Phone Systems

Previous Thread
Next Thread
Print Thread
Rate Thread
Page 1 of 2 1 2
Public Static IP direct to 7000 series LAN port
#436046 01/25/10 05:33 PM
Joined: Sep 2007
Posts: 1,173
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,173
If a customer is not using CTI apps, and has an available static IP, we normally throw in a cheap router on our own.

Something like a Netgear 318 for 7200s and 7400s then port forwarding for the MCP, MGI/OAS, SVMi internal IPs. That makes sense and relieves us of the grief of dealing with the data guys.

NOW - on 7100s, 7030s, 7200-S systems where everything is embedded onto one card - I've noticed people saying that put them right on a public WAN IP. No firewall/router.

Is that acceptable? Is there anything to really 'hack' without IT tool and a password?

Just curious if people that set up their own remote maintenance outside/before the customer's network firewall if that is an option - just plugged right into the Wild Wild West. No QOS req or anything like that, just talking strictly about remote programming access.

Samsung Telephones and Equipment
Re: Public Static IP direct to 7000 series LAN port
#436047 01/25/10 06:29 PM
Joined: Nov 2009
Posts: 602
Samsung Moderator
*****
Offline
Samsung Moderator
*****
Joined: Nov 2009
Posts: 602
Probably not the best idea... pm sent

Re: Public Static IP direct to 7000 series LAN port
#436048 01/26/10 12:33 AM
Joined: Sep 2007
Posts: 1,173
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,173
Thanks. We will keep putting a cheap router in front in those situations.

Re: Public Static IP direct to 7000 series LAN port
#436049 01/26/10 05:47 PM
Joined: Apr 2008
Posts: 457
Member
Offline
Member
Joined: Apr 2008
Posts: 457
Ive always wondered about that to. The Tech that i replaced was natoriuos for puting every thing on the public which took 3 public addresses for the mcp/mgi/vm.I prefer to put them on the private and port foward but I dont see why that is any different than putting them on the public since you cannot change the ports on OSM and VM and stuff like that. Genisis I would like to here your Pm to Noisy and get another take on this. Thanks


Bobby Mreen
Communications Technician
Re: Public Static IP direct to 7000 series LAN port
#436050 01/26/10 05:52 PM
Joined: Nov 2009
Posts: 602
Samsung Moderator
*****
Offline
Samsung Moderator
*****
Joined: Nov 2009
Posts: 602
Well to put it vaguely IT tool or OSM are not the only way into the 7000's, 100's, 500's, or the MGI cards for that matter. Granted no one will be reprogramming your systems these ways but they can cause you some serious problems and money.

Re: Public Static IP direct to 7000 series LAN port
#436051 01/26/10 06:02 PM
Joined: Apr 2008
Posts: 457
Member
Offline
Member
Joined: Apr 2008
Posts: 457
Thats what I thought the concern was about but just wanted someone to reassure the concern. Thanks.


Bobby Mreen
Communications Technician
Re: Public Static IP direct to 7000 series LAN port
#436052 01/28/10 01:07 AM
Joined: Sep 2007
Posts: 1,173
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,173
I should add that I was only considering doing it on the 7030, 7100, and 7200-S where normally everything is at just one address.

If I had a 7200 with MCP, SVMi, OAS I definitely wouldn't use statics/direct on internet. That just doesn't seem to clean for communication between the backplane devices.

When the manual states that the MCP, SVMi, and MGI/OAS must be "on the same network" I don't think they meant using the public internet as that network frown .

Just the cheapest Linksys or Netgear does the job. I like the Netgear 318. Cheap and easy to program for port forwarding.

Funny about installing all three devices on a public/dirty switch!! Now that was a tech that didn't want to deal with a router ....

Re: Public Static IP direct to 7000 series LAN port
#436053 01/28/10 06:11 AM
Joined: Dec 2004
Posts: 4,096
Member
*
Offline
Member
*
Joined: Dec 2004
Posts: 4,096
I would be a little more concerned than that. The "tech only" ports used are not the big issue and are not likely to be trouble. The one to one NAT and or port forwarding are the biggest issues. Not that I condone the public side use, but bare with me here. What is the point behind port forwarding if it can not be monitored? Small cheap routers offer no security in this area.

K nuff of this, I will continue in private if you guys want. But the Public forum is not the place.

Re: Public Static IP direct to 7000 series LAN port
#436054 01/28/10 11:59 AM
Joined: Sep 2007
Posts: 1,173
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,173
Ok emailed you, thanks.

Re: Public Static IP direct to 7000 series LAN port
#436055 02/05/10 10:15 AM
Joined: Jan 2008
Posts: 28
Member
Offline
Member
Joined: Jan 2008
Posts: 28
I can add that when we were writing additional Network Monitor software for OS 7000 systems, we found one bad thing about MCP LAN interface. If you try to send for example 100 by second TCP/IP packets to it ( we used TCP/IP packet with one byte symbol and sent it to the TCP Alarm port for alive checking, and mistakenly sent them so often ) MCP will hang-up and will return to life only after reset. DDOS problems are present…


Mind the GAP!!!
_ _ _ _______ _ _ _
www.tehnoboard.com
www.ariasoho.com.ua
Page 1 of 2 1 2

Moderated by  Genesiscomm, nameless, pvj 

Link Copied to Clipboard
Forum Search
Most Recent 5 Post
Headset in-use relay
by SST - 07/08/20 06:33 PM
Partner ACS AA
by mtncomm1 - 07/08/20 04:18 PM
Samsung SVMI20i
by crazy canuck - 07/08/20 03:40 PM
Help with Electra Elite IPK
by ECI Tech - 07/08/20 11:56 AM
SL2100 New comer
by Biztel Cuban Okie Tech - 07/07/20 08:44 PM
Who's Online Now
32 members (ECI Tech, Skunky, Rok1215, EV607797, nortelvoip, justbill, Bob3470, Silversam, Yoda, RATHER BE FISHING, Carl Navarro, STS E, Bob-o, SST, hbiss, Curlycord, hitechcomm, pvj, jeffmoss26, Mercenary Roadie, JBean3329, ThePhoneConnection, mtncomm1, crazy canuck, barrick, nfcphoneman, Touch Tone Tommy, newtecky, MooreTel, Telesystems, VIBob, mike b), 353 guests, and 64 robots.
Key: Admin, Global Mod, Mod
Popular Topics (Views)
Forum Statistics
Forums94
Topics93,804
Posts636,316
Members49,310
Most Online5,661
May 23rd, 2018
Today's Birthdays
birdlady710, haegercp, tedparkes
Newest Members
StevCom, DaleG, jlspeck, Real Estating, ForestHillChurch
49310 Registered Users
Get Tech Support Now! Click the banner below
Get Tech Support Now!
EMP & Lightning Home Surge Protection
EMP - Click Here!
Top Posters (30 Days)
dexman 23
dans 10
Bluewater Sailing
https://www.patreon.com/bePatron?u=5256033
EMP Shield for Commercial - Home & Vehicle
Use Coupon code SAVE - Click Here!
Servpro Ventura 24-Hour Emergency Service
Free Estimates call us now 24Hours
Contact Us | Telephone System Tech Support | Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers.
©Copyright Sundance Communications 1998-2020
Trusted Partners