Edgewater Networks 4200 Series Manual de usuario

Page 1 Knowledgebase Solution Goal Enable coexistence of a 3rd-party VPN / Firewall with an EdgeMarc appliance. Describe characteristics and trade

Page 10 Limitations • This configuration is only possible on Edgewater appliances that provide VLAN support, (200/250/4300/4500/4600 Series EdgeMarcs

Page 11 Option B: Non-VLAN Edgewater appliance, non-VLAN switches, one WAN subnet Sub-option B1: Split LAN Ethernets Charocteristics • EdgeMarc

Page 12 Implementation Steps Utilizing the EdgeMarc GUI, follow the standard instructions (described in the user’s guide) to enable the following on t

Page 13 Sub-option B2: One LAN Ethernet Edgewater does not recommend this design. With one LAN Ethernet and only one LAN on the EdgeMarc, broadcas

Page 14 Option C: VLAN or Non-VLAN Edgewater appliance, non-VLAN switches, two WAN subnets Sub-option C1: VLAN-capable EdgeMarc Characteristics •

Page 15 Implementation Steps for the example Step 1 Utilizing the EdgeMarc GUI, follow the standard instructions (described in the user’s guide) to e

Page 16 VLAN 2 Port Membership: VLAN 2730 Port Membership:

Page 17 VLAN Port Configuration: 9. Enable NAT 10. Enable ALG functionality o Specify VLAN 2730 for the ALG 11. Enable Traffic Shaping 12. Disable DH

Page 18 Sub-option C2: Non-VLAN EdgeMarc Characteristics • EdgeMarc provides DHCP, Firewall and NAT to phones • VPN / Firewall provides DHCP, Fire

Page 19 Step 2 Configure Pass-Through Rules for Public DMZ. Pass-Through Rules Page: LAN sub-interface:

Page 2 Solution Note: The descriptions below assume VOS v5.1 or later. Those configurations that do not utilize Proxy ARP will also work for older ve

Page 20 Option D: VLAN-capable Ethernet switch, VLAN or Non-VLAN Edgewater appliance Sub-option D1: VLAN-capable EdgeMarc Characteristics • EdgeM

Page 21 Implementation Steps Utilizing the EdgeMarc GUI, follow the standard instructions (described in the user’s guide) to enable the following on t

Page 22 VLAN 2 Port Membership: VLAN 2730 Port Membership:

Page 23 VLAN 200 Port Membership: VLAN Port Configuration: 2. Enable NAT 3. Enable ALG functionality o Specify VLAN 200 for the ALG 4. Enable Traf

Page 24 5. Enable DHCP on VLAN #200 When done, the DHCP page should look similar to the following: 6. Enable Firewall 7. System -> Proxy ARP Con

Page 25 When done, the Proxy ARP screen should look similar to the following:

Page 26 Sub-option D2: Non-VLAN EdgeMarc Characteristics • EdgeMarc provides NAT, Firewall and DHCP Plug ‘n Dial to phones • 3rd-party firewall

Page 27 Implementation Steps Utilizing the EdgeMarc GUI, follow the standard instructions (described in the user’s guide) to enable the following on t

Page 28 Option E – 3rd-party Firewall in front of Edgewater appliance Characteristics • External device provides port firewalling • EdgeMarc provide

Page 29 Step 1 Follow the standard instructions (described in user’s guide) to enable the following on the EdgeMarc: 8. Enable NAT (all configs) 9. En

Page 3 Option A: VLAN-capable Edgewater appliance, non-VLAN switches, one WAN subnet Sub-option A1: Split LAN Ethernets Characteristics • EdgeMar

Page 30 LAN sub-interface Configuration: Step 3 The Firewall must be configured to pass through VoIP protocols to the EdgeMarc. The firewall can n

Page 31 plus any addl. ports specified on the VoIP ALG page SIP, Media Server TCP 16386:16985 H.323 phones Q.931 TCP 1720 RAS UDP 1719 H.245 TC

Page 4 Implementation Steps Utilizing the EdgeMarc GUI, follow the standard instructions (described in the user’s guide) to enable the following on th

Page 5 VLAN 2 Port Membership: VLAN 2730 Port Membership:

Page 6 VLAN Port Configuration: 2. Enable NAT 3. Enable ALG functionality o Specify VLAN 2730 for the ALG 4. Enable Traffic Shaping 5. Enable DHCP

Page 7 When done, the Proxy ARP screen should look similar to the following: PROXY ARP Page:

Page 8 Sub-option A2: Single LAN Ethernet, using separate PC & Phone subnets Characteristics • EdgeMarc provides NAT and Firewall to phones •

Page 9 Implementation Steps Follow all the steps in Sub-option A1: Split LAN Ethernets, above, except: • Skip step 5. Enable DHCP on VLAN #2730 Sub-o