5. Configuration CCT 800
GE 800
28
4.2/0617
Firewall configuration
It is possible to define which cards communicate via which jacks of the G8-NET card. Additionally, it is
possible to configure which cards are allowed to use which jack (Uplink, Downlink or both).
Configuration CCT 800
IP - Settings >
tab
NET - Firewall
Activate the checkboxes
Uplink VLAN-ID
and
Downlink VLAN-ID
for each card, which is allowed
to communicate via the appropriate jack (see example 1):
Checkbox activated: For the card in this slot, the communication to the network over the “Uplink”
or “Downlink” jack is possible.
Checkbox deactivated: For the card in this slot, the communication to the network over the “Up-
link” or “Downlink” jack is not possible.7
In the fields
Uplink VLAN-ID
and
Downlink VLAN-ID
, enter
the VLAN IDs
for the communication
with the network in case the external switches are configured with VLAN.
Activate the checkboxes
NET-ARP for Uplink
and
NET-ARP for Downlink
to enable a NET
connection (see example 2):
Checkbox activated: The NET card establishes a NET connection to the next Intercom Server.
Checkbox deactivated: It is not possible to establish a NET connection to the network.
Activate the checkbox
Allow packets between up- and downlink
to enable communication via
the jacks “Uplink” or “Downlink” (see example 3):
Checkbox activated: It is possible that two networks can establish a connection over the “Uplink”
and “Downlink” jack.
Checkbox deactivated: It is not possible to establish a connection over the “Uplink” and “Down-
link” jack. It is just possible to establish a connection to the network.
Examples for firewall configuration
Example 1
The IP subscriber card shall only communicate with network “A”. The LAN card shall establish a con-
nection to both networks. To lock the communication between the IP subscriber card and network “B”,
the checkbox for the jack, which is connected with network “B”, has to be deactivated. In this example,
the checkbox “Downlink mask (Slot)” has to be deactivated for the G8-IP card.
NOTE: NET connection
For situations where the NET-card shall communicate with the network, however no NET-connec-
tions shall be possible (e.g. LAN-connection).
Slot
Card
Configuration
11
G8-IP
Uplink mask (slot)
Downlink mask (slot)
10
G8-LAN
Uplink mask (slot)
Downlink mask (slot)
