Cisco Systems ONS 15600 9.2.7.2 Firewall Enabled

9-15

Cisco ONS 15600 Reference Manual, R7.2

Chapter 9 Management Network Connectivity

9.2.7 Scenario 7: Provisioning the ONS 15600 Proxy Server

Figure 9-12 shows the Figure 9-11 implementation with ONS 15600 ENEs in multiple rings. The

ONS 15600 GNEs and ENEs are provisioned with the settings shown in Tab le 9 -2.

Figure 9-12 Scenario 7: ONS 15600 Proxy Server With ENEs on Multiple Rings

9.2.7.2 Firewall Enabled

Tabl e 9- 3 shows the rules the ONS 15600 uses to filter packets when the firewall is enabled.

81210

Remote CTC

10.10.20.10

10.10.20.0/24

10.10.10.0/24

Interface 0/0

10.10.20.1

Router A

Interface 0/1

10.10.10.1

ONS 15600

GNE

10.10.10.100/24

ONS 15600

ENE

192.168.10.250/24

ONS 15600

ENE

192.168.10.150/24

ONS 15600

ENE

192.168.10.200/24

Ethernet

SONET

ONS 15600

GNE

10.10.10.200/24

ONS 15600

ENE

192.168.80.250/24

ONS 15600

ENE

192.168.60.150/24

ONS 15600

ENE

192.168.70.200/24

Contents

Main Cisco ONS 15600 Reference Manual Page CONTENTS Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page About this Manual Revision History Document Objectives Audience Related Documentation Document Conventions xxvi xxvii Page xxix Page Obtaining Optical Networking Information Where to Find Safety and Warning Information Cisco Optical Networking Product Documentation CD-ROM Obtaining Documentation and Submitting a Service Request Page Shelf and Backplane Hardware 1.1 Installation Overview 1.2 Bay Installation Page 1.3 Front Door 1.4 Rear Covers Page 1.5 Cable Routing 1.6 Customer Access Panel Page Page 1.7 Alarm, Timing, LAN, and Craft Pin Connections 1.7.1 External Alarm and Control Contact Installation 1.7.1.1 Visual and Audible Alarms 1.7.1.2 Alarm Cutoff and PDU Alarms 1.7.2 Timing Installation 1.7.3 LAN Installation 1.7.4 TL1 Craft Interface Installation 1.8 Power Distribution Unit 1.9 Power and Ground Description Page 1.10 Fan-Tray Assembly 1.10.1 Air Filter 1.10.2 Fan Speed and Failure 1.11 Cards and Slots 1.11.1 Card Slot Requirements 1.11.2 ASAP Card Cables 1.11.3 OGI Cables 1.11.4 Optical Card Cable Routing 1.11.5 Card Replacement Page Page Card Reference 2.1 Card Overview 2.1.1 Card Summary 2.1.2 Card Compatibility 2.2 TSC Card 2.2.1 TSC Slots and Connectors 2-4 2.2.2 TSC Faceplate and Block Diagram Figure 2-1 shows the TSC card faceplate and a block diagram of the card. 2.2.3 TSC Card-Level Indicators 2.2.4 TSC Network-Level Indicators 2.2.5 TSC Push-Button Switches 2.3 SSXC Card 2.3.1 SSXC Switch Matrix 2-7 2.3.2 SSXC Slots and Connectors 2.3.3 SSXC Faceplate and Block Diagram Figure 2-2 shows the SSXC card faceplate and a block diagra m of the card. 2.3.4 SSXC Card-Level Indicators 2.4 OC48/STM16 LR/LH 16 Port 1550 Card 2.4.1 OC48/STM16 LR/LH 16 Port 1550 Slots and Connectors 2-9 2.4.2 OC48/STM16 LR/LH 16 Port 1550 Faceplate and Block Diagram Figure 2-3 shows the OC48/STM16 LR/LH 16 Port 1550 faceplate an d a block diagram of the card. 2.4.3 OC48/STM16 LR/LH 16 Port 1550 Card-Level Indicators 2.4.4 OC48/STM16 LR/LH 16 Port 1550 Network-Level Indicators 2.4.5 OC48/STM16 LR/LH 16 Port 1550 Card OGI Connector Pinout 2.5 OC48/STM16 SR/SH 16 Port 1310 Card 2.5.1 OC48/STM16 SR/SH 16 Port 1310 Slots and Connectors 2-12 2.5.2 OC48/STM16 SR/SH 16 Port 1310 Faceplate and Block Diagram Figure 2-4 shows the OC48/STM16 SR/SH 16 Port 1310 faceplate an d block diagram. 2.5.3 OC48/STM16 SR/SH 16 Port 1310 Card-Level Indicators 2.5.4 OC48/STM16 SR/SH 16 Port 1310 Network-Level Indicators 2.5.5 OC48/STM16 SR/SH 16 Port 1310 Card OGI Connector Pinout 2.6 OC192/STM64 LR/LH 4 Port 1550 Card 2.6.1 OC192/STM64 LR/LH 4 Port 1550 Slots and Connectors 2-15 2.6.2 OC192/STM64 LR/LH 4 Port 1550 Faceplate and Block Diagram Figure 2-5 shows the OC192/STM64 LR/LH 4 Port 1550 faceplate and a block diag ram of the card. 2.6.3 OC192/STM64 LR/LH 4 Port 1550 Card-Level Indicators 2.6.4 OC192/STM64 LR/LH 4 Port 1550 Network-Level Indicators 2.6.5 OC192/STM64 LR/LH 4 Port 1550 Card OGI Connector Pinout 2.7 OC192/STM64 SR/SH 4 Port 1310 Card 2.7.1 OC192/STM64 SR/SH 4 Port 1310 Slots and Connectors 2-18 2.7.2 OC192/STM64 SR/SH 4 Port 1310 Faceplate and Block Diagram Figure 2-6 shows the OC192/STM64 SR/SH 4 Port 1310 faceplate an d block diagram. 2.7.3 OC192/STM64 SR/SH 4 Port 1310 Card-Level Indicators Indicator Color Description 2.7.4 OC192/STM64 SR/SH 4 Port 1310 Network-Level Indicators 2.8 ASAP Card 2.8.1 ASAP Connectors 2-21 2.8.2 ASAP Covers and Plugs 2.8.3 ASAP Card Faceplate and Block Diagram with 4PIOs Installed Figure 2-7 shows the ASAP card faceplate, with four 4PIOs installed, and block diagram. 2-22 2.8.4 4PIO Module Faceplate Figure 2-8 shows the 4PIO module faceplate. 2.8.5 1PIO Module Faceplate Figure 2-9 shows the 1PIO module faceplate. 2.8.6 ASAP Card-Level Indicators 2.8.7 ASAP Card Port-Level Indicators 2-24 2.8.8 ASAP Card Port Numbering (4PIO Installed) Figure 2-10 shows the installed 4PIO modules and corresponding port numbers for each SFP slot. 2.8.9 ASAP Card Port Numbering (1PIO Installed) 2.8.10 SFP Modules Page 2.8.11 XFP Description 2.8.12 PPM Provisioning 2.9 Filler Card Page Page Card Protection 3.1 Optical Port Protection Page 3.2 Unprotected Ports 3.3 External Switching Commands Page Cisco Transport Controller Operation 4.1 CTC Software Delivery Methods 4.1.1 CTC Software Installed on the TSC Card 4.1.2 CTC Software Installed on the PC or UNIX Workstation 4.2 CTC Installation Overview 4.3 PC and UNIX Workstation Requirements 4.4 CTC Login 4.4.1 Legal Disclaimer 4.4.2 Login Node Group 4.5 CTC Window 4.5.1 Node View 4.5.1.1 CTC Card Colors 4.5.1.2 Node View Card Shortcuts 4.5.1.3 Node View Tabs 4.5.2 Network View 4.5.2.1 CTC Node Colors 4.5.2.2 Network View Tabs 4.5.2.3 Link Consolidation 4.5.3 Card View Page 4.5.4 Export and Print CTC Data 4.6 CTC Card Reset 4.7 TSC Card Database 4.8 Software Load Revert Security 5.1 Users IDs and Security Levels 5.2 User Privileges and Policies 5.2.1 User Privileges by Security Level Page Page 5.2.2 Security Policies 5.2.2.1 Superuser Privileges for Provisioning Users 5.2.2.2 Idle User Timeout 5.2.2.3 Superuser Password and Login Privileges 5.3 Audit Trail 5.3.1 Audit Trail Log Entries 5.3.2 Audit Trail Capacities 5.4 RADIUS Security 5.4.1 RADIUS Authentication 5.4.2 Shared Secrets Page Page Timing 6.1 Timing Parameters 6.2 Network Timing 6-3 6.3 Synchronization Status Messaging Page Circuits and Tunnels 7.1 Overview 7.2 Circuit Properties Page 7.2.1 Concatenated STS Time Slot Assignments Page 7.2.2 Circuit Status 7.2.3 Circuit States 7.2.4 Circuit Protection Types 7.2.5 Circuit Information in the Edit Circuit Window Page Page 7.3 Cross-Connect Card Bandwidth 7.4 DCC Tunnels 7.4.1 Traditional DCC Tunnels 7.4.2 IP-Encapsulated Tunnels 7.5 Multiple Destinations for Unidirectional Circuits 7.6 Path Protection Circuits Page 7.7 Protection Channel Access Circuits 7.8 BLSR STS and VT Squelch Tables 7.8.1 BLSR STS Squelch Table 7.8.2 BLSR VT Squelch Table 7.9 Path Trace 7.10 Automatic Circuit Routing 7.10.1 Bandwidth Allocation and Routing 7.10.2 Secondary Sources and Destination 7.11 Manual Circuit Routing 7.12 Constraint-Based Circuit Routing 7.13 Bridge and Roll 7.13.1 Rolls Window 7.13.2 Roll Status 7.13.3 Single and Dual Rolls Page 7.13.4 Two Circuit Bridge and Roll 7.13.5 Protected Circuits 7.14 Merged Circuits 7.15 Reconfigured Circuits 7.16 Server Trails Page SONET Topologies and Upgrades 8.1 Overview 8.2 Point-to-Point and Linear ADM Configurations 8.3 Bidirectional Line Switched Rings 8.3.1 Two-Fiber BLSRs Page Page 8.3.2 Four-Fiber BLSRs Page Page 8.3.3 BLSR Bandwidth 8.3.4 BLSR Fiber Connections 8-10 8-11 8.4 Path-Protected Mesh Networks Page 8.5 In-Service Topology Upgrades 8.5.1 Point-to-Point or Linear ADM to Two-Fiber BLSR 8.5.2 Two-Fiber BLSR to Four-Fiber BLSR 8.5.3 Add or Remove a Node from a Topology Management Network Connectivity 9.1 IP Networking Overview 9.2 ONS 15600 IP Addressing Scenarios 9.2.1 Scenario 1: CTC and ONS 15600s on the Same Subnet 9.2.2 Scenario 2: CTC and ONS 15600s Connected to Router 9.2.3 Scenario 3: Using Proxy ARP to Enable an ONS 15600 Gateway 9.2.4 Scenario 4: Default Gateway on CTC Computer 9.2.5 Scenario 5: Using Static Routes to Connect to LANs Page 9.2.6 Scenario 6: Using OSPF 9-9 Page 9.2.7 Scenario 7: Provisioning the ONS 15600 Proxy Server 9.2.7.1 Firewall Not Enabled Page 9-14 9-15 9.2.7.2 Firewall Enabled Tabl e 9- 3 shows the rules the ONS 15600 uses to filter packets when the firewall is enabled. Page 9.2.8 Scenario 8: Dual GNEs on a Subnet 9-18 9.3 Provisionable Patchcords 9.4 Routing Table Page 9.5 External Firewalls Page 9.6 Open GNE 9-25 9.7 TCP/IP and OSI Networking 9.7.1 Point-to-Point Protocol 9.7.2 Link Access Protocol on the D Channel 9.7.3 OSI Connectionless Network Service Page 39.840F.80.000000.0000.0000.0000.xxxxxxxxxxxx.00 9.7.4 OSI Routing 9.7.4.1 End System-to-Intermediate System Protocol 9.7.4.2 Intermediate System-to-Intermediate System 9.7.5 TARP 9.7.5.1 TARP Processing 9.7.5.2 TARP Loop Detection Buffer 9.7.5.3 Manual TARP Adjacencies 9.7.5.4 Manual TID to NSAP Provisioning 9.7.6 TCP/IP and OSI Mediation 9.7.7 OSI Virtual Routers 9.7.8 IP-over-CLNS Tunnels 9.7.8.1 Provisioning IP-over-CLNS Tunnels 9.7.8.2 IP-Over-CLNS Tunnel Scenario 1: ONS Node to Other Vendor GNE 9.7.8.3 IP-Over-CLNS Tunnel Scenario 2: ONS Node to Router Page 9.7.8.4 IP-Over-CLNS Tunnel Scenario 3: ONS Node to Router Across an OSI DCN 9.7.9 OSI/IP Networking Scenarios 9.7.9.1 OSI/IP Scenario 1: IP OSS, IP DCN, ONS GNE, IP DCC, and ONS ENE 9.7.9.2 OSI/IP Scenario 2: IP OSS, IP DCN, ONS GNE, OSI DCC, and Other Vendor ENE 3 4 5 9.7.9.3 OSI/IP Scenario 3: IP OSS, IP DCN, Other Vendor GNE, OSI DCC, and ONS ENE Page 9.7.9.4 OSI/IP Scenario 4: Multiple ONS DCC Areas 9-50 9.7.9.5 OSI/IP Scenario 5: GNE Without an OSI DCC Connection 2 2 2 9.7.9.6 OSI/IP Scenario 6: IP OSS, OSI DCN, ONS GNE, OSI DCC, and Other Vendor ENE 9-52 9.7.9.7 OSI/IP Scenario 7: OSI OSS, OSI DCN, Other Vender GNE, OSI DCC, and ONS NEs OSI/IP Scenario 7 (Figure 9-36) shows an example of a E uropean network. 9-53 In European networks: IP-over-CLNS tunnels are widely accepted and deployed. CTC and CTM are used for management only. 9.7.9.8 OSI/IP Scenario 8: OSI OSS, OSI DCN, ONS GNE, OSI DCC, and Other Vender NEs 9-55 9.7.10 OSI Provisioning in CTC Ethernet Operation 10.1 Any Service Any Port Card Application 10.2 Transport Functionality Page 10.3 Ethernet Rates and Mapping 10.3.1 Frame Size 10.3.2 Encapsulations 10.3.3 Path and Circuit Sizes 10.3.4 Oversubscription 10.4 Protocols over Ethernet 10.4.1 Bridge Control Protocol 10.4.2 PPP Half Bridge 10.4.3 VLAN 10.5 Buffering and Flow Control 10.6 Autonegotiation 10.7 Gigabit EtherChannel/IEEE 802.3ad Link Aggregation Alarm Monitoring and Management 11.1 Overview 11.2 Alarms, Conditions, and History Page Page 11.2.1 Alarm Window 11.2.2 Alarm-Affected Circuits 11.2.3 Conditions Window 11.2.4 Conditions Window Actions 11.2.5 History Window Page 11.2.6 Alarm History Actions 11.3 Alarm Profiles 11.3.1 Alarm Profile Window 11.3.2 Alarm Profile Buttons 11.3.3 Alarm Profile Editing 11.3.4 Alarm Severity Option 11.3.5 Row Display Options 11.3.6 Alarm Profile Applications 11.4 Alarm Filter 11.5 Alarm Suppression 11.5.1 Alarms Suppressed for Maintenance 11.5.2 Alarms Suppressed by User Command 11.6 External Alarms and Controls 11.6.1 External Alarm Input 11.6.2 External Control Output 11.6.3 Virtual Wires for External Alarms in Mixed Networks Page Page Performance Monitoring 12.1 Threshold Performance Monitoring 12.2 Intermediate-Path Performance Monitoring Page 12.3 Pointer Justification Count 12.4 Performance-Monitoring Parameter Definitions Page Page Page 12.5 Optical Card Performance Monitoring 12.5.1 OC-48/STM16 and OC-192/STM64 Card Performance Monitoring Parameters Page 12.5.2 Physical Layer Parameters 12.6 ASAP Card Performance Monitoring 12.6.1 ASAP Card Optical Performance Monitoring Parameters 12.6.2 ASAP Card Ethernet Performance Monitoring Parameters 12.6.2.1 ASAP Card Ether Port Statistics Window Page Page 12.6.2.2 ASAP Card Ether Ports Utilization Window 12.6.2.3 ASAP Card Ether Ports History Window 12.6.2.4 ASAP Card POS Ports Statistics Parameters 12.6.2.5 ASAP Card POS Ports Utilization Window 12.6.2.6 ASAP Card POS Ports History Window Page SNMP 13.1 SNMP Overview 13.2 Basic SNMP Components Page 13.3 SNMP External Interface Requirement 13.4 SNMP Version Support 13.5 SNMP Message Types 13.6 SNMP Management Information Bases 13.6.1 IETF-Standard MIBs for ONS 15600 13.6.2 Proprietary ONS 15600 MIBs 13.7 SNMP Trap Content 13.7.1 Generic and IETF Traps 13.7.2 Variable Trap Bindings Page Page Page 13.8 Proxy Over Firewalls 13.8.1 Remote Monitoring 13.8.2 64-Bit RMON Monitoring over DCC 13.8.2.1 Row Creation in MediaIndependentTable 13.8.2.2 Row Creation in cMediaIndependentHistoryControlTable 13.8.3 HC-RMON-MIB Support 13.8.4 Ethernet Statistics RMON Group 13.8.4.1 Row Creation in etherStatsTable 13.8.4.2 Get Requests and GetNext Requests 13.8.4.3 Row Deletion in etherStatsTable 13.8.5 History Control RMON Group 13.8.5.2 Row Creation in historyControlTable 13.8.5.3 Get Requests and GetNext Requests 13.8.5.4 Row Deletion in historyControl Table 13.8.5.5 Ethernet History RMON Group 13.8.5.6 64-Bit etherHistoryHighCapacityTable Page Page A Hardware Specifications A.1 Shelf Specifications A.1.1 Bandwidth A.1.2 Slot Assignments A.1.3 Cards A.1.4 Configurations A.1.5 Dimensions A.1.6 Cisco Transport Controller A.1.7 External LAN Interface A.1.8 TL1 Craft Interface A.1.9 Modem Interface A.1.10 Alarm Interface A.1.11 BITS Interface A.1.13 Database Storage A.1.14 Environmental Specifications A.1.15 Power Specifications A.2 Card Specifications A.2.1 TSC Card Specifications A.2.2 SSXC Specifications A.2.3 OC48/STM16 LR/LH 16 Port 1550 Specifications Page A.2.4 OC48/STM16 SR/SH 16 Port 1310 Specifications A.2.5 OC192/STM64 LR/LH 4 Port 1550 Specifications A.2.6 OC192/STM64 SR/SH 4 Port 1310 Specifications A.2.7 ASAP Specifications A.2.8 Filler Card Specifications A.3 SFP/XFP Specifications Page Page B Administrative and Service States B.1 Service States B.2 Administrative States B.3 Service State Transitions B.3.1 Card Service State Transitions Page B.3.2 Port and Cross-Connect Service State Transitions Page Page Page C Network Element Defaults C.1 Network Element Defaults Description C.2 Card Default Settings C.2.1 Configuration Defaults C.2.2 Threshold Defaults C.2.3 Defaults by Card C.2.3.1 OC192_4 Card Default Settings Page Page Page Page C.2.3.2 OC48_16 Card Default Settings Page Page Page C.2.3.3 ASAP Card Default Settings Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page C.3 Node Default Settings Page Page Page Page Page Page Page C.3.1 Time Zones Page C.4 CTC Default Settings Page INDEX Numerics A B C Page D E F G H I J K L M N O P Page R S Page T U V W X