Mitel MIVOICE OFFICE 250, Installation And Administration Manual

Page: 446 / 585

MiVoice Office 250 Installation and Administration Guide
418
Introduction
The MiVoice Office 250utilizes network communications for several purposes including
administration, IP phones, IP trunks, and private networking. The MiVoice Office 250 is limited to a
single network connection shared among the different functions. This appendix discusses the
security and associated network topology issues for the MiVoice Office 250. Network suitability and
associated performance for VoIP traffic is beyond the scope of this appendix.
Terminology
The following terminology appears in this appendix:
•
ACL (Access Control List): An ACL is a list of filters (restrictions) applied to communications
passing through a router. Generally, each entry specifies a source, a destination, and a port.
The source and destination can be individual IP addresses or subnets.
• DMZ (Demilitarized Zone): A DMZ is a subnet that is “between” an organization’s private network
and the Internet. Communication between nodes in a DMZ, the Internet, and the internal network
is controlled by a firewall. A DMZ provides some firewall protection for nodes that need to be
available to the Internet, while also protecting the internal network from the DMZ nodes.
• Audio and Web Conferencing : AWC is a Mitel product that provides IP-based conferencing
capabilities to Mitel systems.
• Firewall : A firewall is a network device designed to provide limited connectivity between an
organization’s network and the Internet. A firewall generally prevents access from the Internet
to an inside network while allowing access from the inside network to the Internet. Some firewalls
also provide the capability for a special network, called a DMZ, that is placed between the Internet
and the internal network.
• Private Networking : This is the protocol used by the MiVoice Office 250 to provide networking
functionality.
• IPRA (Internet Protocol Resource Application): This is the function on the MiVoice Office 250
that provides IP connectivity to IP phones, trunk gateways, and Private Networking.
• MGCP (Media Gateway Control Protocol): MGCP is a standard protocol for commanding VoIP
media gateways.
• NAT (Network Address Translation): A NAT is an Internet standard that enables a local-area
network (LAN) to map between one set of IP addresses for internal traffic and a second set of
addresses for external traffic.
• NAT IP Address : This is the public IP address that is statically mapped to the MiVoice Office
250 system IP address.
• Native IP Address : This is the IP address of the MiVoice Office 250 network interface. This is
the MiVoice Office 250 real IP address.
• OAI : (Open Application Interface): System OAI is a system-level communications protocol that
allows command-oriented tools to be developed for the phone system. System OAI is available
in two levels: Events and Third Party Call Control. System OAI Events provides call status
information to an external device. Its primary use is for automatic call distribution products such
as the MiContact Center Office. System OAI Third Party Call Control is a TSAPI protocol that