Accessing Ons 15327S Behind Firewalls; Figure 2-4 Ons 15327S Residing Behind A Firewall; Figure 2-5 A Ctc Computer And Ons 15327S Residing Behind Firewalls - Cisco ONS 15327 User Documentation

Chapter 2 Software Installation

2.5.2 Accessing ONS 15327s Behind Firewalls

If an ONS 15327 or CTC computer resides behind a firewall that uses port filtering, you must receive an
Internet Inter-ORB Protocol (IIOP) port from your network administrator and enable the IIOP port on
the ONS 15327 and/or CTC computer, depending on whether one or both devices reside behind firewalls.
If the ONS 15327 is in a protected network and the CTC computer is in an external network, as shown
in Figure
The ONS 15327 sends the port number to the CTC computer during the initial contact between the
devices using Hyper-Text Transfer Protocol (HTTP). After the CTC computer obtains the ONS 15327
IIOP port, the computer opens a direct session with the node using the specified IIOP port.
Figure 2-4
CTC computer
If the CTC computer and the ONS 15327 both reside behind firewalls
the CTC computer and on the ONS 15327. Each firewall can use a different IIOP port. For example, if
the CTC computer firewall uses IIOP port 4000, and the ONS 15327 firewall uses IIOP port 5000, 4000
is the IIOP port set on the CTC computer and 5000 is the IIOP port set on the ONS 15327.
Figure 2-5 A CTC computer and ONS 15327s residing behind firewalls
IIOP port
Private
network
CTC computer
filtering
Protected network
June 2002
2-4, enable the IIOP listener port specified by the firewall administrator on the ONS 15327.
ONS 15327s residing behind a firewall
Unprotected
network
External network
Firewall
Unprotected
network
Port
External network
Firewall
Private
network
Port
filtering
Protected network
Firewall
Private
network
Port
filtering
Protected network
Logging into the ONS 15327
IIOP port
ONS 15327
IIOP port
ONS 15327
(Figure 2-5), set the IIOP port on
IIOP port
ONS 15327
IIOP port
ONS 15327
Cisco ONS 15327 User Documentation
2-27