Ericsson TANDBERG Television iPlex N20001, Installation Manual, Page: 92 / 98

92
iPlex Installation and Hardware Specification Guide
Option 1: Isolated
Network
This option is depicted in diagram that follows. The iPlex control port is con-
nected to an isolated private network.
One (or more) control PCs with web browsers, telnet/SSH clients and/or SNMP
managers is connected to this isolated private network. At least one of these con-
trol PCs is dual-homed (has two network interfaces), and is connected to a corpo-
rate network, which also uses private addresses. This network is connected to the
Internet using a NAT firewall.
If external access is required, the following is must be done:
•
An external access program, such as VNC (www.realvnc.com) must be installed in the dual-
homed Control PC.
•
The NAT Firewall is configured to forward access to the appropriate port (TCP port 5900 in
case of VNC) from the outside to the control PC.
•
Optional, but highly recommended: the firewall should be configured to only forward access
from authorized IP addresses.
•
Access should be granted for a pre-determined, limited period of time.
This is the safest way to provide access to an iPlex over the Internet, but it is also
the most complex. Moreover, if the remote user needs to have the ability to
upgrade the iPlex, the control PC must be also configured as an FTP server.
Option 2:
Connected
Private Network
The second option involves directly attaching the iPlex to a connected private net-
work, as depicted in the second diagram, below. In this configuration, the iPlex has
direct access to the Internet at all times and can even be upgraded directly from
the TANDBERG Television public FTP site.