Nortel Networks BSR222 manual

BSR2 22 Busin ess Sec ure Rout er Document Nu mber: NN47 922-301 Document V ersio n: 1.4 Date: May 20 07 Nortel Busines s Secure Ro uter 22 2 — Fundam entals[...]

2 NN47922-3 01 NN47922-3 01 Copyright © Nortel 2005–2006 All rights reserved. The informati on in this docu ment is subj ect to chang e withou t notice. The st atements , configu rations , technica l data, and recomme ndations in this doc ument ar e believed to be a ccurate and reliable, but are p resented wit hout exp ress or implie d warranty [...]

3 Nortel Busines s Secu re Rout er 222 — Fu ndamentals Content s Pref ace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 T ext conv entions . . . . . . . . [...]

4 Contents NN47922-3 01 W AN IP addres s assignm ent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 9 4.3 T est your in ternet conne ction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Chapter 5 User Note s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

5 Nortel Busin ess Secure Route r 222 — Fundamentals T able 1 Internet a ccount info rmation wo rksheet 1 1 T able 2 Front panel de tails 14 T able 3 Rear pane l details 15[...]

6 NN47922-3 01[...]

Pref ace 7 Nortel Bu siness Secu re Router 222 — Fundamen tals Preface This Qu ick Start Guide pro vid es instr uctions f or insta lling an d conf igur ing your Nortel Busi ness Secure Router 222 as an Of f ice Gat ew ay for you r network . After completi ng this gu ide, you can acc ess the I nternet secure ly throug h your Nor tel Business Secur[...]

8 Preface NN47922-3 01 Related publications F or more informa tion about us ing the Nortel Busines s Secure Router 222, refer to the fo llowing p ublic ati on: • Conf iguring a nd T r oub leshooti ng the Nortel Bu siness Se cur e R outer 222 (317517- A) DNS domain name se rver ENET Ethernet IP Inte rne t Prot oco l ISP Inte rne t Serv ice Pr ovid[...]

Pref ace 9 Nortel Bu siness Secu re Router 222 — Fundamen tals Har d-copy tec hnical manuals Y ou can print se lecte d technic al manua ls and rel ease not es free, d irectly from th e Intern et. Go to www .nortel.co m/document ation . Find t he prod uct for whi ch you need docume ntation. T hen loc ate the s pecif ic cat egory and model or ve rs[...]

10 Pref ace NN47922-3 01 AC Power Adapt er S pecificatio ns Use only po wer supp lies li sted in t he user i nstruc tions. Phihong, Mode l PSA21R-18 0 Note : Not t o re move the plu g and plug int o a wa ll ou tle t by its elf ; alw ays a ttac h the plug to the powe r supply f irst bef ore inse rt into t he wall. Leader , Model MU18-2180100-XX (XX [...]

Chapter 1 Introduc ing the Bu siness Secure Rou ter 11 Nortel Bu siness Secu re Router 222 — Fundamen tals Chapter 1 Intr odu cing the Business Secu re Router The Nortel Business Secure Rout er 222 is t he ide al secure g ate way for all data passing between the Inte rnet a nd the LAN. By in tegr ating Network Add ress T ran slation ( N A T) , fi[...]

12 Chapter 1 Introduc ing the Busines s Secu re Rou ter NN47922-3 01[...]

Chapter 2 Hardware instal latio n 13 Nortel Bu siness Secur e Router 22 2 — Funda mental s Chapter 2 Har d ware installation Caution: T o keep t he Busines s Secure Rout er opera ting at o ptimal intern al tempe rature, keep the botto m, sides , and re ar clear of obstruc tions and aw ay from th e e xhaust of other equ ipment. Caution: A C Power [...]

14 Chapter 2 Hardware installation NN47922-3 01 2.1 Fr on t pane l T able 2 Front panel details LABEL DESCRIPTION Step 1: 1- 4 Conn ect a com puter to one of the se po r t s with an E ther net cable. These po r ts are aut o-negot iating (ca n connec t at 10 or 100Mb/ s) and auto- sensi ng (autom atically adjust s to the t ype of Ethernet cab le y o[...]

Chapter 2 H ardware ins tallatio n 15 Nortel Bu siness Secur e Router 22 2 — Funda mental s 2.2 Rear panel T able 3 Rear pa nel de tail s LABEL DESCRIPTION Step 3 PO WER Connect th e incl uded po wer a daptor (us e only thi s adapte r) to this pow er s ocke t . After y ou ha v e mad e the con nections , conn ect the po w er cab le to a po w er su[...]

16 Chapter 2 Hardware installation NN47922-3 01[...]

Chapter 3 Setting up your comput er IP add ress 17 Nortel Bu siness Secur e Router 22 2 — Funda mental s Chapter 3 Setting up your compu ter I P address The BSR222 is already s et up to a ssign y our computer an IP addr ess. Use th is sectio n to se t up your co mputer to r ecei v e an IP ad dress or assign it a sta tic IP address in the 192 .168[...]

18 Chapter 3 Setting up your c ompute r IP addres s NN47922-3 01 Nort el re comm end s th at you do n ot us e a st atic IP ad dres s in the sa me range as the Busine ss Secu re Router DHCP s erve r address pool (192.168.1. 2 to 192. 168.1.33 b y def ault). 6 Click Advanced . Remo ve a ny pre viousl y ins talled ga te w ays in the IP Settings tab an[...]

Chapter 3 Setting up your comput er IP add ress 19 Nortel Bu siness Secur e Router 22 2 — Funda mental s 7 Click Obtain DNS se rver a ddress a uto mat ically if you do n ot kno w your DNS serv er IP address( es). a If you kno w yo ur DNS serv er IP addr esses, cl ick Use the f o llowing DNS server a ddres ses , and typ e them in th e Pref erred D[...]

20 Chapter 3 Setting up your c ompute r IP addres s NN47922-3 01[...]

Chapter 4 Configu ring yo ur Bu siness Secur e Router 21 Nortel Bu siness Secur e Router 22 2 — Funda mental s Chapter 4 Configuring y our Business Secure Router Choose on e of these methods to ac cess a nd conf igure th e Business S ecure Rou ter. This gui de sho ws you h ow t o use the W ebGUI wizar d only . See Nortel Business Secur e Router 2[...]

22 Chapter 4 Configu ring yo ur Busi ness Secur e Router NN47922-3 01 3 Nortel rec ommends you c hange the d efaul t passwo rd! Enter a ne w passw ord, retype it to conf irm it and clic k Appl y . Alterna ti vel y click Ig nor e to proc eed to the mai n menu if yo u do not wa nt to chan ge the password no w .[...]

Chapter 4 Configu ring yo ur Bu siness Secur e Router 23 Nortel Bu siness Secur e Router 22 2 — Funda mental s 4 Click Appl y in th e Replace Factor y Default Cer tificate scre en t o crea te a certi ficate us ing your Bus iness Sec ure Router MAC address , which will be specif ic to thi s device. 5 The W ebGUI MAIN MENU screen appe ars. • Sele[...]

24 Chapter 4 Configu ring yo ur Busi ness Secur e Router NN47922-3 01 4.2 Using the wizar d to configure f or internet access 1 Select WIZARD to dis pla y the fir st wiz ard sc ree n.[...]

Chapter 4 Configu ring yo ur Bu siness Secur e Router 25 Nortel Bu siness Secur e Router 22 2 — Funda mental s System Name is for i dentif icat ion purpos es. Ent er the name of your comput er in the Sys tem Nam e field, t o easily identif y your comput er . The Do main Name entry def ines th e domain name that is passed on to the DHCP client s o[...]

26 Chapter 4 Configu ring yo ur Busi ness Secur e Router NN47922-3 01 Internet connection with ethernet This v a riation is sho wn when the W AN port i s used as a re gular Ethernet . Choose eithe r Standard or a Road Runne r ISP v ersion. Y ou need your User Name , Pass word and Login Ser v er IP Addr ess for som e Roa d R unn er I SP versi ons .[...]

Chapter 4 Configu ring yo ur Bu siness Secur e Router 27 Nortel Bu siness Secur e Router 22 2 — Funda mental s Internet connection with PPP oE Point-t o-Point Prot ocol o ve r Etherne t ( PPPoE ) also funct ions as a dial- up connecti on. Ther efore, you also need a user name and pass word and p ossibly t he PPPoE servi ce name (f rom ISP). Selec[...]

28 Chapter 4 Configu ring yo ur Busi ness Secur e Router NN47922-3 01 Internet connection with PPTP Choose PPTP if your s ervice pr ovide r uses a DSL termina tor with PPTP log on. The B us ines s S ecu re Ro uter mu st h ave a stat ic I P ad dre ss i n th is ca se. Y ou ne ed a log on name , associat ed pas sword, th e PPTP serv er I P address , a[...]

Chapter 4 Configu ring yo ur Bu siness Secur e Router 29 Nortel Bu siness Secur e Router 22 2 — Funda mental s Click Next to co ntin ue. 3 Fill i n the f ields and cli ck Finish to save and com ple te th e wi zard setu p. W AN IP ad dress a ssignment Select Get automat ically f r om ISP if your ISP di d not assi gn you a fix ed IP addre ss. Sele [...]

30 Chapter 4 Configu ring yo ur Busi ness Secur e Router NN47922-3 01 System DNS servers Select From ISP if your ISP dynamica lly assi gns DNS serv er inf ormation ( and the Busi ness Secure Router's W AN IP ad dress) . The right f i eld display s the (read- only) DNS serv er IP ad dress that the ISP assigns . If you ch ose From ISP , but the [...]

Chapt er 5 U ser Notes 31 Nortel Bu siness Secur e Router 22 2 — Funda mental s Chapter 5 User Notes Gene ral Notes There ar e some route r functi ons th at, altho ugh perf orming as e xp ected, might cause so me confus ion. These are summariz ed belo w . General 1 Defaul t Address Mapping Rules When Firs t Enable N A T Full Featu re. When N A T [...]

32 Chapter 5 User Notes NN47922-3 01 5 Clickin g Sound The Busines s Secure Rou ter will cli ck once e v ery two min utes unt il an ADSL line is conne cted. Firew all 1 Address Ra nge V alidation In the f ire w all rul es, the route r does not conf i rm when gi ven an address range, that the second add ress is higher than the f irst . If this type [...]

Chapt er 5 U ser Notes 33 Nortel Bu siness Secur e Router 22 2 — Funda mental s If a VPN Cli ent user acc ount is de -acti v at ed, delete d, or change d, and that us er is current ly conn ected, th e connec tion is n ot automat ically dr opped. T o drop the connecti on, the administr ator nee ds to disc onnect th e user using the 'Discon ne[...]

34 Chapter 5 User Notes NN47922-3 01 When def ining a Clien t T erminatio n accou nt for ano ther Busin ess Secure Router that wi ll conn ect u sing Conti vi ty Clie nt Emul ation, t he fo llo wing conf igurati on is requi red: • Encr ypt ion m ust be Triple DE S wi th SH A1 in tegrit y , o r Triple DE S wit h MD5 inte grity . • IKE Encr yption[...]

Chapt er 5 U ser Notes 35 Nortel Bu siness Secur e Router 22 2 — Funda mental s Both RIP-1 and RIP-2 Adv anced Router Config uration The foll o wing no tes are i ntended t o help wi th adv anced router conf igurat ion. Settin g up the r outer when the sys tem has a server 1 If you ar e using a Full-Feat ure N A T conf iguratio n, f irst, do the f[...]

36 Chapter 5 User Notes NN47922-3 01 2 Repeat t hese step s at t he other e nd of the br anch. Note: If VPN Client T erminatio n is use d on these si tes, the c lient te rmination addr ess ran ge will nee d to be incl uded in t he tunnel pol icies in order f or t he VPN client s to see t he other si te. Adding IP telephon y to a m ulti-site netw or[...]

Chapt er 5 U ser Notes 37 Nortel Bu siness Secur e Router 22 2 — Funda mental s 2 Create a tunnel be tween t he sites , as des cribed abo v e. 3 Create a n H.323 trunk between the BCM50s, as p er the BCM50 User Guide. Configuring the r o uter to ac t as a N ortel VPN Server (Clie nt T ermination) 1 Under VPN / Client T ermina tion, a Enab le Cli [...]

38 Chapter 5 User Notes NN47922-3 01 Note : In DHCP Serve r mod e, th e BC M5 0 IP a ddres s will be t he lowe st addr ess in the pool. 2 Create t he appropr iate Fir e wall rules t o add BCM50 ac cess. Go to FIREW ALL / Summary , and c reate tw o W AN-to-LAN f ire wall rules: One rule allo wing a ccess fr om allo wed r emote computer IP addr esses[...]

Chapt er 5 U ser Notes 39 Nortel Bu siness Secur e Router 22 2 — Funda mental s 1 Determine your actua l W A N up-stre am bandwidth b y connect ing to a web site such as ht tp: //myvoi psp eed .vis ualwar e.co m/. 2 On B AND WIDTH MAN A GEMENT / Summary , acti v ate W AN bandwidth management, and f ill in your act ual upli nk speed in the W AN Sp[...]

40 Chapter 5 User Notes NN47922-3 01 Inter -Operabil ity With Thir d-P ar ty Routers VPN Connections With Cisco Router s When estab lishing a VPN Client tunne l or Branch Of f ice T u nnel be tween the Business Secure Router and a Cisco rout er , the follo wing c onfi guratio n rule s should be foll owed : 1 Ensure t hat the W AN IP of t he BSR222/[...]

Chapter 6 Troubleshoo ting 41 Nortel Bu siness Secur e Router 22 2 — Funda mental s Chapter 6 T roubleshooting Pr oblem: None of the LEDs turn on when y ou turn on the Business Secure R outer Make sure that you ha v e the cor rect po wer ad apter con nected to the Busi ness Secure Rou ter and t hat it i s plugged i n to an appr opriate po wer sou[...]

42 Chapter 6 Troubleshoo ting NN47922-3 01 Pr oblem: Y ou cannot get a W AN IP a ddress fr om the ISP The W AN IP is pro vided aft er the ISP ver if ies the MA C ad dress, hostn ame or user ID. Find out the v erif icat ion met hod used b y your ISP and conf igure the corres ponding f ield s. If the ISP checks t he W AN MA C a ddress, cl one the MA [...]