Nortel Networks 555-4001-135 User Manual
40 Engineering guidelines
553-3001-358/555-4001-135 Standard 02.00 July 2006
LAN configuration
ICB customers should select one of the following alternatives for BUI
access:
access:
•
users and administrators access the ICB from the global internet
(the new capability of MICB Release 3)
(the new capability of MICB Release 3)
•
users and administrators access the ICB from the customer
LAN/intranet only (existing MICB Release 2 capability)
LAN/intranet only (existing MICB Release 2 capability)
Global internet access
Global internet access requires careful configuration of security
elements. Figure 6 shows a sample configuration.
elements. Figure 6 shows a sample configuration.
Figure 6
Global internet access example
In typical configurations, the firewall does not allow any kind of access
from the World Wide Web into the C-LAN. Only access from the C-LAN
hosts to the World Wide Web is allowed (for example, HTTP and FTP).
from the World Wide Web into the C-LAN. Only access from the C-LAN
hosts to the World Wide Web is allowed (for example, HTTP and FTP).
G100277
ICB BUI
ICB BUI
ICB BUI
IPE Module
ICB 4
card (s)
E-LAN
10/100 Base-T
ICB4
connection
PBX E-LAN
connection
Router
ICB BUI
ICB BUI
World Wide
Web
Firewall
C-LAN
10/100 Base-T or 100 Base-T
Green and
Red LAN