Adtran Netvanta Switch/Router Example; Private Network With Near-End Nat Traversal - Inter-Tel AXXESS Manual

Appendix F – Network Topology
® ®
INTER-TEL AXXESS

16. ADTRAN NETVANTA SWITCH/ROUTER EXAMPLE

16.1 Adtran
router, and firewall
implementation of the DMZ using Adtran NetVanta products is slightly different. Instead of
simply designating an Ethernet port on a router as the DMZ, you must first create a new
VLAN containing one or more Ethernet ports. The VLAN creates a logical partition of the
switch that can only communicate with the rest of the switch using the router/firewall function-
ality. Each set of VLAN Ethernet ports function as a single router interface. In addition, the
following example makes use of access policies that allow you to apply multiple access control
lists to a specific interface. These commands are not intended to be complete; they are only
a guideline.
A. PRIVATE NETWORK WITH NEAR-END NAT TRAVERSAL
16.2 The following diagram shows an example configuration (this is the same configuration
used in the Cisco example on
16.3 The following commands define the VLANs within the switch. This is necessary to be
able to route/firewall between the LAN and the Internet.
vlan 1
!
7.
Page F-30
MANUAL VERSION 11.0 – May 2008
®
provides a family of products (NetVanta
7
. The security considerations are independent of the router vendor, but the
page
Configure the NAT device to perform
a static NAT assignment so that a
designated public IP address (for
example 208.13.17.2) always
corresponds to the Inter -Tel CS-5x00
private address (for example ,
192.168.1.2).
Axxess
Inter-Tel CS-5x00
192.168.1.2
(Private Address)
name "Default"
Although the Adtran AOS is common among all of their switch/router platforms, this example is
based on an Adtran NetVanta 1224R.
®
) that are a combination of switch,
F-25).
Home Office LAN
Home Office
Router (e.g.
Linksys)
Internet
Office Firewall/NAT
Public IP: 208.13.17.33
Private IP: 192.168.1.1
Site A
(Private Addresses )
IP Endpoint
IP Endpoint
(Private Address)
(Private Address)
Adtran NetVanta Switch/Router Example
IP Endpoint
(Private Address)
The IP endpoint must be
configured to talk to the (public)
NAT IP address of the Inter -Tel
CS-5x00 (for example,
208.13.17.2).
Note that internal IP endpoints
talk to the private (native)
address of the Inter -Tel CS-5x00.