BS1200 and Network Access Security.
A Basic Network Primer
MCS v4.0 Firmware v2.0
9
Should the client require that a security solution remain in place then
(See figs 6c & 6d)
the
recommendation is to put a Firewall in place and follow the same procedure as the previous examples for a
Before and After a Firewall solution.
BS1200
PHONE LINKS
PBX OR KTS OR
ANALOG PHONES
LAN
INTERNAL
IP ADDRESS
NNN.NNN.NNN.NNN
(PUBLIC)
INTERNET
fig 6d
A NAT ROUTER EXAMPLE
(INSTALL A FIREWALL SERVER)
A BS1200 BEFORE THE FIREWALL
HUB
(PUBLIC)
NAT ROUTER
EXTERNAL
IP ADDRESS
NNN.NNN.NNN.NNN
(PUBLIC)
PORT 0
WITH NAT
TURNED OFF
HUB
ADD A
FIREWALL
Conclusion:
As you have seen the installation of the BS1200 VoIP Gateway into most existing Networks is fairly
simple if you remember just a few basic considerations.
1). Minimize delay whenever possible.
2). Always keep the BS1200 in a Static Public IP Address Zone.
3). Make sure the correct communications ports are available whenever required.
BS1200
PHONE LINKS
PBX OR KTS OR
ANALOG PHONES
LAN
fig 6c
EXTERNAL
IP ADDRESS
NNN.NNN.NNN.NNN
(PUBLIC)
NAT ROUTER
INTERNAL
IP ADDRESS
NNN.NNN.NNN.NNN
(PUBLIC)
PORT 0
WITH NAT
TURNED OFF
ADD A
FIREWALL
INTERNET
SWITCH
A NAT ROUTER EXAMPLE
(INSTALL A FIREWALL SERVER)
A BS1200 AFTER THE FIREWALL
(STATIC PUBLIC IP ADDRESS)
OPEN PORTS
Reference
TABLE 1
