Nortel BSR222 manuale d’uso

BSR2 22 Busin ess Sec ure Rout er Document Nu mber: NN47 922-301 Document V ersio n: 1.4 Date: May 20 07 Nortel Busines s Secure Ro uter 22 2 — Fundam entals[...]

2 NN47922-3 01 NN47922-3 01 Copyright © Nortel 2005–2006 All rights reserved. The informati on in this docu ment is subj ect to chang e withou t notice. The st atements , configu rations , technica l data, and recomme ndations in this doc ument ar e believed to be a ccurate and reliable, but are p resented wit hout exp ress or implie d warranty [...]

3 Nortel Busi ness Se cure Router 222 — Fu ndamentals Content s Pref ace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Before y ou begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 T ext co nventions . . . . . . . . [...]

4 Content s NN47922 -301 W AN IP addres s assignm ent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 4.3 T e st your in ternet connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 0 Chapter 5 Use r No tes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

5 Nortel Busin ess Secure Route r 222 — Fundamenta ls T able 1 Internet a ccount i nformati on workshee t 1 1 T able 2 Front panel details 14 T abl e 3 Rear panel details 15[...]

6 NN47922 -301[...]

Pref ace 7 Nortel Bu sine ss Se cure Rou ter 22 2 — Funda men tals Preface This Qu ick Start Guide p ro vides ins truct ions f or insta lling an d conf i guring your Nortel Busi ness Sec ure Router 222 as an Of fi ce Gate w ay for you r network . After comple ting thi s guide , you can access the Int ernet secure ly throug h your Nor tel Business[...]

8 Preface NN47922 -301 Related publications F or more informa tion abo ut using the Nortel Busi ness Secu re Router 222, re fer to the fo llowin g pub lica tion : • Conf iguri ng and T r oub leshooti ng the Norte l Busines s Secur e Router 2 22 (317517- A) DNS domain name se rv er ENET Ethern et IP In terne t Pro toc ol ISP Int erne t Ser vic e P[...]

Pref ace 9 Nortel Bu sine ss Se cure Rou ter 22 2 — Funda men tals Har d-copy tec hnical manuals Y ou can print sele cted t echnical manuals and rel ease not es fre e, direct ly fr om the Inte rnet. Go to www .nortel.co m/document ation . Fi nd the prod uct fo r which you need d ocumentati on. Then loc ate th e specif i c cate gory and model or v[...]

10 Pref ace NN47922 -301 AC Power Adapt er S pecificatio ns Use only po wer supp lies listed i n the u ser inst ructi ons. Phiho ng, Model PSA21R-18 0 Note : No t to remo ve th e pl ug a nd plug int o a wa ll out let b y its elf ; alw ays a tt ach the plug to the power suppl y first before i nsert into the wall. Leader , Model MU18-21801 00-XX (XX [...]

Chapter 1 Introduc ing the Busine ss Sec ure Rout er 11 Nortel Bu sine ss Se cure Rou ter 22 2 — Funda men tals Chapter 1 Intr odu cing the Busi ness Secure Router The Nortel Business Secure Router 222 is the ideal sec ure g ate way for al l data pass ing between the In terne t and the LAN. By inte gr ating Ne twor k Address T ran slati on (N A T[...]

12 Chapter 1 Introduc ing the Busi ness Se cure Router NN47922 -301[...]

Chapt er 2 Hardware instal latio n 13 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Chapter 2 Har d ware installation Caution: T o keep t he Busi ness Secur e Router ope rating a t opti mal intern al tempe ratur e, keep the bot tom, sides, and rear clear of obstruc tions and aw ay from the e xha ust of ot her equ ipment. Caution: A C Po we[...]

14 Chapter 2 Hardwa re installation NN47922 -301 2.1 Fr o nt pa ne l T able 2 F ront panel deta ils LABEL DESCRIPTION Step 1: 1 -4 Conn ect a com pu ter t o on e of the se po r ts with an E the r net cable. These por ts are aut o-negot iating (can conn ect at 10 or 1 00Mb/s) and a uto-sensi ng (aut omatic ally ad justs to the t ype of Ethe rnet cab[...]

Chapt er 2 Hardware instal latio n 15 Nortel Bu siness Secu re Rou ter 222 — Funda mentals 2.2 Rear panel T able 3 Rear panel det ail s LABEL DESCRIPTION Step 3 PO WER Connec t the incl uded p ow er ada ptor (use on ly this adapte r) to this pow er s o cke t. After y ou ha v e m ade the c onnec tions , connec t the po w er cab le to a po wer supp[...]

16 Chapter 2 Hardwa re installation NN47922 -301[...]

Chapte r 3 Setting up you r comput er IP address 17 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Chapter 3 Setting up your comp uter IP a ddress The BSR222 is alrea dy set up t o assi gn your compu ter an IP address . Use th is sectio n to se t up your compute r to rece i ve an IP ad dress or assign it a s tatic I P address in the 192.168[...]

18 Chapter 3 Se tting up your compute r IP a ddress NN47922 -301 Nort el re com men ds t hat you do n ot us e a st atic IP a ddr ess in th e sa me range as the Bus iness Secu re Route r DHCP serv er a ddress pool (192.168.1. 2 to 192. 168.1. 33 by de fa ult). 6 Click Advanced . Remo v e an y pr e viousl y ins talled gate w ays i n the IP Settings t[...]

Chapte r 3 Setting up you r comput er IP address 19 Nortel Bu siness Secu re Rou ter 222 — Funda mentals 7 Click Obt ain DNS server add ress au tom at ically if you do n ot kno w your DNS serv er I P addres s(es). a If you kno w your DNS serv er I P addres ses, click Use the f oll owing DNS server ad dresse s , and typ e them in th e Pref erred D[...]

20 Chapter 3 Se tting up your compute r IP a ddress NN47922 -301[...]

Chapter 4 Configu ring your Bu sine ss S ecure Rou ter 21 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Chapter 4 Configuring y our Business Secure Router Choose one of these methods t o acce ss and co nfi gure th e Business S ecure Rou ter. This gui de sho ws you ho w to us e the W ebGUI wizard on ly . See Nort el Busines s Secur e Router[...]

22 Chapter 4 Configu ring yo ur Bu sine ss Se cure Rou ter NN47922 -301 3 Nortel r ecommends you c hange t he defa ult pass word! Enter a ne w password, retype it to conf irm it and click A ppl y . Alterna ti v ely cl ick Ig nore t o proceed to the mai n menu if yo u do not want to change t he pas sword no w .[...]

Chapter 4 Configu ring your Bu sine ss S ecure Rou ter 23 Nortel Bu siness Secu re Rou ter 222 — Funda mentals 4 Click Apply in th e Replace Fac tory Defaul t Certi ficate scree n to crea te a certi ficate us ing you r Business Secure Router MAC a ddress, whi ch will be spec ific to t his devi ce. 5 The W ebGUI MAIN MENU screen appe ars. • Sel [...]

24 Chapter 4 Configu ring yo ur Bu sine ss Se cure Rou ter NN47922 -301 4.2 Using the wizar d to configure f or interne t access 1 Sele ct WIZARD to dis pla y th e first w iza rd scr een .[...]

Chapter 4 Configu ring your Bu sine ss S ecure Rou ter 25 Nortel Bu siness Secu re Rou ter 222 — Funda mentals System Name is for i denti fi catio n purpos es. Enter the name of your comput er i n the Sys te m Na me fiel d, to e asily id entify you r comput er . The Domain Name entry def ines th e domain name tha t is pass ed on to the DHCP clien[...]

26 Chapter 4 Configu ring yo ur Bu sine ss Se cure Rou ter NN47922 -301 Internet connection with ethernet This v a riation is s ho wn when the W AN port is u sed as a re gular Et hernet . Choose eith er Standard or a Road Runne r ISP v ersi on. Y ou need your Us er Name , Pass word and Login Ser v er IP Addr ess for som e R oad Runn er I SP ver si [...]

Chapter 4 Configu ring your Bu sine ss S ecure Rou ter 27 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Internet connection with PPP oE Point-t o-Point Pr otoco l ov er Ethe rnet ( PPP oE ) als o funct ions as a dial- up connecti on. Ther efore , you also n eed a us ername a nd passwo rd and p ossibly t he PPPoE se rvice name (from ISP). S[...]

28 Chapter 4 Configu ring yo ur Bu sine ss Se cure Rou ter NN47922 -301 Internet connection with PPTP Choose PPTP if you r servic e prov ider u ses a DSL terminato r with PPTP log on. Th e Bus in ess Sec ure Ro uter mu st h ave a sta tic IP add res s in t his ca se. Y ou nee d a log on name , associ ated pas sword , the PPTP serv er IP ad dress , a[...]

Chapter 4 Configu ring your Bu sine ss S ecure Rou ter 29 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Click Next to co ntin ue. 3 Fill i n the f i elds and click Finish to save and c omp lete the w iz ard setu p. W AN IP ad dress ass ignment Sele ct Get autom aticall y fr om ISP if your ISP di d not assi gn you a fix ed IP addre ss. Se l[...]

30 Chapter 4 Configu ring yo ur Bu sine ss Se cure Rou ter NN47922 -301 System DNS servers Sele ct From ISP if y our ISP dyna micall y assigns DNS serv er inf ormation ( and the Busi ness Sec ure Router 's W AN IP ad dress). The right f i eld displ ays the (read- only) DNS ser ve r IP addre ss tha t the ISP a ssigns. I f you ch ose From ISP , [...]

Chapt er 5 Use r Notes 31 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Chapter 5 User Notes Gene ral No tes There ar e some ro uter func tions that, altho ugh perfor ming as e xp ected, mi ght cause so me confus ion. The se are summarized b elo w . General 1 Defaul t Addr ess Mapping Rul es When Fi rst E nable N A T Full Featu re. When N [...]

32 Chapter 5 Us er Notes NN47922 -301 5 Clickin g Sound The Busines s Secure Router will cl ick once e v er y two min utes unt il an ADSL line is conne cted. Firew all 1 Address Ra nge V alida tion In the f ir e wall rules, t he router doe s not conf irm when gi v en an address range, th at the sec ond address is higher than the f irst. If this typ[...]

Chapt er 5 Use r Notes 33 Nortel Bu siness Secu re Rou ter 222 — Funda mentals If a VPN Cli ent user account i s de-acti vat ed, delete d, or ch anged, and t hat user i s current ly con nected , the co nnection i s not automat ically dr opped. T o drop the conne ction, the admini strator needs t o disconne ct th e user using the 'Discon nect[...]

34 Chapter 5 Us er Notes NN47922 -301 When def ini ng a Clien t T erminatio n accou nt for ano ther Bus iness Sec ure Rout er that wi ll c onnect u sing Co nti vit y Clie nt Emulati on, t he fo llo wi ng conf igu ration is requi red : • Encr ypt ion must be T ripl e DES wi th SH A1 integr ity , o r Triple DE S w ith MD5 inte grit y . • IKE Encr[...]

Chapt er 5 Use r Notes 35 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Both RIP-1 and RIP-2 Ad vanced Router Config uration The fo llo wing n otes ar e intend ed to he lp wit h adv an ced router conf igur ation . Settin g up the r out er when the syst em has a se rver 1 If you ar e usi ng a Full- Featur e N A T conf igu ration, f i rst, d[...]

36 Chapter 5 Us er Notes NN47922 -301 2 Repeat these st eps at the othe r end of the branc h. Note: If VPN Client T ermination is used on t hese site s, the c lient te rmination addr ess ran ge will need to be included in the t unnel poli cies in or der f o r the VPN client s to see t he other site. Adding IP telephon y to a m ulti-site network Sce[...]

Chapt er 5 Use r Notes 37 Nortel Bu siness Secu re Rou ter 222 — Funda mentals 2 Create a tunnel betwee n the sit es, as descri bed abo v e. 3 Create a n H.323 tr unk between the BCM50s, a s per the BCM50 User Gui de. Configuring the r o uter t o act as a Nortel VPN S erver (Client T ermination) 1 Under VPN / Client T erminati on, a Enab le C lie[...]

38 Chapter 5 Us er Notes NN47922 -301 Note : In DHC P S erver mo de , th e BC M5 0 IP a ddres s wi ll b e the lowe st addr ess in the pool . 2 Create t he appr opriate Fire wall rule s to add BCM50 access. Go to FIREW ALL / Su mmary , and create two W AN-to-LAN f ire wall rules: One ru le allo wi ng access from al lo wed remot e computer IP addr es[...]

Chapt er 5 Use r Notes 39 Nortel Bu siness Secu re Rou ter 222 — Funda mentals 1 Determ ine your actua l W AN up-stre am bandwidth by connect ing to a web si te suc h as ht tp ://m yvoips pee d. vis ualwar e.co m/ . 2 On B A ND WIDTH MAN A GEMENT / Summary , acti v a te W AN bandwidth manageme nt, and f il l in your actua l uplink s peed in the W[...]

40 Chapter 5 Us er Notes NN47922 -301 Inter -Operabil ity With Thi r d-P arty Router s VPN Connections With Cisco Routers When estab lishing a VPN Client t unnel or Branch Of fice T unnel betwee n the Business Secure Router and a Cisco router , the follo wi ng conf igur ation ru les should be foll o wed: 1 Ensure t hat th e W AN IP of t he BSR222/2[...]

Chapter 6 T roubleshoo ting 41 Nortel Bu siness Secu re Rou ter 222 — Funda mentals Chapter 6 T r oubleshooting Pr oblem: None of the LEDs turn on when y ou turn on the Business Secure Router Make sure that you ha v e the corre ct po wer ad apter con nected to the Business Secure Rou ter an d that it is plugge d in to an appropr iate po we r sour[...]

42 Chapter 6 Tro ubleshoo ting NN47922 -301 Pr ob lem: Y ou cannot get a W AN IP ad dress fr om the ISP The W AN IP is prov ided after the ISP ver if ies the MA C address, ho stname or us er ID. Find o ut the v eri f icatio n method u sed b y your ISP and conf igure the corr esponding f ie lds. If the ISP checks t he W AN MA C addr ess, cl one the [...]