Server-Gateway Configuration
on the Network Edge
In this configuration, the server functions as a firewall/Internet
gateway, which requires the server hardware to have two Ethernet interfaces—one
to connect to the external network (the Internet) and the other to connect
the internal network. The firewall provided by the MBG server is not configurable.
All default data traffic initiated insideeeeeev the network is allowed
while data traffic initiated outside the network is denied.
This setup enables you to prioritize voice traffic by programming
the maximum capacity of the MBG’s WAN links using the Bandwidth
Management feature.
Although it is technically feasible to install services such
as MiCollab on the gateway, it is not recommended. For optimum security,
services should be located in the DMZ or LAN.
Note:
- In the server-gateway configuration, the MBG server is the gateway for MBG traffic.
- If your server has a third network adapter, you
can use it as a dedicated interface for Clustering
or to implement the Server-Gateway
with Bridged Interface configuration.
- MBG can operate in parallel with a second, existing
firewall on the network edge. The two firewalls would handle different
types of traffic.
MSL Configuration
In MSL, do the following:
- Access the MSL Server Console
and select Configure this server.
- In Local Network Parameters,
enter the server's internal (LAN) IP address server or select the
default.
- In WAN Network Adapters, select the server's external
(WAN) adapter. The external (WAN) address MUST be:
- dedicated to the MBG Solution
- publicly routable
- reachable from the Internet and the internal network
(that is, the server should not
reside behind a NAT device)
MBG Configuration
In MBG, do the following:
- On the MBG main page, click the Network
tab and click Profiles.
- Select Server-gateway configuration
on the network edge.
- Select Apply Server-Gateway configuration.
When configuration is complete, the system will program the
RTP streaming addresses as follows:
- ICP-side streaming address = LAN interface address
- Set-side streaming address = WAN interface address
The following diagram provides an example of a “Server Gateway
Configuration on the Network Edge”: