•
3 - 1000 Base-TX/SX/LX Ethernet function for LAN interface
•
1 – V.35 Serial interface port
•
1 – HSSI Hi-Speed Serial Interface (45mbps)
•
1 – SIO Serial Interface (Common CLI)
•
Routing between WAN and LAN
•
Supports multiple WAN ports
•
VPN, QoS, Firewall
•
IDS (Intrusion Detection System)
•
SIP ALG (SIP Application Layer Gateway)
•
Leased line interface using V.35 and HSSI (PPP, HDLC)
5.2.1 SECURITY
NAT/PT
This security function supports the conversion between private IP addresses and public IP addresses.
Network Address Translation and Port Address Translation services protect devices on the private internal
LAN from being exposed on the Public Network. This service also allows a single public IP address to be
shared among multiple hosts on the internal LAN.
Firewall
•
Access Filtering: Access lists and policies can be implemented to control access to internal resources.
•
DMZ Function: Hosts connected to the DMZ port can bypass the network firewall making it easier for
external clients to access their services. Applications such as web servers and mail servers are typically
connected to the DMZ ports. The private LAN is still protected behind the firewall.
•
Port Forwarding:This feature allows external hosts on the public network to access hosts and services on
the internal private LAN by forwarding the Public WAN address to a private LAN address based on a spe-
cific port.
5.2
FIGURE 5-2