Nortel SMC 2450, Implementation Manual

Page: 29 / 262

Description Page 29 of 260
Secure Multimedia Controller Implementation Guide
• virtual IP address for the HA configuration
• subnet mask
Secure multimedia zones
Up to four user-defined SMZs can exist for each SMC stand-alone device or
HA cluster. Each zone is protected by a customizable stateful packet filter.
Zone configuration
Setup of an SMZ requires the following parameters:
• descriptive name
• dedicated ethernet port
• IP interface address
• subnet mask
• additional IP address and VRRP virtual IP address for HA configurations
Inbound/outbound access rules
The administrator specifies inbound access control rules for traffic that
originates in the intranet and flows into a security zone, and outbound access
control rules for traffic that exits a security zone and flows out to the intranet.
Configure inbound and outbound access rules separately. Each rule contains
the following parameters:
• the source and destination IP address for the traffic
• the service, such as a protocol or a list of port ranges, against which the
packets are matched
• whether the traffic is allowed or denied
• flow control parameters
Automatic rule generation
The SMC can automatically generate rules to protect traffic flowing into the
SMZs from the intranet. Rule sets are supported for the following subnets: