Mitel MIVOICE OFFICE 250, Installation And Administration Manual

Page: 481 / 585

Network IP Topology
453
access-policy Private
no shutdown
interface vlan 2
ip address 208.132.23.64 255.255.255.192
no shutdown
!
In this example, there is a connection to the Internet using a T1 interface. Set up the IP address and
apply the access policy (which is defined further below).
interface t1 1/1
clock source line
tdm-group 1 timeslots 1-24 speed 64
ip address 208.13.17.33 255.255.255.252
access-policy Public
no shutdown
• The following commands define access lists for different kinds of traffic. Defining the lists do not
have any effect until they are applied to the interfaces.
ip access-list extended web
permit ip any any
ip access-list extended Voice
permit udp any host 208.132.23.66 range 6004 6243 log
ip access-list extended ITP
permit tcp any host 208.132.23.66 eq 5566 log
permit udp any host 208.132.23.66 eq 5567 log
ip access-list extended InterTelNetworking
permit tcp any host 208.132.23.66 eq 5570 log
• The following commands define the policies for the different interfaces. Each policy can specify
more than one access list. In the Public policy-class, voice ports, the ITP (phone) ports, and the
Networking ports are allowed.
ip policy-class DMZ
allow list web
!
ip policy-class Private
allow list self self
allow list wizard-ics
!
ip policy-class Public
allow list Voice
allow list ITP
allow list InterTelNetworking
Private Network With Near-End NAT Traversal
The following diagram shows an example configuration.