1. Manuals
  2. Brands
  3. Nortel Manuals
  4. Network Router
  5. 2700
  6. Installation manual

Nortel Contivity Secure IP Services Gateway 2700 Installation Manual

Nortel networks vpn router installation guide
Hide thumbs Also See for Nortel Contivity Secure IP Services Gateway 2700:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Installation Manual
Nortel VPN Router Installation
— VPN Router 2700
Version 7.05.300
NN46110-311 02.01
314708-F Rev 01
November 2007
Standard
600 Technology Park Drive
Billerica, MA 01821-4130

Advertisement

Table of Contents
loading

Related Manuals for Nortel Nortel Contivity Secure IP Services Gateway 2700

Summary of Contents for Nortel Nortel Contivity Secure IP Services Gateway 2700

  • Page 1 Nortel VPN Router Installation — VPN Router 2700 Version 7.05.300 NN46110-311 02.01 314708-F Rev 01 November 2007 Standard 600 Technology Park Drive Billerica, MA 01821-4130...
  • Page 2 In the interest of improving internal design, operational function, and/or reliability, Nortel Networks Inc. reserves the right to make changes to the products described in this document without notice. Nortel Networks Inc. does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
  • Page 3 Warning: This is a Class A product. In a domestic environment, this product may cause radio interference, in which case, the user may be required to take appropriate measures. Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenmaßnahmen verantwortlich ist.
  • Page 4 30 days of purchase to obtain a credit for the full purchase price. “Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or affiliates, and is copyrighted and licensed, not sold. Software consists of machine-readable instructions, its components, data, audio-visual content (such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies.
  • Page 5 12.212 (for non-DoD entities) and 48 C.F.R. 227.7202 (for DoD entities). Customer may terminate the license at any time. Nortel Networks may terminate the license if Customer fails to comply with the terms and conditions of this license. In either event, upon termination, Customer must either return the Software to Nortel Networks or certify its destruction.
  • Page 6 NN46110-311 02.01...

  • Page 7: Table Of Contents

    Contents New in this release..........15 Features .
  • Page 8 Installing the chassis ..........29 Installing the chassis on a flat surface .
  • Page 9 Chapter 4 Installing option cards and Shutting down the system to add or replace hardware ......60 Removing the front bezel and top cover .
  • Page 10 Contents NN46110-311 02.01...
  • Page 11 Figures Figure 1 Front view of the VPN Router 2700 ......26 Figure 2 Placement of rubber feet on the bottom of the chassis .
  • Page 12 Figure 30 VPN Router Security Accelerator card ......80 Figure 31 SSL VPN Module 1000 ........81 Figure 32 10/100BASE-TX Ethernet interface card .
  • Page 13 Tables Table 1 Items shipped with the VPN Router 2700 ......27 Table 2 Interfaces and cables for the VPN Router 2700 ....36 Table 3 Power cord requirements .
  • Page 14 Table 30 T1/E1 CSU/DSU cable pinouts for straight-through connection ..94 Table 31 V.90 modem cable pinouts ........96 Table 32 V.35 cable pinouts .

  • Page 15: New In This Release

    New in this release The following section details what’s new in Nortel VPN Router Installation— VPN Router 2700 (NN46110-311) for Release 7.05.300: Features See the following section for information about feature changes: 1000BASE-T (1000 GT) Ethernet card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card.
  • Page 16 New in this release NN46110-311 02.01...

  • Page 17: How To Get Help

    How to get help This chapter explains how to get help for Nortel products and services. Finding the latest updates on the Nortel Web site The content of this documentation was current at the time the product was released. To check for updates to the latest documentation and software for VPN Router 2700, go to: www.nortel.com/support Select Security &...

  • Page 18: Getting Help Over The Phone From A Nortel Solutions Center

    This site provides quick access to software, documentation, bulletins, and tools to address issues with Nortel products. From this site you can: • download software, documentation, and product bulletins • search the Technical Support site and the Nortel Knowledge Base for answers to technical issues •...

  • Page 19: Getting Help Through A Nortel Distributor Or Reseller

    How to get help 19 Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller. Nortel VPN Router Installation — VPN Router 2700...
  • Page 20 How to get help NN46110-311 02.01...

  • Page 21: Preface

    Preface The VPN Router 2700 is part of the Nortel VPN Router product family. Nortel VPN Router 2700 supports secure, reliable IP VPNs in a single, integrated hardware device. Throughout this guide, the VPN Router 2700 is also referred to as the gateway.

  • Page 22: Text Conventions

    Text conventions This guide uses the following text conventions: bold Courier text italic text plain Courier text separator ( > ) Acronyms This guide uses the following acronyms: ADSL CSU/DSU DIMM HSSI IPsec NN46110-311 02.01 Indicates command names and options and text that you need to enter.

  • Page 23: Related Publications

    RoHS Related publications For complete information about configuring, monitoring, and managing the VPN Router 2700, formerly known as the Contivity Secure IP Services Gateway 2700, refer to the following publications (included on the software CD): • Release notes provide the latest information, including brief descriptions of the new features, problems fixed in this release, and known problems and workarounds.

  • Page 24: Printed Technical Manuals

    • Nortel VPN Router Configuration — Routing (NN46110-504) provides instructions for configuring RIP, OSPF, and VRRP, as well as instructions for configuring ECMP, routing policy services, and client address redistribution. • Nortel VPN Router Configuration — SSL VPN Services (NN46110-501) provides instructions for configuring services on the SSL VPN Module 1000, including authentication, networks, user groups, and portal links.

  • Page 25: Installing The Nortel Vpn Router 2700 Chassis

    Chapter 1 Installing the Nortel VPN Router 2700 chassis This chapter describes how to install the VPN Router 2700 chassis. Note: Before you install the chassis, use standard cable system practices to install all the network wiring on the premises. This chapter contains the following topics: Topic Description of the Nortel VPN Router 2700...

  • Page 26: Preparing To Install The Nortel Vpn Router 2700

    Figure 1 shows the front view of the VPN Router 2700. Figure 1 Front view of the VPN Router 2700 The VPN Router 2700 chassis provides the following: • one 10/100 Ethernet LAN port on the base system • one serial port for out-of-band management of the VPN Router 2700 •...

  • Page 27: Shipment Contents

    Shipment contents In addition to the gateway and this guide, the shipping container for the VPN Router 2700 contains a number of hardware accessories and other items. Note: Nortel does not ship a power cord with the VPN Router 2750 unless you order one.

  • Page 28: Additional Equipment

    Additional equipment You need items that are not included in the VPN Router 2700 shipping container. Before you begin the installation, ensure that you have all the cables, tools, and other equipment that you need. Cables You need cables that are not included in the VPN Router 2700 shipping container. For information about which cables are shipped and which ones you can order, “Connecting communications cables”...

  • Page 29: Nortel Vpn Router Installation — Vpn Router

    Installing the chassis To install the VPN Router 2700, do one of the following: • Position the chassis on a flat, sturdy, horizontal surface. • Mount the chassis in a standard equipment rack (see an equipment rack” on page Installing the chassis on a flat surface If you decide to place the VPN Router 2700 on a flat surface, make sure that the surface is large enough for the gateway and sturdy enough to support the combined weight of the VPN Router 2700 and the cables that you attach to it.

  • Page 30: Installing The Chassis In An Equipment Rack

    Installing the chassis in an equipment rack To mount the VPN Router 2700 in an equipment rack, you need the following equipment: • a standard 19-inch equipment rack • four screws (supplied with the chassis) • four cage nuts (supplied with the chassis) if the rack does not have threaded rail holes •...

  • Page 31: Figure 3 Attaching The Cage Nuts To The Rack

    Figure 3 Attaching the cage nuts to the rack Rail without threaded holes Cage nut Position the rack-mount shelf inside the rack as shown in Align the holes in the shelf with holes in the front of the rack. Figure 4 Installing the shelf in the equipment rack Ensure that the support flange snaps into place Insert one of the supplied panhead screws through the top hole on each side of the shelf into the hole in the rack and tighten the screws...

  • Page 32: Mounting The Chassis In The Equipment Rack

    Mounting the chassis in the equipment rack Nortel recommends that two people install the chassis in the rack. To install the VPN Router 2700 in the equipment rack: Set the VPN Router 2700 on the rack-mount shelf. Remove the front bezel from the VPN Router 2700 Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise.

  • Page 33: Figure 6 Replacing The Front Bezel

    Insert one of the supplied panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws page 31). Replace the front bezel Hold the two handles on the bezel, and push it onto the chassis. b Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis.
  • Page 34 34 Chapter 1 Installing the Nortel VPN Router 2700 chassis NN46110-311 02.01...

  • Page 35: Cabling The Vpn Router And Turning The Power On

    Chapter 2 Cabling the VPN Router and turning the power on This chapter provides information about how to connect communications cables and the power cord to the VPN Router 2700. Caution: Connect the cables to the built-in Ethernet port and to the interfaces on the option cards that are installed in the VPN Router 2700 before you plug the power cord into the outlet.

  • Page 36: Connecting Communications Cables

    Connecting communications cables Gather the cables that you must attach to the VPN Router 2700. Table 2 lists the system ports and the ports provided on the optional interface cards that you can install in the VPN Router 2700. The table also indicates whether you can obtain cables for the ports from Nortel.

  • Page 37: Figure 7 Rear View Of The Vpn Router 2700

    Figure 7 shows the back of the VPN Router 2700. All interface cables and the power cord attach to the rear of the gateway. Figure 7 Rear view of the VPN Router 2700 Power 100-2240VAC 2-1A 50-60Hz Connect the interface cables to the VPN Router 2700 in this order: Connect the 10/100BASE-TX RJ-45 cable to the built-in 10/100BASE-TX Ethernet LAN port on the gateway If you plan to connect a terminal or PC to the gateway, connect the serial cable...

  • Page 38: Connecting The Power Cord

    Connecting the power cord You must order the power cord for the VPN Router 2700 separately. Caution: Risk of equipment damage Do not modify or use the AC power cord if it is not the exact type that is required for your power outlet. The power cord must meet the requirements described in Table 3 Power cord requirements Requirement...

  • Page 39: Verifying A Successful Installation

    40). The following sequence of LEDs occurs: The power LED (the Nortel Networks logo) lights blue. As the gateway boots, the Boot/Ready LED lights yellow. When the boot process is complete, the Boot/Ready LED lights green, indicating that the gateway is operational.

  • Page 40: Understanding The Leds

    LEDs. You can confirm that the LAN and WAN interfaces are cabled properly by examining the LEDs. Front panel LEDs The front panel of the VPN Router 2700 has a lighted Nortel Networks logo and two LEDs (Figure...

  • Page 41: Leds On The System 10/100Base-Tx Ethernet Port

    LEDs on the system 10/100BASE-TX Ethernet port Figure 9 shows the LEDs for the 10/100BASE-TX Ethernet port located on the rear of the VPN Router 2700. Figure 9 LEDs on the system LAN port Green CS260011A Table 5 describes the LEDs on the system 10/100BASE-TX Ethernet port. Table 5 LED indicators on the system 10/100BASE-TX Ethernet port Indicator Green...

  • Page 42: 10/100Base-Tx Ethernet Interface Card Leds

    10/100BASE-TX Ethernet interface card LEDs Figure 10 shows the LEDs on the 10/100BASE-TX Ethernet interface card. Figure 10 LEDs on the 10/100BASE-TX Ethernet interface card Table 6 describes the LEDs on the 10/100BASE-TX Ethernet interface card. Table 6 LED indicators on the 10/100BASE-TX Ethernet interface card ACT/LINK 10/100TX 1000BASE-T (1000 GT) Ethernet interface card LEDs...

  • Page 43: 1000Base-T (1000 Mt) Ethernet Interface Card Leds

    The following table describes the LEDs on the 1000BASE-T (1000 GT) Ethernet interface card. Table 7 LED indicators on the 1000BASE-T (1000 GT) Ethernet interface card Indicator ACT/LINK Steady green Flashing green 10/100/1000 Yellow Green 1000BASE-T (1000 MT) Ethernet interface card LEDs Figure 12 shows the LEDs on the 1000BASE-T (1000 MT) Ethernet interface card.

  • Page 44: 1000Base-Sx Ethernet Interface Card Led

    Table 8 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card 10/100/1000 1000BASE-SX Ethernet interface card LED Figure 13 shows the LED on the 1000BASE-SX Ethernet interface card. Figure 13 LED on the 1000BASE-SX Ethernet interface card Table 9 describes the LED on the 1000BASE-SX Ethernet interface card.

  • Page 45: 56/64K Csu/Dsu Wan Interface Card Leds

    56/64K CSU/DSU WAN interface card LEDs Figure 14 shows the LEDs on the 56/64K CSU/DSU WAN interface card. Figure 14 LEDs on the 56/64K CSU/DSU WAN interface card Blue LED Green LED Table 10 describes the LEDs on the 56/64K CSU/DSU WAN interface card. Table 10 LED indicators on the 56/64K CSU/DSU WAN interface card Description Blue...

  • Page 46: Adsl Wan Interface Card Leds

    ADSL WAN interface card LEDs Figure 15 shows the LEDs on the ADSL WAN interface card. Figure 15 LEDs on the ADSL WAN interface card Table 11 describes the LEDs on the ADSL WAN interface card. Table 11 LED indicators on the ADSL WAN interface card CONN LED Steady green Flashing green...

  • Page 47: T1/E1 Csu/Dsu Wan Interface Card Leds

    T1/E1 CSU/DSU WAN interface card LEDs Figure 16 shows the LEDs on the T1/E1 CSU/DSU WAN interface card. Figure 16 LEDs on the T1/E1 CSU/DSU WAN interface card Table 12 describes the LEDs on the T1/E1 CSU/DSU WAN interface card. Table 12 LED indicators on the T1/E1 CSU/DSU WAN interface card Indicator LED 1...

  • Page 48: Quad T1/E1 Csu/Dsu Wan Interface Card Leds

    Quad T1/E1 CSU/DSU WAN interface card LEDs Figure 17 shows the LEDs on the quad T1/E1 CSU/DSU WAN interface card. Figure 17 LEDs on the quad T1/E1 CSU/DSU WAN interface card Table 13 describes the LEDs on the quad T1/E1 CSU/DSU WAN interface card. Table 13 LED indicators on the quad T1/E1 CSU/DSU WAN interface card LED 1 LED 2...

  • Page 49: Single V.35/X.21 Wan Interface Card Leds

    Single V.35/X.21 WAN interface card LEDs Figure 18 shows the LEDs on the single V.35/X.21 WAN interface card. Figure 18 LEDs on the single V.35/X.21 WAN interface card LED 1, Red LED 4, Green Table 14 describes the LEDs on the single V.35/X.21 WAN interface card. Table 14 LED indicators on the single V.35/X.21 WAN interface card Indicator LED 1...

  • Page 50: Ssl Vpn Module 1000 Leds

    SSL VPN Module 1000 LEDs Figure 19 shows the LEDs on the SSL VPN Module 1000. Figure 19 LEDs on the SSL VPN Module 1000 Table 15 describes the LEDs on the SSL VPN Module 1000. Table 15 LED indicators on the SSL VPN Module 1000 LEDs Online Activity LED 1...

  • Page 51: Configuring The Management Ip Interface

    Chapter 3 Configuring the management IP interface This chapter describes how to configure a management IP address, subnet mask, and default gateway address on a newly installed VPN Router 2700. After you complete the procedures in this chapter, you can configure and manage the VPN Router 2700 using a Web browser from a PC.

  • Page 52: Required Information

    Required information Before you configure the management interface, collect this information: • IP address for the management interface The management IP address must be accessible from one of the private physical interfaces on the VPN Router 2700. For example, if you plan to assign IP address 10.2.3.3 with subnet mask 255.255.0.0 to the private physical interface, the management IP address must reside in the 10.2 network.

  • Page 53: Configuring The Management Ip Address

    On the PC, start HyperTerminal or another terminal emulation program, and press Enter. The Nortel VPN Router screen appears. Nortel VPN Router Copyright (c) 1999-2005 Nortel Networks, Inc. Version: Creation date: Unit Serial Number: Please enter the administrator's user name: Enter the default user name and password for the administrator.
  • Page 54 The serial main menu appears. Main Menu: System is currently in NORMAL mode. 0) Management Address 1) Interfaces 2) Administrator 3) Default Private Route Menu 4) Default Public Route Menu 5) Create A User Control Tunnel (IPsec) Profile 6) Restricted Management Mode 7) Allow HTTP Management 8) Firewall Options 9) Shutdown...
  • Page 55 Type 0, and press Enter to configure the IP address. The IP address prompt appears. 0) Slot 0, Port 2, Public LAN IP Address = Subnet Mask = 0.0.0.0 Speed/Duplex = AutoNegotiate *Type 0.0.0.0 to delete. *Just type <CR> to skip. Old IP address = New IP address = Type a new IP address, and press Enter.
  • Page 56 Type R, and press Enter to return to the serial main menu. 10 To configure the management IP address, type 0 and press Enter. The Management IP Address menu appears. - Management IP Address Menu M) Management IP Address = R) Return to the Main Menu Please select a menu choice (M,R): 11 Type M, and press Enter.

  • Page 57: Testing The Configuration

    For detailed information about configuring and managing the VPN Router 2700, refer to the documentation on the VPN Router software CD. Testing the configuration After you assign a management IP address to the VPN Router 2700, start your Web browser to verify that you can access the gateway from the browser. To manage the VPN Router 2700 using the GUI, your PC must be running one of the following browsers: •...

  • Page 58: Troubleshooting

    Go to Nortel VPN Router Configuration — Basic Features (NN46110-500) for information about configuring the VPN Router 2700. Troubleshooting If you cannot connect to the VPN Router 2700 using your browser, check the following items: • Ensure that you entered the correct IP address in the browser window. •...

  • Page 59: Installing Option Cards And Dimms

    Chapter 4 Installing option cards and DIMMs This chapter provides instructions on how to install and replace the following field replaceable units (FRU) in the VPN Router 2700: • LAN, WAN, and serial interface cards • SSL VPN Module 1000 •...

  • Page 60: Shutting Down The System To Add Or Replace Hardware

    Shutting down the system to add or replace hardware To install or replace an option card or a DIMM, you must first shut down the VPN Router 2700 and unplug it. Warning: Risk of electric shock Shut down the VPN Router 2700 as described in this section before you attempt to add or replace an option card or DIMM.

  • Page 61: Removing The Front Bezel And Top Cover

    Grip the two handles, and firmly pull the bezel toward you to unsnap it from the chassis. Caution: Risk of equipment damage Do not use the piece with the Nortel Networks logo and the LEDs as a handle. “Shutting down the system to add or replace (Figure 20).

  • Page 62: Figure 21 Removing The Top Cover

    The first several times that you remove the front bezel, the bezel can stick because the ball studs and socket clips are new. To remove the top cover: If the gateway is in an equipment rack, remove it from the rack. At the front of the chassis, remove the two panhead screws that secure the bottom of the chassis to the equipment rack.

  • Page 63: Figure 22 Location Of Option Card Slots And Dimms On The System Board

    Lift the lid 2 or 3 inches, and pull it off the chassis. The VPN Router 2700 system board is now exposed. location of the option card slots and the DIMMs on the system board. Figure 22 Location of option card slots and DIMMs on the system board DIMMs Warning: Risk of injury Beware of danger if you incorrectly replace the battery.

  • Page 64: Attaching The Antistatic Wrist Strap

    Attaching the antistatic wrist strap Nortel ships the VPN Router 2700 with an antistatic wrist strap. The antistatic wrist strap directs the discharge of static electricity from your body to the chassis of the gateway to avoid damage to sensitive electronic components. You must wear an antistatic wrist strap on your arm when you remove, install, or handle option cards and DIMMs.

  • Page 65: Installing And Replacing Option Cards

    Installing and replacing option cards The VPN Router 2700 has four slots for option cards section provides instructions on adding new option cards to the VPN Router 2700 or, if necessary, replacing an existing card. Table 16 lists the option cards that you can install in the VPN Router 2700.. Note: The 1000BASE-T (1000 GT) Ethernet interface card only operates at 10/100 Mbit/s on the VPN Router 2600.

  • Page 66: Table 17 Installing Other Option Cards With The Ssl Vpn Module 1000

    Table 16 Supported option cards for the 2600 and 2700 Option card V.90 modem interface Single V.35/X.21 WAN interface (full-height) Single V.35/X.21 WAN interface (half-height) HSSI WAN interface 1 The VPN Router 2700 must be running Version 5.0 or later. 2 The VPN Router 2700 must be running Version 4.90 or later.
  • Page 67 Table 17 Installing other option cards with the SSL VPN Module 1000 (continued) Option card 1000BASE-T or 1000BASE-SX interface V.90 modem interface HSSI WAN interface To install or replace an interface card or a VPN Accelerator card (VPN Router Security Accelerator card or Hardware Accelerator card): Shut down the VPN Router 2700 using the Web GUI or the CLI, and then unplug it as described in hardware”...

  • Page 68: Figure 24 Installing And Removing An Option Card

    Remove the filler panel screw, and pull out the filler panel (or the option card that you are replacing) from the slot Figure 24 Installing and removing an option card Option card Motherboard Lower the new option card into the slot, and gently press the connector into the slot.

  • Page 69: Figure 25 Replacing The Front Bezel

    b Insert the four screws that secure the cover to the chassis, and use a screwdriver to tighten them. 10 Do the following to mount the VPN Router 2700 in an equipment rack: Set the VPN Router 2700 on the rack-mount shelf in the rack. b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws.

  • Page 70: Installing And Replacing Dimms

    Installing and replacing DIMMs The VPN Router 2700 has two slots for dual inline memory modules (DIMMs) (Figure 22 on page VPN Router 2700 with one 256 MB DIMM installed. You can upgrade memory in the gateway by installing a second 256 MB DIMM. Caution: Use of a memory module not purchased from Nortel can render void your warranty or your service contract.
  • Page 71 Attach the antistatic wrist strap that was shipped with the VPN Router 2700 (see “Attaching the antistatic wrist strap” on page Caution: Risk of equipment damage Electrostatic discharge can damage VPN Router 2700 components. To replace a DIMM, remove the installed DIMM as follows: Press down the locking lever on either side of the DIMM page 72).

  • Page 72: Figure 26 Installing And Removing A Dimm

    Figure 26 Installing and removing a DIMM Alignment keys 10 Replace the top cover on the chassis Hold the cover at an angle, and slide it onto the chassis. b Insert the four screws that secure the cover to the chassis, and use a screwdriver to tighten the screws.
  • Page 73 12 Replace the front bezel (Figure 25 on page Hold the bezel by the two handles, and push it onto the chassis. b Use the screwdriver to tighten the two screws that secure the bezel to the chassis. 69). Nortel VPN Router Installation — VPN Router 2700...
  • Page 74 74 Chapter 4 Installing option cards and DIMMs NN46110-311 02.01...

  • Page 75: Technical Specifications

    Appendix A Technical specifications This appendix provides technical specifications for the VPN Router 2700 chassis and the VPN Router 2700 interfaces. Chassis specifications Table 18 lists physical, electrical, and environmental specifications for the chassis. Table 18 Physical, electrical, and environmental specifications Specification Physical Height...

  • Page 76: System Ports

    Table 18 Physical, electrical, and environmental specifications (continued) Specification Operating altitude Storage altitude System ports The VPN Router 2700 system board provides the following built-in interfaces: • 10/100BASE-TX Ethernet LAN port • serial port This section provides information about the 10/100BASE-TX Ethernet LAN port and the serial port on the system board.

  • Page 77: Serial Port

    Figure 27 10/100BASE-TX Ethernet connector RD+RD- 12345678 CS260010A Table 19 provides the 10/100BASE-TX Ethernet port pinouts. Table 19 10/100BASE-TX Ethernet port pinouts Serial port The system board provides a serial port on the rear of the chassis to enable out-of-band management. Use the serial port to assign the management IP address and subnet mask to the newly installed gateway (for more information, see Chapter 3, “Configuring the management IP interface,”...

  • Page 78: Modem Cable Specifications

    Figure 28 Serial cable (9-pin D-sub plug to RS-232-C modem plug) Pin 5 Pin 1 Pin 9 Pin 6 9-position D-sub receptacle with screw locks (ground shield connected to backshell) Table 20 provides the multiple DB9/DB25 serial interface cable pinouts. Table 20 Multiple DB9 and DB25 connector pinouts Serial port Serial port...

  • Page 79: Hardware Option Cards

    Figure 29 Modem cable (9-pin D-sub plug to RS-232-C modem plug) Pin 5 Pin 1 Pin 9 Pin 6 9-position D-sub receptacle with screw locks (ground shield connected to backshell) Table 21 provides the modem cable pinouts. Table 21 Modem cable pinouts Nortel termination Signal Data Carrier Detect...

  • Page 80: Vpn Router Security Accelerator Cards

    • 10/100/1000BASE-X Ethernet interface card (RoHS-compliant) • 1000BASE-T Ethernet interface card • 1000BASE-SX Ethernet interface card • 56/64K CSU/DSU WAN interface card • ADSL WAN interface card • ISDN BRI interface card • T1 CSU/DSU WAN interface card (full-height card) •...

  • Page 81: Ssl Vpn Module 1000

    The VPN Router Security Accelerator card is the successor to the Hardware Accelerator card. The Hardware Accelerator Hifn 7811 card has been discontinued effective January 2006 although Nortel still supports this card. Along with providing support for AES, the VPN Router Security Accelerator card provides increased encryption throughput and improved compression performance.

  • Page 82: 10/100Base-Tx Ethernet Interface Card

    The SSL VPN Module 1000 is supported on the VPN Router 5000, 2700, 2750, and 1740 gateways running VPN Router Version 5.0 software. You must install the SSL VPN Module 1000 in slot 1 of the VPN Router 5000, 2700, 2750, or 1740.

  • Page 83: 1000Base-T (1000 Gt) Ethernet Interface Card

    1000BASE-T (1000 GT) Ethernet interface card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card (see the previous section). This card provides 10/100/1000 Mbit/s Ethernet services and supports autonegotiation. The card supports the IEEE 802.3ab standard and provides RJ-45/CAT 5 interconnection. It can operate in either full or half duplex mode at 10/100 Mbit/s, and in full duplex mode at 1 Gbit/s.

  • Page 84: Figure 33 1000Base-T (1000 Gt) Ethernet Interface Card

    Figure 33 1000BASE-T (1000 GT) Ethernet interface card Select cables for this card as follows. Keep in mind that this card is auto-negotiating and uses the highest possible data rate: • For 1000BASE-T operation, use Category 5 four-pair Ethernet wiring. The cable must comply with the TIA 568 wiring specification.

  • Page 85: 1000Base-T (1000 Mt) Ethernet Interface Card

    1000BASE-T (1000 MT) Ethernet interface card Use the 1000BASE-T (1000 MT) Ethernet interface card to connect to Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. This interface card has a single RJ-45 connector. Figure 34 shows the 1000BASE-T Ethernet interface card.
  • Page 86 Table 23 1000BASE-T (1000 MT)Ethernet port pinouts NN46110-311 02.01 Description TP3+ TP3-...

  • Page 87: 1000Base-Sx Ethernet Interface Card

    1000BASE-SX Ethernet interface card The 1000BASE-SX Ethernet interface card implements short-wavelength (850 nm) laser transmissions. Use this interface card to connect to fiber Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. The 1000BASE-SX Ethernet interface card has a single type LC fiber connector.

  • Page 88: 56/64K Csu/Dsu Wan Interface Card

    56/64K CSU/DSU WAN interface card The 56/64K CSU/DSU WAN interface card has a single RJ-48 connector that provides the signals needed to interface to network equipment. the 56/64K CSU/DSU WAN interface card. Figure 36 56/64K CSU/DSU WAN interface card The connector on the 56/64K CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord.

  • Page 89: Table 24 56/64K Csu/Dsu Cable Pinouts For Crossover Connection

    Table 24 56/64K CSU/DSU cable pinouts for crossover connection Nortel termination Signal Transmit tip Transmit ring not used not used not used not used Receive tip Receive ring The cable operates properly if you do not connect pins 3, 4, 5, and 6. Caution: For crossover connections, do not use Ethernet cable.

  • Page 90: Adsl Wan Interface Card

    ADSL WAN interface card The ADSL Annex A and Annex B WAN interface cards have a single RJ-11 connector that provides the signals needed to interface to the digital subscriber line access multiplexer (DSLAM) and to telephone equipment. Figure 37 shows the ADSL WAN interface card.

  • Page 91: Isdn Bri Interface Card

    ISDN BRI interface card The ISDN BRI S/T and ISDN BRI U interface cards have a single RJ-45 connector that provides the signals needed to interface to ISDN equipment. (To connect the ISDN S/T interface to the ISDN network, you must attach an external NT-1 device to the RJ-45 connector.) Figure 38 shows the ISDN BRI S/T interface card or the ISDN BRI U interface...

  • Page 92: T1/E1 Csu/Dsu Wan Interface Card

    Table 28 provides the ISDN BRI U cable pinouts. Table 28 ISDN BRI U cable pinouts T1/E1 CSU/DSU WAN interface card The T1/E1 CSU/DSU WAN interface card has a single connector that provides the signals needed to interface to T1 or E1 equipment. Nortel ships this interface card as a half-height card and as a full-height card.

  • Page 93: Figure 40 T1/E1 Csu/Dsu Wan Interface Card (Full-Height Card)

    Figure 40 T1/E1 CSU/DSU WAN interface card (full-height card) The connector on the T1/E1 CSU/DSU WAN interface accommodates an 8-pin RJ-48 modular patch cord. These cables are sold as Category 5, or Ethernet, cables. Note: Nortel does not supply the T1/E1 CSU/DSU WAN interface cable with the WAN interface card.

  • Page 94: Table 30 T1/E1 Csu/Dsu Cable Pinouts For Straight-Through Connection

    Table 29 T1/E1 CSU/DSU cable pinouts for crossover connection (continued) Standard-wired end 8-pin male The cable operates properly if you do not connect pins 3, 6, 7, and 8. Caution: For crossover connections, do not use Ethernet cable. If you use Ethernet cable the T1/E1 CSU/DSU does not work to specifications.

  • Page 95: Quad T1/E1 Csu/Dsu Wan Interface Card

    Quad T1/E1 CSU/DSU WAN interface card The quad T1/E1 CSU/DSU WAN interface card has four connectors that provide the signals needed to interface to T1 or E1 equipment. T1/E1 CSU/DSU WAN interface card. Figure 41 Quad T1/E1 CSU/DSU WAN interface card Each connector on the quad T1/E1 CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord.

  • Page 96: V.90 Modem Interface Card

    V.90 modem interface card The V.90 modem interface card has two RJ-11 connectors that provide the signals needed to interface to an incoming telephone line and to telephone equipment. Figure 42 shows the V.90 modem interface card. Figure 42 V.90 modem interface card Included in the accessory box is a 7-foot RJ-11 cable to attach to a telephone jack.

  • Page 97: Table 32 V.35 Cable Pinouts

    You need a DSU/CSU (digital service unit/channel service unit) between the WAN connection and the gateway. You can order a V.35 or X.21 cable to attach to the connector. With this cable, the WAN adapter can function as DTE (data terminal equipment).

  • Page 98: Table 33 X.21 Cable Pinouts

    Table 32 V.35 cable pinouts (continued) Standard-wired end 28-pin male Signal name M0<-SIGNAL GROUND M1<-SIGNAL GROUND SHIELD SIGNAL GROUND The following notes apply to the single V.35 DTE cable: 1. The term “no conn” means the wire is not connected to a pin in the 34-pin connector. 2.
  • Page 99 Table 33 X.21 cable pinouts (continued) Standard-wired end 28-pin male Signal name CTSA CTSB DSRA DSRB DTRA DTRB DCDA DCDB M2<-SIGNAL GROUND SHIELD SIGNAL GROUND The following notes apply to the single X.21 cable: 1. Wires of pair 4 connect to wires of pair 5, but not to any pins in the DA-15. 2.

  • Page 100: Hssi Wan Interface Card

    HSSI WAN interface card The HSSI WAN interface card has a 50-pin SCSI II female connector that provides the signals needed to interface to a T3 modem or modem eliminator. Figure 44 shows the HSSI WAN interface card. Figure 44 HSSI WAN interface card Included in the accessory box is a cable that maps the T3 signals out to a 50-pin SCSI II male connector.
  • Page 101 Table 34 T3 cable pinouts (continued) 50-pin SCSI male Signal name TESTA 50-pin SCSI male Nortel VPN Router Installation — VPN Router 2700...
  • Page 102 102 Appendix A Technical specifications NN46110-311 02.01...

  • Page 103: Index

    64 bezel, front removing 32, 61 replacing 33, 69 browsers, supported 57 cables available from Nortel Networks 36 connecting to the gateway 37 ordering 36 power. See AC power cord technical specifications 1000BASE-SX connector 87 Nortel VPN Router Installation — VPN Router 2700...
  • Page 104 1000BASE-T connector 85 100BASE-TX connector 76 10BASE-T connector 76 56/64K CSU/DSU WAN interface 88 ADSL WAN interface 90 HSSI WAN interface 100 ISDN BRI interface 91 modem 78 quad T1/E1 CSU/DSU WAN interface 95 serial interface 77 single V.35/X.21 WAN interface 97 T1/E1 CSU/DSU WAN interface 93 V.90 modem interface 96 cables, technical specifications...
  • Page 105 Gigabit Ethernet interface cards installing 65 specifications 1000BASE-SX 87 1000BASE-T 85 GUI, Web-based 57 Hardware Accelerator card described 80 installing 65 hardware accessories shipped with the gateway 27 hardware option cards installing 65 specifications 79 See also VPN Router Security Accelerator card, Ethernet interface card, Hardware Accelerator card, serial interface cards, SSL VPN Module 1000, WAN interface cards...
  • Page 106 used to verify correct installation 39 main menu, serial interface 54 management IP address configuring 53 defined 52 troubleshooting configuration of 58 verifying 57 mask, subnet, defined 52 memory modules, adding and replacing 70 modem cable pinouts 79 Netscape Navigator, supported versions 57 NT-1 device, required for ISDN BRI S/T 91 option cards installing 65...
  • Page 107 serial interface cards installing 65 specifications ISDN BRI 91 V.90 modem 96 serial main menu 54 shelf for rack-mount installation 30 shipment contents 27 shutting down the gateway 60 single V.35/X.21 WAN interface card connector 96 installing 65 LEDs 49 V.35 pinouts 97 X.21 pinouts 98 site requirements 28...
  • Page 108 supported in VPN Router 2700 65 VPN Router Security Accelerator card described 80 installing 65 WAN interface cards installing 65 LEDs 56/64K CSU/DSU 45 ADSL 46 quad T1/E1 CSU/DSU 48 single V.35/X.21 49 T1/E1 CSU/DSU 47 specifications 56/64K CSU/DSU 88 ADSL 90 HSSI 100 quad T1/E1 CSU/DSU 95...

Table of Contents