Firewall Not Enabled; Figure 9-10 Ons 15600 Sdh Proxy Server With Gne And Enes On The Same Subnet - Cisco ONS 15600 Reference Manual

Chapter 9 Management Network Connectivity

9.2.7.1 Firewall Not Enabled

Figure 9-10
connected to a central office LAN and to ONS 15600 SDH ENEs. The central office LAN is connected
to a NOC LAN, which has CTC computers. The NOC CTC computer and craft technicians must both be
able to access the ONS 15600 SDH ENEs. However, the craft technicians must be prevented from
accessing or seeing the NOC or central office LANs.
In the example, the ONS 15600 SDH GNE is assigned an IP address within the central office LAN and
is physically connected to the LAN through its LAN port. ONS 15600 SDH ENEs are assigned IP
addresses that are outside the central office LAN and given private network IP addresses. If the
ONS 15600 SDH ENEs are collocated, the craft LAN ports could be connected to a hub. However, the
hub should have no other network connections.
Figure 9-10
ONS 15600 SDH
10.10.10.100/24
ONS 15600 SDH
10.10.10.250/24
Table 9-2
shown in
78-18400-01
shows an ONS 15600 SDH proxy server implementation. A ONS 15600 SDH GNE is
ONS 15600 SDH Proxy Server with GNE and ENEs on the Same Subnet
Remote CTC
10.10.20.10
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
GNE
ENE
shows recommended settings for ONS 15600 SDH GNEs and ENEs in the configuration
Figure 9-10.
9.2.7 Scenario 7: Provisioning the ONS 15600 SDH Proxy Server
10.10.20.0/24
10.10.10.0/24
ONS 15600 SDH
ENE
10.10.10.150/24
ONS 15600 SDH
ENE
10.10.10.200/24
Local/Craft CTC
192.168.20.20
Cisco ONS 15600 SDH Reference Manual, Release 9.0
Ethernet
SDH
9-13