!
7. Although the Adtran AOS is common among all of their switch/router platforms, this example is
based on an Adtran NetVanta 1224R.
Internet
Office Firewall/NAT
Public IP: 208.13.17.33
Private IP: 192.168.1.1
Site A
(Private Addresses)
IP Endpoint
(Private Address)
Inter-Tel CS-5x00
192.168.1.2
(Private Address)
IP Endpoint
(Private Address)
Home Office LAN
Home Office
Router (e.g.
Linksys)
Configure the NAT device to perform
a static NAT assignment so that a
designated public IP address (for
example 208.13.17.2) always
corresponds to the Inter -Tel CS-5x00
private address (for example ,
192.168.1.2).
The IP endpoint must be
configured to talk to the (public )
NAT IP address of the Inter -Tel
CS-5x00 (for example,
208.13.17.2).
IP Endpoint
(Private Address)
Note that internal IP endpoints
talk to the private (native )
address of the Inter -Tel CS -5x00.
Axxess