Mitel Inter-Tel 5000, Installation And Maintenance Manual

Page: 426 / 468

Appendix B: Network IP Topology
Adtran NetVanta
®
Switch/Router Example
Page B-28
Inter-Tel
®
5000 Installation Manual – Issue 2.4, May 2008
Adtran NetVanta
®
Switch/Router Example
Adtran
®
provides a family of products (NetVanta
®
) that are a combination of switch, router, and
firewall
1
. The security considerations are independent of the router vendor, but the
implementation of the DMZ using Adtran NetVanta products is slightly different. Instead of
simply designating an Ethernet port on a router as the DMZ, you must first create a new VLAN
containing one or more Ethernet ports. The VLAN creates a logical partition of the switch that
can only communicate with the rest of the switch using the router/firewall functionality. Each set
of VLAN Ethernet ports function as a single router interface. In addition, the following example
makes use of access policies that allow you to apply multiple access control lists to a specific
interface.
ITP Endpoints and Inter-Tel Private Networking
The following example illustrates the configuration for ITP endpoints and Inter-Tel Private
Networking. The following commands define the VLANs within the switch. This is necessary to
be able to route/firewall between the LAN and the DMZ.
vlan 1
name "Default"
vlan 2
name "DMZ"
!
•
The following commands set up the Ethernet switch ports to belong to specific VLANs. In
this example, take the first two ports and associate them with the DMZ VLAN.
interface eth 0/1
no shutdown
switchport access vlan 2
!
interface eth 0/2
no shutdown
switchport access vlan 2
!
Set up some of the ports in the default VLAN. This example shows two ports.
interface eth 0/3
no shutdown
switchport access vlan 1
!
interface eth 0/4
no shutdown
switchport access vlan 1
!
1. Although the Adtran AOS is common among all of their switch/router platforms, this example is based
on an Adtran NetVanta 1224R.