Mitel MIVOICE OFFICE 250, Installation And Administration Manual

Page: 480 / 585

MiVoice Office 250 Installation and Administration Guide
452
Adtran NetVanta
®
Switch/Router Example
Adtran
®
provides a family of products (NetVanta
®
) that are a combination of switch, router, and
firewall
1
. The security considerations are independent of the router vendor, but the implementation
of the DMZ using Adtran NetVanta products is slightly different. Instead of simply designating an
Ethernet port on a router as the DMZ, you must first create a new VLAN containing one or more
Ethernet ports. The VLAN creates a logical partition of the switch that can only communicate with
the rest of the switch using the router/firewall functionality. Each set of VLAN Ethernet ports function
as a single router interface. In addition, the following example makes use of access policies that
allow you to apply multiple access control lists to a specific interface.
ITP Phones and Private Networking
The following example illustrates the configuration for ITP phones and Private Networking. The
following commands define the VLANs within the switch. This is necessary to be able to route/firewall
between the LAN and the DMZ.
vlan 1
name "Default"
vlan 2
name "DMZ"
!
• The following commands set up the Ethernet switch ports to belong to specific VLANs. In this
example, take the first two ports and associate them with the DMZ VLAN.
interface eth 0/1
no shutdown
switchport access vlan 2
!
interface eth 0/2
no shutdown
switchport access vlan 2
!
Set up some of the ports in the default VLAN. This example shows two ports.
interface eth 0/3
no shutdown
switchport access vlan 1
!
interface eth 0/4
no shutdown
switchport access vlan 1
!
• Each VLAN functions as a port on the router with its own IP address. Also, apply access policies
to each interface. The access policies are defined further below.
interface vlan 1
ip address 192.168.1.1 255.255.255.0
1. Although the Adtran AOS is common among all of their switch/router platforms, this example is based on
an Adtran NetVanta 1224R.