atcomsystems.ca/forum Forums TDM Business Telephone Systems Toshiba Telephones & Systems CIX670 MIPU through SonicWALL

Hello!
I took on a new position, and with it came a network in need of an upgrade.
Currently, we have our ISP's Nokia 7210 SAS-M providing us our service over cat5e to a Netgear GS105 switch, which then connects to our CIX via MIPU card and our SonicWALL.
I would like to transition our WAN link to fiber, but I cannot with this Netgear switch in the way (I also don't trust it to handle the traffic we run through it).
From my understanding, it is done this way so the CIX can have a public-facing WAN IP.
I would like it if I can take my WAN link directly to the sonicwall via fiber, then have the MIPU card pull the IP through the sonicwall.
Is anyone familiar with a setup like this?
Do I need to bridge an IP link between the WAN interface and the interface I connect the MIPU to?
Should I use a VLAN and point the MIPU card to the VLAN IP?

Hello.

I don't know if I will be of much help. I have some experience with Sonicwall, but not enough to configure a public IP to another port. I can, however, Google as well as anyone. In other routers I have heard the public IP address pass-through refereed to Proxy ARP. In Sonicall I've heard it called Transparent IP Mode (Splice L3 Subnet).
These 2 help pages seems to refernce this:
https://help.sonicwall.com/help/sw/eng/5710/25/9/0/content/Ch27_Network_Interfaces.031.24.html
https://help.sonicwall.com/help/sw/eng/6920/26/2/4/content/PANEL_editInterface.html

You are correct regarding the MIPU. If you have any devices outside of your local network that are not connected vial VPN, then you will need to have the MIPU assigned with a Public IP address. You cannot NAT behind the firewall. The MIPU must have a public IP address assigned to it.

In at least 90% if my setups I will use another data switch as a DMZ to connect the MIPU to the Internet. I have been in several situations where I asked for a public IP address through the firewall, only to have the connection fails.

Toshiba says that they support and even recommend putting the MIPU behind a firewall, so I am assuming that if you can get the Sonicwall configured then this configuration should work. With the MIPU behind the firewall you would have the added benefit of being able to apply bandwidth management to the VoIP traffic.

Putting the MIPU behind the firewall of any brand will be OK for VoIP SIP trunks with the right port forwards enabled, BUT if you are intending to run a remote IPT handset this will NOT work in a NAT environment.
You will need to run the remote IPT handset over a VPN to the MIPU card that is behind the firewall.