Nortel  Contivity VPN Switch 1010 Installation Manual
Nortel  Contivity VPN Switch 1010 Installation Manual

Nortel Contivity VPN Switch 1010 Installation Manual

Vpn router
Hide thumbs Also See for Nortel Contivity VPN Switch 1010:
Table of Contents

Advertisement

Nortel VPN Router Installation
— VPN Router 1010/1050/1100
Version 7.05.300
NN46110-313 02.01
314961-G Rev 01
November 2007
Standard
600 Technology Park Drive
Billerica, MA 01821-4130

Advertisement

Table of Contents
loading

Summary of Contents for Nortel Nortel Contivity VPN Switch 1010

  • Page 1 Nortel VPN Router Installation — VPN Router 1010/1050/1100 Version 7.05.300 NN46110-313 02.01 314961-G Rev 01 November 2007 Standard 600 Technology Park Drive Billerica, MA 01821-4130...
  • Page 2 In the interest of improving internal design, operational function, and/or reliability, Nortel Networks Inc. reserves the right to make changes to the products described in this document without notice. Nortel Networks Inc. does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
  • Page 3 This Software License Agreement (“License Agreement”) is between you, the end-user (“Customer”) and Nortel Networks Corporation and its subsidiaries and affiliates (“Nortel Networks”). PLEASE READ THE FOLLOWING CAREFULLY. YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE SOFTWARE.
  • Page 4 “Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or affiliates, and is copyrighted and licensed, not sold. Software consists of machine-readable instructions, its components, data, audio-visual content (such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies. Nortel Networks grants you a license to use the Software only in the country where you acquired the Software.
  • Page 5 Neither party may bring an action, regardless of form, more than two years after the cause of the action arose. The terms and conditions of this License Agreement form the complete and exclusive agreement between Customer and Nortel Networks. This License Agreement is governed by the laws of the country in which Customer acquires the Software. If the Software is acquired in the United States, then this License Agreement is governed by the laws of the state of New York.
  • Page 6 NN46110-313 02.01...
  • Page 7: Table Of Contents

    Contents New in this release..........13 Features .
  • Page 8 1000BASE-T (1000 GT) Ethernet interface card LEDs ..... 30 56/64K CSU/DSU WAN interface card LEDs ......31 ADSL WAN interface card LEDs .
  • Page 9 Figures Figure 1 VPN Router 600 1010/1050/1100 series ......21 Figure 2 VPN Router 600 1010 front view ....... 23 Figure 3 VPN Router 600 1050 front view .
  • Page 10 Figures NN46110-313 02.01...
  • Page 11 Tables Table 1 Items shipped with the VPN Router 600 1010, 1050, and 1100 ..22 Table 2 Power cord requirements ........26 Table 3 Front panel LED indicators .
  • Page 12 Tables NN46110-313 02.01...
  • Page 13: New In This Release

    New in this release The following section details what’s new in Nortel VPN Router Installation— VPN Router 1010/1050/1100 (NN46110-313) for Release 7.05.300: Features See the following section for information about feature changes: 1000BASE-T (1000 GT) Ethernet card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card.
  • Page 14 New in this release NN46110-313 02.01...
  • Page 15: How To Get Help

    How to get help This chapter explains how to get help for Nortel products and services. Finding the latest updates on the Nortel Web site The content of this documentation was current at the time the product was released. To check for updates to the latest documentation and software for VPN Router, go to: www.nortel.com/support Select Security &...
  • Page 16: Getting Help Over The Phone From A Nortel Solutions Center

    Getting help over the phone from a Nortel Solutions Center If you do not find the information you require on the Nortel Technical Support Web site, and you have a Nortel support contract, you can also get help over the phone from a Nortel Solutions Center.
  • Page 17: Preface

    Preface The VPN Router 1010, 1050, and 1100 are part of the Nortel VPN Router system. Nortel VPN Routers support secure, reliable IP VPNs in a single, integrated hardware device. Throughout this guide, the VPN Router 1010, 1050, and 1100 are also referred to collectively as the gateway.
  • Page 18: Text Conventions

    Text conventions This guide uses the following text conventions: bold Courier text italic text plain Courier text separator ( > ) Acronyms This guide uses the following acronyms: ADSL CSU/DSU DIMM ISDN NN46110-313 02.01 Indicates command names and options and text that you need to enter.
  • Page 19: Related Publications

    MDI-X Related publications For more information about using the VPN Router 1010, 1050, and 1100 (formerly known as the Contivity Secure IP Services Gateway 1010, 1050, and 1100), refer to the following publications (included on the VPN Router software CD): •...
  • Page 20: Printed Technical Manuals

    Nortel VPN Router Configuration — Advanced Features (NN46110-502) • provides instructions for configuring 802.1Q VLANs, circuitless IP, advanced WAN settings, PPP, PPPoE, frame relay, ADSL and ATM, T1/E1 CSU/DSU interfaces, dial services and BIS, DLSw, IPX, and Hardware Accelerator cards. •...
  • Page 21: Chapter 1 Hardware Overview

    Chapter 1 Hardware overview The Nortel VPN Router 1010/1050/1100 series provides scalable, secure, manageable extranet access for up to five concurrent tunnels across the public data network. These models are based on Intel architecture with a 300 MHz Celeron CPU and 128 MB SDRAM. Instead of a hard drive, this series uses a removable, upgradeable compact flash card.
  • Page 22: Table 1 Items Shipped With The Vpn Router 600 1010, 1050, And 1100

    Table 1 lists the hardware accessories and other items shipped with the VPN Router 1010, 1050, and 1100. Note: Nortel does not ship a power cord with the VPN Router unless you order one. Table 1 Items shipped with the VPN Router 1010, 1050, and 1100 Description VPN Router 1010/1050/1100 Molded serial cable RJ-45 to DB9...
  • Page 23: Internal Lan Connections (Lan 0 And Lan 1)

    Internal LAN connections (LAN 0 and LAN 1) The VPN Router 1010, 1050, and 1100 have two internal LANs built in: LAN 0 is the private LAN and also the LAN to use for Web management. • LAN 1 defaults to a public LAN. The software refers to the LAN 1 port as •...
  • Page 24: Figure 3 Vpn Router 600 1050 Front View

    24 Chapter 1 Hardware overview Figure 3 VPN Router 1050 front view Boot/Ready LED 10/100 Mb/s LEDs Alert LED VPN Router 1050 LAN 1 Console LAN 0 Link/Activity LEDs 10676EA Figure 4 VPN Router 1100 front view Boot/Ready LED 10/100 Mb/s LEDs Alert LED LAN 1 Console...
  • Page 25: Rear View Of The Gateway

    Rear view of the gateway Figure 5 shows the rear view of the VPN Router 1010, 1050, and 1100. Figure 5 Rear view of the VPN Router 1010/1050/1100 DC power supply On/Off switch DC Input 19V/3.16 A 60W max. Power Power LED Recovery switch The components on the rear of the gateway include the following:...
  • Page 26: Connecting The Power Cord

    Connecting the power cord You must order the power cord for the VPN Router 1010/1050/1100 separately. The power cord must meet the requirements described in Caution: Risk of equipment damage Do not modify or use the AC power cord if it is not the exact type that is required for your power outlet.
  • Page 27: Understanding The Leds

    Plug the power cord into the AC power outlet. Caution: Risk of equipment damage Protect the VPN Router 1010/1050/1100 by plugging it into a surge suppressor. Plug the external power supply into the port labeled “DC Input” on the back of the gateway Press the power switch to the “on”...
  • Page 28: Ethernet Port Leds

    Figure 6 Front panel of the VPN Router 1010 Table 3 describes the LEDs on the VPN Router 1010/1050/1100 front panel. Table 3 Front panel LED indicators Boot/Ready Alert For complete information about the health check, see Nortel VPN Router Troubleshooting (NN46110-602).
  • Page 29: 10/100Base-Tx Ethernet Interface Card Leds

    Table 4 describes the Ethernet port LEDs on the VPN Router 1010/1050/1100. Table 4 Ethernet port LED indicators Indicator 10/100 Mb/s (Amber) Link/Act (Green) Flashing 10/100BASE-TX Ethernet interface card LEDs Figure 7 shows the LEDs on the 10/100BASE-TX Ethernet interface card. Figure 7 LEDs on the 10/100BASE-TX Ethernet interface card Table 5 describes the LEDs on the 10/100BASE-TX Ethernet interface card.
  • Page 30: 1000Base-T (1000 Gt) Ethernet Interface Card Leds

    1000BASE-T (1000 GT) Ethernet interface card LEDs The following figures show the LEDs on the 1000BASE-T (1000 GT) Ethernet interface card. Although the card supports 10/100/1000 Mbit/s operation, the VPN Router 1100 only supports 10/100 Mbit/s operation. Figure 8 LEDs on the full-height 1000BASE-T (1000 GT) Ethernet interface card Figure 9 LEDs on the half-height 1000BASE-T (1000 GT) Ethernet card The following table describes the LEDs on the 1000BASE-T (1000 GT) Ethernet interface card.
  • Page 31: 56/64K Csu/Dsu Wan Interface Card Leds

    56/64K CSU/DSU WAN interface card LEDs Figure 10 shows the LEDs on the 56/64K CSU/DSU WAN interface card. Figure 10 LEDs on the 56/64K CSU/DSU WAN interface card Blue LED Green LED Table 7 describes the LEDs on the 56/64K CSU/DSU WAN interface card. Table 7 LED indicators on the 56/64K CSU/DSU WAN interface card Description Blue...
  • Page 32: T1/E1 Csu/Dsu Wan Interface Card Leds

    Table 8 describes the LEDs on the ADSL WAN interface card. Table 8 LED indicators on the ADSL WAN interface card CONN LED Steady green Flashing green Steady green Steady green T1/E1 CSU/DSU WAN interface card LEDs Figure 12 shows the LEDs on the T1/E1 CSU/DSU WAN interface card. Note: The brackets of the full-height and half-height T1/E1 CSU/DSU cards are almost identical.
  • Page 33: Single V.35/X.21 Wan Interface Card Leds

    Table 9 describes the LEDs on the T1/E1 CSU/DSU WAN interface card. Table 9 LED indicators on the T1/E1 CSU/DSU WAN interface card Indicator LED 1 LED 2 Blue LED 3 Yellow LED 4 Green Single V.35/X.21 WAN interface card LEDs Figure 13 shows the LEDs on the single V.35/X.21 WAN interface card.
  • Page 34 Table 10 LED indicators on the single V.35/X.21 WAN interface card LED 3 LED 4 NN46110-313 02.01 Green Power to the adapter is on and the onboard microcode is loaded. Green Cable is detected.
  • Page 35: Installing Option Cards In The Nortel Vpn Router 600 1100

    Chapter 2 Installing option cards in the Nortel VPN Router 1100 The Nortel VPN Router 1100 has two expansion slots for option cards. This chapter provides instructions about how to install and replace LAN, WAN, and serial option cards in the VPN Router 1100. Table 11 lists the option cards that you can install in the VPN Router 1100..
  • Page 36 2 The VPN Router 1100 must be running Version 5.05.330, 6.05.140 and later, 7.00.062, 7.05.100 and later, or 7.05.300 and later. The VPN Router 1100 supports 10/100 Mbps operation only. 3 The VPN Router 1100 must be running Version 5.0 or later. 4 The VPN Router 1100 must be running Version 4.90 or later.
  • Page 37: Figure 14 Vpn Router 600 1100 System Board

    Remove the four screws on the sides of the VPN Router 1100. Slide the chassis cover away from the base. The VPN Router 1100 system board is now exposed. shows the location of the option card slots on the system board. Locate the slot where you plan to install the new or replacement option card (Table 11 on page Figure 14 VPN Router 1100 system board...
  • Page 38 10 Attach an antistatic wrist strap (not included with the VPN Router 1100 shipment). Caution: Risk of equipment damage Electrostatic discharge can damage VPN Router 1100 components. 11 Remove the blank card bracket (or the option card that you are replacing) from the slot.
  • Page 39 Chapter 2 Installing option cards in the Nortel VPN Router 1100 39 18 Press the power switch to the on position and wait for the gateway to boot. Caution: The boot process can take as long as 3 minutes. Do not turn the power off and on again;...
  • Page 40 40 Chapter 2 Installing option cards in the Nortel VPN Router 1100 NN46110-313 02.01...
  • Page 41: Technical Specifications

    Appendix A Technical specifications This appendix provides technical specifications for the VPN Router 1010, 1050, and 1100 chassis and for their interfaces. Chassis specifications Table 12 lists the physical specifications for the VPN Router 1010, 1050, and 1100 chassis. Table 12 Physical specifications Chassis Height VPN Router 1010...
  • Page 42: System Ports

    System ports The VPN Router 1010/1050/1100 system board provides the following interfaces: • 10/100BASE-TX Ethernet LAN ports • Serial port This section provides information about the 10/100BASE-TX Ethernet LAN ports and the serial port on the system board. 10/100BASE-TX Ethernet LAN ports The VPN Router 1010, 1050, and 1100 have two internal LANs built in: •...
  • Page 43: Serial Port

    • 10BASE-T connections can use Category 3, 4, or 5 twisted-pair wiring. Table 14 provides the 10/100BASE-TX Ethernet port pinouts for the system ports on the VPN Router 1100. Table 14 10/100BASE-TX Ethernet port pinouts TX+ TX- 12345678 CS260010A Serial port The system board provides a serial port on the front of the VPN Router 1010, 1050, and 1100 to enable out-of-band management of the gateway.
  • Page 44: Figure 15 Serial Cable (Rj-45-To-Db9)

    Figure 15 Serial cable (RJ-45-to-DB9) Pin 8 RJ-45 connector Table 15 provides the RJ-45-to-DB9 serial interface cable pinouts. Table 15 RJ-45 to DB9 pinouts RJ-45 termination Signal Request to Send Data Terminal Ready Receive Data Not Connected Send Data Data Set Ready Clear to Send NN46110-313 02.01 10 ft...
  • Page 45: External Modem Adapter

    External modem adapter If you need to connect a VPN Router 1010, 1050, or 1100 to a modem, you can order a null modem adapter from Nortel. With this adapter, you can connect the VPN Router 1010/1050/1100 console cable (shipped with the gateway) to an RS-232-C modem port.
  • Page 46: Hardware Option Cards

    Table 16 Null modem adapter cable pinouts (continued) termination Pin # to Pin # Hardware option cards The VPN Router 1100 has two expansion slots that support a combination of the following network interface cards: • 10/100BASE-TX Ethernet • 10/100/1000BASE-X Ethernet •...
  • Page 47: 10/100Base-Tx Ethernet Interface Card

    10/100BASE-TX Ethernet interface card The 10/100BASE-TX Ethernet interface card has a single RJ-45 connector that provides the signals needed to interface to 10BASE-T and 100BASE-TX Ethernet equipment. Figure 17 Figure 17 10/100BASE-TX Ethernet interface card For information about the cables that you can connect to this interface and the cable pinouts, see “10/100BASE-TX Ethernet LAN ports”...
  • Page 48: Figure 18 Vpn Router 1100 Full-Height 1000Base-T (1000 Gt)

    • 6.05.140 and all subsequent versions • 7.00.062 • 7.05.100 and all subsequent versions (FIPS branch) • 7.05.300 and all subsequent versions The following figures show the full and half-height Ethernet faceplates for the VPN Router 1100. Figure 18 VPN Router 1100 full-height 1000BASE-T (1000 GT) The full-height model is for installation in slot 2;...
  • Page 49: 56/64K Csu/Dsu Wan Interface Card

    The following table provides the pinouts for the 1000BASE-T (1000 GT) Ethernet interface card.. Table 17 1000BASE-T (1000 GT) Ethernet pinouts 12345678 CS260010A 56/64K CSU/DSU WAN interface card The 56/64K CSU/DSU WAN interface card has a single RJ-48 connector that provides the signals needed to interface to network equipment.
  • Page 50: Table 18 56/64K Csu/Dsu Cable Pinouts For Crossover Connection

    Use cable that is wired in accordance with EIA-568-A wiring style. This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal (pins 1 and 2) and the receive signal (pins 7 and 8). Nortel strongly recommends that you use factory-made patch cords.
  • Page 51: Adsl Wan Interface Card

    Table 19 provides the 56/64K CSU/DSU cable pinouts for a straight-through connection. Table 19 56/64K CSU/DSU cable pinouts for straight-through connection Nortel termination Signal Transmit tip Transmit ring not used not used not used not used Receive tip Receive ring ADSL WAN interface card The ADSL Annex A and Annex B WAN interface cards have a single RJ-11 connector that provides the signals needed to interface to the digital subscriber...
  • Page 52: Isdn Bri Interface Card

    Table 20 provides the ADSL port pinouts. Table 20 ADSL cable pinouts ISDN BRI interface card The ISDN BRI S/T and ISDN BRI U interface cards have a single RJ-45 connector that provides the signals needed to interface to ISDN equipment. (To connect the ISDN BRI S/T interface to the ISDN network, you must attach an external NT-1 device to the RJ-45 connector.) Figure 22...
  • Page 53: Table 21 Isdn Bri S/T Cable Pinouts

    The connector on the ISDN BRI S/T and ISDN BRI U interface cards accommodates an 8-pin RJ-45 modular patch cord. These cables are sold as Category 5, or Ethernet, cables. Note: Nortel does not supply a cable with the ISDN BRI interface cards. Table 21 provides the ISDN BRI S/T cable pinouts.
  • Page 54: T1/E1 Csu/Dsu Wan Interface Card

    T1/E1 CSU/DSU WAN interface card The T1/E1 CSU/DSU WAN interface card has a single connector that provides the signals needed to interface to T1 or E1 equipment. CSU/DSU WAN interface card. This interface card ships as a half-height card and as a full-height card.
  • Page 55: Table 23 T1/E1 Csu/Dsu Cable Pinouts For Crossover Connection

    Table 23 provides the T1/E1 CSU/DSU cable pinouts for a crossover connection. Table 23 T1/E1 CSU/DSU cable pinouts for crossover connection Standard-wired end 8-pin male Signal name RXDA<-TXDA RXDB<-TXDB not used TXDB->RXDB TXDA->RXDA not used not used not used The cable operates properly if you do not connect pins 3, 6, 7, and 8. Caution: For crossover connections, do not use Ethernet cable.
  • Page 56: V.90 Modem Interface Card

    Table 24 T1/E1 CSU/DSU cable pinouts for straight-through connection Nortel termination not used not used V.90 modem interface card The V.90 modem interface card has two RJ-11 connectors that provide the signals needed to interface to an incoming telephone line and to telephone equipment. Figure 25 shows the V.90 modem interface card.
  • Page 57: Single V.35/X.21 Wan Interface Card

    Single V.35/X.21 WAN interface card The single V.35/X.21 WAN interface card has a single DB28S connector that provides the signals needed to interface to V.35 and X.21 equipment. shows the single V.35/X.21 WAN interface card. Figure 26 Single V.35/X.21 WAN interface card You need a DSU/CSU (digital service unit/channel service unit) between the WAN connection and the gateway.
  • Page 58 Table 26 V.35 cable pinouts (continued) Standard-wired end 28-pin male Signal name CTSA CTSB DSRA DSRB DTRA DTRB DCDA DCDB M0<-SIGNAL GROUND M1<-SIGNAL GROUND SHIELD SIGNAL GROUND The following notes apply to the single V.35 DTE cable: 1. The term “no conn” means the wire is not connected to a pin in the 34-pin connector. 2.
  • Page 59: Table 27 X.21 Cable Pinouts

    Table 27 provides the X.21 cable pinouts. (The pair suffix A or B refers to an individual wire within a twisted pair.) Table 27 X.21 cable pinouts Standard-wired end 28-pin male Signal name TXDA TXDB RXDA RXDB TXCA TXCB RXCA RXCB SCTEA SCTEB...
  • Page 60 Table 27 X.21 cable pinouts (continued) Standard-wired end 28-pin male Signal name SHIELD SIGNAL GROUND The following notes apply to the single X.21 cable: 1. Wires of pair 4 connect to wires of pair 5, but not to any pins in the DA-15. 2.
  • Page 61: Index

    Index Numerics 10/100BASE-TX Ethernet interface card cable specifications 42 described 47 installing 35 LEDs 29 port pinouts 43 10/100BASE-TX system LAN ports cable specifications 43 connector 43 LEDs 28 1000BASE-T (1000 GT) Ethernet interface card 47 LEDs 30 56/64K CSU/DSU WAN interface card cable pinouts 50 connector 49 described 49...
  • Page 62 DC input port 25 electrical specifications 41 environmental specifications 41 Ethernet MDI configuration 42 front panel LEDs 27 hardware option cards installing in VPN Router 1100 35 specifications 46 help by Express Routing Code 16 by Nortel distributor 16 by phone 16 latest update on Web 15 Nortel Web site 15 help, How to get 15...
  • Page 63 physical specifications 41 pinouts 10/100BASE-TX Ethernet interface 43 56/64K CSU/DSU WAN interface 50 ADSL WAN interface 52 ISDN BRI S/T interface 53 ISDN BRI U interface 53 null modem adapter 45 serial interface cable 44 single V.35 WAN interface 57 single X.21 WAN interface 59 T1/E1 CSU/DSU WAN interface 55 V.90 modem interface 56...
  • Page 64 description 21 MAC addresses 25 Power LED 25 recovery switch 25 shipment contents 22 technical specifications 41 VPN Router 1100 installing option cards 35 removing cover from base 37 shutting down 36 technical specifications 41 WAN interface cards installing in VPN Router 1100 35 LEDs 56/64K CSU/DSU 31 ADSL 31...

This manual is also suitable for:

1050Accelar 1100Contivity 10501100

Table of Contents