Inter-Tel AXXESS Manual page 1561

16.4 This is a set up of some of the ports in the default VLAN. Repeat for as many ports as
you need to configure.
16.5 Each VLAN performs as a port on the router with its own IP address. Access policies
are also applied to each interface. The access policies are defined as follows:
16.6 In this example, the connection is to the Internet with a T1. Set up the IP address and
apply the access policy (defined further below). In this example, assume that the ISP is config-
ured with this address as a gateway for the (public) NATed addresses.
interface t1 1/1
clock source line
tdm-group 1 timeslots 1-24 speed 64
ip address
access-policy Public
no shutdown
•
The following commands define access lists for the different traffic types. These
defined lists do not have any effect until they are applied to interfaces.
16.7 The following commands defines the communications that we want to allow to the
Axxess system. In this example, this is limited to the communications required for ITP end-
points.
ip access-list extended InAXXIPRCMain
permit tcp any
permit udp any
permit udp any
Private Network With Near-End NAT Traversal
INTER-TEL
interface eth 0/1
no shutdown
switchport access vlan 1
!
interface eth 0/2
no shutdown
switchport access vlan 1
!
interface vlan 1
ip address 192.168.1.1
access-policy Private
no shutdown
208.13.17.33
– The following commands define an access list so that we can communicate with
the internal trusted network.
ip access-list extended self
remark Traffic to NetVanta
permit ip any any
!
– The next commands define the set of communications coming from any internal
hosts except the Axxess system.
ip access-list standard PrivateHosts
deny host 192.168.1.2
permit any log
– The next commands define the set of communications coming from the Axxess
system.
ip access-list standard OutAXXIPRCMain
permit host 192.168.1.2 log
!
host 208.13.17.2 eq 5566
host 208.13.17.2 eq 5567
host 208.13.17.2 range 5004 5069
Appendix F – Network Topology
® ®
AXXESS MANUAL VERSION 11.0 – May 2008
255.255.255.0
255.255.255.0
log
log
log
log
Page F-31