Topic: how to make a device assessible but not compromise network

[dilligaf]

We have a 10.58.48.X network.
SME 7.
A vendor has placed a nortel BCM400 in our building and wants to be able to connect to it occasionally for purpose of diagnostics etc.

He claims it runs linux (does not know what version) and says he is sure it does not have antivirus, etc.

I want to help them connect when they need to, but do not want them to be able to see or access our network at all when they are connected.
Can anyone explain what I could do to accomodate them?
Thanks,

[Agent86]

how is he connecting ?

via internet, via local network, what type of interface does the phone system use when they connect to it is it behind the SME server, or in front. ?

[idp_qbn]

The Nortel BCm400 is a PABX, isn't it?
Unless you are doing VOIP, it should not need to be on your network. They can connect via dialup.

If they need it on your network, there should be a way of allowing a VPN, through a port redirected just to the BCM400. I don't know how to do this, but others will know.....
BUT you have to give more details of your setup (in generic terms, of course, ie changed addresses, server names, port numbers)

AND you will need to know how they want to connect to their PABX.eg web interface, console logon etc. And these details may be useful to whoever helps you.

Cheers
Ian