Avaya BayRS Version 15.7.0.0 Notice Page 66

  • Download
  • Add to my manuals
  • Print
  • Page
    / 80
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 65
Release Notes for BayRS Version 15.7.0.0
52 308663-15.7 Rev 00
If you are using NAT and FireWall-1 on the same router, the FTP application
does not work correctly using port 20.
When disabled, the NAT Install Private Address feature does not block
advertisement of private addresses within a unidirectional NAT environment.
This feature is set using Site Manager (Install Private Address) or the BCC
(visible-private-address). In order to prevent a NAT private address from
being advertised into the NAT public domain, a RIP announce policy filter or
an OSPF announce policy filter must be configured (depending on which
routing protocol is used).
The following two sections describe how to configure RIP and OSPF
announce policy filters for unidirectional NAT.
Configuring a RIP Announce Policy Filter for Unidirectional NAT
Configure a RIP announce policy filter to ignore the networks in the private
domain. Using Site Manager (or the BCC), create a RIP announce policy and
set the Action parameter to Ignore. You should then specify matching criteria
for the RIP announce policy by entering the NAT private networks in the
Networks list and entering the IP address of the NAT public interface in the
Outbound Interfaces list.
For additional information about configuring RIP announce policies, see
Configuring IP, ARP, RARP, RIP, and OSPF Services.
Configuring an OSPF Announce Policy Filter for Unidirectional NAT
Do not configure OSPF on the NAT private interface(s). Otherwise, you will
not be able to prevent the advertisement of private networks into the OSPF
domain because these routes will be considered OSPF internal routes. OSPF
announce policy filters apply only to OSPF external routes.
For NAT to work with OSPF, the NAT router must be configured as an OSPF
ASBR (Autonomous System Border Router). As an OSPF ASBR, the NAT
private networks are injected into the OSPF domain as OSPF external routes.
To prevent this, an OSPF announce policy filter must be configured on the
NAT router. Using Site Manager (or the BCC), create an OSPF announce
policy and set the Action parameter to Ignore. You should then specify
matching criteria for the OSPF announce policy by entering the NAT private
networks in the Networks list.
For additional information about configuring OSPF announce policies, see
Configuring IP, ARP, RARP, RIP, and OSPF Services.
Page view 65
1 2 ... 61 62 63 64 65 66 67 68 69 70 71 ... 79 80

Comments to this Manuals

No comments