22-16
Cisco ONS 15454 DWDM Installation and Operations Guide, R6.0
August 2005
Chapter 22 Management Connectivity Reference
22.2.7 Scenario 7: Provisioning the ONS 15454 Proxy Server
shows the same proxy server implementation with ONS 15454 ENEs in multiple rings.
Figure 22-12
Scenario 7: ONS 15454 Proxy Server With ENEs on Multiple Rings (ANSI and ETSI)
shows the rules the ONS 15454 follows to filter packets for the firewall when nodes are
configured as ENEs and GNEs. If the packet is addressed to the ONS 15454, additional rules (shown in
) are applied. Rejected packets are silently discarded.
124255
Remote CTC
10.10.20.10
10.10.20.0/24
10.10.10.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
ONS 15454
Gateway NE
10.10.10.100/24
ONS 15454
End NE
192.168.10.250/24
ONS 15454
End NE
192.168.10.150/24
ONS 15454
End NE
192.168.10.200/24
Ethernet
Optical Fiber
ONS 15454
Gateway NE
10.10.10.200/24
ONS 15454
End NE
192.168.80.250/24
ONS 15454
End NE
192.168.60.150/24
ONS 15454
End NE
192.168.70.200/24
Table 22-3
Proxy Server Firewall Filtering Rules
Packets Arriving At:
Are Accepted if the Destination IP Address is:
TCC2/TCC2P
Ethernet interface
•
The ONS 15454 itself
•
The ONS 15454’s subnet broadcast address
•
Within the 224.0.0.0/8 network (reserved network used for standard
multicast messages)
•
Subnet mask = 255.255.255.255
DCC interface
•
The ONS 15454 itself
•
Any destination connected through another DCC interface
•
Within the 224.0.0.0/8 network
Summary of Contents for ONS 15454 DWDM
Page 38: ...Figures xxxviii Cisco ONS 15454 DWDM Installation and Operations Guide R6 0 August 2005 ...
Page 54: ...Procedures liv Cisco ONS 15454 DWDM Installation and Operations Guide R6 0 August 2005 ...
Page 64: ... 64 Cisco ONS 15454 DWDM Installation and Operations Guide R6 0 August 2005 Chapter ...