HP VCX Software manual Network Configuration

Page 26

Chapter 4. Network Configuration

DMZ/LAN Configuration

Using this configuration, the Telecommuting Module is located on the DMZ of your firewall, and connected to it with one of the interfaces. The other interfaces are connected to your internal networks. The Telecommuting Module can handle several networks on the internal interface even if they are hidden behind routers.

This configuration is used to enhance the data throughput, since the traffic only needs to pass your firewall once.

On your firewall, you need to open the SIP port (normally UDP port 5060) and a range of UDP ports for RTP traffic between the Telecommuting Module and the Internet. The other interface is connected to your internal network. The Telecommuting Module can handle sev- eral networks on the internal interface even if they are hidden behind routers. No networks on other interfaces on the firewall can be handled.

Internal users have to configure the Telecommuting Module as outbound proxy, or an internal proxy has to use the Telecommuting Module as outbound proxy.

The Telecommuting Module derives information about your network topology from the in- terface configuration.

Standalone Configuration

Using this configuration, the Telecommuting Module is connected to the outside on one interface and your internal networks on the others.

Use this configuration only if your firewall lacks a DMZ interface, or for some other reason cannot be configured for the DMZ or DMZ/LAN alternatives.

Internal users have to configure the Telecommuting Module as outbound proxy, or an internal proxy has to use the Telecommuting Module as outbound proxy. No change in the firewall configuration is needed.

18

Image 26
Contents 3Com VCX IP Telecommuting Module Getting started GuidePage 3Com VCX IP Telecommuting Module Getting started Guide Page Table of Contents Page Part I. Installation of the 3Com VCX IP Telecommuting Module Page Configuration alternatives What is a Telecommuting Module?Introduction DMZ ConfigurationDMZ/LAN Configuration Standalone ConfigurationOverview of the Installation About settings in 3Com VCX IP Telecommuting Module License ConditionsInstallation with magic ping Installing 3Com VCX IP Telecommuting ModuleInstallation Installation with a serial cablePage Page Page Page Installation with a diskette Page Page Turning off a Telecommuting Module Remember to lock up the Telecommuting ModuleInstalling 3Com VCX IP Telecommuting Module Part II. Configuring 3Com VCX IP Telecommuting Module Page Network Configuration Telecommuting Module TypeNetwork Configuration General Interface Network Interface 1Telecommuting Module Type configuration Status Directly Connected NetworksPhysical device Interface nameIP address NameDNS Name Or IP Address Netmask/BitsAlias Router Static RoutingRouted network Main Default Gateways Default GatewayCancel SaveDynamic Policy For Packets From Unused GatewaysGateway Reference Hosts InterfaceNetworks and Computers Lower Limit NameSubgroup Delete Row Upper LimitInterface/VLAN CreateNetwork SurroundingsSurroundings Additional NegotiatorsData Interfaces Name of this Telecommuting Module Default domain IP PolicyBasic Configuration Policy For Ping To Your 3Com VCX IP Telecommuting ModuleDNS Servers Reverts all the above fields to their previous configuration Network Configuration SIP Configuration Basic SettingsAdditional SIP Signaling Ports SIP ModuleTransport Provisioning RelaySIP Media Port Range CommentServer Public IP address for NATed Telecommuting ModuleSIP Servers To Monitor Log class for SIP packets Log class for SIP signalingSIP Logging Log class for SIP license messagesDNS Override For SIP Requests Log class for SIP errorsRouting Log class for SIP media messagesDomain Relay ToFrom Network FilteringSender IP Filter Rules ActionContent Type Content TypesDefault Policy For SIP Requests Allow InteroperabilityURI Encoding Remote NAT Traversal Remote Clients Signaling ForwardingRemote SIP Connectivity Remote NAT traversalNAT keepalive method NAT timeout for UDPNAT timeout for TCP Media Route Configuration Allowed Via Interface Administration of the Telecommuting ModuleAccess Control User Authentication For Web Interface Access Configuration TransportConfiguration via Https Configuration ComputersConfiguration via Http Configuration via SSHVia IPsec Peer DNS Name Or Network AddressNetmask/Bits Range SSH Log ClassTest Preliminary Configuration Duration of limited test modeSave/Load Configuration Apply configurationSave to diskette BackupShow Message About Unapplied Changes Save/Load CLI Command File Reload Factory Configuration Revert to Old ConfigurationsAbort All Edits Administration of the Telecommuting Module Firewall Firewall and Client ConfigurationDMZ type Other DMZ/LAN typeSIP clients Standalone type SIP clients Index Apply
Related manuals
Manual 446 pages 4.55 Kb