Ip Scenario 9: Ip Addressing With Secure Mode Enabled - Cisco ONS 15454 Reference Manual

Chapter 13 Management Network Connectivity
enabled, the IP addresses provisioned for both TCC2P TCP/IP LAN ports must follow general IP
addressing guidelines and must reside on different subnets from each other and the default router IP
address.
In secure mode, the IP address assigned to the backplane LAN port becomes a private address, which
connects the node to an Operations Support System (OSS) through a central office LAN or private
enterprise network. A Superuser can configure the node to hide or reveal the backplane's LAN IP address
in CTC, the routing table, or autonomous message reports.
In repeater mode, a node can be a GNE or ENE. Placing the node into secure mode automatically turns
on SOCKS proxy and defaults the node to GNE status. However, the node can be changed back to an
ENE. In repeater mode, an ENE's SOCKS proxy can be disabled—effectively isolating the node beyond
the LAN firewall—but it cannot be disabled in secure mode.To change a node's GNE or ENE status and
disable the SOCKS proxy, refer to the "Turn Up a Node" chapter in the Cisco ONS 15454 Procedure
Guide.
Enabling secure mode causes the TCC2P card to reboot; a TCC2P card reboot affects traffic.
Caution
The secure mode option does not appear in CTC if TCC2 cards are installed. If one TCC2 and one
Note
TCC2P card are installed in a node, secure mode will appear in CTC but it cannot be modified.
If both front and backplane access ports are disabled in an ENE and the node is isolated from DCC
Note
communication (due to user provisioning or network faults), the front and backplane ports are
automatically reenabled.
Figure 13-16 on page 13-22
Ethernet port addresses that reside on the same subnet.
OL-9217-01

13.2 13.2.9 IP Scenario 9: IP Addressing with Secure Mode Enabled

shows an example of secure-mode ONS 15454 nodes with front-access
Cisco ONS 15454 Reference Manual, R7.0.1
13-21