Nortel Networks BSR222 manual Setting up the router for guest access

Page 38

38 Chapter 5 User Notes

Note: In DHCP Server mode, the BCM50 IP address will be the lowest address in the pool.

2Create the appropriate Firewall rules to add BCM50 access.

Go to FIREWALL / Summary, and create two WAN-to-LAN firewall rules:

One rule allowing access from allowed remote computer IP addresses, to the BCM50 IP address, for service type HTTPS(TCP:443)

One rule allowing access from allowed remote computer IP addresses, to the BCM50 IP address, for custom port TCP:5989

Setting up the router for guest access

The recommended approach to provide guest access is by creating an IP Alias, and using static addressing for the corporate equipment, to make it a member of the defined Alias subnet. Then use firewall rules to restrict access of the guest equipment. NOTE: if a BCM50 is used, it will also need to be assigned a static IP address.

1Go to LAN / IP Alias, and Enable IP Alias 1.

2Define a subnet for the corporate equipment.

3Statically assign addresses to the corporate equipment that are within the IP Alias subnet.

4Set up LAN / IP to enable DHCP Server, with an address range that will be used for guest equipment.

5In the FIREWALL, set up a LAN-to-LAN rule to block traffic between the guest subnet (DHCP Pool) and the corporate subnet (IP Alias subnet).

Note: If branch tunnels are being used, the policies on these tunnels should exclude the guest subnet.

Preventing heavy data traffic from impacting telephone calls

To ensure voice quality during heavy data traffic, bandwidth needs to be reserved for voice traffic.

NN47922-301

Page 37 Page 39
Image 38
Page 37 Page 39
Contents Nortel Business Secure Router 222 Fundamentals Copyright Nortel TrademarksContents Chapter User Notes Page NN47922-301 Preface Before you beginRelated publications Hard-copy technical manuals How to get help AC Power Adapter Specifications Chapter Introducing the Business Secure Router Internet account information worksheetIntroducing the Business Secure Router NN47922-301 Chapter Hardware installation Front panel Label DescriptionPower Rear panelHardware installation NN47922-301 Chapter Setting up your computer IP address Static or dynamic configuration Windows 2000/NT/XPSetting up your computer IP address Command Prompt Checking your computer IP addressSetting up your computer IP address NN47922-301 Chapter Configuring your Business Secure Router Accessing your Business Secure Router via the WebGUIConfiguring your Business Secure Router Configuring your Business Secure Router Using the wizard to configure for internet access Configuring your Business Secure Router Internet connection with ethernet Internet connection with PPPoE Internet connection with Pptp WAN IP address assignment Test your internet connection System DNS serversGeneral Chapter User NotesGeneral Notes Firewall VPN Client TerminationUser Notes Security RoutingConnecting two sites to establish a virtual private network Advanced Router ConfigurationSetting up the router when the system has a server Adding IP telephony to a multi-site network Allowing remote management of a LAN-connected BCM50 Setting up the router for guest access Preventing heavy data traffic from impacting telephone callsSetting Up a Remote Office with a UNIStim IP Telephone Inter-Operability With Third-Party Routers VPN Connections With Cisco RoutersChapter Troubleshooting Problem You cannot ping any computer on the LANProblem You cannot get a WAN IP address from the ISP Problem You cannot access the Internet
Top Page Image Contents