12-16
Cisco ONS 15454 SDH Reference Manual, R5.0
April 2008
Chapter12 CT C Network Connectivity
12.2.7 Scenario 7: Provisioning the O NS 15454 SDH Proxy Server
Figure 12-13 shows the implementation with ONS 15454 SDH ENEs in multiple rings. In the example,
ONS 15454 SDH GNEs and ENEs are provisioned with the settings shown in Table 12-2 on page 12-14.
Figure12-13 Scenario 7: ONS 15454 SDH Proxy Server With ENEs on Multiple Rings
Table12-3 shows the rules the ONS 15454 SDH follows to filter packets when Enable Firewall is
enabled.
Remote CTC
10.10.20.10
10.10.20.0/24
10.10.10.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
ONS 15454 SDH
GNE
10.10.10.100/24
ONS 15454 SDH
ENE
192.168.10.250/24
ONS 15454 SDH
ENE
192.168.10.150/24
ONS 15454 SDH
ENE
192.168.10.200/24
Ethernet
SDH
ONS 15454 SDH
GNE
10.10.10.200/24
ONS 15454 SDH
ENE
192.168.80.250/24
ONS 15454 SDH
ENE
192.168.60.150/24
ONS 15454 SDH
ENE
192.168.70.200/24
78238
Table12-3 Proxy Server Firewall Filtering Rules
Packets Arriving At: Are Accepted if the IP Destination Address is:
TCC2/TCC2P
Ethernet interface
The ONS 15454 SDH itself
The ONS 15454 SDH node’s subnet broadcast address
Within the 224.0.0.0/8 network (reserved network used for standard
multicast messages)
Subnet mask = 255.255.255.255
DCC interface The ONS 15454 SDH itself
Any destination connected through another DCC interface
Within the 224.0.0.0/8 network