Configuring The X330Wan For Use With An External Firewall - Avaya X330WAN User Manual

Configuring the X330WAN for use with an External Firewall

There are different ways of connecting the X330WAN modules to provide security
to the local network. Figure 4.6 shows a typical configuration where the WAN
traffic goes through the X330WAN module out to an external firewall and/or VPN,
and then enters the LAN.
Note: When connecting an external firewall/VPN to the Fast Ethernet port, disable
the FabricFastEthernet interface using the
interface FabricFastEthernet1
the WAN to the LAN.
Note: The following example uses sample IP addresses for illustration only.
Figure 4.6
Figure 4.6 illustrates the X330W-2DS1 implementation connected with an external
Firewall/VPN. The X330W-2DS1 is connected to the WAN with an E1 link to port 1.
PPP encapsulation is configured over a Channel Group of 31 Time-slots (1-31). The
"dirty" side of the external Firewall is connected to the X330W-2DS1 Fast Ethernet
port, and the "clean" side is connected to the LAN. The X330W-2DS1's
FabricFastEthernet interface is disabled to prevent direct data flow from the WAN
to the LAN.
Avaya X330WAN User's Guide
X330WAN with Security
Enhanced Routing Capabilities
command from within the
shutdown
context, to prevent a direct flow of packets from
43