Figure 13-13 Ip Scenario 7: Ons 15454 Socks Proxy Server With Enes On Multiple Rings; Socks Proxy Server Firewall Filtering Rules - Cisco 15454-DS1-14= - 1.544Mbps Expansion Module Reference Manual

Chapter 13 Management Network Connectivity
Figure 13-13 IP Scenario 7: ONS 15454 SOCKS Proxy Server With ENEs on Multiple Rings
ONS 15454
GNE
10.10.10.100/24
ONS 15454
ENE
192.168.10.250/24
Table 13-3
configured as ENEs and GNEs.
Table 13-3
Packets Arriving At:
TCC2/TCC2P
Ethernet interface
DCC interface
If the packet is addressed to the ONS 15454 node, additional rules, shown in
Rejected packets are silently discarded.
78-18106-01
Remote CTC
10.10.20.10
10.10.20.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
10.10.10.0/24
ONS 15454
ENE
192.168.10.150/24
ONS 15454
ENE
192.168.10.200/24
shows the rules that the ONS 15454 follows to filter packets for the firewall when nodes are

SOCKS Proxy Server Firewall Filtering Rules

Are Accepted if the Destination IP Address is:
• The ONS 15454 node itself
• The ONS 15454 node's subnet broadcast address
• Within the 224.0.0.0/8 network (reserved network used for standard
multicast messages)
• Subnet mask = 255.255.255.255
• The ONS 15454 node itself
• Any destination connected through another DCC interface
Within the 224.0.0.0/8 network
•
13.2.7 IP Scenario 7: Provisioning the ONS 15454 SOCKS Proxy Server
ONS 15454
GNE
10.10.10.200/24
ONS 15454
ENE
192.168.80.250/24
Cisco ONS 15454 Reference Manual, R8.5
ONS 15454
ENE
192.168.60.150/24
ONS 15454
ENE
192.168.70.200/24
Ethernet
SONET
Table 13-4, are applied.
13-17