Avaya Aura Session Border Controller powered by Acme Packet Installation and Getting Started Guide 2010-09

3-3
Getting Started
Initial Switch Configuration
Port 1 (<slot>1) is sometimes referred to as the outside or public port because
traffic from the internal network is sent through this port to a public network.
Port 2 (<slot>2) is sometimes referred to as the inside or private port because
it functions as a normal traffic port in the private network. In addition,
management traffic and communications between the Extended Services zl
Module and the HP zl switch are sent on this port.
By default, both internal ports are untagged members of the default VLAN on
the HP zl switch. (The default VLAN is typically VLAN 1.)
Mapping SBC Internal Interfaces to Switch Ports
Communication must be configured between the Avaya Aura™ Session
Border Controller Application, running as a virtual machine on the Extended
Services zl Module’s System Platform, and the module’s ports. Table 3-1 shows
the necessary connections to be made.
Table 3-1. SBC and Extended Services zl Module Communication Interfaces
The Extended Services zl Module ports are members of switch VLANs carrying
the traffic targeted for the SBC. Each module port is an untagged member of
a single VLAN. A module port can also be a tagged member of multiple switch
VLANs.
You may choose whether or not to perform routing on the host switch.
CAUTION Because the Avaya Aura™ Session Border Controller Application has both
public and private interfaces, HP recommends you review standard switch
hardening practises to protect your private network. For more information,
see a ProCurve support technical white paper in the Reference library, Hard-
ening ProCurve Switches, at: www.hp.com/networking/support
Configuring Management VLAN and Interfaces
In this example, the default VLAN, VLAN 1, is configured to use a DHCP-BootP
IP address. The Extended Services zl Module is in Slot C and the module ports
are excluded from VLAN 1 as untagged members. The module ports also are
assigned interface names.
SBC Ethernet Interface Extended Services zl Module Port Use
eth0 Port 2 (C2, D2...) Inside/Private
eth1 Port 1 (C1, D1...). Outside/Public