Nortel Meridian Meridian 1 Implementation Manual page 36

Page 36 of 208
Figure 6
Global internet access example
MICB BUI
MICB BUI
CLAN 10/100 Base-T
or 100 Base-T
MICB BUI
In typical configurations, the firewall does not allow any kind of access
from the World Wide Web into the C-LAN. Only access from the C-LAN
hosts to the World Wide Web is allowed (for example, HTTP and FTP).
Hosts that need to be accessed from the World Wide Web must be
placed in a special sub-network called the Green and Red LAN. The
firewall isolates the Green and Red LAN from the C-LAN. Devices that
can be accessed from the World Wide Web are put into this segregated
LAN segment. Nortel Networks recommends that the Green and Red
LAN be the location of the MICB connection.
On the other hand, C-LAN hosts require open access to the MICB for
administration and maintenance.
553-3001-358 Standard 1.00
World Wide Web
Firewall
Green and
Router
MICB BUI
October 2003
MICB BUI
Red LAN
ELAN
10 Base-T
System ELAN
connection
MICB3
connection
MIBC 3
card(s)
IPE Module
553-AAA713