Using A Second Iprc To "Straddle" The Firewall (Nat - Inter-Tel AXXESS Manual

Hide thumbs Also See for AXXESS:

Table of Contents

9. USING A SECOND IPRC TO "STRADDLE" THE FIREWALL (NAT)

Because the Axxess system supports multiple IPRCs, one option for supporting IP end-

points from the Internet is to add an IPRC and connect its Ethernet port outside the firewall

(NAT) to a DMZ or the Internet itself. See the following diagram.

There are some considerations when using an additional IPRC:

The recommended connection for the external IPRC is in a DMZ so that it is protected

from security and denial-of-service (DOS) attacks from the Internet.

All IPRCs used for IP networking must be on the same subnet.

Although it may appear that this configuration introduces a security vulnerability by

bypassing the firewall, there is no mechanism for Internet data to traverse the Axxess

A "mobile" IP endpoint, such as the Model 8602 (sometimes inside and sometimes out-

side), may not work well with this topology.

Using a Second IPRC to "Straddle" the Firewall (NAT)

MANUAL VERSION 11.0 – May 2008

Appendix F – Network Topology

Table of Contents