Phone Systems


Previous Thread
Next Thread
Print Thread
Rate Thread
Page 1 of 2 1 2
Public Static IP direct to 7000 series LAN port #436046 01/25/10 05:33 PM
Joined: Sep 2007
Posts: 1,119
Noisycow Offline OP
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,119
If a customer is not using CTI apps, and has an available static IP, we normally throw in a cheap router on our own.

Something like a Netgear 318 for 7200s and 7400s then port forwarding for the MCP, MGI/OAS, SVMi internal IPs. That makes sense and relieves us of the grief of dealing with the data guys.

NOW - on 7100s, 7030s, 7200-S systems where everything is embedded onto one card - I've noticed people saying that put them right on a public WAN IP. No firewall/router.

Is that acceptable? Is there anything to really 'hack' without IT tool and a password?

Just curious if people that set up their own remote maintenance outside/before the customer's network firewall if that is an option - just plugged right into the Wild Wild West. No QOS req or anything like that, just talking strictly about remote programming access.

Samsung Telephones and Equipment
Re: Public Static IP direct to 7000 series LAN port #436047 01/25/10 06:29 PM
Joined: Nov 2009
Posts: 602
Genesiscomm Offline
Samsung Moderator
*****
Offline
Samsung Moderator
*****
Joined: Nov 2009
Posts: 602
Probably not the best idea... pm sent

Re: Public Static IP direct to 7000 series LAN port #436048 01/26/10 12:33 AM
Joined: Sep 2007
Posts: 1,119
Noisycow Offline OP
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,119
Thanks. We will keep putting a cheap router in front in those situations.

Re: Public Static IP direct to 7000 series LAN port #436049 01/26/10 05:47 PM
Joined: Apr 2008
Posts: 461
bmreen Offline
Member
Offline
Member
Joined: Apr 2008
Posts: 461
Ive always wondered about that to. The Tech that i replaced was natoriuos for puting every thing on the public which took 3 public addresses for the mcp/mgi/vm.I prefer to put them on the private and port foward but I dont see why that is any different than putting them on the public since you cannot change the ports on OSM and VM and stuff like that. Genisis I would like to here your Pm to Noisy and get another take on this. Thanks


Bobby Mreen
Communications Technician
Re: Public Static IP direct to 7000 series LAN port #436050 01/26/10 05:52 PM
Joined: Nov 2009
Posts: 602
Genesiscomm Offline
Samsung Moderator
*****
Offline
Samsung Moderator
*****
Joined: Nov 2009
Posts: 602
Well to put it vaguely IT tool or OSM are not the only way into the 7000's, 100's, 500's, or the MGI cards for that matter. Granted no one will be reprogramming your systems these ways but they can cause you some serious problems and money.

Re: Public Static IP direct to 7000 series LAN port #436051 01/26/10 06:02 PM
Joined: Apr 2008
Posts: 461
bmreen Offline
Member
Offline
Member
Joined: Apr 2008
Posts: 461
Thats what I thought the concern was about but just wanted someone to reassure the concern. Thanks.


Bobby Mreen
Communications Technician
Re: Public Static IP direct to 7000 series LAN port #436052 01/28/10 01:07 AM
Joined: Sep 2007
Posts: 1,119
Noisycow Offline OP
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,119
I should add that I was only considering doing it on the 7030, 7100, and 7200-S where normally everything is at just one address.

If I had a 7200 with MCP, SVMi, OAS I definitely wouldn't use statics/direct on internet. That just doesn't seem to clean for communication between the backplane devices.

When the manual states that the MCP, SVMi, and MGI/OAS must be "on the same network" I don't think they meant using the public internet as that network frown .

Just the cheapest Linksys or Netgear does the job. I like the Netgear 318. Cheap and easy to program for port forwarding.

Funny about installing all three devices on a public/dirty switch!! Now that was a tech that didn't want to deal with a router ....

Re: Public Static IP direct to 7000 series LAN port #436053 01/28/10 06:11 AM
Joined: Dec 2004
Posts: 4,128
WRichey Offline
Member
*
Offline
Member
*
Joined: Dec 2004
Posts: 4,128
I would be a little more concerned than that. The "tech only" ports used are not the big issue and are not likely to be trouble. The one to one NAT and or port forwarding are the biggest issues. Not that I condone the public side use, but bare with me here. What is the point behind port forwarding if it can not be monitored? Small cheap routers offer no security in this area.

K nuff of this, I will continue in private if you guys want. But the Public forum is not the place.

Re: Public Static IP direct to 7000 series LAN port #436054 01/28/10 11:59 AM
Joined: Sep 2007
Posts: 1,119
Noisycow Offline OP
Member
OP Offline
Member
Joined: Sep 2007
Posts: 1,119
Ok emailed you, thanks.

Re: Public Static IP direct to 7000 series LAN port #436055 02/05/10 10:15 AM
Joined: Jan 2008
Posts: 29
Klerik Offline
Member
Offline
Member
Joined: Jan 2008
Posts: 29
I can add that when we were writing additional Network Monitor software for OS 7000 systems, we found one bad thing about MCP LAN interface. If you try to send for example 100 by second TCP/IP packets to it ( we used TCP/IP packet with one byte symbol and sent it to the TCP Alarm port for alive checking, and mistakenly sent them so often ) MCP will hang-up and will return to life only after reset. DDOS problems are present…


Mind the GAP!!!
_ _ _ _______ _ _ _
www.tehnoboard.com
www.ariasoho.com.ua
Page 1 of 2 1 2

Moderated by  Genesiscomm, nameless, pvj 

ShoutChat Box
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Most Recent 5 Post
CP20
by Coral Tech - 12/13/19 11:47 PM
CTX 100 IVP8 Transfers
by tmeier - 12/13/19 04:46 PM
CTX100 System move
by NKunn009 - 12/13/19 11:10 AM
Installer Requested in CA
by usedphones - 12/12/19 09:43 PM
Who's Online Now
46 registered members (Coral Tech, mreilly, Southernphoneman, justbill, Bob3470, JBean3329, Touch Tone Tommy, wanebo, Mercenary Roadie, Curlycord, crazysupratt, phonman123, OBT, BobRobert, newtecky, tmeier, RedBul, Silversam, Ruben, Vermont Joe, ahartsell, Comm.1, STS E, andydansby, barnito, KRRath, crazy canuck, hbiss, amontgomery, Professor Shadow, Yoda, Daniel, 1864, BTS01, cvrbob, adteldon, pvj, mbhydro, NKunn009, vicbob, MooreTel, metelcom, Bruno Torres, mongo5150, Skunky, Carl Navarro), 1,509 guests, and 484 spiders.
Key: Admin, Global Mod, Mod
Popular Topics(Views)
Forum Statistics
Forums62
Topics93,095
Posts633,114
Members49,192
Most Online5,661
May 23rd, 2018
Today's Birthdays
All Pro, got2b240, GWSmith, jacksonf4, Mlomeli07, tmalatino
NEC DX-40 PKG $299
NEC DX-40 PKG $299
EMP & Lightning Home Surge Protection
EMP - Click Here!
Top Posters(30 Days)
dexman 12
dans 8
POLYCOM SOUNDPOINT 10 Pack
FREE Voip Phone - Click Here!
50% OFF Most All Phones
FREE Voip Phone - Click Here!
RESPONSIVE WEBSITE DEVELOPMENT
Bluewater Sailing
Become a Patron! https://www.patreon.com/bePatron?u=5256033
Free Phone Repair Diagnostic
EMP Shield for Commercial - Home & Vehicle
Use Coupon code SAVE - Click Here!
Servpro Ventura 24-Hour Emergency Service
Free Estimates call us now 24Hours
Contact Us | Telephone System Tech Support | Terms of Service

Sundance Communications is not affiliated with any of the above manufacturers.
©Copyright Sundance Communications 1998-2019
Trusted Partners