Cisco ONS 15327, User Documentation

Page: 109 / 559

2-27
Cisco ONS 15327 User Documentation
June 2002
Chapter 2 Software Installation
Logging into the ONS 15327
2.5.2 Accessing ONS 15327s Behind Firewalls
If an ONS 15327 or CTC computer resides behind a firewall that uses port filtering, you must receive an
Internet Inter-ORB Protocol (IIOP) port from your network administrator and enable the IIOP port on
the ONS 15327 and/or CTC computer, depending on whether one or both devices reside behind firewalls.
If the ONS 15327 is in a protected network and the CTC computer is in an external network, as shown
in
Figure 2-4 , enable the IIOP listener port specified by the firewall administrator on the ONS 15327.
The ONS 15327 sends the port number to the CTC computer during the initial contact between the
devices using Hyper-Text Transfer Protocol (HTTP). After the CTC computer obtains the ONS 15327
IIOP port, the computer opens a direct session with the node using the specified IIOP port.
Figure 2-4 ONS 15327s residing behind a firewall
If the CTC computer and the ONS 15327 both reside behind firewalls ( Figure 2-5 ), set the IIOP port on
the CTC computer and on the ONS 15327. Each firewall can use a different IIOP port. For example, if
the CTC computer firewall uses IIOP port 4000, and the ONS 15327 firewall uses IIOP port 5000, 4000
is the IIOP port set on the CTC computer and 5000 is the IIOP port set on the ONS 15327.
Figure 2-5 A CTC computer and ONS 15327s residing behind firewalls
CTC computer
External network Protected network
ONS 15327
Unprotected
network
Private
network
IIOP port
IIOP port
Firewall
Port
filtering
ONS 15327
78094
CTC computer
Firewall
Port
filtering
Protected network External network Protected network
ONS 15327
Private
network
Unprotected
network
Private
network
IIOP port
IIOP port
IIOP port
Firewall
Port
filtering
ONS 15327
78093