Page F-31
Appendix F – Network Topology
INTER-TEL
®
AXXESS
®
MANUAL VERSION 11.0 – May 2008
Private Network With Near-End NAT Traversal
APPENDICES
16.4 This is a set up of some of the ports in the default VLAN. Repeat for as many ports as
you need to configure.
interface eth 0/1
no shutdown
switchport access vlan 1
!
interface eth 0/2
no shutdown
switchport access vlan 1
!
16.5 Each VLAN performs as a port on the router with its own IP address. Access policies
are also applied to each interface. The access policies are defined as follows:
interface vlan 1
ip address 192.168.1.1 255.255.255.0
access-policy Private
no shutdown
16.6 In this example, the connection is to the Internet with a T1. Set up the IP address and
apply the access policy (defined further below). In this example, assume that the ISP is config-
ured with this address as a gateway for the (public) NATed addresses.
interface t1 1/1
clock source line
tdm-group 1 timeslots 1-24 speed 64
ip address 208.13.17.33 255.255.255.0
access-policy Public
no shutdown
• The following commands define access lists for the different traffic types. These
defined lists do not have any effect until they are applied to interfaces.
– The following commands define an access list so that we can communicate with
the internal trusted network.
ip access-list extended self
remark Traffic to NetVanta
permit ip any any log
!
– The next commands define the set of communications coming from any internal
hosts except the Axxess system.
ip access-list standard PrivateHosts
deny host 192.168.1.2
permit any log
– The next commands define the set of communications coming from the Axxess
system.
ip access-list standard OutAXXIPRCMain
permit host 192.168.1.2 log
!
16.7 The following commands defines the communications that we want to allow to the
Axxess system. In this example, this is limited to the communications required for ITP end-
points.
ip access-list extended InAXXIPRCMain
permit tcp any host 208.13.17.2 eq 5566 log
permit udp any host 208.13.17.2 eq 5567 log
permit udp any host 208.13.17.2 range 5004 5069 log
To Next Page
Loading...
