Mitel Inter-Tel 5000 Installation And Maintenance Manual page 431

Each VLAN performs as a port on the router with its own IP address. Access policies are
applied to each interface. The access policies are defined further below.
•
•
•
®
Inter-Tel 5000 Installation Manual – Issue 2.4, May 2008
interface vlan 1
ip address 192.168.1.1
access-policy Private
no shutdown
interface vlan 2
ip address 208.132.23.64
no shutdown
!
In this example, the connection is to the Internet with a T1. Set up the IP address and
apply the access policy (defined further below).
interface t1 1/1
clock source line
tdm-group 1 timeslots 1-24 speed 64
ip address 208.13.17.33
access-policy Public
no shutdown
The following commands define access lists for the different traffic types. Defining the lists
does not have any effect until they are applied to the interfaces.
ip access-list extended web
permit ip any
ip access-list extended Voice
permit udp any
ip access-list extended ITP
permit tcp any
permit udp any
ip access-list extended InterTelNetworking
permit tcp any
The following commands define the policies for the different interfaces. Each policy can
specify more than one access list. In the Public policy-class, allow the voice ports, the ITP
(endpoint) ports, and the Inter-Tel Networking ports.
ip policy-class DMZ
allow list web
!
ip policy-class Private
allow list self self
allow list wizard-ics
!
ip policy-class Public
allow list Voice
allow list ITP
allow list InterTelNetworking
Appendix B: Network IP Topology
255.255.255.0
255.255.255.192
255.255.255.252
any
host 208.132.23.66 range 6004 6247 log
host 208.132.23.66 eq 5566
host 208.132.23.66 eq 5567
host 208.132.23.66 eq 5570
Non-NATed DMZ Configuration
log
log
log
Page B-33