There are two 10/100Base-T ports available on the MX main board, accessible on the rear panel of the system. One of these is connected to the client’s LAN to provide connectivity to devices such as PCs and IP phones. Both circuits may be connected to separate Ethernet ports of two different data switches to provide redundancy protection against customer-owned data equipment failure. In this configuration, the switch-over relies on the spanning tree protocol of the MX250 to perform the handover, and is automatic and requires no human intervention.
The MX250 and MX-SE can function as an edge router and connect directly to an ISP (Internet Service Provider). Default and static routes can be provisioned to control the proper routing of voice and data traffic.
The system incorporates a firewall with NAT, for connection to the Internet. Also DHCP, TFTP, and NTP servers provide services within the enterprise. Any of these functions may optionally be disabled if they are provided external to the MX.
The MX250 and MX-SE provide SIP application layer gateway (ALG) functionality when the internal NAT and firewall functions are used. This allows users to make SIP calls outside of the private address space used within the enterprise.
The MX250 provides VPN functionality for up to 50 users. This allows remote users to securely access all functions of the MX250 and the corporate network. This function resolves many issues that traveling personnel are likely to encounter when attempting to connect via airport and hotel wired and wireless networks.