Cisco ONS 15600 Series Reference Manual page 179

Chapter 9 Management Network Connectivity
Table 9-7
Port
513
683
1080
2001-2017
2018
2361
3082
3083
5001
5002
7200
9100
9401
9999
10240-12287
57790
1. D = deny, NA = not applicable, OK = do not deny
The following ACL (access control list) example shows a firewall configuration when the SOCKS proxy
server gateway setting is not enabled. In the example, the CTC workstation's address is 192.168.10.10.
and the ONS 15600 address is 10.10.10.100. The firewall is attached to the GNE, so the inbound
direction is from CTC to the GNE and the outbound direction is from the GNE to CTC. The CTC
Common Object Request Broker Architecture (CORBA) Standard constant is 683 and the TCC CORBA
Default is TCC Fixed (57790).
access-list 100 remark *** Inbound ACL, CTC -> NE ***
access-list 100 remark
access-list 100 permit tcp host 192.168.10.10 host 10.10.10.100 eq www
access-list 100 remark *** allows initial contact with ONS 15600 using http (port 80) ***
access-list 100 remark
access-list 100 permit tcp host 192.168.10.10 host 10.10.10.100 eq 57790
access-list 100 remark *** allows CTC communication with ONS 15600 GNE (port 57790) ***
access-list 100 remark
access-list 100 permit tcp host 192.168.10.10 host 10.10.10.100 established
access-list 100 remark *** allows ACKs back from CTC to ONS 15600 GNE ***
access-list 101 remark *** Outbound ACL, NE -> CTC ***
access-list 101 remark
access-list 101 permit tcp host 10.10.10.100 host 192.168.10.10 eq 683
access-list 101 remark *** allows alarms etc., from the 15600 (random port) to the CTC
workstation (port 683) ***
access-list 100 remark
access-list 101 permit tcp host 10.10.10.100 host 192.168.10.10 established
access-list 101 remark *** allows ACKs from the 15600 GNE to CTC ***
Ports Used by the TSC (continued)
Function
rlogin
CORBA IIOP
Proxy server (socks)
I/O card Telnet
DCC processor on active TCC2/TCC2P
TL1
Raw TL1
TL1
BLSR server port
BLSR client port
SNMP alarm input port
EQM port
TCC boot port
Flash manager
Proxy client
Default TCC listener port
9.5 External Firewalls
1
Action
D
OK
D
NA
D
D
D
D
D
D
D
D
D
NA
D
OK
Cisco ONS 15600 Reference Manual, R7.0
9-23