Download Functional Description
Transcript
Enterprise Cloud Functional Description 5.7.1 Available Features You can use the following features in vFirewall. Feature Overview Routing Feature A feature that connects to Internet Transit, VPN Transit and Server Segment, and performs the routing among them. Firewall Feature A feature that provides a dedicated vFirewall to the Customer inside the environment provided by Enterprise Cloud. Packet Filtering Feature A feature that sets whether IP communication is allowed or denied, among the routings that can be used by the routing feature. NAT/NAPT Feature A feature that translates IP addresses and ports among Internet Transit, VPN Transit and Server Segment. vFirewall IP Addresses The IP addresses used by vFirewall are shown below. Device Internet Transit VPN Transit vFirewall Virtual Network Interface for connecting to a Server Segment (called the "network interface on the Server Segment-side" below) ※ Allocatable IP Addresses Selected from Global IP Addresses that are ordered separately Selected from your VPN IP Address block (called "IP address block for VPN transit" below) NTT Communications selects two IP addresses from the IP address block for VPN transit (※) Two are selected from the available IP addresses in Server Segment. (※) Because it is configured in an active/standby structure, an active device uses one IP Address and a standby device uses one IP Address. You can specify the IP address on the Server Segment-side network interface only when the Server Segment is created based on the application form. If IP addresses have not been specified, they will be allocated automatically. You cannot change the IP addresses that are allocated to the Server Segment-side network interface. 159 ver2.36