Enterasys ANG-1000 Installation & Service Manual
Enterasys ANG-1000 Installation & Service Manual

Enterasys ANG-1000 Installation & Service Manual

Aurorean policy server; aurorean policy gateway
Hide thumbs Also See for ANG-1000:
Table of Contents

Advertisement

Quick Links

Advertisement

Table of Contents
loading

Summary of Contents for Enterasys ANG-1000

  • Page 2 Enterasys Networks and its licensors reserve the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice.
  • Page 3 There are no user-repairable components in the Aurorean Policy Server or Aurorean Network Gateway. The APS/ANG-3000/7000 does not exceed the Class A limits and the ANG-1000 does not exceed the Class B limits for the radio noise emissions from digital apparatus set out in the interference-causing equipment standard entitled “Digital Apparatus”, ICES-003 of the Department of Communications (Cet appareil numérique respecte les limites...
  • Page 4 Do not use these products near water. Do not place these products on an unstable cart, stand, or table. The product may fall, causing serious damage to the product. Enterasys Networks recommends securely fastening the server to a standard 19” equipment rack.
  • Page 5: Table Of Contents

    Contents of the Guide ... xi Conventions Used in This Guide... xii Related Publications ... xiii System Description ...1 Aurorean Client Software...2 Aurorean Policy Server ...3 Standard Features... 5 Aurorean Network Gateway...6 Standard Features... 8 Optional Features ... 8 RiverMaster Management Application ...9 Aurorean Policy Manager ...11 Aurorean Software Update Service...12 Installation Overview...12...
  • Page 6 Removing the System From the Rack ... 25 Connecting Cables ... 27 Ethernet Cables... 27 Connecting an Aurorean Policy Server ... 27 Connecting an ANG-3000/7000 ... 28 Connecting an ANG-1000... 29 Connecting Power... 31 ANG-3000/7000 ... 31 ANG-1000... 32 Controlling System Configuration ... 33 Before You Begin ...
  • Page 7 Installing New System Software on the ANG-3000/7000 ...36 Transfer the New ANG Installation File to the ANG ...36 Install New ANG System Software...38 Verify ANG’s Date and Time ...38 To change the time zone: ... 38 To change the Date and Time: ... 39 Reboot the ANG...39 Configuring General Values of the ANG-3000/7000 with APM ...40 Installing the Indus River Certificate ...41...
  • Page 8 Configuring Protocols Parameters ... 92 Setting IPsec Parameters... 92 Setting PPTP Parameters ... 94 Configuring Site-to-Site Parameters... 96 Configuring the ANG-1000 with Aurorean Policy Manager... 99 Before You Begin ... 100 Logging into the APM... 100 Viewing VPN Status ... 101 Setting Up the VPN ...
  • Page 9 APS/ANG-3000/7000 ...132 ANG-1000 ...132 Aurorean Policy Server Specifications ...136 Aurorean Network Gateway Specifications...138 Ethernet ...141 Serial Ports ...143 Keyboard and Mouse ...144 Enterasys Networks License Agreement...145 License Grant...145 Warranty...146 Infringement Indemnification...147 Limitation of Liability ...147 Termination...148 International Provisions...148 Applicable Law ...148 U.
  • Page 10 Table of Contents Phone Support... 149 Returning Products for Repair ... 150 Aurorean Installation & Service Guide...
  • Page 11 The Aurorean Network Gateway (ANG) which terminates secure tunnel connections from remote users. Network Gateways are available in three models: the ANG-1000 for up to 25 users in a home or small office, the ANG-3000 for small- to medium-sized networks (up to 500 simultaneous remote users) and the ANG-7000 for large enterprise networks (up to 5000 simultaneous users).
  • Page 12: Conventions Used In This Guide

    Appendix B, Cables & Connectors contains pin assignments and simple cable diagrams useful when fabricating cables to connect to Aurorean servers. r Appendix C, License Agreement & Support describes the warranty terms and support policies covering Enterasys Networks products. The following conventions are used in this guide: NOTE CAUTION...
  • Page 13: Related Publications

    About This Guide The following publications are also supplied with Aurorean systems: r Quick Setup cards that highlight the basic steps required to install either an Aurorean Policy Server or Aurorean Network Gateway. r RiverMaster Administrator’s Guide that describes how to use the RiverMaster application to create remote user accounts, define access policies, select tunnel protocol settings, and track activity.
  • Page 15: Aurorean Client Software

    This chapter describes the key features of Aurorean systems: the Aurorean Network Gateway (ANG) and Aurorean Policy Server (APS). These features are synonymous with all ANG/APS system models unless otherwise specified. The chapter also highlights the capabilities of the RiverMaster management application, which you install on a computer to set up and monitor your Aurorean Virtual Network.
  • Page 16 System Description Aurorean Network Gateway Site-to-Site Connection Aurorean Client INTERNET - Selects closest ISP POP - Dials into ISP POP - Negotiates tunnel with Aurorean Network Gateway ISP = Internet Service Provider POP = Point-of-Presence (local office with Internet access equipment) TollSaver = Database containing ISP POP phone numbers The Aurorean Client Software is a Windows-based application that provides remote users with a simple and efficient means of accessing the corporate...
  • Page 17 Chapter 1 Overview Within an Aurorean Virtual Network, the Aurorean Policy Server performs the following primary tasks: r Manages remote user authentication by authenticating users against user/group databases stored on its own hard drive or by forwarding authentication requests to an external authentication server, such as a RADIUS server.
  • Page 18 System Description APS-3000/7000 FRONT CD ROM drive for installing Aurorean Software updates APS-3000/7000 REAR Floppy disk drive 10/100BaseT Ethernet port to connect trusted LAN (behind firewall) Figure 2 Aurorean Policy Server Front & Rear View Chapter 1 Overview Complete set of diagnostic LEDs Aurorean Installation &...
  • Page 19: Standard Features

    Chapter 1 Overview Standard Features A standard APS comes equipped with the following: r Low profile (1U) chassis that can be mounted into standard 19” racks (midmount or sliding rail hardware provided). r 90-135, 180-265 VAC switchable power supply. r High-performance CPU (800 MHz Pentium III for the APS-7000, 566 MHz Celeron in the APS-3000).
  • Page 20 Negotiates tunnel protocols with remote PCs running the Aurorean Client Software and/or remote Aurorean Network Gateways for Site- to-Site connectivity. The ANG-1000 is employed in a Site-to-Site configuration only. r Compresses and encrypts the data passing over the tunnel connection to improve performance and ensure security.
  • Page 21 ANG-3000/7000 FRONT Floppy disk drive ANG-3000/7000 REAR 10/100BaseT Ethernet port to connect external LAN (outside firewall) ANG-1000 Front Aurorean Installation & Service Guide Complete set of diagnostic LEDs 10/100BaseT Ethernet port to connect trusted LAN (behind firewall) Figure 3 Aurorean Network Gateways Front & Rear Views...
  • Page 22 Two 10/100Base-T (autosensing) Ethernet ports to connect the ANG to the network and the Internet. An ANG-1000 comes equipped with the following: r 100-240V 47-63 Hz power supply. r High-performance CPU: Intel Coldfire 91.5 MHz. r Complete set of diagnostic LEDs that show the server’s operational...
  • Page 23 Chapter 1 Overview After the Aurorean Virtual Network systems are mounted and connected, install the RiverMaster management application on a computer running Windows NT 4.0 (and Service Pack 4 or greater) that is located on the same network segment as the systems. The RiverMaster application allows you to configure, manage and operate your Aurorean Virtual Network.
  • Page 24: Aurorean Network Gateway

    System Description Figure 5 shows the RiverMaster graphical interface and highlights the essential tasks supported by each part of the interface. View tunnel statistics (combined) Check system utilization For complete information on RiverMaster software, refer to the RiverMaster Administrator’s Guide supplied with the APS. Figure 5 RiverMaster Management Application Chapter 1 Overview...
  • Page 25: Aurorean Policy Manager

    Chapter 1 Overview The Aurorean Network Gateway can be also configured using the Web-based Aurorean Policy Manager utility. You access this program, shown in Figure 6, by pointing your Internet browser at the IP address of the Network Gateway. ANG configuration with this application is easy and proceeds sequentially as you navigate down the menu options.
  • Page 26: Aurorean Software Update Service

    Connect one port to an unprotected network segment leading to the Internet, and connect the other port to a trusted network segment that resides behind a firewall. A firewall is not needed for small/home offices using the ANG-1000. Connect the power cord. Chapter 1 Overview Aurorean Installation &...
  • Page 27 Chapter 1 Overview Power up the system(s) and check LEDs. LEDs are described in Chapter 4. Once the Aurorean Virtual Network systems are connected and operating, install the RiverMaster management application on a computer running Windows NT 4.0 to configure and manage the systems. RiverMaster is not used when installing a standalone (remote) ANG.
  • Page 29 Enterasys Networks also supplies all Ethernet and modem cables necessary to link the system to the corporate network and telephone network.
  • Page 30: Mounting The Ang/Aps-3000/7000

    Mounting the ANG/APS-3000/7000 Place the Aurorean system near the following: r Ethernet wall jack, patch panel, or hub with available ports. r A grounded wall outlet or uninterruptible power supply (UPS). Aurorean models ANG/APS-3000/7000 are designed for use in computer rooms and network equipment closets.
  • Page 31 Chapter 2 Mounting & Connecting Systems Orient the system with the brackets aligned with the desired mounting holes in the rack posts as shown in Figure 8. Insert a screw through each bracket and loosely attach to the rack posts. Do not tighten. Properly align the system in the rack and securely tighten the screws to the rack posts.
  • Page 32: Remove The Chassis Sections From The Rail Assemblies

    Mounting the ANG/APS-3000/7000 The rail kit contains the following parts: r Two rail assemblies r Two front brackets (short) r Two rear brackets (long) r One package of ten 10/24 x 0.25” panhead Phillips screws, used to attach the rail chassis sections to the system. r One package of ten 8/32 x 0.38”...
  • Page 33: Attach The Chassis Sections To The System

    Chapter 2 Mounting & Connecting Systems Attach the Chassis Sections to the System To attach the system to the rail chassis sections, perform the following steps: Align the holes in the chassis section with the holes in the system as shown in Figure 10.
  • Page 34: Determine Correct Position For The Rear Brackets

    Mounting the ANG/APS-3000/7000 Fasten the front bracket to the rack section with two 8/32 x 0.38” flathead countersunk Phillips screws, washers, lock-washers and nuts. Attach the washers and nuts in the order shown in Figure 11. Determine Correct Position for the Rear Brackets The exact position of the rear bracket in relation to the rail assembly is determined by the depth of the rack.
  • Page 35: Attach The Rear Brackets To The Rail Assemblies

    Chapter 2 Mounting & Connecting Systems Rack section Hold the rail assembly against the rack to determine which slots to use in the brackets. From the rear of the cabinet, hook the front bracket over the front of the rack. Place the rear bracket so its rack mounting lip is over the back of the rack.
  • Page 36: Install The Assembled Rails Into The Rack

    Mounting the ANG/APS-3000/7000 Place the rail assembly against the rack again by hooking the front bracket over the front of the rack. Slide the rear bracket back until it hooks over the rear of the rack. Hold the rail assembly in place and tighten the screws. Make sure the fit of the rail assembly to the rack is snug.
  • Page 37 Chapter 2 Mounting & Connecting Systems Front bracket Attach the rear bracket to the rack with two screws provided with the rack as shown in Figure 15. Screws provided with the rack Aurorean Installation & Service Guide Figure 14 Attaching Rail Front to the Rack Figure 15 Attaching Back of Rail to the Rack Mounting the ANG/APS-3000/7000 Front chassis...
  • Page 38: Install The System In The Rack

    Mounting the ANG/APS-3000/7000 Install the System in the Rack Hold the system so that the front is facing you. Line up the system so the rollers on the chassis section will enter the channel of the slider section of the rail assembly as shown in Figure 16.
  • Page 39: Secure The System To The Rack

    Chapter 2 Mounting & Connecting Systems Secure the System to the Rack Use the screws provided with the rack to fasten the system’s front flanges to the rack as shown in Figure 17. Removing the System From the Rack If you need to remove the system from the rack perform the following steps: Unscrew the two screws holding the system flanges to the rack.
  • Page 40 Mounting the ANG/APS-3000/7000 Chapter 2 Mounting & Connecting Systems Lock Arm Figure 18 Removing the System from the Rack Do not block the vents at the front and rear of the Aurorean system. For electrical safety, verify that the branch circuit supplying power to equipment in the rack can accommodate the addition of the system.
  • Page 41: Connecting Cables

    Chapter 2 Mounting & Connecting Systems Only Ethernet cables are required to connect to an Aurorean Virtual Network system. This section describes how to connect local and remote Aurorean systems. If you are connecting a remote Aurorean system only, skip to Connecting a Aurorean Network Gateway on page 28.
  • Page 42: Connecting An Ang-3000/7000

    Connecting Cables Connecting an ANG-3000/7000 ANG-3000/7000s are equipped with two 8-pin modular RJ-45 Ethernet ports labeled TRUSTED and EXTERNAL. If you decide to use only one Ethernet port on an Aurorean Network Gateway, you must use the TRUSTED port. The TRUSTED port should be connected to the same network segment as the Aurorean Policy Server, which should reside behind a firewall or a router that provides network protection.
  • Page 43: Connecting An Ang-1000

    Chapter 3. Connecting an ANG-1000 The ANG-1000 is equipped with two 8-pin modular RJ-45 Ethernet ports labeled Trusted and External. The Trusted port should be connected to a network segment residing behind a firewall or a router that provides network protection.
  • Page 44 (outside a firewall). To determine the status of these links, check the LEDs on the front panel as described in Chapter 3. Figure 21 Connecting Ethernet Cables to an ANG-1000 Chapter 2 Mounting & Connecting Systems...
  • Page 45: Connecting Power

    Chapter 2 Mounting & Connecting Systems A standard 6’ AC power cord is supplied with each system. To connect this cord on ANG-3000/7000s, perform the following steps: Plug the cord into the system’s power socket as shown in Figure 22. Plug the opposite end of the cord into a grounded AC outlet or UPS.
  • Page 46 AC outlet or UPS. For international customers, the electrical cord segment shipped with the ANG-1000 may be swapped for a cord that meets the proper standard for your country. This cord can be inserted in the transformer.
  • Page 47 Aurorean Policy Server and/or Aurorean Network Gateway during the installation process. Figure 24 illustrates how the systems are properly connected. Aurorean Installation & Service Guide ANG-3000/7000 Common LAN Segment Remote Control Computer Figure 24 Connecting the Systems Controlling System Configuration APS-3000/7000 ANG-1000...
  • Page 49: Installing New System Software On The Ang-3000/7000

    Setting the IP address of the APS-3000/7000. r Installing APS-3000/7000 software. r Configuring the Remote ANG-3000/7000 with APM. r Configuring the ANG-1000 with the APM (optional). r Backing up the ANG configuration (optional). r Viewing ANG statistics. Before you begin the procedures in this chapter: r Have the Aurorean System Software CD ROM in hand.
  • Page 50: Install New Ang System Software

    Installing New System Software on the ANG-3000/7000 Begin by connecting the Aurorean Network Gateway and remote control PC (laptop or desktop) via a hub or crossover cable (provided in the installation box) as illustrated in Figure 25. To install new ANG system software perform the following steps: r Transfer the ANG installation file to the ANG via FTP r Install new ANG system software...
  • Page 51 Chapter 3 Installing Software & Setting Networking Configurables On your remote control computer, temporarily change the computer’s IP address to an address in the 192.168.1. x range with a subnet mask of 255.255.255.0. Do not use 192.168.1.1, 192.168.1.2, or 192.168.1.3 IP addresses. To change the computer’s IP address, use the Network Control Panel and follow Microsoft’s on-line Help instructions.
  • Page 52: To Change The Time Zone

    Installing New System Software on the ANG-3000/7000 On the ANG command line, type: rpm -i --force rts-xxx.i386.rpm where xxx is the correct release, build and patch number and press Ignore the error messages: "user build does not exist" On the ANG command line, type: date and press The command line will show the date, time and time zone.
  • Page 53: To Change The Date And Time

    Chapter 3 Installing Software & Setting Networking Configurables To change the Date and Time: On the ANG command line type date then enter MMDDhhmmYY using the following arguments: – – – – – After entering the date and time, press The new date and time will be displayed.
  • Page 54: Configuring General Values Of The Ang-3000/7000 With Apm

    To configure general parameters on the ANG-3000/7000, you must use an Internet browser on your remote control computer and connect via a hub or the provided crossover cable to the Network Gateway. You run Enterasys’s Aurorean Policy Manager (APM) utility and configure the system. Figure 26 illustrates the process.
  • Page 55: Using Internet Explorer (5.X Or Greater Versions Only)

    Chapter 3 Installing Software & Setting Networking Configurables The procedure to install the Indus River Certificate differs depending on the browser you are using, Internet Explorer (IE) 5 or higher or Netscape Communicator 4 or higher. Both browsers let you use the certificate either for the duration of the session with the ANG or for all subsequent sessions until the certificate expiration date.
  • Page 56 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Point your Internet Explorer Web browser at the trusted IP address of the Network Gateway by typing the IP address in the Location field, as shown in Figure 27.
  • Page 57 Chapter 3 Installing Software & Setting Networking Configurables Do one of the following: – – Aurorean Installation & Service Guide Configuring General Values of the ANG-3000/7000 with APM Figure 28 Internet Explorer Security Alert Window If you want to make the Certificate valid for the current session only, click Yes.
  • Page 58 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Figure 29 Internet Explorer Certificate Window Click Install Certificate to begin the Indus River Certificate installation process. The Welcome window of the Certificate Manager Import Wizard appears as shown in Figure 30.
  • Page 59 Chapter 3 Installing Software & Setting Networking Configurables Figure 30 Internet Explorer Certificate Manager Import Wizard Window Click Next. The Select a Certificate Store window appears as shown in Figure 31. Aurorean Installation & Service Guide Configuring General Values of the ANG-3000/7000 with APM...
  • Page 60 Configuring General Values of the ANG-3000/7000 with APM Do one of the following: – – Installing Software & Setting Networking Configurables Figure 31 Internet Explorer Select a Store Window Choose the Automatic option for the certificate store and click Next. •...
  • Page 61: Using Netscape (4.X Or Higher Versions Only)

    Chapter 3 Installing Software & Setting Networking Configurables The Indus River Certificate is now either accepted for your current Aurorean Virtual Network session or installed permanently for all sessions. Your IE browser will display a closed lock in the lower right corner of the browser indicating the certificate is in force.
  • Page 62 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Figure 32 Netscape New Site Certificate Window Click Next. The Netscape More Information window appears as shown in Figure 33. If you want to view the certificate and additional details, click More.
  • Page 63 Chapter 3 Installing Software & Setting Networking Configurables Click Next. The Certificate Acceptance window appears as shown in Figure 34. Aurorean Installation & Service Guide Configuring General Values of the ANG-3000/7000 with APM Figure 33 Netscape More Information Window...
  • Page 64 Configuring General Values of the ANG-3000/7000 with APM Make one of the following choices: – – – – Installing Software & Setting Networking Configurables Figure 34 Netscape Certificate Acceptance Window Accept the certificate for this session only and click Next. The Netscape Warn Me window appears as shown in Figure 35.
  • Page 65 Chapter 3 Installing Software & Setting Networking Configurables Click Next. Optionally, you may mark the checkbox to be warned when you next connect to the ANG. The Netscape Finish window appears as shown in Figure 36. Aurorean Installation & Service Guide Configuring General Values of the ANG-3000/7000 with APM Figure 35 Netscape Warn Me Window...
  • Page 66 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Figure 36 Netscape Finish Window Click Finish. The Certificate Name Check window appears as shown in Figure 37. Netscape reports in this window that the certificate name for the ANG does not match the site name.
  • Page 67 Chapter 3 Installing Software & Setting Networking Configurables Click Continue. The APM window appears as shown in Figure 39. Skip to “Logging On Aurorean Policy Manager” on page 55 to continue ANG configuration. If you chose to examine the Indus River Certificate, it appears as shown in Figure 38.
  • Page 68 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Figure 38 Netscape View A Certificate Window The Indus River Certificate is now either accepted for your current Aurorean Virtual Network session or installed permanently for all sessions. Your Netscape browser will display a closed lock in the lower left corner of the browser as well as a closed lock Security icon on the main menu indicating the certificate is in force.
  • Page 69 Chapter 3 Installing Software & Setting Networking Configurables To access the Aurorean Policy Manager Web utility on the ANG, perform the following steps. Aurorean Policy Manager times out after 10 minutes if no configuration changes have been made or keys struck. If this occurs after you log on, you will be returned to the Welcome page.
  • Page 70 Configuring General Values of the ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Enter the default User Name (netadmin) and Password (netadmin) values and click Log On. The Welcome window appears as shown in Figure 40. Figure 40 Aurorean Policy Manager Welcome Window Aurorean Installation &...
  • Page 71 Chapter 3 Installing Software & Setting Networking Configurables To set the General parameters of the ANG-3000/7000, perform the following steps: Click on the General main menu option. The General Configuration Window appears as shown in Figure 41. Figure 41 Aurorean Policy Manager General Configuration Window Enter the name that will be shared by all Aurorean devices on your corporate network in the VPN Domain Name field.
  • Page 72 Guide. We strongly recommend you enable ICR for site-to-site tunnels. To disable ICR for this configuration, consult Enterasys Customer Support. For local ANG configuration only, enter the IP Address of the APS. If you are configuring a remote ANG, skip to Step 8.
  • Page 73 Chapter 3 Installing Software & Setting Networking Configurables Specify the Internet Domain Name to be used throughout your corporate network. To prevent possible communication problems, verify that the combination of the Hostname and Domain Name is unique and “fully-qualified” (not already in use within your domain). Domain names should follow standard practices of period separators.
  • Page 74: Ang-3000/7000 Installation And Configuration Checklist

    Configuring General Values of the ANG-3000/7000 with APM 13 Click Apply Changes. The Completed Successfully window appears with a system prompt to reboot the ANG. 14 Click the Restart button. Since an ANG reboot may take a few minutes, wait for the ANG to completely restart before continuing configuration.
  • Page 75: Ang-3000/7000

    Chapter 3 Installing Software & Setting Networking Configurables Optional. You may save the ANG configuration to a directory of your choice by clicking Backup Configuration and specifying the backup location. For more detailed instructions, refer to “Backing Up the ANG Configuration”...
  • Page 76 Configuring General Values of the ANG-3000/7000 with APM r Click the Apply Changes button? r Click the Restart button? If you successfully completed these steps, do one of the following: – – Installing Software & Setting Networking Configurables Continue ANG-3000/7000 configuration if you are setting up a remote ANG by going to “Configuring the Remote ANG- 3000/7000 with APM”...
  • Page 77 Chapter 3 Installing Software & Setting Networking Configurables The Aurorean Policy Server runs Windows NT 4.0 Workstation as an operating system. To set the Policy Server’s IP address, you perform the same steps using the Network Control Panel as you would any Windows NT computer.
  • Page 78 Setting the IP Address of the APS-3000/7000 Start the VNC application by pointing your Web browser at the APS. In the Location field, type: http://192.168.1.3:5800 The VNC authentication window appears as shown in Figure 43. The IP address you typed includes the port number (5800) with which to access the APS.
  • Page 79: Setting The Ip Address Of The Aps-3000/7000

    Chapter 3 Installing Software & Setting Networking Configurables On the APS desktop, right-click on the Network Neighborhood icon and click Properties. Click on the Protocols tab. Select TCP/IP Protocol and click Properties. A Microsoft TCP/IP Properties window appears similar to the one shown in Figure 45.
  • Page 80 Setting the IP Address of the APS-3000/7000 DHCP is NOT supported for Aurorean systems; they must have a fixed address Change the default values in these fields 10 In the IP Address and Subnet Mask fields, enter new address values you want assigned to the APS.
  • Page 81 Chapter 3 Installing Software & Setting Networking Configurables Change the default values in these fields as needed 14 Select the Protocols tab in the Network window and click TCP/IP Protocol as shown in Figure 46. Then click Properties and the DNS tab.
  • Page 82 Setting the IP Address of the APS-3000/7000 Change the default values in these fields as needed 17 On the remote control PC, change the computer’s IP address and subnet mask to values in the same range as the APS’s new IP address and subnet mask.
  • Page 83 Chapter 3 Installing Software & Setting Networking Configurables Although the APS ships with most of its operating software already factory-installed, you must install some additional software from the Aurorean System Software CD ROM. During this installation, a Configuration Wizard program is launched that captures networking values for both servers (local APS/ANG systems only), such as IP addresses for the Ethernet interfaces.
  • Page 84 Installing APS-3000/7000 Software When the Welcome window appears, accept all defaults and click Next to continue. After the installation sequence completes, a pop-up appears. Click Yes to configure your VPN. The Configuration Wizard introductory window appears as shown in Figure 49. Figure 49 Configuration Wizard - General Network Settings Window In the Company Name field, type the name of your company.
  • Page 85: Installing Aps-3000/7000 Software

    Chapter 3 Installing Software & Setting Networking Configurables When you start RiverMaster the first time, you must enter the Aurorean VN name you entered in this field; record this name for later use. Click Next to continue the configuration or Cancel to exit the Wizard without saving your changes.
  • Page 86 Installing APS-3000/7000 Software The APS’s IP address is shown on this window as display-only and cannot be changed here. When you start the RiverMaster application for the first time, you must enter the IP address that appears in this field; record this address for later use.
  • Page 87 Chapter 3 Installing Software & Setting Networking Configurables 12 Do one of the following: – – – When you click Next, an ANG configuration window appears as shown in Figure 52. This portion of the Wizard program configures local ANG values only. Remote ANG values are set using the Aurorean Policy Manager utility.
  • Page 88 Installing APS-3000/7000 Software Manditory Configuration Item: This default static route on the external interface is required in order for the ANG to communicate with Clients or other ANGs. 15 Enter the IP address of the router that provides access to the Internet in the External Default Gateway field.
  • Page 89 Chapter 3 Installing Software & Setting Networking Configurables 19 Optional (these values can be configured using RiverMaster). In the Primary DNS and Secondary DNS fields, enter the IP addresses of DNS servers on your network. You must identify a primary DNS server. Although the secondary DNS server is optional we recommend you repeat the address of the primary DNS server.
  • Page 90 Installing APS-3000/7000 Software 21 Do one of the following: – – – When you click Next, an E-mail notification configuration window appears as shown in Figure 54. Figure 54 Configuration Wizard - Notification Service Setup Window 22 Optional . In the SMTP Server field, enter the name of the SMTP server on your network.
  • Page 91 APS and type ping -t x.x.x.x where x.x.x.x is the APS IP address. Wait for the “Reply from x.x.x.x ” message to display. Upon rebooting, all Enterasys services are started, the APS reboots and the VNC remote control session ends.
  • Page 92 Installing APS-3000/7000 Software Use the following checklist to verify you have completed the indicated steps: r Did you connect your remote control PC to the APS via the hub or crossover cable? r Did you bring up a Web browser and enter the location http://192.168.1.3:5800 (or install the VNC client from the Aurorean System Software CD ROM and launch the VNC viewer)? r Did you use Network Control Panel to change network properties...
  • Page 93: Configuring The Remote Ang-3000/7000 With Apm

    Chapter 3 Installing Software & Setting Networking Configurables Since you have already configured General values for the ANG, you are ready to complete configuration of the Network Gateway. To set routing parameters of the remote ANG, perform the following steps: Click on the Routing option.
  • Page 94: Setting Ospf Properties

    Configuring the Remote ANG-3000/7000 with APM properties. The values displayed are default parameters. – – – – – If used, type the RIP Password and then confirm the entry in the fields provided. Click Apply Changes. Setting OSPF Properties If your trusted network uses OSPF and you want the ANG to learn and broadcast OSPF routes, perform the following steps: Click the OSPF tab in the Routing Configuration Window.
  • Page 95: Setting Static Routes

    Chapter 3 Installing Software & Setting Networking Configurables Specify the Area ID of the ANG. The Area ID is the IP address shared by routers and the ANG. Specify the Router ID of the ANG. The Router ID is the IP address which identifies the ANG to other devices in the OSPF area.
  • Page 96 Configuring the Remote ANG-3000/7000 with APM Figure 57 Aurorean Policy Manager Static Route Configuration Window Click Add Route. The Add Static Routes window appears as shown in Figure 58. Figure 58 Aurorean Policy Manager Add Static Routes Configuration Window Enter an IP address for the Gateway router on this subnet to which the ANG will connect.
  • Page 97: Setting External Routes

    Chapter 3 Installing Software & Setting Networking Configurables In the Reachable Subnet fields, type a starting IP Address and Subnet Mask to define a subnet. Packets received by the ANG are statically routed to the gateway you specify. To forward all packets to the gateway where there is no reachable “next hop”...
  • Page 98 Configuring the Remote ANG-3000/7000 with APM Chapter 3 Installing Software & Setting Networking Configurables Figure 59 Aurorean Policy Manager External Routes Configuration Window Click Add Route. The Add External Routes configuration window appears as shown in Figure 60. Figure 60 Aurorean Policy Manager Add External Routes Configuration Window Aurorean Installation &...
  • Page 99: Configuring Name Server Parameters

    Chapter 3 Installing Software & Setting Networking Configurables Enter an IP address for the Gateway router to which the ANG will connect. This IP address must be on the same subnet as the external interface of the ANG. In the Reachable Subnet fields, type a starting IP Address and Subnet Mask to define a subnet.
  • Page 100 Configuring the Remote ANG-3000/7000 with APM Click Add Subnet. The Add Subnet window appears as shown in Figure 62. Figure 62 Aurorean Policy Manager Add Virtual Subnets Window Enter an Subnet IP Address and Subnet Mask for the Virtual Subnet in the fields provided.
  • Page 101: Configuring Authentication Parameters

    Chapter 3 Installing Software & Setting Networking Configurables Name Server settings are optional. If you do not use DNS or WINS servers on your network, skip to “Configuring Authentication Parameters” on page 87. To set the Name Server parameters of the ANG, perform the following steps: Click on the Name Servers option.
  • Page 102: Setting Group Parameters

    Configuring the Remote ANG-3000/7000 with APM To set the Authentication parameters of the ANG, perform the following steps. We recommend configuring Group values before User values. Setting Group Parameters To set the Group parameters on the ANG, perform the following steps: Click on the Authentication option.
  • Page 103 Chapter 3 Installing Software & Setting Networking Configurables Add a Group Name. There is no character limit to group names and they may contain letters, numbers, and some symbols. The following symbols are not permitted in the Group Name field: comma (,), plus sign (+), at sign (@), space, Tab, single (‘) and double quotes (“), space, apostrophe (‘), tilde (~), percent sign (%), ampersand (&), exclamation point (!), backslash (|), forward slash (/), and asterisk (*).
  • Page 104: Setting User Parameters

    Configuring the Remote ANG-3000/7000 with APM Setting User Parameters Users on remote ANGs can be either the name chosen for a corresponding site-to-site ANG or administrators who require access to the Aurorean Policy Manager tool. To set User parameters on the ANG, perform the following steps: Click on the Authentication main menu option.
  • Page 105 Chapter 3 Installing Software & Setting Networking Configurables Enter a name for the user. Users identified in this field originated from the initiating ANG but are authenticated at this terminating ANG. There is no character limit to user names and they may contain letters, numbers, and some symbols.
  • Page 106: Setting Ipsec Parameters

    Configuring the Remote ANG-3000/7000 with APM Do one of the following: – – In the IP address field, assign a static address to this user. Click Add User. Aurorean Network Gateways support two tunnel protocols: r IP Security (IPsec) protocol developed by the Internet Engineering Task Force (IETF) that adds security extensions for encryption and message authentication to the IP protocol.
  • Page 107 Chapter 3 Installing Software & Setting Networking Configurables Figure 68 Aurorean Policy Manager IPsec Configuration Window Choose the type of Primary Encryption to employ on the ANG. Your choices are, in descending order of protection: – – – – Aurorean Installation & Service Guide Configuring the Remote ANG-3000/7000 with APM Triple DES: Enables a version of DES (described below) that employs a DES encryption with one key, a decryption with a...
  • Page 108: Setting Pptp Parameters

    Configuring the Remote ANG-3000/7000 with APM Choose the type of Secondary Encryption to employ on the ANG. Secondary encryption is available for clients who do not accept primary encryption, mainly legacy Aurorean Virtual Network 1.x Export clients who have not been updated. Since most clients now can accept the primary encryption choices, we recommend you do not change the default None option.
  • Page 109 Chapter 3 Installing Software & Setting Networking Configurables Click on the PPTP tab. The PPTP configuration window appears as shown in Figure 69. Figure 69 Aurorean Policy Manager PPTP Configuration Window Choose to Enable or Disable 128-bit Encryption. This option can enable 128-bit key Microsoft Point-to-Point Encryption (MPPE) on the tunnel.
  • Page 110 Configuring the Remote ANG-3000/7000 with APM Both Local and Remote Aurorean Network Gateways can be configured as site-to-site ANGs but if the initiating ANG is a Local ANG, you must use RiverMaster to configure and enable the site-to-site tunnel. When you are ready to configure the system at the other end of this connection - the terminating Network Gateway - remember to configure General, Authentication, and Subnet parameters only.
  • Page 111 Chapter 3 Installing Software & Setting Networking Configurables Specify a Tunnel Name for the site-to-site tunnel. This name will be used to identify the terminating ANG. It does not need to match the name of the terminating tunnel. Enter the external IP Address of the terminating ANG. The protocol parameters on the terminating tunnel will apply.
  • Page 112 Configuring the Remote ANG-3000/7000 with APM To modify any Site-to-Site parameter, click properties on the selected tunnel, make the changes and click Modify Site-to-Site Tunnel. You have completed ANG configuration using Aurorean Policy Manager. Click the Log Off icon in the upper right corner of the GUI. If your ANG is a site-to-site stand-alone tunnel, the Aurorean Network Gateways should now be fully capable of communicating with eachother over the Ethernet network.
  • Page 113: Configuring The Ang-1000 With Aurorean Policy Manager

    Chapter 3 Installing Software & Setting Networking Configurables To configure the ANG-1000, use the Internet browser on your computer and connect to the server via the Web. During the Web session, you run Enterasys’s Aurorean Policy Manager (APM) utility and configure the system.
  • Page 114: Before You Begin

    Configuring the ANG-1000 with Aurorean Policy Manager Before you begin the procedures in this chapter, review the following: r Be sure the ANG-1000 is cabled correctly as described in “Connecting an ANG-1000” in Chapter 2 of this manual. r Aurorean Policy Manager supports the use of Internet Explorer 5 or Netscape 4 Web browsers.
  • Page 115 ANG-3000/7000, the window will display information similar to the data shown in Figure 74. Do one of the following: Aurorean Installation & Service Guide Configuring the ANG-1000 with Aurorean Policy Manager Figure 74 VPN Status Window – If you are setting up a Site-to-Site connection, click the VPN Setup menu option and go to the next page.
  • Page 116 Configuring the ANG-1000 with Aurorean Policy Manager The VPN configuration created on the ANG-1000 completes a link with the ANG-3000/7000 on the remote end of this connection. If your network administrator has already set up the ANG-3000/7000 with appropriate User, Password and Group information, after setting up the VPN you will build the Site-to-Site tunnel connection and be up and running on the corporate LAN.
  • Page 117 Export routes allows routes on the Trusted side of the – ANG-1000 to be exported over the tunnel. Enabling this feature turns off Network Address Translation (NAT) which is on by default. The ability to export routes is beneficial if you have routable addresses at home or in the office.
  • Page 118 Configuring the ANG-1000 with Aurorean Policy Manager Internet configuration of the External side of the ANG-1000/computer connection involves choosing the type of IP address assignment the ANG- 1000 will accept. The ANG can accept one of the following: r A DHCP-assigned IP address - your network automatically sets the ANG’s IP address via the DHCP (Dynamic Host Configuration...
  • Page 119 Do one of the following: r Click the DHCP radio button and perform the following steps: Aurorean Installation & Service Guide Configuring the ANG-1000 with Aurorean Policy Manager Figure 76 Internet Setup Window – Enter a Hostname for the system.
  • Page 120 Configuring the ANG-1000 with Aurorean Policy Manager r Click the Manual assigned IP address radio button and perform r Click the PPoE assigned IP address radio button and perform the Installing Software & Setting Networking Configurables the following steps: –...
  • Page 121 LAN configuration of the Trusted side of the ANG-1000/computer connection involves choosing either to manually set an IP address and subnet for the ANG-1000 or dynamically assigning its IP address via your network’s DHCP server. Begin LAN Setup by performing the following steps: Click the LAN Setup menu option.
  • Page 122 This option is on by default. Optional. Keep Enable WINS proxy checked so that the – ANG-1000 will act as a WINS server for all its tunnels. WINS proxy resolves host names and IP addresses because the domain server is non-routable, forcing attached hosts to request these values.
  • Page 123 Site-to-Site or Trusted connections by disabling Web or Telnet access to them. Enabling any of the following options allows Web or Telnet traffic to run in the clear over the ANG-1000. You can permit the transmission of unencrypted traffic but the ANG-1000 will drop packets it receives outside the tunnel.
  • Page 124 Configuring the ANG-1000 with Aurorean Policy Manager To further ensure security for your ANG-1000, you should configure a new password to replace the factory-installed password netadmin. Change the Password by performing the following steps: Click the Set Password menu option.
  • Page 125 Installing Software & Setting Networking Configurables When a new firmware image becomes available, you can download it easily to the ANG-1000’s flash memory by accessing the FTP server where they are stored. Begin updating your firmware by performing the following steps: Click the Firmware Upgrade menu option.
  • Page 126 Configuring the ANG-1000 with Aurorean Policy Manager Observe the External/Trusted LEDs on the ANG-1000’s front panel. They will blink in different patterns including an inside/outside pattern for a minute or two. The image is now downloaded and the ANG-1000 rebooted.
  • Page 127 Installing Software & Setting Networking Configurables The Device Status window provides a host of important data to ensure the ANG-1000 is connected properly and to permit troubleshooting as problems occur. When consulting Enterasys Customer Support, you will be asked to display this window.
  • Page 128 Configuring the ANG-1000 with Aurorean Policy Manager Chapter 3 Installing Software & Setting Networking Configurables Figure 82 Device Status Window Aurorean Installation & Service Guide...
  • Page 129 Chapter 3 Configuring the ANG-1000 with Aurorean Policy Manager Installing Software & Setting Networking Configurables Figure 83 Device Status Window (continued) Aurorean Installation & Service Guide...
  • Page 130 Configuring the ANG-1000 with Aurorean Policy Manager Advanced Utilities provided by the ANG-1000 include: r Setting the MAC Address of a newly attached ANG-1000 when you want to quickly connect to a cable service provider. MAC addresses are used by service providers to identify supported users.
  • Page 131 Installing Software & Setting Networking Configurables Knowledgeable network administrators can use the Configuration Editor to invoke commands on the ANG-1000’s LINUX 2.0 operating system. Inexperienced users or those unfamiliar with LINUX attempting to use this editor may disable the system. We recommend only expert users, in conjunction with Enterasys Customer Support, use this editor.
  • Page 132 Configuring the ANG-1000 with Aurorean Policy Manager Click on the command of your choice. The arguments of the command you selected are displayed in the Configuration File Edit window, as shown in page 118. Edit the UNIX command and click Update or Delete.
  • Page 133: Backing Up The Ang Configuration

    Chapter 3 Installing Software & Setting Networking Configurables The optional Backup Configuration option of the Aurorean Policy Manager lets you save your just-completed ANG configuration to a local/network site or a floppy disk. The configuration file created by this backup process is compressed in a WinZip file as a Unix tar file (config.gz) which bundles the auser.irx, group.irx and config.irx files.
  • Page 134 Backing Up the ANG Configuration Do one or both of the following: – – When the File Download pop up appears, click OK. After the Save As/Unknown File Type dialog box appears, select a directory and click Save. Do not attempt to change the file name. It cannot be renamed. The Download complete window pops up as shown in Figure 88 displaying the file size and the directory where it was stored.
  • Page 135: Viewing Ang Statistics

    Chapter 3 Installing Software & Setting Networking Configurables The About window displays useful, real-time (when refreshed) statistics regarding the ANG you are logged into. The information displayed includes: r Software Version: release, patch and build number of the ANG code r System Uptime: interval the ANG is operating since the last reboot, time of day, number of users logged on and average load r System Memory: kilobytes of RAM, as well as free, shared, buffered...
  • Page 136 Viewing ANG Statistics Chapter 3 Installing Software & Setting Networking Configurables Aurorean Installation & Service Guide...
  • Page 137 Chapter 3 Viewing ANG Statistics Installing Software & Setting Networking Configurables Figure 89 Aurorean Policy Manager About Window Aurorean Installation & Service Guide...
  • Page 139 (running or stopped) of each service on the Aurorean Policy Server. The front panel LEDs on both system types also reveal which services have initialized properly during boot-up. Enterasys services are started in the following order: Delivery carries messages between all Aurorean VN components, including systems, Aurorean VN Clients, and the RiverMaster management application.
  • Page 140: Powering Up A System

    Powering Up a System Overlord monitors the condition of all other IR services and restarts a service if it fails to initialize properly or ceases to operate at any point. IR Overlord may also force a total system reboot if necessary. Authorization provides the mechanism for authenticating remote users against user databases located on either the Aurorean Policy Server or an external authentication server (such as a RADIUS...
  • Page 141: Checking Leds

    Chapter 4 Basic System Operation Aurorean APS/ANG-3000/7000 systems contain informative LEDs on the front panel. Front panel LEDs for the APS/ANG-3000/7000 systems share the same LEDs. Table 1 describes each front panel LED and indicates what action should be taken for each LED state (on, off, or blinking). Table 1 APS/ANG-3000/7000 Front Panel LED Meanings This LED...
  • Page 142 Press the Reset button to reboot the system. If the LED stays off after rebooting, connect a keyboard, monitor, and mouse to the system and contact Enterasys Network Customer Support as described in Appendix C . No action required. Link on Trusted Ethernet port is configured for 10Mb.
  • Page 143: Ang-1000 Front And Rear Leds

    Aurorean VN system over an Ethernet link. Mgmt Front and rear LEDs on the ANG-1000 are functionally similar to their counterparts on the APS/ANG-3000/7000 systems with several different LEDs: Internet, VPN, TX (transmit) and RX (receive) LEDs. Table 1 describes each LED and indicates what action should be taken for...
  • Page 144 Checking LEDs Table 2 ANG-1000 Front and Rear LED Meanings This LED... Indicates... System status. Green The CPU is engaged. Active The Internet interface. Green A connection to the Internet is Internet active. These LEDs blink when traffic Yellow is either transmitted or...
  • Page 145 Chapter 4 Basic System Operation Table 2 ANG-1000 Front and Rear LED Meanings This LED... Indicates... The Serial ports these LEDs Green are connected to are Com 1 inoperative. Com 2 The VPN LED stays lit when Green a tunnel connection is begun.
  • Page 146: Resetting A System

    Resetting a System When you press the Reset button on any APS or ANG (except the ANG-1000), the system performs a full reset which clears memory, reloads the operating system, and starts Enterasys services. Figure 90 shows the location of the reset button on the front panel.
  • Page 147: Aps/Ang-3000/7000

    Aurorean Network Gateways (ANG-3000/7000) and Policy Servers (APS-3000/7000) share many of the same characteristics while the ANG-1000 is markedly different. This appendix details common specifications of all Aurorean VN servers, as well as those specific to each server type. Category...
  • Page 148: Ang-1000

    Table 1 Common Specifications (Continued) Category Environment: Ambient ANG/APS- Temperature 3000/7000 Relative Humidity Acoustic Noise Environment: Operating ANG-1000 Temperature PFC Power AC Voltage & Supply: Frequency APS/ANG- DC Power Supply 3000/7000 +5VDC +12VDC +3.3VDC -12VS\DC PFC Power Output: 5 vVDC, Supply: ANG- 2.5A...
  • Page 149 Japan Australia, New Zealand Taiwan Russia International Safety US/Canada/ Regulations Europe ANG-1000 US, Canada, ANG-1000 Europe, Japan, Australia, New Zealand, Taiwan, Russia, Internalional Aurorean Installation & Service Guide Parameters FCC Title 47 CFR Parts 2 and 15, Verified Class A Limit...
  • Page 150: Aurorean Policy Server Specifications

    Aurorean Policy Server Specifications Table 2 provides additional information specific to Aurorean Policy Servers. Unless otherwise noted, the information applies to all APS models. Table 2 Aurorean Policy Server Specifications Category Authentication Authentication Services Management Processor Memory Storage Hard Drive Devices CD-ROM Drive Floppy Drive...
  • Page 151: Ethernet

    Appendix A Specifications Table 2 Aurorean Policy Server Specifications (Continued) Category Ethernet Number of Ports Data Transfer Rate Connector Cabling Aurorean Installation & Service Guide Aurorean Policy Server Specifications Values 10 or 100 Mbps (auto-sensing) 8-position modular jack (RJ-45), Stewart 88-360808 or equivalent Unshielded twisted pair (UTP) 328 ft.
  • Page 152 ANG-1000: 25 concurrent tunnels ANG-7000 : 40 Mbps with Triple DES ANG-3000: 20 Mbps with Triple DES ANG-1000: 700 Kbps with MPPE Point-to-Point Tunneling Protocol (PPTP) as defined in RFC 1234 Generic Routing Encapsulation (GRE) as defined in RFC 1701...
  • Page 153 ANG-3000: Celeron 566 MHz ANG-1000: Coldfire 91.5 MHz ANG-7000: 256 MB ANG-3000: 64 MB ANG-1000: 16MB DRAM, 2MB Flash 3 GB (or larger) EIDE hard disk boot device Standard 3.5” diskette drive 10 or 100 Mbps (auto-sensing) 8-position modular jack (RJ-45), Stewart 88-360808 or...
  • Page 155: Serial Ports

    Aurorean Network Gateway APS-1000 model, these LAN connectors are routed to four LEDs (two Link and 100Mbps LEDs per each interface) on the front panel (refer to Appendix A for LED descriptions). The ANG-1000 provides two Transmit and Send LEDs for the Trusted and External 10 Base T ports.
  • Page 156 Both port types conform to IEEE 802.3 standards with 8-pin modular RJ-45 connectors. The same cables can be used for 10 Mbps and 100 Mbps transmission. Figure 1 shows the pin assignments for all Aurorean VN system Ethernet ports (ANG-1000 ports are labeled as Trusted and External). Link 1 (TRUSTED)
  • Page 157 UARTS support data transfers at speeds up to 115.2 Kbits/sec with BIOS support. The serial ports can be assigned as COM1 (3F8h), COM2 (2F8h), or COM3 (3E8h). The ANG-1000 provides two rear serial ports (COM1, COM2). Because these serial ports are rarely used and employ industry-standard male DB-9 connectors, serial cables are not provided with the system.
  • Page 158: Keyboard And Mouse

    Keyboard and Mouse Aurorean VN system types (excluding the ANG-1000) offer keyboard and mouse ports located at the rear of the chassis for diagnostic use only. These ports should be used only under the supervision of Enterasys Networks support personnel or qualified reseller technicians. All system configuration and management should be performed using the Aurorean VN application.
  • Page 159 The Licensed Software is licensed, not sold, to you for use only under the terms of this license, which represents the complete agreement and understanding between you and Enterasys. Enterasys reserves any rights not expressly granted to you. You own the media on which the software is originally or subsequently recorded or fixed, but Enterasys retains ownership of all copies of the software itself.
  • Page 160: Enterasys Networks License Agreement

    Licensee. Enterasys’s sole obligation under this warranty shall be limited to using reasonable efforts to correct reproducible defects and distribute such corrections as part of the next scheduled maintenance release of the Software.
  • Page 161 Enterasys or the Licensed Software or any part thereof or by their use or operation. ENTERASYS AND ITS LICENSORS’ TOTAL LIABILITY FOR ANY CAUSE...
  • Page 162 INCIDENTAL DAMAGES, SO THE ABOVE DISCLAIMERS MAY NOT APPLY TO YOU. Enterasys may terminate this license agreement and Licensee’s right to use the Licensed Software if Licensee materially breaches the terms of this Agreement or fails to pay the licensee fee when due, and fails to cure such breach within thirty days of notice thereof by Enterasys.
  • Page 163: Technical Support

    The use of the Licensed Software by the Government constitutes acknowledgment of Enterasys’s proprietary rights in the Licensed Software. The manufacturer is Enterasys Networks, 35 Industrial Way, Rochester, New Hampshire 03866. The licensee or user of this product agrees not to remove any of the RESTRICTED RIGHTS legends and markings included in this software and associated documentation.
  • Page 164 Administrator’s Guide on hand when you call. After discussing the problem with Enterasys Networks Customer Support or your authorized Enterasys Networks reseller, you may be asked to return the APS-3000/7000 or ANG-1000/3000/7000 for repairs. You will receive a Return Material Authorization (RMA) number for the server. Ship the server,...
  • Page 165 AC power supply specifications Access service Active LED ANG-1000/3000/7000 specifications APS-3000/7000 specifications Aurorean Aurorean Network Gateway backup configuration backup configuration button connecting Ethernet cables mounting – options restart button specifications standard features system description Aurorean Policy Server Configuration Wizard connecting Ethernet cables...
  • Page 166 Ethernet cable requirements connecting cables – ports specifications External Default Gateway field External fields External LEDs EXTERNAL port connecting cables External port connecting cables Flash LED indicator floppy drive front panel APS/ANG-3000/7000 LEDs illustration FTP service Fully Qualified Name field Generic Routing Encapsulation (GRE) grounding hard drive...
  • Page 167 network cable requirements connecting cables – connector pin assignments NMI switch Notice Notification fields Notification service on-line customer support optional hardware Overlord service path pin assignments Ethernet keyboard port mouse port serial port Point-to-Point Tunneling Protocol (PPTP) power connections power supply specifications Power LED Primary DNS and Secondary DNS fields...
  • Page 168 TollSaver Trusted LEDs TRUSTED port connecting cables Trusted port connecting cables tunnel protocols U1 Link LED U2 Mgmt LED UL notices VPN LED warranty Aurorean Installation & Service Guide...

This manual is also suitable for:

Ang-3000Ang-7000Aps-3000Aps-7000

Table of Contents