Chapter 19
CTC Connectivity Reference
•
If the node is configured with the proxy server enabled in GNE or ENE mode, you must set up a
proxy tunnel and/or a firewall tunnel.
If the node is configured with the proxy server enabled in proxy-only mode, you can set up proxy
•
tunnels. Firewall tunnels are not allowed.
If the node is configured with the proxy server disabled, neither proxy tunnels or firewall tunnels
•
are allowed.
Figure 19-17
tunnels are useful in this example because the GNE would otherwise block IP access between the PC
and the foreign node.
Figure 19-17 Proxy and Firewall Tunnels for Foreign Terminations
10.10.10.100/24
10.10.10.250/24
Non-ONS node
130.94.122.199/28
Figure 19-18
useful in this example because the GNE would otherwise block IP access between the PC and foreign
node. This configuration also requires a firewall tunnel on the ENE.
September 2004
shows an example of a foreign node connected to the GCC network. Proxy and firewall
Remote CTC
10.10.20.10
Interface 0/0
10.10.20.1
Interface 0/1
10.10.10.1
ONS 15454
GNE
ONS 15454
ENE
Foreign NE
shows a remote node connected to an ENE Ethernet port. Proxy and firewall tunnels are
10.10.20.0/24
Router A
10.10.10.0/24
ONS 15454
ENE
10.10.10.150/24
ONS 15454
ENE
10.10.10.200/24
Local/Craft CTC
192.168.20.20
Cisco ONS 15454 DWDM Installation and Operations Guide, R4.7
19.6 Open GNE
Ethernet
Optical Fiber
19-25