Cisco Cisco ONS 15454 SONET Multiservice Provisioning Platform (MSPP) Manual Técnica

Descargar
Página de 5
Contents
Introduction:
Prerequisites:
Requirements:
Background Information:
Secure Mode Behaviour:
Secure Node Locked and Unlocked Behaviour:
Useful notes:
Related Cisco Support Community Discussions
Introduction:
The document describes the basic configuration IP address assigned to the ONS 15454 node with
Secure Mode Enabled in Cisco transport controller (CTC).
Prerequisites:
Cisco recommends the basic knowledge of TCP/IP and Data communication network(DCN)
management in network.
Requirements:
OSN15454 Controller cards for ONS device
ONS Platform specific system software
Background Information:
If TCC2P cards are installed, dual IP addressing is available using the secure mode. When secure
mode is off (sometimes called repeater mode), the IP address entered in the IP Address field
applies to the ONS 15454 backplane LAN port and the TCC2P TCP/IP (LAN) port. When secure
mode is on, the IP Address field shows the address assigned to the TCC2P TCP/IP (LAN) port
and the Superuser can enable or disable display of the backplane IP address.
The TCC2, TCC2P, TCC3, TNC, TNCE, TSC, and TSCE cards default to repeater mode. In this
mode, the front and back Ethernet (LAN) ports share a single MAC address and IP address.
TCC2P, TCC3, TNC, TNCE, TSC, and TSCE cards allow you to place a node in secure mode,
which prevents a front-access craft port user from accessing the LAN through the backplane port.
Secure Mode Behaviour:
Changing a TCC2P, TCC3, TNC, TNCE, TSC, or TSCE node from repeater mode to secure mode
allows you to provision two IP addresses for the ONS 15454 and causes the node to assign the
ports different MAC addresses. In secure mode, one IP address is provisioned for the ONS 15454
backplane LAN port, and the other IP address is provisioned for the card Ethernet port. Both
addresses reside on different subnets, providing an additional layer of separation between the
craft access port and the ONS 15454 LAN. If secure mode is enabled, the IP addresses
provisioned for the backplane LAN port and card Ethernet port must follow general IP addressing
guidelines and must reside on different subnets from each other.