Cisco ONS 15454 SDH Specifications download pdf (Page 184)

4-16

Cisco ONS 15454 SDH Installation and Operations Guide, R3.3

May 2002

Chapter 4 IP Networking

Scenario 8: Provisioning the ONS 15454 SDH Proxy Server

The ONS 15454 SDH proxy server is provisioned using three checkboxes on the Provisioning > Network

> General tab (see Figure 4-13 on page 4-16):

• Craft Access Only—When this option is enabled, the ONS 15454 SDH neither installs nor

advertises default or static routes. CTC computers can communicate with the ONS 15454 SDH, but

they cannot communicate directly with any other DCC-connected ONS 15454 SDH.

• Enable Proxy—When this option is enabled, the ONS 15454 SDH serves as a proxy for connections

between CTC clients and ONS 15454 SDHs that are DCC-connected to the proxy ONS 15454 SDH.

The CTC client establishes connections to DCC-connected nodes through the proxy node. The CTC

client can connect to nodes that it cannot directly reach from the host on which it runs. If Enable

Proxy is off, the node does not proxy for any CTC clients, although any established proxy

connections will continue until the CTC client exits.

• Enable Firewall—If this option is selected, the node prevents IP traffic from being routed between

the DCC and the LAN port. The ONS 15454 SDH can communicate with machines connected to the

LAN port or connected through the DCC. However, the DCC-connected machines cannot

communicate with the LAN-connected machines, and the LAN-connected machines cannot

communicate with the DCC-connected machines. A CTC client using the LAN to connect to the

firewall-enabled node can use the proxy capability to manage the DCC-connected nodes that would

otherwise be unreachable. A CTC client connected to a DCC-connected node can only manage other

DCC-connected nodes and the firewall itself.

Figure 4-13 Proxy Server Gateway Settings

Figure 4-14 shows an ONS 15454 SDH proxy server implementation. A GNE ONS 15454 SDH is

connected to a central office LAN and to ENE ONS 15454 SDHs. The central office LAN is connected

to a NOC LAN, which has CTC computers. The NOC CTC computer and craft technicians must both be

able to access the ONS 15454 SDH ENEs. However, the craft technicians must be prevented from

accessing or seeing the NOC or central office LANs.

71141

1 2 ... 179 180 181 182 183 184 185 186 187 188 189 ... 503 504

No comments

Cisco ONS 15454 SDH Specifications Page 184