Nortel Networks 1100 manuale d’uso

Version 7.05.300 NN46110-313 02.01 314961-G Rev 01 November 2007 Standard 600 Technology Park Drive Billerica, MA 01821-4130 Nor t el VPN Router Installation — VPN Router 1010/1050/1100[...]

2 NN46110-313 02.0 1 Copyright © 2007 Nortel Ne tworks. All rights reserved. The information in this document is subj ect to change without notice. The statements, config urations, technical data, and recommendations in this docume nt are believ ed to be accura te and reliable, but are presen ted without e xpress or implied warranty . Users must t[...]

3 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 EC Decl aration of Conf ormity This product conforms (or these products conform) to the provisions of the R&TTE Directi v e 1999/5/EC. Japan/Nippon requi rements only Denan statement V oluntary Control Council f or Inte rference (VCCI) statement (Class B) Canada requirements only [...]

4 NN46110-313 02.0 1 “Software” is o wned or licensed by Nortel Networks, its parent or one of its subsidiaries or aff iliates, and is copyrighted and licensed, not sold. Softw are consists of machine-readable instructions, its components, data, audio-visual content (such as images, text, r ecordings or pict ure s) and related licensed mate ria[...]

5 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 c. Customer is responsible for pa yment of any taxes, including pers onal property taxes, resulting from Customer ’ s use of the Software. Custom er agrees to comply with all applic able laws including al l applicable export and import laws and regulations. d. Neither party may brin[...]

6 NN46110-313 02.0 1[...]

7 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Contents New in this release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1 3 1000BASE-T (1000 G T) Ethernet [...]

8 Contents NN46110-313 02.0 1 1000BASE-T (1000 G T) Ethernet interface card LEDs . . . . . . . . . . . . . . . . . . . . . 30 56/64K CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 ADSL W AN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 T1/E1 CSU/DSU W A[...]

9 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Figures Figure 1 VPN Router 600 1010/1050/1 100 series . . . . . . . . . . . . . . . . . . . . . . . . . 21 Figure 2 VPN Router 600 1010 front view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Figure 3 VPN Router 600 1050 front view . . . . . . . . . . . . . . . . [...]

10 Figures NN46110-313 02.0 1[...]

11 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Ta b l e s T able 1 Items shipped with the VPN Router 600 1010 , 1050, and 1 100 . . . . . . . . 22 T able 2 Power cord requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 T able 3 Front panel LED indicators . . . . . . . . . . . . . . . . . . . [...]

12 Tables NN46110-313 02.0 1[...]

13 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Ne w in this release The follo wing section details what’ s new in Nortel VPN Router Installation— VPN Router 1010/1 050/1 100 (NN46110-31 3) for Release 7.05.300: Features See the follo wing section for in formation about feature changes: 1000B ASE-T (1000 GT) Ethernet car d The[...]

14 New in this release NN46110-313 02.0 1[...]

15 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 How to get help This chapter expl ains ho w to get help for Nortel products and services. Finding the latest updates on the Nor tel W eb site The content of th is documentation was current at the time the product was released. T o check for updates to the la test documentation and so[...]

16 How to get help NN46110-313 02.0 1 Getting help o ver the phone fr om a Nortel Solutions Center If you do not find the information you require on the Nortel T echnic al Support W eb site, and you h a ve a Nortel support contract, you can also ge t help ove r the phone from a Nortel Solutions Center . In North America, call 1-8 00-4NOR TEL (1-800[...]

17 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Preface The VPN Router 10 10, 1050, and 1100 are part of the No rtel VPN Router system. Nortel VPN Routers support secure, relia b le IP VPNs in a single, inte grated hardware de vice. Throughout this guide, the VPN Router 1010, 1 050, and 1100 are also referred to collectiv ely as t[...]

18 Prefac e NN46110-313 02.0 1 T ext con ventions This guide uses the follo wing te xt con v entions: Acr on yms This guide uses the follo wing acronyms: bold Courier text Indicates command names and o ptions and te xt that you need to enter . Example: Use the show health command. Example: Enter terminal paging { off | on } . italic text Indicates [...]

Preface 19 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Related publications For mo re information about using the VPN Router 1010, 105 0, and 1100 (formerly kno wn as the Conti vity Secure IP Services Gatew ay 1010, 1050, and 1100), refer to the follo wing pu blications (included on the VPN Rou ter software CD): • Release notes[...]

20 Prefac e NN46110-313 02.0 1 • Nortel VPN Router Config uration — Advanced F eatur es (NN46110-502) provides instructions for conf iguring 80 2.1Q VLANs, circuitless IP , adv anced W AN settings, PPP , PPPoE, frame rela y , ADSL and A TM, T1/E1 CSU/DSU interfaces, dial services a nd BIS, DLSw , IPX, and Hardware Accelerator cards. • Nortel [...]

21 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Chapter 1 Har d ware o ver view The Nortel VPN Router 1010 /1050/1100 series pro vides scalable, secure, manageable extranet access for up to f i ve concurrent tunnels across the public data network. These models are based on Intel architecture with a 300 MHz Celeron CPU and 128 MB S[...]

22 Chapter 1 Hardware overview NN46110-313 02.0 1 Ta b l e 1 lists the hardware accessories an d other items shipped with the VPN Router 1010, 1050, and 11 00. Inspect all items for shipping d amage. If yo u detect any damage, do not install the VPN Router 1010/1050/1100. Call the Nortel T echnical Solutions Center in yo ur area ( “How to get hel[...]

Chapter 1 Hardwa re overview 23 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Internal LAN connections (LAN 0 and LAN 1) The VPN Router 1010, 10 50, and 1100 hav e two in ternal LANs b uilt in: • LAN 0 is the private LAN and also the LAN to use for W eb ma nagement. • LAN 1 defaults to a public LAN. The softw are refers to the [...]

24 Chapter 1 Hardware overview NN46110-313 02.0 1 Figure 3 VPN Router 1050 front view Figure 4 VPN Router 1 100 front view 10676EA VPN Router 1050 A B C LAN 0 D LAN 1 Console Boot/Ready LED Alert LED 10/100 Mb/s LEDs Link/Activity LEDs 10677EA A B C LAN 0 D LAN 1 Console VPN Router 1100 Boot/Ready LED Alert LED 10/100 Mb/s LEDs Link/Activity LEDs[...]

Chapter 1 Hardwa re overview 25 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Rear view of the gatewa y Figure 5 sho ws the rear vie w of the VPN Router 10 10, 1050, and 1100 . Figure 5 Rear view of the VPN Router 1010/1050/1 100 The compon ents on the re ar of the g ate way include the follo wing: • The port labeled “DC Input?[...]

26 Chapter 1 Hardware overview NN46110-313 02.0 1 Connecting the po wer cor d Y ou must order the po wer cord for the VPN Router 1010/1 050/1100 separately . The po wer cord must meet the requirements described in Ta b l e 2 . T o connect the po wer cord and turn on the po wer: 1 Plug the po wer cord into the A C rece ptacle on the external po wer [...]

Chapter 1 Hardwa re overview 27 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 2 Plug the po wer cord into the A C power outlet. 3 Plug the external po wer supply into th e port labeled “DC Input” on the back of the gate way ( Figure 5 on page 25 ). 4 Press the po wer switch to the “on” position and wait for the gate way to [...]

28 Chapter 1 Hardware overview NN46110-313 02.0 1 Figure 6 Front panel of the VPN Router 1010 Ta b l e 3 describes the LEDs on the VPN Router 1010/1050/1100 front panel. For complete information ab out the health check, see Nortel VPN Router T r oubleshooting ( NN46110-602). Ethernet port LEDs T o confirm that you cabled the Ethernet LAN interf ace[...]

Chapter 1 Hardwa re overview 29 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Ta b l e 4 describes the Ethernet port LEDs o n the VPN Router 1010/1050/1100. 10/100B ASE-TX Ethernet interface car d LEDs Figure 7 sho ws the LEDs on the 10/100 B A SE-TX Ethernet interface card. Figure 7 LEDs on th e 10/100BAS E-TX Ethernet in terface [...]

30 Chapter 1 Hardware overview NN46110-313 02.0 1 1000B ASE -T (1000 GT) Ethern et interface car d LEDs The follo wing f igures sho w the LEDs on the 1000B ASE-T (1000 GT) Ethernet interface card. Although th e card supports 10/100/100 0 Mbit/s operation, the VPN Router 1100 only supports 10/100 Mbi t/s operation. Figure 8 LEDs on the full-height 1[...]

Chapter 1 Hardwa re overview 31 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 56/64K CSU/DSU W AN interface card LEDs Figure 10 shows the LEDs on the 56/64K CSU/DSU W AN interface card. Figure 10 LEDs on the 56/64K CSU/DSU WAN interface card Ta b l e 7 describes the LEDs on the 56/6 4K CSU/DSU W AN interface card. ADSL W AN interfa[...]

32 Chapter 1 Hardware overview NN46110-313 02.0 1 Ta b l e 8 describes the LEDs on the ADSL W AN interface card. T1/E1 CSU/DSU W AN interface card LEDs Figure 12 shows the LEDs on the T1/E1 CSU/DSU W AN interface card. Figure 12 LEDs on the T1/E1 CSU/DSU W AN inte rface card T able 8 LED indicators o n the ADSL WAN interface card CONN LED Tx/Rx LED[...]

Chapter 1 Hardwa re overview 33 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Ta b l e 9 describes the LEDs on the T1 /E1 CSU/DSU W AN interface card. Single V .35/X.21 W AN interface card LEDs Figure 13 shows the LEDs on the single V .35/X.21 W AN interface card. Figure 13 LEDs on the single V .35/X .21 W AN interface card Ta b l [...]

34 Chapter 1 Hardware overview NN46110-313 02.0 1 LED 3 Green Powe r to the adapter is on and th e onboard microcode is loaded. LED 4 Green Cable is detected. T able 10 LED indicators on the single V .35/X.21 W AN interface card[...]

35 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Chapter 2 Installing option car ds in the Nor tel VPN Router 1100 The Nortel VPN Router 1100 has two e xpansion slots for op tion cards. This chapter provides instructions about ho w to install and replace LAN, W AN, and serial option cards in the VPN Router 1100. Ta b l e 1 1 lists [...]

36 Chapter 2 Installing option c ard s in the Nortel VPN Router 1100 NN46110-313 02.0 1 T o install a ne w LAN, W AN, or serial option card: 1 Use the W eb GUI or the command line interface to shut do wn the g ate way . • W eb GUI: Choose Admin > Shutdo wn. Select the option to po wer of f the gate way after shutdo wn. • Command line interfa[...]

Chapter 2 Installing option cards in the No rtel VPN Router 1100 37 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 7 Remov e the four screws on the sides of the VPN Router 1100. 8 Slide the chassis cov er aw ay from the base. The VPN Ro uter 1100 system board is no w exposed. Figure 14 on page 37 sho ws the location of the option ca[...]

38 Chapter 2 Installing option c ard s in the Nortel VPN Router 1100 NN46110-313 02.0 1 10 Attach an antistatic wrist strap (not included with the VPN Router 1100 shipment). 11 Remov e the blank card bracket (or the option card that you are replacing) from the slot. 12 Install the ne w option card. Press the card all the way into the PCI connector [...]

Chapter 2 Installing option cards in the No rtel VPN Router 1100 39 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 18 Press the po wer switch to the on position and wait for the gate way to boot. Caution: The boot process ca n take as long as 3 minutes. Do not turn the po wer of f and on again; rec ycling the po wer quickly can caus[...]

40 Chapter 2 Installing option c ard s in the Nortel VPN Router 1100 NN46110-313 02.0 1[...]

41 Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 Appendix A T echnical specifications This appendix prov ides technical specif ications for the VPN Router 1010 , 1050, and 1100 chassis and for their interfaces. Chassis specifications Ta b l e 1 2 lists the physical spec if ications for the VPN Router 101 0, 1050, and 1100 chassis. [...]

42 Appendix A Technical specifications NN46110-313 02.0 1 System por ts The VPN Router 1010/1050/110 0 system board pro vides the follo wing interfaces: • 10/100B ASE-TX Ethernet LAN ports • Serial port This section provides info rmation about the 10/100B A SE-TX Ethernet LAN ports and the serial port on the system board. 10/100B ASE-TX Etherne[...]

Appendix A Technical specifications 43 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 • 10B ASE-T co nnections can use Cate gory 3, 4, or 5 twisted-pair wiring. Ta b l e 1 4 provides the 10/10 0B ASE-TX Ether net port pinouts for the system ports on the VPN Router 1100. Serial por t The system board provides a serial port on the f[...]

44 Appendix A Technical specifications NN46110-313 02.0 1 Figure 15 Serial cable (RJ-45-to-DB9) Ta b l e 1 5 provides the RJ-45-to-DB9 serial interface cable pinouts. T able 15 RJ-45 to DB9 pinout s RJ-45 termination DB-9 termination Signal Pin # Direction Pin # Request to Send 1 ---> 8 Data T erminal Ready 2 ---> 6 Receive Data 3 <--- 3 N[...]

Appendix A Technical specifications 45 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 External modem adapter If you need to connect a VPN Router 1010, 1050, o r 1100 to a modem, you can order a null modem adapter from Nortel. W ith this adapter, you can conn ect th e VPN Router 1010/1050/ 1100 console cable (shipped with the gate w [...]

46 Appendix A Technical specifications NN46110-313 02.0 1 Har dware option car ds The VPN Router 1 100 has two expansio n slots that support a combination of the follo wing network interf ace cards: • 10/100B ASE-TX Ethernet • 10/100/1000B ASE-X Ethernet • 56/64K CSU/DSU W AN • ADSL W AN • ISDN BRI • T1/E1 CSU/DSU W AN (half-height card[...]

Appendix A Technical specifications 47 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 10/100B ASE-TX Ethernet interface car d The 10/100B ASE-TX Ethernet interface card has a single RJ-45 connector that provides the signals needed to interf a ce to 10B ASE-T and 100B ASE-TX Ethernet equipment. Figure 17 sho ws the 10/100B ASE-TX Eth[...]

48 Appendix A Technical specifications NN46110-313 02.0 1 • 6.05.140 and all subsequent v ersions •7 . 0 0 . 0 6 2 • 7.05.100 and all subsequent v ersions (FIPS b ranch) • 7.05.300 and all subsequent v ersions The follo wing f igures sho w the full and half-height Ethernet faceplates for the VPN Router 1100. Figure 18 VPN Router 1 100 full-[...]

Appendix A Technical specifications 49 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 The follo wing table pro vides the pinouts for th e 1000B ASE-T (1000 GT) Ethernet interface card.. 56/64K CSU/DSU W AN interface card The 56/64K CSU/DSU W AN interface card has a single RJ-48 connector that provid es the sign als needed to interfa[...]

50 Appendix A Technical specifications NN46110-313 02.0 1 Use cable that is wired in accor dance with EIA-568-A wiring style. This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal (pins 1 and 2) and the recei ve signal (p ins 7 and 8). Nortel strongly recommends that you use f actory-made patch cords. Y ou [...]

Appendix A Technical specifications 51 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Ta b l e 1 9 provides the 56/64K CSU/DSU cable pinouts for a straight-throu gh connection. ADSL W AN interface card The ADSL Anne x A an d Annex B W AN interface cards ha v e a single RJ-11 connector that provides the signals needed to interf ace t[...]

52 Appendix A Technical specifications NN46110-313 02.0 1 Ta b l e 2 0 provides the ADSL port pinouts. ISDN BRI interface car d The ISDN BRI S/T and ISDN BRI U inte rface cards ha ve a single RJ-45 connector that provides the signals need ed to interf ace to ISDN equipment. (T o connect the ISDN BRI S/T interface to the ISDN network, you must attac[...]

Appendix A Technical specifications 53 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 The connector on the ISDN BRI S/T and ISDN BRI U interface cards accommodates an 8-pin RJ-45 modu lar pa tch cord. These cables are sold as Category 5, or E thernet, cables. Ta b l e 2 1 provides the ISDN BRI S/T cable pinouts. Ta b l e 2 2 provide[...]

54 Appendix A Technical specifications NN46110-313 02.0 1 T1/E1 CSU/DSU W AN interface card The T1/E1 CSU/DSU W AN interface card ha s a single connector that provides the signals needed to interfac e to T1 or E1 equipment. Figure 24 shows the T1/E1 CSU/DSU W AN interface card. This interface card ships as a half-height card and as a full-height ca[...]

Appendix A Technical specifications 55 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Ta b l e 2 3 provides the T1/E1 CSU/DSU cable pinouts for a cr ossov er connection. The cable operates properly if y ou do not connect pins 3, 6, 7, and 8. Ta b l e 2 4 provides the T1/E1 CSU/DSU cable pinouts for a straight-t hrough connection. T [...]

56 Appendix A Technical specifications NN46110-313 02.0 1 V .90 modem interface card The V .90 modem interf ace card has tw o RJ-11 connecto rs that pro vide the sign als needed to interface to an incoming tele phone line and to telephone equipment. Figure 25 shows the V .90 modem interface card. Figure 25 V .90 modem interface card Included in the[...]

Appendix A Technical specifications 57 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Single V .35/X.21 W AN interface card The single V .35/X.21 W AN interface card has a singl e DB28S connector that provides the signals needed to interface to V .35 and X.21 equipment. Figure 26 sho ws the single V .35/X.21 W AN interface card. Fig[...]

58 Appendix A Technical specifications NN46110-313 02.0 1 The following notes apply to the single V .35 DTE cable: 1. The term “no conn” means the wire is not connected to a pin in the 34-pin connector. 2. Wires 12B, 13A, and 14B connect to pin B in the 34-pin connector . 3. At each end, the cable shield and connector shell must connect respect[...]

Appendix A Technical specifications 59 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 Ta b l e 2 7 provides the X.21 cable pinouts. (The pair suff ix A or B refers to an indi vidual wire within a twisted pair .) T able 27 X.21 cable pin outs Standard-wired end 28-pin male Signal name P air number and conducto r Standard-wired end 15[...]

60 Appendix A Technical specifications NN46110-313 02.0 1 The following notes apply to the single X.21 cable: 1. Wires of pair 4 connect to wires of pair 5, but not to any pins in the DA-15. 2. The term “no conn” means the wire is not connected to a pin in the 15-pin connector. 3. Wires 13B and 14B connect to pin 8 in the 15-pin connector . 4. [...]

Nortel VPN Router Installatio n — VPN Router 1010/1050/1 100 61 Inde x Numerics 10/100B ASE-TX Ethern et interface card cable specifications 42 described 47 installing 35 LEDs 29 port pinouts 43 10/100BASE-TX system LAN ports cable specifications 43 connector 43 LEDs 28 1000B ASE-T (1000 GT) Ethernet interface card 47 LEDs 30 56/64K CSU/DSU W AN [...]

62 Index NN46110-313 02.0 1 D DC input port 25 E electrical specifications 41 en vironmental specif ications 41 Ethernet MDI configuration 42 F front panel LEDs 27 H hardware option cards installing in VPN Router 110 0 35 specifications 46 help by Express Routing Code 16 by Nortel distributor 16 by phone 16 latest update on W eb 15 Nortel W eb site[...]

Index 63 Nortel VPN Router Installatio n — VPN Router 1010/1050/110 0 P physical specifications 41 pinouts 10/100B ASE-TX Ethernet interface 43 56/64K CSU/DSU W AN interface 50 ADSL W AN interface 52 ISDN BRI S/T interface 53 ISDN BRI U interface 53 null modem adapter 45 serial interface cable 44 single V .35 W AN interface 57 single X.21 W AN in[...]

64 Index NN46110-313 02.0 1 description 21 MA C addresses 25 Power LED 25 recov ery switch 25 shipment contents 22 technical specifications 41 VPN Router 1100 installing option card s 35 removing cov er from base 37 shutting down 36 technical specifications 41 W W AN interface cards installing in VPN Router 110 0 35 LEDs 56/64K CSU/DSU 3 1 ADSL 31 [...]