Figure 8 Default Configuration - Nortel Contivity 1100 Configuration Manual

60 Chapter 3 Setting up the Nortel VPN Router 1010, 1050, and 1100

Figure 8 Default configuration

By default, the Nortel VPN Router 1010, 1050, and 1100 are configured with the
following parameters:
•
•
•
•
•
•
•
NN46110-500
The DHCP server is configured on the switch's private interface, with a
default range of 192.168.1.3/24 to 192.168.1.255/24. By default, 192.168.1.1
and 192.168.1.2 are assigned to the branch office switch's private and
management interfaces, respectively. The DHCP server provides its own
address for the DNS server and default Nortel VPN Router.
The DHCP client is configured on the switch's public interface to retrieve its
IP address from the ISP's DHCP server. Other parameters retrieved from the
DHCP server should include the default Nortel VPN Router and the DNS
server.
DNS proxy is configured to forward DNS requests to an external DNS server.
The address of the DNS server is obtained during startup from the ISP's
DHCP.
Network Address Translation (NAT) translates the private IP address space
(determined by default configuration of the DHCP server) into one public
address assigned to the public interface by your ISP.
Port NAT maps multiple IP addresses in the private space to a single public IP
address. The default configuration only supports initiating IP sessions from
the private side of the switch, which reduces security risks.
The Nortel VPN Router Interface Filter is set as the default firewall.
The firewall setting PermitAll is the default for both the public and private
interfaces. This default is different from the DenyAll default setting for other
Nortel VPN Routers.