Avaya SG208 manual

670-10 0-101 Issue 2 March 2004 A vaya SG203 and SG208 Security Gateway Hardware Inst allation Guide[...]

Copyright 2004, Avaya Inc. All Rights Reserved Notice Every effort was made to ensure that t he information in this document was complete and accurate at the time of release. However , information is subject to change. W arranty Avaya Inc. provides a limite d warranty on this product. Refer to your sales agreement to est ablish the t erms of the li[...]

T o prevent intrusions to your telecomm unications equipment, you and your p eers should c are fully program and configure: • Y our Avaya-provided telecomm unications syst ems and their interfaces • Y our Avaya-provided software applications, as well a s their underlying hardware/software platf orms and interfaces • Any other equipment net wo[...]

Avaya further asserts that Avaya handset-equipped terminal equipment described in this document c omplies with Paragraph 68.316 of the FCC Rules and Regulations defining Hearing Aid Compati bility and is deemed compatible with hearing aids. Copies of SDoCs signed by th e Responsible Party in the U. S. can be obtained by contacting your local sales [...]

5 T able of Content About th is book 7 Contacting T echnical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Chapte r 1 Intro du ction 9 Functional overview . . . . . . . . . . . . . .[...]

6 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide[...]

March 20 04 About this bo ok 7 About this book The Avaya SG203 and SG 208 S ecurit y Gateway s are d edicated hardware -based network sec urity d evices designe d to prov ide ov erlay security on a n IP da ta network. This gu ide de scribe s the Avay a SG20 3 and S G208 Securi ty Gatewa y and how to install an d preconfi gure thes e devices . It is[...]

8 About this boo k March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Documenta t ion The secur ity gate way do cumentatio n inc ludes bot h the Hard ware Installation Guide a nd the S ecurit y Gateway Configur ation Guide for VPNos. Y o u can d own loa d thes e guid es from http://www .support.avay a.com . Navigat e to [...]

March 20 04 Introduct ion 9 Chapter 1 Introduction The Avaya SG 203 and SG 208 S ecurit y Gateway s are h igh-perfor mance integrate d fire wall, secu rity zo ne, a nd IPSec VPN gat eway de vice s. They are desi gned to provid e the hi gh ca pacity , scala bility a nd relia bilit y required b y your networks for IPS ec/firewa ll s ervices in one un[...]

10 Introdu ction March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Figure 1 T yp ical SG2 03/SG 208 secu rity gate way installation Functional overview The SG203 an d SG20 8 securi ty gatewa ys are ded icated har dware -based netwo rk secu rit y devi ces desi gned to p rovide ov erla y secu rity serv ices on an IP data [...]

March 2004 Introduction 1 1 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide negotiati on is co mplete d data can then be encapsulate d in IPSe c tunneling packets th at ca n only b e dec rypted by the peer on th e other end of the I PSec tun nel. Additional features VPNmana ger Avaya VPNm anager is an op tional Avaya ap plic ati[...]

12 Introdu ction March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Data authentic ity is a ssured by usin g HMAC-M D5™ or HMA C-SHA- 1 packet signatu res to rej ect altered or forge d packets. All sec urity mechani sms empl oyed by the se curity gateway c onform to IPSec standards, in o rder to prov ide in terope rabi[...]

March 2004 Introduction 13 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Plug-and-Play inst allati on The auto sens ing in terfaces of the secu rity gat eway enabl es in stallation into any E thern et network . By def ault, the se curi ty gateway functions as a DHCP client o n the pu blic interface a nd as a DHCP serv er on th[...]

14 Introdu ction March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide T ab le 3 Physical sp ecificatio ns Ethernet port s Etnernet 0 is res erved for the Pr ivate p ort and Etherne t1 is reserved for the Publi c port. Ether net2 and Etherne t3 are software con figur able a nd can be us ed for fa il-ove r , DMZ, or other fu[...]

March 20 04 Inst alling SG203 and SG20 8 Security Gateway 1 5 Chapter 2 Inst a lling SG203 and SG208 Security Gateway This chap ter pr ovides inst ructions for the physi cal installa tion of the SG203 an d SG2 08 se curity gateway s, in cludi ng rack mount ing, placemen t, and c onnectio n to the networ k. Site requir ement s This s ectio n descr i[...]

16 Inst alling SG203 an d SG208 Sec urity Gateway March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide T ab le 4 Electrical s pecific ation s Equipment requirements The secu rity gateway devi ces shi pping cart on sho uld contain: T o install and use the secu rity ga teway in a typi cal ne twork , the cust omer must sup pl[...]

March 20 04 Inst alling SG20 3 and SG20 8 Security Gatew ay 17 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Required tools The secur ity gateway chassi s can be mounte d in a standard 19-inch equip ment rac k. Rack m ountin g requ ires a Phillips-he ad sc rewdriv er , the device rack moun t brack et kit , and four scre ws to [...]

18 Inst alling SG203 an d SG208 Sec urity Gateway March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Rackmount The SG203 and SG 208 secu rity gate ways can be mounte d in a stand ard 19-inch equipm ent rack. The locati on of the ch assis an d the lay out of your equip ment rac k or wir ing room are extremel y im portant [...]

March 20 04 Inst alling SG20 3 and SG20 8 Security Gatew ay 19 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Overview of front p anel Figure 5 Front p anel of the security gateway Console port The con sole port a ccep ts an RS-232 DB-9 con necti on from a n asynch ronou s ASC II termin al or a PC r unning termina l emul ation [...]

20 Inst alling SG203 an d SG208 Sec urity Gateway March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Multi-interface port s Four po rts are avai lable on the s ecuri ty gate way , publi c, priv ate and two other in terface p orts that are not de signa ted. The publ ic por t provid es an interfac e to the public I nterne [...]

March 20 04 Inst alling SG20 3 and SG20 8 Security Gatew ay 21 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Figure 6 Example of two security gateway’ s hardware installations 1. Connect one end of the C at5e cable to the publ ic por t (Ether net1) on the sec urity gatew ay . Connect the other end to the router ’s Etherne [...]

22 Inst alling SG203 an d SG208 Sec urity Gateway March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Note : If DHCP relate d function ality (DHCP serve r on the private interface and DHCP c lient on t he publ ic network) disrupts your network , change the defa ult se ttings via the c onsole port, pri or to pluggi ng in t[...]

March 2004 Setting up the s ecurity gateway for configuratio n 23 Chapter 3 Setting up t he security gateway for configuration This chap ter de scribe s how t o set up th e sec urity gatewa y addr essin g and remot e conn ectivity capabilit ies. T his prelim inary c onfigu ratio n is perform ed using a bro wser on yo ur worksta tion con nected to t[...]

24 Setting up the secu rity gateway for config uration March 200 4 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Connecting to the private port From th e workstation’s contr ol panel , sele ct yo ur TCP/ IP netwo rk compo nent for y our Eth ernet controll er . In the IP A ddress window selec t “enable the se tting” to ?[...]

March 20 04 Setting up t he security gateway for configu ration 25 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide T o connect to the se curity gatew ay 1. From a wo rkstation o n the pri vate sid e of the secu rity gat eway , open your browser and type into the loca tion field one of the fol lowing: • https://sg.pr ivate • [...]

26 Setting up the secu rity gateway for config uration March 200 4 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Figure 8 Quick Setup Dialog 6. The Qui ck Setup wizard dialo g appea rs. In the IP Conf iguratio n area, select on e of the follow ing IP Config Modes. • St atic Addressing . If you are go ing to use s tatic addre[...]

March 20 04 Setting up t he security gateway for configu ration 27 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide 8. In the Centralized Management area , if VP Nman ag er is used , ent er the sup eruser name a nd password . 9. In the Date & Time area, enter the date, ti me, and ti me zon e. A 24-h our clock is use d. For ex[...]

28 Setting up the secu rity gateway for config uration March 200 4 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide[...]

March 2004 Index 2 9 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide Index A admin name 25 AES 11 AES encr yp tion 11 authent ication s pecifi cation 11 B back pan el 20 C cat5e ca ble s 20 CE marks 4 configur ing static addressing ,DHCP ,PPPoE 26 connecti ng the SG20 3/S G2 08 to network 20 conne cting to p rivate p ort 24 conn[...]

30 Index March 2004 A vaya SG203/SG20 8 Security G ateway Hardw are Inst allation Guide S safety r ecommen dations 17 secu rit y 11 SHA1 11 specifi catio ns authent ication 11 encryp tion 11 key man agem ent 11 standa rds electro magnetic compatib ility 3 T technic al su ppor t 7 temperatu re rang e 15 tools rackmo unt 17 triple D ES 11 U user au t[...]