Brick Device Partitions - Alcatel-Lucent Security Management Server (SMS) Release 9.4 Technical Overview

Alcatel-Lucent VPN Firewall Brick

Brick Device Partitions

...................................................................................................................................................................................................................................
Overview
Brick device partitions provide a way to truly share a Brick device among multiple
customers, placing no requirements on the customers and their IP space. Brick device
partitions are used in conjunction with virtual firewalls to provide true isolation
between different logical Brick devices in the same physical device.
Each Partition has its own set of VLANs, along with its own set of routing tables and
virtual firewalls. Therefore, each Brick device partition may be used independently,
even if multiple protected networks use overlapping IP addresses (e.g. RFC 1918
reserved addresses such as 10.0.0.0/8).
Although packets may not pass Partition boundaries ordinarily, there is a mechanism
designed to permit carefully controlled inter-Partition interactions. This design can
avoid hair-pinning packets out to an attached router then back into the Brick device, if
desired.
...................................................................................................................................................................................................................................
260-100-022R9.4
Issue 1, June 2009
™
Security Appliance
1-23