Lan Configuration; About Dual Network Interfaces; About Static Nat - Cisco TelePresence Administrator's Manual

You can configure routes for up to 50 network and host combinations.
n
Do not configure IP routes by logging into the system as root and using "ip route" statements.
n

LAN configuration

LAN 1 is the primary network port on the VCS. You can configure the IPv4 address and subnet mask, and
IPv6 address for this port.
For VCS Expressway boxes behind a static NAT, you can also configure the NAT's IP address.
n
If you have Dual Network Interfaces installed, you can also configure these options for the LAN 2 port.
n
The VCS is shipped with a default IP address of 192.168.0.100 (for both LAN ports). This lets you connect
n
the VCS to your network and access it via the default address so that you can configure it remotely.
The IPv6 address, if entered, must be a static global IPv6 address. It cannot be a link-local or a stateless
n
auto-configuration (SLAAC) IPv6 address.
The External LAN interface field indicates which LAN port has been connected to your external network.
n
It also determines the port from which TURN server relay allocations are made.

About Dual Network Interfaces

The Dual Network Interface option key enables the LAN 2 port on the VCS Expressway for both
management and call signaling. This allows you to have a second IP address for your VCS.
This configuration is intended for high-security deployments where the VCS is located in a DMZ between two
separate firewalls on separate network segments. In such deployments, routers prevent devices on the
internal network from being able to route IP traffic to the public internet, and instead the traffic must pass
through an application proxy such as the VCS.
To enable this feature you must purchase and install the appropriate option key. Contact your Cisco
representative for information.
You should configure the LAN 1 port and restart the VCS before configuring the LAN 2 port.
n
The LAN 1 and LAN 2 interfaces must be on different, non-overlapping subnets.
n
If you have Dual Network Interfaces enabled but only want to configure one of the Ethernet ports, you must
n
use LAN 1.
If the Cisco VCS Expressway is in the DMZ, the outside IP address of the Cisco VCS Expressway must
n
be a public IP address, or if static NAT mode is enabled, the static NAT address must be publicly
accessible.
LAN 2 should be used as the public interface of the Cisco VCS Expressway (if the Cisco VCS
n
Expressway is ever clustered, LAN 1 must be used for clustering, and the clustering interface must not be
mapped through a NAT).
The Cisco VCS Expressway may also be used to traverse internal firewalls within an enterprise. In this
n
case the "public" IP address may not be publicly accessible, but is an IP address accessible to other parts
of the enterprise.

About static NAT

It is possible to deploy a VCS Expressway behind a static NAT device, allowing it to have separate public
and private IP addresses. This feature is intended for use in deployments where the VCS Expressway is
located in a DMZ, and has the Dual Network Interfaces feature enabled.
Cisco VCS Administrator Guide (X7.1)
Network and system settings
Page 61 of 479