Avaya IPO R9 3RD PARTY IP ENDPT 1 ADI LIC 275611 사용자 설명서
제품 코드
275611
Product Description
IP Office 9.0
IP Office 9.0
© 2014 AVAYA All rights reserved.
Page 316
Issue 27.02.0 (Monday, January 06, 2014)
Network Address Translation (NAT)
Network Address Translation is a mechanism that allows you to use different IP address on your private
network behind a router with a public IP Address. When connecting to the Internet, ISPs typically want a
customer to use an IP address they have allocated. Using NAT this is easily accommodated, eradicating the
need for the customer to change their network numbering scheme and providing additional security to the
internal users as their address in hidden to the public.
network behind a router with a public IP Address. When connecting to the Internet, ISPs typically want a
customer to use an IP address they have allocated. Using NAT this is easily accommodated, eradicating the
need for the customer to change their network numbering scheme and providing additional security to the
internal users as their address in hidden to the public.
Typically, a company maps its internal network addresses to a global external IP address and unmaps the
global IP address on incoming packets back into internal IP addresses. This helps ensure security since each
outgoing or incoming request must go through a translation process. This also offers the opportunity to qualify
or authenticate the request or match it to a previous request. NAT also conserves the number of global IP
addresses that a company needs.
global IP address on incoming packets back into internal IP addresses. This helps ensure security since each
outgoing or incoming request must go through a translation process. This also offers the opportunity to qualify
or authenticate the request or match it to a previous request. NAT also conserves the number of global IP
addresses that a company needs.
Proxy Address Resolution Protocol (ARP)
Support for Proxy Address Resolution Protocol allows IP Office to respond on behalf of the IP address of a
device connected to it when receiving an ARP request.
device connected to it when receiving an ARP request.
Auto Connect
If a service is idle, that is no one is using the Internet, Auto Connect allows the IP Office to periodically
connect to a service. This is ideal for mail polling to retrieve email from an Internet Service Provider. An 'Auto
Connect Time Profile' controls the time period during which automatic calls are made, for example not at
weekends or during the middle of the night.
connect to a service. This is ideal for mail polling to retrieve email from an Internet Service Provider. An 'Auto
Connect Time Profile' controls the time period during which automatic calls are made, for example not at
weekends or during the middle of the night.
Firewall
IP Office integrated firewall provides packet filtering of the most common IP protocols including File Transfer
Protocol (FTP) and Internet browsing (HTTP). Each protocol passing through the firewall can be restricted/
allowed access in four different ways:
Protocol (FTP) and Internet browsing (HTTP). Each protocol passing through the firewall can be restricted/
allowed access in four different ways:
·
Drop
No sessions via this protocol will be allowed through the wall
No sessions via this protocol will be allowed through the wall
·
In
An incoming session can "punch a hole" in the wall to allow traffic in both directions
An incoming session can "punch a hole" in the wall to allow traffic in both directions
·
Out
An outgoing session can "punch a hole" in the wall to allow traffic in both directions
An outgoing session can "punch a hole" in the wall to allow traffic in both directions
·
Bothway
An incoming or outgoing sessions can "punch a hole" in the wall to allow traffic in both directions.
An incoming or outgoing sessions can "punch a hole" in the wall to allow traffic in both directions.
In cases where a protocol is not supported by default, the firewall can be customized to control packets based
on their content.
on their content.
IP Office allows the configuration of as many firewalls as needed through IP Office Manager. This permits
different security regulations to be applied to individual dial-in users and data services.
different security regulations to be applied to individual dial-in users and data services.
Light-Weight Directory Access Protocol (LDAP)
IP Office supports LDAP directory synchronization. This allows the telephone number Directory (names and
telephone numbers) held in IP Office to be synchronized with the information on an LDAP server (limited to
5000 entries). Although targeted for interoperation with 'Windows 2000 Server Active Directory', the feature is
sufficiently configurable to interoperate with any server that supports LDAP version 2 or higher.
telephone numbers) held in IP Office to be synchronized with the information on an LDAP server (limited to
5000 entries). Although targeted for interoperation with 'Windows 2000 Server Active Directory', the feature is
sufficiently configurable to interoperate with any server that supports LDAP version 2 or higher.
Remote Access Server (RAS)
IP Office provides RAS functionality allowing external users to dial in to the local area network from modems,
telephone adaptors and routers. Several of the previously described features and services can be applied to
the dial-in users to create a powerful Remote Access Server. Dial-in users can be authenticated using either
PAP or CHAP. Once authenticated the DHCP server can automatically assign the user an IP address to use
while connected to the LAN. Individual time profiles and firewalls can be applied to the user restricting what
they have access to and when they have access. For further security and accounting ease, IP Office can
automatically call a user back. This keeps the cost of the telephone call on the company telephone bill
removing the need to process individual expense claims.
telephone adaptors and routers. Several of the previously described features and services can be applied to
the dial-in users to create a powerful Remote Access Server. Dial-in users can be authenticated using either
PAP or CHAP. Once authenticated the DHCP server can automatically assign the user an IP address to use
while connected to the LAN. Individual time profiles and firewalls can be applied to the user restricting what
they have access to and when they have access. For further security and accounting ease, IP Office can
automatically call a user back. This keeps the cost of the telephone call on the company telephone bill
removing the need to process individual expense claims.