Figure 4-10 Scenario 7: Proxy Server Gateway Settings - Cisco ONS 15327 User Documentation

Chapter 4 IP Networking
The ONS 15327 proxy server is provisioned using three checkboxes on the Provisioning > Network >
General tab
• Craft Access Only—When enabled, the ONS 15327 neither installs nor advertises default or static
routes. CTC computers can communicate with the ONS 15327, but they cannot communicate
directly with any other DCC-connected ONS 15327.
Enable Proxy—When enabled, the ONS 15327 serves as a proxy for connections between CTC
•
clients and ONS 15327s that are DCC-connected to the proxy ONS 15327. The CTC client
establishes connections to DCC-connected nodes through the proxy node. The CTC client can
connect to nodes that it cannot directly reach from the host on which it runs. If Enable Proxy is off,
the node does not proxy for any CTC clients, although any established proxy connections will
continue until the CTC client exits.
Enable Firewall—If selected, the node prevents IP traffic from being routed between the DCC and
•
the Ethernet port. The ONS 15327 can communicate with hosts connected to the Ethernet port or
connected through the DCC. However, the DCC-connected hosts cannot communicate with the
Ethernet-connected hosts, and the Ethernet-connected hosts cannot communicate with the
DCC-connected hosts. A CTC client using the Ethernet to connect to the firewall-enabled node can
use the proxy capability to manage the DCC-connected nodes that would otherwise be unreachable.
A CTC client connected to a DCC-connected node can only manage other DCC-connected nodes
and the firewall itself.

Figure 4-10 Scenario 7: Proxy Server Gateway Settings

June 2002
(see Figure 4-10 on page 4-15):
ONS 15327 IP Addressing Scenarios
Cisco ONS 15327 User Documentation, R3.3
4-15