So the CUBE connects to a provider on the Internet? Hmmm. Interesting. Around here, the CUBE is on our network on one side, and the other is on a a dedicated, private network to the provider. No traffic on the Internet and no firewall.
The CUBE should not be an IP router. Of course, this is just me talking. d On Tue, Apr 21, 2015 at 11:59 AM, Brian Meade <[email protected]> wrote: > Ideally you can rely on SIP inspection on the FW to handle opening the > RTP pinholes. > > On Tue, Apr 21, 2015 at 1:38 PM, Jason Aarons (AM) < > [email protected]> wrote: > >> Would you open almost all your UDP RTP ports from CUBE in DMZ to inside >> phones? >> >> >> >> *From:* cisco-voip [mailto:[email protected]] *On >> Behalf Of *harbor235 >> *Sent:* Tuesday, April 21, 2015 1:35 PM >> *To:* Cisco VOIP >> *Subject:* [cisco-voip] CUBE Network Design >> >> >> >> >> >> I have infrastructure setup to provide VOIP services as well as other >> services to a multi-tenacy environment. I want to segregate those services >> as much as possible for security reasons. >> >> My question, customer resources are behind a edge router and a firewall, >> I want my cube positioned as close to the edge as possible for performance >> reasons. Cisco design docs have suggested that for larger sites terminating >> SIP traffic on a CUBE that best practice is to position the CUBE inside of >> the firewall. My thoughts are a DMZ like structure that connects to the >> firewall via two interfaces, inside and outside. This provides several >> controlled interfaces for policy enforcement. >> >> I wanted thoughts from the community on real world network design best >> practices when aggregating multiple tenancy environments providing VOIP >> with CUBE services. >> >> thanks in advance, >> >> >> >> Mike >> >> >> >> itevomcid >> >> _______________________________________________ >> cisco-voip mailing list >> [email protected] >> https://puck.nether.net/mailman/listinfo/cisco-voip >> >> > -- Copyright 2015 Derek Andrew (excluding quotations) +1 306 966 4808 University of Saskatchewan Peterson 120; 54 Innovation Boulevard Saskatoon,Saskatchewan,Canada. S7N 2V3 Timezone GMT-6 Typed but not read.
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
