Mitel Inter-Tel 5000 - Private Network with Near-End NAT Traversal

Appendix B: Network IP Topology
Private Network With Near-End NAT Traversal
Page B-30 Inter-Tel
®
5000 Installation Manual – Issue 2.4, May 2008
Private Network With Near-End NAT Traversal
The following diagram shows an example configuration.
The following commands define the VLANs within the switch. This is necessary to be able to
route/firewall between the LAN and the Internet.
vlan 1
name "Default"
!
• This is a set up of some of the ports in the default VLAN. Repeat for as many ports as you
need to configure.
interface eth 0/1
no shutdown
switchport access vlan 1
!
interface eth 0/2
no shutdown
switchport access vlan 1
!
• Each VLAN performs as a port on the router with its own IP address. Access policies are
also applied to each interface. The access policies are defined as follows:
interface vlan 1
ip address 192.168.1.1 255.255.255.0
access-policy Private
no shutdown
Internet
Office Firewall/NAT
Public IP: 208.13.17.33
Private IP: 192.168.1.1
Site A
(Private Addresses)
IP Endpoint
(Private Address)
Inter-Tel CS-5x00
192.168.1.2
(Private Address)
IP Endpoint
(Private Address)
Home Office LAN
Home Office
Router (e.g.
Linksys)
Configure the NAT device to perform
a static NAT assignment so that a
designated public IP address (for
example 208.13.17.2) always
corresponds to the Inter -Tel CS-5x00
private address (for example ,
192.168.1.2).
The IP endpoint must be
configured to talk to the (public)
NAT IP address of the Inter -Tel
CS-5x00 (for example,
208.13.17.2).
IP Endpoint
(Private Address)
Note that internal IP endpoints
talk to the private (native )
address of the Inter -Tel CS -5x00.