Avaya VSU 7500 manuale d’uso

VSU-7500 VPNwar e Service Unit User Guide VPNet T echnologies, Inc.[...]

VSU-7500 Use r Guide Licenses, W arranties, Copyrights, and T rademarks THE SPECIFICA TIONS REGARDING T HE PRODUCTS IN THIS MANU AL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL ST A TEMENTS, INFORMA TION, AND RECOMMENDA TIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURA TE B UT ARE PRESENTED WITHOUT W ARRANT Y OF ANY KIND, EXPRESS OR IMPL IED. USERS MUST [...]

VSU-7500 User Guid e Limited W arranty Hardware VPNet T echn ol ogi es, Inc . (“ VPNe t”) w arr ant s that for a period of one (1) year from the da te of shipmen t from VPNet that the Har dware wi ll be free from defects in material an d workma nship und er normal use. T his limited warra nty ext ends onl y to Custom er a s the o rigin al purc [...]

VSU-7500 Use r Guide LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE THE PRODUCT EVEN IF VPNET OR ITS SUPPLIERS HA VE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAM AGE S. In no eve nt shal l VPN et’s or its supp lie rs’ li ab ilit y to Cu sto mer, whethe r in cont ract , to rt (includ ing neg li ge nce), or ot herw ise , e xc eed the pri [...]

T able of Contents Preface How This Guide Is Or ganized . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i Change Histor y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ii Product Regis tration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

VSU-7500 Use r Guide APPENDIX A Specifications APPENDIX B 10/100BAS E-T UTP Cr os sover Cable Pinou ts Glossa ry VSU Acronyms[...]

i Pr eface This u ser guide pr ovides in stallat ion and confi guration information f or the VSU-7500 VPN Service Unit (VSU). How This Gu ide Is Orga n ized Chapt er 1, Intr oduction , includes a fun ctio nal over view of the VSU-7 500 and i ts major compo nents along with site requirements fo r safe installation and operation of the VSU -7500. Cha[...]

ii VSU-7500 Use r Guide Change History Product Registration T o register t he VSU-7500 , navigate to http ://www.vpnet.com on the W orld Wi d e W e b . Contacting T echnical Suppo rt T echnical support is available to registered user s of the VSU-7500. • V oice: 1-888-V PNET-88 ( within U.S .) or +1 408-404-1 400 (outsi de U.S.) • F AX: +1 408-[...]

Introduction 1-1 Chapter 1 Intr oduction Functional Overview The VSU-7500 is a high-availability VPN gateway for large-scale, business- critical v irtual priv ate networks (VPNs). Design ed to provi de the high capacity , high a vailability , and f ail-over pro tection req uired by ente rprise and s ervice provider networks, the VSU-7500 of fers ex[...]

1-2 Introduction VSU-7500 Use r Guide and SKIP key management , Network A ddress T ranslatio n (NA T), ro uting, and packet filtering. Securi ty The V S U-7 500 p ro vi des da ta s tre am p ri va cy by e m plo ying cr ypt o gra phi c algorithms and keys powerful enough for the most sensitive business communications . It supports DES and T riple DES[...]

Introduction 1-3 VSU-7500 User Guid e VSU-7500 Components Each of the major VSU-7500 co mponents are sho wn in Figures 1- 1 and 1-2 and des c ri be d i n T ab l e 1-1 . Figure 1- 1 VSU-750 0 Front Panel Figure 1-2 VSU-750 0 Back P anel 14 12 13 15 10 9 8 2 5 4 11 3 6 7 1[...]

1-4 Introduction VSU-7500 Use r Guide Redundant Power Supplies The VSU- 7500 inclu des redundant power suppl y modules . If one fails, the second power supply instantly takes over , without disrupting the operation of the unit. Co ncurrently , an audible alarm s ounds, the green status LED indicator on the power supply subsy stem goes of f, and an [...]

Introduction 1-5 VSU-7500 User Guid e Both cooling fans are hot-sw appable and can be replaced without po wering down the VSU-75 00. Refer to Chapter 4, T roubles hooting, fo r instructi ons on replacing a defective cooling fan. Redundant Ethernet Ports The VSU-750 0 includes two dual-por t 10/100B ASE-T Ethernet cards, with one card design ated as[...]

1-6 Introduction VSU-7500 Use r Guide Gen eral S ite Requi remen ts This section describes the requirements your si te must meet for safe installation and operation of your system . Ensure that your site is properly prep ared before begi n ni ng in stall at ion. Environmental Requi rements The VSU- 7500 is int ended for us e in a normal office envi[...]

Introduction 1-7 VSU-7500 User Guid e Required Equipment The VSU- 7500 shippin g carton sho uld contain: T o install an d use the VSU-7500 in a t ypical netw ork, the cus tomer mus t supply : • Router provid ing connectivity to a W AN such as the Internet • 10/100B ASE-T Ethernet hub, router , or switch providing con nectivity to a LAN • CA T[...]

1-8 Introduction VSU-7500 Use r Guide The following inf ormation will help you plan an acceptable equipm ent rack configu ration. • Enclosed racks must have adequate v entilation. Ensure that the rack is not overly conges ted because each u nit generates heat. An enclosed rack shou ld have louve red sides and a fan to prov ide cooling ai r . • [...]

Installing the VSU-750 0 2-1 Chapter 2 Installing the VSU-7500 This chapter provides instructions for the following: • Installing the Power Supply Modules (page 2-1) • Rackmount Installation (page 2 -2) • Connecting the VSU-7500 to the Network (page 2-4) Installing the Power Supply Modu les The VSU-7500 power supply modu les are shipped ou ts[...]

2-2 Installing the VSU-7500 VSU-7500 Use r Guide Figure 2-1 Power Supply Installation Rackmount Install ation The VSU-7500 s hips with a VSU rackmount bracket kit, wh ich includes two L-shaped b rackets that attach to the sides of the VSU-7500 an d to the front o f a standar d 19 -inch equi p ment rack . Ref erri ng t o Fi gur e 2-2, perform the fo[...]

Instal ling the VSU- 750 0 2- 3 VSU-7500 User Guid e Figure 2-2 Installing the Ra ckmount Brackets[...]

2-4 Installing the VSU-7500 VSU-7500 Use r Guide Connecting the VS U-7500 to the Network Figur e 2-3 s hows a typ ical network using th e VSU-7500. Figure 2 -3 T ypica l VSU- 7500 Ha rdware Install ation Publi c Network VS U-75 00 Second ary Private P ort Second ary Public Port Primary Pr ivat e Port Primary P ublic Port Router Hub, S witch, R oute[...]

Instal ling the VSU- 750 0 2- 5 VSU-7500 User Guid e The VSU- 7500 fr ontpanel is sh own in Figure 2-4. Figure 2-4 VSU-750 0 Front panel Connect ors The auxili ary port on the VSU-75 00 is used for factory testing only and has no function in normal operation. The conso le port accepts an R S-232 DB-9 con nection from an as ynchronou s ASCII termina[...]

2-6 Installing the VSU-7500 VSU-7500 Use r Guide All interface Ethernet por ts are 10/100BASE -T compliant host ports. Th ey accept categor y 3, 4, or 5 UTP cabling terminated in an RJ-45 connector per IEEE 80 2.3 requirement s for 10 /100BASE-T . The Ethernet p orts do no t provide a cross-over function; therefore cross-over cables (provided with [...]

Preparing the VSU-7500 for Config uration 3-1 Chapter 3 Pr epari ng the VSU- 7500 for Configuration Preparation Before the VSU-7 500 can be incorporated in to a V irtual Private Network (VPN), it must be con figured through th e VPNmanager . However , to enable communication b etween the VPNmanager and the VSU-7500, you mu st first assign an IP add[...]

3-2 Preparing the VSU-75 00 for Configurati on VSU-7500 Use r Guide • The SuperUser nam e . This is the name th at is a uthor i zed to perfo rm any ki nd of configuration request on a VSU. This name is provided by the VPNmanager administrator the first time the VSU is added into the VPNmanager database. The SuperUser name is case sensitive. • T[...]

Preparing the VSU-750 0 for Configu ration 3-3 VSU-7500 User Guid e Figure 3-1 Initial Power On Bootup Sc reen for VSU VPNet Service Unit Model XXXX 3DES ENCRYPTION Runtime System version x.x.xx, x/xx/2000 Copyright (C) 1996-2000 VPNet Technologies, Inc. All Rights Reserved. -- Month Day 2000, 17:06:01 --ethernet0: MAC Address 00:60:a1:00:23:f9 eth[...]

3-4 Preparing the VSU-75 00 for Configurati on VSU-7500 Use r Guide Preconfigure the VSU-7500 to commun icate with the VPNmanager using the Qui c k Set up m enu sele ctio n a s des cr i be d be low : 1. From the Main Menu, select 5) Quick Setup. Y ou will be promp ted for the information required to set up the VSU . T o accept the current value and[...]

Preparing the VSU-750 0 for Configu ration 3-5 VSU-7500 User Guid e 4. T o prevent unauth orized users from acces sing the VSU-7500 through the console port, enter and confirm the new VSU console password. CAUTION: Do not for get this passw or d. As a security measur e, the only way to b ypa ss an un kn own c ons ole pass wo rd is to return t he VS[...]

3-6 Preparing the VSU-75 00 for Configurati on VSU-7500 Use r Guide 6. Select a traff ic mode from the T raff ic Configuration Menu. Permit all non-VPN traffic - When checke d (d efault), all non VPN traf fic is allowed t o pass thr ough th e VSU. Deny a ll IP n on-VPN tra ffic - When checked, all non-IP traffi c is passed thr oug h th e VSU . Deny[...]

Preparing the VSU-750 0 for Configu ration 3-7 VSU-7500 User Guid e 8. Enter the current date and time. This date and time sett ing are primarily used to ensure accurate timestamps when logging events. When changing either th e date or time, all thr ee parts of the date (MM-DD-YYYY) or time ( HH:MM:SS) must be en tered. A 2 4-hour clock is us ed wh[...]

3-8 Preparing the VSU-75 00 for Configurati on VSU-7500 Use r Guide FIPS Mode FIPS (Federal Information Processing Standards) Mod e forces the VSU to operate in a FIPS 1 40-1 Level 2 co mpliant mode. It is recomm ended that this mode onl y be used if your o rgani zation’ s policy req uires FIPS 1 40-1 Lev el 2 certification for cry ptographic dev[...]

T roubleshooting 4-1 Chapter 4 T r oubleshooting This chapter includes troubleshoo ting and replacement p rocedures for the VSU-75 00 power su pply modu les , coo l ing fans , and dual-p ort Ethern et modul es. Power Suppl y The VSU- 7500 includes redundant po wer supp ly modules. If one fails, the second power su pply inst antly takes o ver , with[...]

4-2 T roubleshooting VSU-7500 Use r Guide Power Supply Re moval and Replac ement Referring to Figure 4-1, perform the fo llowing steps to replace the defective powe r supp ly m odul e: 1. Locate the defective power supply modu le. The green LED indi cator on the defective power su pply mod ul e will be OFF . 2. Set the ON/OFF (I/O) switch of the de[...]

T r oublesho oting 4-3 VSU-7500 User Guid e Alternate P ower Supply Remova l and Replaceme nt Referring to Figure 4-2, perform the fo llowing steps to replace the defective powe r supp ly m odul e: 1. Unscrew the thumbscrew n ext to the hinged fa n assembly on the b ack of the unit and s wing th e fan assembl y open to ex pose the power suppl y mod[...]

4-4 T roubleshooting VSU-7500 Use r Guide Cooling Fan s The VSU-7500 inclu des two cooling f ans on the rear panel. If one f ails, the second fan will continu ed to prov ide suf ficient ai r circulati on to the VS U-7500, until the defective fan can be replaced. Each of the two co oling fans are hot-swappable and can be replaced withou t poweri ng [...]

T r oublesho oting 4-5 VSU-7500 User Guid e Ethernet Interface Modules The VSU-750 0 includes two dual-por t 10/100B ASE-T Ethernet cards, with one card design ated as the primary interface module and the second card designated as the secondary interface module. Th e public and private interface p orts are paired o n a single card. Thus, if a card-[...]

4-6 T roubleshooting VSU-7500 Use r Guide Fault Indication If either of the primar y inter face ports f ail, an error message is sent to the con sole port. In addition, SNMP trap and syslog erro r messages are sent to th e managemen t workstat ion. Removal and Replac ement The dual-por t 10/100BASE-T Ether net modules are en closed in the tamper- e[...]

Speci fications A-1 APPENDIX A Specifications Packet Encrypti on • DES enc r yp tio n ( 56 -bi t key) • T riple DES (EDE-CBC) encryption (168-b it key) • W eak and semi-weak key s are auto mat ically discarded Packet Authenticatio n • Keyed M D5™ AH M essage Digest Algorithm (RFC 1321) • HMAC-MD5 and HMAC SHA-1 (RFC 21 04 ) User Authent[...]

A-2 Specification s VSU-7500 Use r Guide Network A ddr ess T ransl atio n (NA T) • Supp orts st atic, dynam ic , an d port mapp ing • Rever s e addre ss tra nslati on for dy namic IP client s Protoc ol Su pp or t • IEEE 802.3, Eth ern e t • Full IPSec comp lia nce: R FC 240 1, 24 02, 24 03, 2 404, 2405 , 2406, 2407 , 2408 , 240 9, 241 0, 24[...]

Specifi cations A-3 VSU-7500 User Guid e Physical Securi ty • T amper - evi den t encl os ure ( F IPS 140 -1 Leve l 2) LAN Interface • Four 1 0/100B ASE-T E thern et ports Manage ment In terfaces • RS-232 and Et hernet Softw are Upgr ade • V ia built-in flash RAM Redu ndancy • Redun dant , hot-swap pabl e power sup plie s • Redun dant ,[...]

A-4 Specification s VSU-7500 Use r Guide[...]

10/100BASE-T UTP Cros sover Cable Pinouts B-1 APPENDIX B 10/100BASE-T UTP Cr ossover Cable Pinouts The 10 /100BASE-T U TP Crosso ver Cable d efined bel ow is pr ovided wi th the VSU-1200. Sign al Name Male RJ-45 Male RJ-4 5 TX+ 1 3 TX- 2 6 RX+ 3 1 RX- 6 2[...]

B-2 10/100BASE-T UT P Crossover Cable Pinouts VSU-7500 Use r Guide[...]

VSU-7500 Use r Guide G-1 GLO SSAR Y VSU Acr onyms CBC – Cipher Block Ch aining encry ption DES – Data Encrypt ion Standar d encrypti on DNS – Domain Name Server ( a distribut ed database s ystem used t o map hos t names to IP add resses and vice vers a) DCE – Data Communi cation Equi pment DSU/CSU – Data Service Unit/C hann e l Service Un[...]

G-2 VSU-7500 Use r Guide PPP – Point to Point Protocol RADIUS – Remote Authentication Dial-In User Server RFC – Requ est F or Co mm ent SHA – Secure Hash Algorithm SKIP – Simple Key Management for Internet Protoco l SNMP – Sim ple Netw o rk M ana geme nt Pr otoc ol SSL – Secure Socket Layer TCP/ IP – T ransm ission Contr ol Protoco [...]

Index B bootup screen 3-2 C conf igurati on preparation 3-1 conf iguri ng using qu ick set u p menu 3-4 conne ctions Ethern et LAN 2-6 rout er 2-6 co ns ol e pa s s w or d 3 - 5 contacting VPNet 1-ii D date and tim e 3-7 defaul t rout e 3-4 DES 1-2 E email sup port 1-ii environ men tal requirem ents 1-6 equipme nt prov ided by cu stome r 1-7 provid[...]