Ip Scenario 8: Dual Gnes On A Subnet; Figure; Socks Proxy Server Firewall Filtering Rules When Packet Addressed To The Ons 15454 - Cisco 15454-DS1-14= - 1.544Mbps Expansion Module Reference Manual

13.2.8 IP Scenario 8: Dual GNEs on a Subnet

Table 13-4
Packets Arriving At
TCC2/TCC2P
Ethernet interface
DCC interface
1. UDP = User Datagram Protocol
2. TCP = Transmission Control Protocol
3. ICMP = Internet Control Message Protocol
If you implement the SOCKS proxy server, note that all DCC-connected ONS 15454s on the same
Ethernet segment must have the same gateway setting. Mixed values produce unpredictable results, and
might leave some nodes unreachable through the shared Ethernet segment.
If nodes become unreachable, correct the setting with one of the following actions:
•
•
13.2.8 IP Scenario 8: Dual GNEs on a Subnet
The ONS 15454 provides GNE load balancing, which allows CTC to reach ENEs over multiple GNEs
without the ENEs being advertised over OSPF. This feature allows a network to quickly recover from
the loss of a GNE, even if the GNE is on a different subnet. If a GNE fails, all connections through that
GNE fail. CTC disconnects from the failed GNE and from all ENEs for which the GNE was a proxy, and
then reconnects through the remaining GNEs. GNE load balancing reduces the dependency on the launch
GNE and DCC bandwidth, both of which enhance CTC performance.
dual GNEs on the same subnet.
Cisco ONS 15454 Reference Manual, R8.5
13-18
SOCKS Proxy Server Firewall Filtering Rules When Packet Addressed to the
ONS 15454
Accepts
All UDP
•
the Rejected column
All UDP packets
•
All TCP
•
packets addressed to the Telnet
and SOCKS proxy server ports
• OSPF packets
• ICMP
Disconnect the craft computer from the unreachable ONS 15454. Connect to the ONS 15454
through another network ONS 15454 that has a DCC connection to the unreachable ONS 15454.
Disconnect all DCCs to the node by disabling them on neighboring nodes. Connect a CTC computer
directly to the ONS 15454 and change its provisioning.
1
packets except those in
2
protocols except
3
packets
Chapter 13 Management Network Connectivity
Rejects
UDP packets addressed to the
•
SNMP trap relay port (391)
TCP packets addressed to the
•
Telnet port
• TCP packets addressed to the
SOCKS proxy server port
• All packets other than UDP, TCP,
OSPF, ICMP

Figure 13-14

shows a network with
78-18106-01