Avaya 1000 Series Configuration Manual page 5

Chapter 19: Dial Backup via External Modem......................................................................93
Chapter 20: IP Packet Filter List.............................................................................................97
Configurations.................................................................................................................................................97
Example 1...............................................................................................................................................97
Example 2...............................................................................................................................................98
Example 3...............................................................................................................................................98
IP Packet Filtering on VLAN subinterfaces.............................................................................................99
Chapter 21: Multilink Frame Relay Configuration..............................................................103
Layer Two Configurations.............................................................................................................................103
MFR Configuration........................................................................................................................................104
Configure the Secure Router 1004 Series at Site 1......................................................................................104
Configure the Secure Router 3120...............................................................................................................105
Configure the Secure Router 1004 Series at Site 2......................................................................................105
Configure the SR3120...................................................................................................................................106
Chapter 22: Network Address Translation..........................................................................107
Dynamic NAT................................................................................................................................................107
Static NAT.....................................................................................................................................................107
Configuration for Dynamic and Static NAT....................................................................................................108
Configuration for Mapping Ports...................................................................................................................109
Reverse NAT.................................................................................................................................................110
Configuration for Reverse NAT......................................................................................................................110
NAT-Failover for firewalls...............................................................................................................................111
Configuration for NAT Failover for Firewalls..................................................................................................111
Chapter 23: NAT Configurations..........................................................................................113
NAT Configuration Examples........................................................................................................................114
Dynamic NAT (many to many)..............................................................................................................114
Static NAT (one to one).........................................................................................................................115
Port Address Translation (many to one)...............................................................................................115
Cone NAT......................................................................................................................................................116
Full Cone..............................................................................................................................................117
Restricted Cone....................................................................................................................................117
Port Restricted Cone............................................................................................................................118
Troubleshooting Cone NAT Common Problems...................................................................................118
NAT hairpinning.............................................................................................................................................119
Troubleshooting Hairpinning Common Problems.................................................................................120
SIP ALG Interoperability with Avaya Call Servers.........................................................................................120
Ability to Enable/Disable Firewall ALGs........................................................................................................120
NAT ACL enhancements...............................................................................................................................125
Firewall behavior with invalid ACKs on TCP connections.............................................................................127
Firewall ALG behavior...................................................................................................................................128
Chapter 24: IPSec EXAMPLES.............................................................................................133
Introduction to Security.................................................................................................................................133
Enabling Security Features..................................................................................................................133
Securing Remote Access Using IPSec VPN.................................................................................................134
Access Methods............................................................................................................................................135
Remote Access: User Group................................................................................................................135
Remote Access: Mode Configuration...................................................................................................135
Avaya Secure Router 1000 Series Configuration Guide December 2010 5