Enterasys X-Pedition XSR-3150 Getting Started Manual
Enterasys X-Pedition XSR-3150 Getting Started Manual

Enterasys X-Pedition XSR-3150 Getting Started Manual

Security router
Hide thumbs Also See for X-Pedition XSR-3150:
Table of Contents

Advertisement

Quick Links

X-Pedition
Security Router
XSR-3150 Getting Started Guide
Version 3.0
P/N 9033865-06

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the X-Pedition XSR-3150 and is the answer not in the manual?

Questions and answers

Summary of Contents for Enterasys X-Pedition XSR-3150

  • Page 1 X-Pedition Security Router ™ XSR-3150 Getting Started Guide Version 3.0 P/N 9033865-06...
  • Page 3 Elektrischer Gefahrenhinweis: Installationen sollten nur durch ausgebildetes und qualifiziertes Personal vorgenommen werden. Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and  its web site without prior notice. The reader should in all cases consult Enterasys Networks to determine whether any such  changes have been made. The hardware, firmware, or software described in this document is subject to change without notice. IN NO EVENT SHALL ENTERASYS NETWORKS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR  CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF  OR RELATED TO THIS DOCUMENT, WEB SITE, OR THE INFORMATION CONTAINED IN THEM, EVEN IF  ENTERASYS NETWORKS HAS BEEN ADVISED OF, KNEW OF, OR SHOULD HAVE KNOWN OF, THE POSSIBILITY OF  SUCH DAMAGES. Enterasys Networks, Inc. 50 Minuteman Road Andover, MA 01810 © 2007 Enterasys Networks, Inc. All rights reserved. Part Number: 9033865‐06 September 2007 ENTERASYS, ENTERASYS NETWORKS, ENTERASYS XSR, and any logos associated therewith, are trademarks or registered  trademarks of Enterasys Networks, Inc. in the United States and other countries. All other product names mentioned in this  manual may be trademarks or registered trademarks of their respective owners. Documentation URL: http://www.enterasys.com/support/manuals Documentacion URL: http://www.enterasys.com/support/manuals Dokumentation  im Internet: http://www.enterasys.com/support/manuals...
  • Page 4: Regulatory Compliance Information

    Federal Communications Commission (FCC) Notice The XSR complies with Title 47, Part 15, Class A of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operation. NOTE: The XSR has been tested and found to comply with the limits for a class A digital device, pursuant to Part 15 of the FCC  rules. These limits are designed to provide reasonable protection against harmful interference when the XSR is operated in a  commercial environment. This XSR uses, generates, and can radiate radio frequency energy and if not installed in accordance  with the operator’s manual, may cause harmful interference to radio communications. Operation of the XSR in a residential  area is likely to cause interference in which case you will be required to correct the interference at your own expense. WARNING: Modifications or changes made to the XSR, and not approved by Enterasys Networks may void the authority  granted by the FCC or other such agency to operate the XSR. The XSR complies with Part 68 of the FCC rules and the requirements adopted by the Administrative Council for Terminal  Attachments (ACTA). A label on the circuit board of the Network Interface Module contains, among other information, a  product identifier in the format listed in the following table. If requested, this number must be provided to the telephone  company. A plug and jack used to connect the XSR to the premises wiring and telephone network must comply with the applicable FCC  Part 68 rules and requirements adopted by ACTA. Refer to the following table and installation instructions for details. Codes applicable to this equipment: Product NIM-T1/E1-xx, NIM-CT1E1/PRI-xx, NIM-DIRELAY-xx, NIM-TE1-xx, NIM-CTE1-PRI-xx NIM-BRI-U-xx NIM-ADSL-AC-xx If the XSR harms the telephone network, the telephone company will notify you in advance that it may need to temporarily  discontinue service. But if advance notice is not practical, the telephone company will notify you as soon as possible. Also, you  will be advised of your right to file a complaint with the FCC if you believe it is necessary. The telephone company may make changes in its facilities, equipment, operations, or procedures that could affect the operation  of the XSR. If this happens, the telephone company will provide advance notice for you to make necessary modifications and  maintain uninterrupted service. If you experience trouble with the XSR, for repair or warranty information, please contact Enterasys Networks, Inc., at 978‐684‐ 1000. If the XSR is causing harm to the telephone network, the telephone company may request that you disconnect the  equipment until the problem is solved. The XSR is not intended to be repaired by the customer.
  • Page 5: Industry Canada Notices

    Industry Canada Notices This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the Radio  Interference Regulations of the Canadian Department of Communications. Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils  numériques de la class A prescrites dans le Règlement sur le brouillage radioélectrique édicté par le ministère des  Communications du Canada. Equipment Attachments Limitations “NOTICE: The Industry Canada label identifies certified equipment. This certification means that the equipment meets  telecommunications network protective, operational and safety requirements as prescribed in the appropriate Terminal  Equipment Technical Requirements document(s). The department does not guarantee the equipment will operate to the userʹs  satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local  telecommunications company. The equipment must also be installed using an acceptable method of connection. The customer  should be aware that compliance with the above conditions may not prevent degradation of service in some situations. Repairs to certified equipment should be coordinated by a representative designated by the supplier. Any repairs or alterations  made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request  the user to disconnect the equipment. Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines and  internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural  areas. Caution: Users should not attempt to make such connections themselves, but should contact the appropriate electric  inspection authority, or electrician, as appropriate.” “NOTICE: The Ringer Equivalence Number (REN) assigned to each terminal device provides an indication of the maximum  number of terminals allowed to be connected to a telephone interface. The termination on an interface may consist of any  combination of devices subject only to the requirement that the sum of the ringer equivalence Numbers of all the devices does  not exceed 5.ʺ R & TTE Directive Declaration Hereby, Enterasys Networks, Inc. declares that this XSR‐1850 X‐Pedition Security Router is compliant with essential  requirements and other relevant provisions of Directive 1999/5/EC. Class A ITE Notice WARNING: This is a Class A product. In a domestic environment this product may cause radio interference in which case the ...
  • Page 6: Product Safety

    This product complies with the following: UL 60950, CSA C22.2 No. 60950, 73/23/EEC, EN 60950, EN 60825, IEC 60950. Use the XSR with the Advanced Power Solutions (APS61ES‐30) power supply included with the branch router. Enterasys  Networks strongly recommends that you use only the proper type of power supply cord set for the XSR. It should be a  detachable type, UL listed/CSA certified, type SJ or SJT, rated 250 V minimum, 7 amp with grounding‐type attachment plug.  Maximum length is 15 feet (4.5 meters). The cord set should have the appropriate safety approval for the country in which the  equipment will be installed. El producto de Enterasys cumple con lo siguiente: UL 60950, CSA C22.2 No. 60950, 73/23/EEC, EN 60950, EN 60825, IEC 60950. Dieses Produkt entspricht den folgenden Richtlinien: UL 60950, CSA C22.2 No. 60950, 73/23/EEC, EN 60950, EN 60825,  IEC 60950.  This product complies with the following: 47 CFR Parts 2 and 15, CSA C108.8, 89/336/EEC, EN 55022, EN 55024, EN 61000‐3‐2,  EN 61000‐3‐3, AS/NZS CISPR 22, and VCCI V‐3. Este producto de Enterasys cumple con lo siguiente: 47 CFR Partes 2 y 15, CSA C108.8, 89/336/EEC, EN 55022, EN 55024,  EN 61000‐3‐2, EN 61000‐3‐3, AS/NZS CISPR 22, VCCI V‐3. Dieses Produkt entspricht den folgenden Richtlinien: 47 CFR Parts 2 and 15, CSA C108.8, 89/336/EEC, EN 55022, EN 55024,  EN 61000‐3‐2, EN 61000‐3‐3, AS/NZS CISPR 22, VCCI V‐3.  This product complies with the requirements of European Directive, 2002/95/EC, Restriction of Hazardous Substances (RoHS)  in Electrical and Electronic Equipment. European Waste Electrical and Electronic Equipment (WEEE) Notice In accordance with Directive 2002/96/EC of the European Parliament on waste electrical and electronic equipment (WEEE): The symbol above indicates that separate collection of electrical and electronic equipment is required and that this product ...
  • Page 7 Supplement to Product Instructions (Parts) (Metal Parts) Circuit Modules) Cables & Cable Assemblies) (Plastic and Polymeric parts) Circuit Breakers) Indicates that the concentration of the hazardous substance in all homogeneous materials in the parts is below the relevant threshold of the SJ/T 11363-2006 standard. Indicates that the concentration of the hazardous substance of at least one of all homogeneous materials in the parts is above the relevant threshold of the SJ/T 11363-2006 standard.
  • Page 8: Declaration Of Conformity

    Application of Council Directive(s): 89/336/EEC Manufacturer’s Address: 50 Minuteman Road European Representative Address: Enterasys Networks, Ltd. Conformance to Directive(s)/Product Standards: EC Directive 89/336/EEC Equipment Type/Environment: Networking Equipment, for use in a Commercial  Enterasys Networks, Inc. declares that the equipment packaged with this notice conforms to the above directives. VCCI Notice BSMI EMC Statement — Taiwan Declaration of Conformity 73/23/EEC Manufacturer’s Name: Enterasys Networks, Inc. Andover, MA 01810 Nexus House, Newbury Business Park London Road, Newbury Berkshire RG14 2PZ, England EN 55022 EN 61000‐3‐2 EN 61000‐3‐3 EN 55024 EC Directive 73/23/EEC EN 60950 EN 60825...
  • Page 9 Australian Telecom N826 WARNING: Do not install phone line connections during an electrical storm. WARNING: Do not connect phone line until the interface has been configured through local management. The service  provider may shut off service if an un‐configured interface is connected to the phone lines. WARNING: The NIM‐BRI‐ST cannot be connected directly to outside lines. An approved channel service unit (CSU) must be  used for connection to the ISDN network. In some areas this CSU is supplied by the network provider and in others it must be  supplied by the user. Contact your service provider for details. Federal Information Processing Standard (FIPS) Certification The XSR has been submitted to the National Institute of Standards and Technology (NIST) for FIPS 140‐2 certification and is  now officially listed on the NIST pre‐validation list. For more information about the FIPS validation program, go to http:// csrc.nist.gov/cryptval/preval.htm. For the FIPS 140‐1 and 140‐2 Pre‐Validation List, click on the [PDF] link at the top of the  page. Independent Communications Authority of South Africa This product complies with the terms of the provisions of section 54(1) of the Telecommunications Act (Act 103 of 1996) and the  Telecommunications Regulation prescribed under the Post Office Act (Act 44 of 1958). VPN Consortium Interoperability The VPN Consortium’s (VPNC) testing program is an important source for certification of conformance to IPSec standards.  With rigorous interoperability testing, the VPNC logo program provides IPSec users even more assurance that the XSR will  interoperate in typical business environments. VPNC is the only major IPSec testing organization that shows both proof of  interoperability as well as the steps taken so that you can reproduce the tests.
  • Page 10 Enterasys Networks, Inc. Firmware License Agreement BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“Agreement”) between the end user (“You”) and Enterasys Networks, Inc., on behalf of itself  and its Affiliates (as hereinafter defined) (“Enterasys”) that sets forth Your rights and obligations with respect to the Enterasys  software program/firmware (including any accompanying documentation, hardware or media) (“Program”) in the package  and prevails over any additional, conflicting or inconsistent terms and conditions appearing on any purchase order or other  document submitted by You. “Affiliate” means any person, partnership, corporation, limited liability company, other form of  enterprise that directly or indirectly through one or more intermediaries, controls, or is controlled by, or is under common  control with the party specified. This Agreement constitutes the entire understanding between the parties, with respect to the  subject matter of this Agreement. The Program may be contained in firmware, chips or other media. BY INSTALLING OR OTHERWISE USING THE PROGRAM, YOU REPRESENT THAT YOU ARE AUTHORIZED TO  ACCEPT THESE TERMS ON BEHALF OF THE END USER (IF THE END USER IS AN ENTITY ON WHOSE BEHALF YOU  ARE AUTHORIZED TO ACT, “YOU” AND “YOUR” SHALL BE DEEMED TO REFER TO SUCH ENTITY) AND THAT YOU  AGREE THAT YOU ARE BOUND BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES, AMONG OTHER  PROVISIONS, THE LICENSE, THE DISCLAIMER OF WARRANTY AND THE LIMITATION OF LIABILITY. IF YOU DO  NOT AGREE TO THE TERMS OF THIS AGREEMENT OR ARE NOT AUTHORIZED TO ENTER INTO THIS AGREEMENT,  ENTERASYS IS UNWILLING TO LICENSE THE PROGRAM TO YOU AND YOU AGREE TO RETURN THE UNOPENED  PRODUCT TO ENTERASYS OR YOUR DEALER, IF ANY, WITHIN TEN (10) DAYS FOLLOWING THE DATE OF RECEIPT  FOR A FULL REFUND. IF YOU HAVE ANY QUESTIONS ABOUT THIS AGREEMENT, CONTACT ENTERASYS NETWORKS, LEGAL  DEPARTMENT AT (978) 684‐1000. You and Enterasys agree as follows: LICENSE. You have the non‐exclusive and non‐transferable right to use only the one (1) copy of the Program provided in ...
  • Page 11 If the Program is exported from the United States pursuant to the License Exception TSR under the U.S. Export  Administration Regulations, in addition to the restriction on transfer set forth in Section 1 or 2 of this Agreement, You agree not  to (i) reexport or release the Program, the source code for the Program or technology to a national of a country in Country  Groups D:1 or E:2 (Albania, Armenia, Azerbaijan, Belarus, Cambodia, Cuba, Georgia, Iraq, Kazakhstan, Laos, Libya, Macau,  Moldova, Mongolia, North Korea, the People’s Republic of China, Russia, Tajikistan, Turkmenistan, Ukraine, Uzbekistan,  Vietnam, or such other countries as may be designated by the United States Government), (ii) export to Country Groups D:1 or  E:2 (as defined herein) the direct product of the Program or the technology, if such foreign produced direct product is subject to  national security controls as identified on the U.S. Commerce Control List, or (iii) if the direct product of the technology is a  complete plant or any major component of a plant, export to Country Groups D:1 or E:2 the direct product of the plant or a  major component thereof, if such foreign produced direct product is subject to national security controls as identified on the  U.S. Commerce Control List or is subject to State Department controls under the U.S. Munitions List. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Program (i) was developed solely at private  expense; (ii) contains “restricted computer software” submitted with restricted rights in accordance with section 52.227‐19 (a)  through (d) of the Commercial Computer Software‐Restricted Rights Clause and its successors, and (iii) in all respects is  proprietary data belonging to Enterasys and/or its suppliers. For Department of Defense units, the Program is considered  commercial computer software in accordance with DFARS section 227.7202‐3 and its successors, and use, duplication, or  disclosure by the U.S. Government is subject to restrictions set forth herein. DISCLAIMER OF WARRANTY. EXCEPT FOR THOSE WARRANTIES EXPRESSLY PROVIDED TO YOU IN WRITING  BY ENTERASYS, ENTERASYS DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT  LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR  PURPOSE, TITLE AND NON‐INFRINGEMENT WITH RESPECT TO THE PROGRAM.  IF IMPLIED WARRANTIES MAY NOT  BE DISCLAIMED BY APPLICABLE LAW, THEN ANY IMPLIED  WARRANTIES ARE LIMITED IN DURATION TO THIRTY  (30) DAYS AFTER DELIVERY OF THE PROGRAM TO YOU. LIMITATION OF LIABILITY. IN NO EVENT SHALL ENTERASYS OR ITS SUPPLIERS BE LIABLE FOR ANY  DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS,  BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR  RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM, EVEN IF  ENTERASYS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.  THIS FOREGOING LIMITATION SHALL  APPLY REGARDLESS OF THE CAUSE OF ACTION UNDER WHICH DAMAGES ARE SOUGHT. THE CUMULATIVE LIABILITY OF ENTERASYS TO YOU FOR ALL CLAIMS RELATING TO THE PROGRAM, IN  CONTRACT, TORT OR OTHERWISE, SHALL NOT EXCEED THE TOTAL AMOUNT OF FEES PAID TO ENTERASYS BY  YOU FOR THE RIGHTS GRANTED HEREIN. AUDIT RIGHTS. You hereby acknowledge that the intellectual property rights associated with the Program are of critical  value to Enterasys, and, accordingly, You hereby agree to maintain complete books, records and accounts showing (i) license  fees due and paid, and (ii) the use, copying and deployment of the Program. You also grant to Enterasys and its authorized  representatives, upon reasonable notice, the right to audit and examine during Your normal business hours, Your books, records,  accounts and hardware devices upon which the Program may be deployed to verify compliance with this Agreement, including ...
  • Page 12 11. ASSIGNMENT. You may not assign, transfer or sublicense this Agreement or any of Your rights or obligations under this  Agreement, except that You may assign this Agreement to any person or entity which acquires substantially all of Your stock  assets. Enterasys may assign this Agreement in its sole discretion. This Agreement shall be binding upon and inure to the benefit  of the parties, their legal representatives, permitted transferees, successors and assigns as permitted by this Agreement. Any  attempted assignment, transfer or sublicense in violation of the terms of this Agreement shall be void and a breach of this  Agreement. 12. WAIVER. A waiver by Enterasys of a breach of any of the terms and conditions of this Agreement must be in writing and  will not be construed as a waiver of any subsequent breach of such term or condition. Enterasys’ failure to enforce a term upon  Your breach of such term shall not be construed as a waiver of Your breach or prevent enforcement on any other occasion. 13. SEVERABILITY. In the event any provision of this Agreement is found to be invalid, illegal or unenforceable, the validity,  legality and enforceability of any of the remaining provisions shall not in any way be affected or impaired thereby, and that  provision shall be reformed, construed and enforced to the maximum extent permissible. Any such invalidity, illegality, or  unenforceability in any jurisdiction shall not invalidate or render illegal or unenforceable such provision in any other  jurisdiction. 14. TERMINATION. Enterasys may terminate this Agreement immediately upon Your breach of any of the terms and  conditions of this Agreement. Upon any such termination, You shall immediately cease all use of the Program and shall return  to Enterasys the Program and all copies of the Program.
  • Page 13: Table Of Contents

    About This Guide Contents of the Guide ...xv Conventions Used in This Guide ...xv Getting Help ... xvii Chapter 1: Overview System Description ... 1-1 Hardware Features ... 1-2 Software Features ... 1-4 Operating System ... 1-4 Industry-common CLI ... 1-4 IP Protocol ...
  • Page 14 PRI Configuration ... 3-8 BRI Configuration ... 3-9 BRI Leased Line ... 3-9 BRI Leased Frame Relay ... 3-10 BRI Switched Line ... 3-10 ADSL Configuration ... 3-11 PPPoE ... 3-11 PPPoA ... 3-11 IPoA... 3-12 Firewall Sample Configuration ... 3-12 Setting Up RIP Routing ...
  • Page 15 bU ... 3-37 cd ... 3-37 da ... 3-37 df ... 3-38 del ... 3-38 dir ... 3-38 ds ... 3-38 dt ... 3-38 ff ... 3-38 ffc ... 3-39 ng ... 3-39 np ... 3-39 ns ... 3-39 remove ... 3-40 rename ...
  • Page 17: About This Guide

    This guide provides a general overview of the XSR‐3150 hardware and software features and  describes how to quickly install and configure the XSR. Refer to the XSR CLI Reference Guide and  XSR User’s Guide for information not contained in this document. This guide is written for administrators who want to configure the X‐Pedition Security Router or  experienced users who are knowledgeable of basic networking principles. This chapter details the following: • Contents of the Guide • Conventions Used in This Guide • Getting Help Contents of the Guide Information in this guide is arranged as follows: • Chapter 1, Overview, introduces key features of the XSR and briefly describes hardware  installation. • Chapter 2, Hardware Installation, provides a checklist to verify your shipment and describes  how to install XSR hardware including NIM and optional CompactFlash cards, and rack‐ mounting brackets. • Chapter 3, Software Configuration, describes how to initiate and quickly configure the XSR. It  also details how to add an interface and subnet mask; set passwords, SNMP, DNS and  SYSLOG server values; configure the firewall feature set, upgrade system image and Boot  PROM software; consult system statistics, and save configuration changes. • Appendix A, Specifications, outlines hardware specifications including information about: the  processor, interfaces, system memory, chassis, power supply, interfaces, required cabling and  other accessories, pinout assignments for WAN and LAN interfaces, and LED behavior. Conventions Used in This Guide The following conventions are used in this guide: Note: Calls the reader’s attention to any item of information that may be of special importance. Nota: Llama la atencion del lector a cierta información que puede ser de especial importancia.
  • Page 18 Electrical Hazard: Warns against an action that could result in personal injury or death due to an electrical hazard. Riesgo Electrico: Advierte contra una acción que pudiera resultar en lesión corporal o la muerte debido a un riesgo eléctrico. Elektrischer Gefahrenhinweis: Installationen sollten nur durch ausgebildetes und qualifiziertes. Personal vorgenommen werden.
  • Page 19: Getting Help

    • Any previous Return Material Authorization (RMA) numbers www.enterasys.com/support/ 1-800-872-8440 (toll-free in U.S. and Canada) or 1-978-684-1000 To find the Enterasys Networks Support toll-free number in your country: www.enterasys.com/support/ support@enterasys.com To expedite your message, type [xsr] in the subject line. ftp://ftp.enterasys.com anonymous your Email address http://www.enterasys.com/download...
  • Page 20 xviii...
  • Page 21: Chapter 1: Overview

    This chapter introduces the key features of the XSR-3150 and briefly describes hardware installation. System Description The XSR is a networking device designed for enterprise regional offices that provides IP routing over GigabitEthernet LAN and T1/E1, Serial (RS232, X.21, V.35, RS422/530, RS449), Dial Services via POTS, ISDN (BRI/PRI) or Frame Relay WAN connections.
  • Page 22: Hardware Features

    System Description Hardware Features The semi-modular XSR, shown in • Standard 1U chassis (1-11/16 inches high by 17 inches wide by 21 inches deep) mountable in a standard 19” rack. • Broadcom 1250 dual-CPU, 64-bit processor (1700 Dhrystone MIPS @ 600 MHz) with load balancing, 512 KByte on-chip Layer 2 cache, up to two co-issued, load-to-use instruction pairs per cycle, and 32 KByte Instruction and Data caches.
  • Page 23 • Two Network Interface Module (NIM) card slots for these NIMs: – 1, 2, or 4 full, fractional and channelized T1/E1 WAN NIM with integral CSU/DSU or Primary Rate Interface (PRI) ports (RJ-48C). – 1-port T3/E3 channelized/unchannelized WAN NIM with BNC ports. This NIM is also available with up to 16 T1/E1 tributaries and system synchronizaton of two MIMs.
  • Page 24: Software Features

    System Description • 14 diagnostic LEDs to display port and system status as well as indicate a Flash upgrade in progress. • Five system fans with failure detection capability and three in-board fans dedicated to power supply cooling. Software Features The XSR provides the following software features: Operating System •...
  • Page 25: Ip Routing

    • Simple Network Time Protocol (SNTP) server • OS fallback IP Routing • Static and multiple routes to the same destination • Redistribution of routes from RIP, OSPF, BGP, connected, or static into RIP, OSPF, and BGP • RIP-1 & RIP-2 •...
  • Page 26: Security

    System Description Security • Stateful inspection firewall engine • FTP, H.323, and RPC (SUN and Microsoft) ALG support • Application commands for FTP, SMTP, & HTTP • Firewall logging and authentication • Firewall interaction with NAT & VPN • Standard and Extended Access Control Lists •...
  • Page 27: Dynamic Host Configuration Protocol (Dhcp)

    • Periodic Keep-Alive messages to learn of connection problems • Multi-protocol interconnect over Frame Relay - RFC-2427 • RFC-2390 Frame Relay Inverse ARP to discover IP address of remote peer when used in multi- point mode and responds to incoming Inverse ARP requests independent of P2P or MP2P •...
  • Page 28: Quality Of Service (Qos)

    System Description • Bandwidth optimization (BoD) & Dial on Demand (DoD) • Bandwidth Allocation Protocol (BAP) • Security: PAP/CHAP • Call monitoring • Multilink PPP (MLPPP) • Per call activation for NTT switches • Frame Relay over ISDN Quality of Service (QoS) •...
  • Page 29: Gre Over Ipsec

    Certificates (embedded/smart cards) – Microsoft only • Encryption • Advanced Encryption Standard (AES), Triple Data Encryption Standard (3DES), Data Encryption Standard (DES) • 3DES/DES acceleration • Data Integrity • MD5 & SHA-1 algorithms • Internet Protocol Security (IPsec) • Encapsulating Security Payload (ESP), Authentication Header (AH) & IPComp •...
  • Page 30: Asynchronous Digital Subscriber Line (Adsl)

    System Description Asynchronous Digital Subscriber Line (ADSL) • POTS and ISDN circuit support • ATM Frame UNI (FUNI) data framing format • OAM cells: AIS, RDI, CC, Loopback over F4 and F5 flows • Up to 30 ATM Permanent Virtual Circuits (PVCs) •...
  • Page 31: Installation Overview

    Items included in the shipping box are shown in Chapter 2 of this manual. If you are missing any of these items, contact your authorized Enterasys Networks reseller or Enterasys Networks Customer Support as described in the XSR Quick Start Guide.
  • Page 32 Installation Overview 1-12 Overview...
  • Page 33: Chapter 2: Hardware Installation

    Introduction This chapter provides a checklist to verify your shipment, suggestions for the installation site, and describes how to install the following XSR hardware: • NIM cards • Optional - CompactFlash card • Connecting cables Note: For instructions on installing a balun and grounding shunt/terminal strip on E1 NIM cards only, refer to Appendix A: Specifications on Verifying Your Shipment Before installing the XSR, first check your shipment to ensure that everything you ordered arrived...
  • Page 34: Installing Nim Cards And Rack Mounting

    Installing NIM Cards and Rack Mounting • Each XSR AC power supply requires a three-pronged power receptacle capable of delivering the current and voltage specified in Appendix A. An AC outlet on a separately fused circuit is required for each XSR to provide power redundancy, and must be located within 182 centimeters (6 feet) from the site.
  • Page 35 Remove the NIM slot cover, as shown in the side before pulling it out. Figure 2-2 Carefully attach the NIM card(s) to the connector on the motherboard and secure with four screws, as shown in Figure Figure 2-3 Re-install the chassis cover. Figure 2-2, by grasping the handle and pressing it to Removing NIM Slot Covers...
  • Page 36 Installing NIM Cards and Rack Mounting Attach the rack brackets to the chassis with the screws supplied, as shown in Mount the bracketed XSR to your rack, as shown in 2-4 Hardware Installation Figure 2-4 Fastening Rack Brackets Figure Figure 2-5 Attaching XSR to Rack Figure 2-4.
  • Page 37: Installing A Compactflash Memory Card

    Installing a CompactFlash Memory Card An optional CompactFlash (CF) memory card provides additional non-volatile storage capabilities in 8, 16, 32, or 64 Mbyte increments. The CF’s controller interfaces with a host system allowing data to be written to and read from the CF’s flash memory module. The XSR supports Type I and II CompactFlash card types.
  • Page 38: Compactflash Card For The Adsl Nim

    Installing a CompactFlash Memory Card Gently insert the CF into the slot, taking care that the CF’s wider grooved edge fits into the wider track of the PCMCIA interface. If the card does not seat easily but stops halfway into the slot, do not force it in - the card was inserted incorrectly.
  • Page 39: Connecting Cables

    Connecting Cables Perform any of the following steps to connect your cabling to optional WAN or LAN NIMs, GigabitEthernet ports, and power supplies: Connect the serial COM cable provided in the packing box to your PC connector, as shown in Figure 2-9.
  • Page 40 Connecting Cables Figure 2-11 Connecting High Speed Serial Connector Figure 2-12 Attaching T3/E3 BNC Connectors 2-8 Hardware Installation...
  • Page 41 Figure 2-13 A CompactFlash card is provided with the XSR ADSL NIM. It is loaded with the Digital Signal adsl.fls Processing (DSP) firmware ( inserted into the Compact Flash slot - upon first configuring an ATM interface - the XSR’s ADSL driver will copy adsl.fls into host memory where it will remain available for use on demand.
  • Page 42 Connecting Cables Connect the Ethernet port(s) to your LAN connectors with a cable, as shown in Insert the Mini-GBIC module in the GBIC slot then connect the optical cable, as shown in Figure 2-16. 2-10 Hardware Installation Figure 2-15 Attaching GigabitEthernet Connector Figure 2-16 Inserting Mini-GBIC Module Figure...
  • Page 43 Connecting Cables Attach either the Ethernet or Fiber Ethernet LAN NIM, as shown in Figure 2-17 Figure 2-18, respectively. Figure 2-17 Attaching Ethernet LAN NIM Connector Figure 2-18 Attaching Ethernet Fiber LAN NIM Connector XSR Getting Started Guide 2-11...
  • Page 44 Connecting Cables Attach the dual power supply cords to the connectors at the rear of the XSR, as shown in Figure 2-19, and plug in the country-specific power cords to a wall socket. The XSR will power You are now ready to configure the software and initialize the XSR. Continue with Configuration”...
  • Page 45: Chapter 3: Software Configuration

    This chapter describes how to initialize, quickly set up and verify your configuration for the XSR. Refer to the XSR CLI Reference Guide for a more thorough explanation of commands and parameter options. The chapter also includes sample configuration scripts, detailed XSR rebooting characteristics and Bootrom Monitor mode instructions.
  • Page 46 Initializing XSR Software • ETH 10/100/1000 LEDs turn ON and OFF a few times during initialization as the XSR proceeds from bootrom to power up diagnostics to software image, then they remain ON or OFF depending on the LAN type. •...
  • Page 47: Opening A Com (Console) Session

    only the first error will be reported, along with a count of the sum of errors incurred. In the case of a single error, only the error line will be reported. Error messages will be logged as well. Because the result of continuing to process a flawed startup-config is not predictable, the nature and position of the syntax error may cause the erroneous configuration of the XSR.
  • Page 48 Optional: Configuring Remote Auto Install Note the use of a helper-address to specify a destination address for UDP broadcasts and forward traffic to the DNS and TFTP servers. In the example below, DNS and TFTP servers reside on the same node - 10.10.1.2 (configuration of DNS and TFTP servers are not shown here). In short, the DNS server should map IP addresses 133.133.1.2 and 133.133.1.3 to hostnames.
  • Page 49: Configuring Rai For Dhcp Over Lan

    TFTP transfer succeeded in copying the hostname file to the ****************** REMOTE AUTO INSTALL TERMINATING***************** The RAI process is complete and is preoceding to system initialization where it will process the new config file. Configuring RAI for DHCP over LAN The following example configures DHCP server to be used with RAI over Ethernet.
  • Page 50 Optional: Configuring Remote Auto Install Creates a VPDN session group and links it to a virtual template. accept-dialin protocol pppoe virtual-template 1 pppoe limit per-mac 10 This is an optional command. pppoe limit max-sessions 32000 This is an optional command. interface GigabitEthernet1/0/0 no ip address negotiation auto...
  • Page 51: Configuring The Xsr Name And User Information

    Phase 3 - ADSL - trying to connect on 0/35 with snap PPPoE PVC 0/35 is found, SNAP PPPoE encapsulation is applied and authentication tried if required. Phase 3 - ADSL - waiting for IP to connect (54 sec) The XSR waits one minute for the PPPoE connection to come up. Phase 4 - ADSL - IP is connected on 0/35, prepare to load startup config The XSR starts downloading the startup-file.
  • Page 52: Configuring The Lan Ports

    Configuring the LAN Ports Enter the following command to configure the XSR as an SNTP client: XSR(config)#sntp-client server [primary | A.B.C.D.][alternate | A.B.C.D.] Enter the following command to configure the XSR as an SNTP server: XSR(config)#sntp-server enable Remember to save your configuration after all edits. Configuring the LAN Ports Enter interface gigabitethernet <1 | 2 | 3>...
  • Page 53: Bri Configuration

    This command allows multiple logical WAN interfaces to be created on a single channelized T1/E1/ISDN-PRI port, ranging from 0 - 23 for T1 lines, and 0 - 31 for E1 lines. Also, from 1 - 24 T1 and 1 - 31 E1 timeslots can be set. Channel speed options are 56 (T1) or 64 (E1) kbps. Note: Channel group and timeslot number ranges are different.
  • Page 54: Bri Leased Frame Relay

    Configuring the WAN Ports Enter encapsulation ppp no shutdown Enter BRI Leased Frame Relay interface bri 0:<1 | 2>.<1-30> Enter port and channel 1 or 2. Enter encapsulation frame-relay Enter no shutdown frame-relay lmi-type <ilmi | ansi | q933a | auto | none> Enter Management Interface type.
  • Page 55: Adsl Configuration

    ADSL Configuration ADSL can be configured using three different types of encapsulation: PPPoA, PPPoE, and IPoA. Continue configuration with the ADSL type of your choice. PPPoE The following commands configure a sample PPPoE topology. The first set configures the LAN interface with directed broadcasts prohibited.
  • Page 56: Ipoa

    Firewall Sample Configuration The commands below configure the ATM interface and sub-interface with a negotiated IP address, CHAP username and password, and bans keepalives. XSR(config)#interface ATM 0 XSR(config-if<ATM0/0>)#no shutdown XSR(config-if<ATM0/0.1>)#interface ATM 0.1 XSR(config-if<ATM0/0.1>)#no shutdown XSR(config-if<ATM0/0.1>)#encapsulation snap pppoa XSR(config-if<ATM0/0.1>)#ip address negotiated XSR(config-if<ATM0/0.1>)#ip mtu 1492 XSR(config-if<ATM0/0.1>)#ip tcp adjust-mss 1400 XSR(config-if<ATM0/0.1>)#ppp chap hostname red password sox...
  • Page 57 Firewall Sample Configuration Figure 3-1 XSR with Firewall Topology 220.150.2.32/28 Frame Relay 220.150.2.35 206.12.44.16/28 Internet 220.150.2.37 220.150.2.17 Internal 220.150.2.36 220.150.2.16/28 Mail server Web server (SMTP) (HTTP) 220.150.2.19 220.150.2.18 In this configuration, the firewall provides protected access from the private to dmz networks. That is, access is restricted to Web and mail traffic only.
  • Page 58: Setting Up Rip Routing

    Setting Up RIP Routing XSR(config)#ip firewall filter allowICMP private dmz protocol-id 1 XSR(config)#ip firewall filter allowICMP private ANY_EXTERNAL protocol-id 1 XSR(config)#ip firewall filter allowICMP ANY_EXTERNAL dmz protocol-id 1 Trial load the completed configuration into the firewall engine, and if successful, load the configuration: XSR(config)#ip firewall load trial XSR(config)#ip firewall load...
  • Page 59: Configure Ospf Routing

    10. Enter ip rip receive version <1 | 2> to allow a RIP version of updated transmissions. Accept both RIP V1 and V2 is the default value. 11. Enter router rip to acquire Router configuration mode and enable RIP routing. 12.
  • Page 60: Setting Up An Snmp Community String, Traps And V3 Values

    Setting Up an SNMP Community String, Traps and V3 Values Enter media-type V35 to match the correct cabling interface. The default media type for Frame Relay is RS-232. Enter frame-relay traffic-shaping to enable congestion control. Enter map-class frame-relay <name> to designate this map-class and acquire Map-Class mode.
  • Page 61: Configuring Message Logging And Severity Level

    Optional . For SNMPv3, enter write <name> Groups offer users authorization choices and read/write privileges. Note: Because only one operator can set the XSR at any time, you must exit Global mode to perform SNMPv3 configuration. Otherwise, the SNMP set request will fail with the “resource unavailable”...
  • Page 62: Viewing Your Configuration

    Viewing Your Configuration Viewing Your Configuration Enter show running-config to verify your current configuration. The XSR will display the commands you issued up to this point. Default values are not displayed. Note: All show commands can be entered in privileged EXEC mode - XSR# - or Global configuration mode - XSR(config)#.
  • Page 63 Click on Product Version to bring up the Product Version window for a host of hardware, bootrom, and software information as shown in Figure 3-3 Product Version Copyright 2004 by Enterasys Networks, Inc. Hardware: Processor board ID: 9002854-02 REV0A Serial Number: (not displayed) Processor: IBM PowerPC 405GP Rev.
  • Page 64: Lan-Ppp Services Sample Configuration

    LAN-PPP Services Sample Configuration LAN-PPP Services Sample Configuration The sample configuration below, see from the XSR branch node to the Central Site router and a backup serial dialup link to the Backup Site regional router. The following script configures the LAN-PPP services topology shown above. XSR>enable Acquires Privileged EXEC mode XSR#configure...
  • Page 65 XSR(config-controller<T1-1/0>)#no shutdown Enables T1 controller XSR(config)#interface serial 1/0:0 Configures Serial interface 1, port 1 using channel group 0 and acquires Interface mode XSR(config-if<S1/0:0>)#encapsulation ppp Enables PPP encapsulation XSR(config-if<S1/0:0>)#ppp authentication chap Configures CHAP authentication on the interface XSR(config-if<S1/0:0>)#ip address 154.68.1.47 255.255.255.0 Enables IP address for serial interface 1/0 XSR(config-if<S1/0:0>)#backup interface dialer 5 Sets dialed interface as a dialed backup...
  • Page 66: Frame Relay Wan Link With Ppp Backup Sample Configuration

    Frame Relay WAN Link with PPP Backup Sample Configuration Frame Relay WAN Link with PPP Backup Sample Configuration The sample configuration below, similar to the preceding configuration except that the cloud supporting the primary line is Frame Relay rather than Public Service Telephone Network, configures one LAN port, the Frame Relay WAN, QoS, OSPF routing, DHCP Relay, IP broadcast forwarding, SNMP with ACL rules, and access lists.
  • Page 67: Configure Wan/Frame Relay Port

    XSR(config-cmap<data_class>)#match access-group 133 Assigns ACL 133 to this class map XSR(config)#policy-map priority-policy Adds a policy map and acquires Policy Map mode XSR(config-pmap<priority-policy>)#class rtp_class Adds a queue for this policy map and acquires Class sub-mode XSR(config-pmap-c<priority-policy>)#priority high 30 3200 Gives high priority queue a peak 30% of bandwidth and a burst size of 3200 bits per second XSR(config-pmap-c<priority-policy>)#set ip dscp ef Configures IP precedence to match packets with Expedited Forwarding XSR(config-pmap<priority-policy>)#class priority-server...
  • Page 68: Apply Qos

    Frame Relay WAN Link with PPP Backup Sample Configuration XSR(config)#interface serial 1/0.2 multipoint Configures FR port: Serial card in slot 1, port 0, sub-interface 2 for multipoint links and acquires Interface mode XSR(config-if<S1/0.2>)#frame-relay class CLASS_SI Adds another FR map class XSR(config-if<S1/0.2>)#frame-relay interface-dlci 16 Adds PVC #16 and acquires DLCI 16 sub-mode XSR(config-if<S1/0.2-16>)#class CLASS_DLCI...
  • Page 69: Configure Ospf Routing

    Configure OSPF Routing XSR(config)#router ospf 1 Enables OSPF with a router ID and acquires Router mode XSR(config-router)#network 192.168.1.0 0.0.0.255 area 0.0.0.10 Configures the area ID for the specified network XSR(config-router)#network 154.68.1.0 0.0.0.255 area 0.0.0.0 Configures another area ID for the specified network Configure More Access Lists The following ACLs deny any packets to or from network 192.168.1.15 as they enter or leave FastEthernet 1 interface, and permit traffic to or from subnet 192.168.2.xx while denying any other...
  • Page 70: Configure Snmp

    Frame Relay WAN Link with PPP Backup Sample Configuration XSR(config-if<D1>)#encapsulation ppp Enables PPP encapsulation XSR(config-if<D1>)#ip address 192.31.27.84 255.255.255.0 Sets the IP address on the interface XSR(config-if<D1>)#dialer string 4165557922 Sets dialer phone # XSR(config-if<D1>)#dialer wait-for-carrier 30 Specifies the period the XSR will wait for a connection from the service provider XSR(config-if<D1>)#di pool 1 Specifies the dial pool from which calls originate XSR(config-if<D1>)#no shutdown...
  • Page 71: Vpn Site-To-Site Sample Configuration

    VPN Site-to-Site Sample Configuration The following VPN topology, shown in IPSec tunnels with a remote ANG-1105 and two XSRs. 112.16.1.221 The following script configures the VPN topology shown in Generate Master Encryption Key If you have not already generated a master encryption key, you must do so now to configure th6e VPN.
  • Page 72: Set Up Ike Phase I Security

    VPN Site-to-Site Sample Configuration XSR(config)#access-list 101 permit udp ah any any XSR(config)#access-list 101 deny ip any any XSR(config)#access-list 190 permit ip any 112.16.72.0 0.0.0.255 XSR(config)#access-list 191 permit ip any 112.16.76.0 0.0.0.255 XSR(config)#access-list 192 permit ip any 112.16.80.0 0.0.0.255 Set Up IKE Phase I Security The following proposal sets pre-shared authentication and MD5 hashing: XSR(config)#crypto isakmp proposal acme XSR(config-isakmp)#authentication pre-share...
  • Page 73: Configuring Vpn At Interface Mode And Setting Up Rip

    VPN Site-to-Site Sample Configuration XSR(config)#crypto map acme 91 XSR(config-crypto-m)#set transform-set esp-3des-sha XSR(config-crypto-m)#match address 191 XSR(config-crypto-m)#set peer 112.16.244.7 XSR(config)#crypto map acme 90 XSR(config-crypto-m)#set transform-set esp-3des-sha XSR(config-crypto-m)#match address 190 XSR(config-crypto-m)#set peer 112.16.244.9 Configuring VPN at Interface Mode and Setting Up RIP The following commands configure the LAN physical ports as follows: GigabitEthernet port 1 is designated Internal LAN, with the specified IP address/subnet as the designated network.
  • Page 74: Configuring Authentication (Aaa)

    VPN Sample Configuration with Network Extension Mode Configuring Authentication (AAA) Configure an AAA user and DEFAULT AAA group for remote users. When an ANG tunnels into the XSR, it will be assigned dynamically to the IP pool AUTH. Be aware that groups must be created before users can be added to them.
  • Page 75 Generate the master key. Refer to the following sample key: XSR(config)#crypto key master generate New key is 2173 4521 3764 2ff5 163b 4bdf fe92 dbc1 1232 ffe0 f8d9 3649 Apply the following ACLs to the public interface of the XSR before creating the VPN configuration.
  • Page 76 VPN Sample Configuration with Network Extension Mode Create user(s), specify an IP from virtual subnet, and assign a password: XSR(config)#aaa user nem-test XSR(config)#password welcome XSR(config)#aaa user jeffb XSR(config)#password welcome Check to make sure the transforms and proposals were created properly: XSR#show crypto ipsec transform-set Name ----...
  • Page 77: Xsr Rebooting Characteristics

    CLI describes router initialization. Initialization Output The XSR displays the following output when it initializes (cold reboot): X-Pedition Security Router Bootrom Copyright 2003 Enterasys Networks Inc. HW Version: 9002914-04 REV0A CPU: Broadcom BCM1250 Rev 2 VxWorks version: VxWorks5.4.2 Bootrom version: 1.5...
  • Page 78: Reboot Triggers

    XSR Rebooting Characteristics Testing S/W Integrity << PASSED >> Loading Router S/W to address 0x80020000 Verifying uncompressed chksum ... Starting from 0x80020000... Attaching shared memory objects at 0xa0000600... done Attaching interface lo0...done Verifying flash:xsr3000.fls file ... Router S/W size=11989192 sum=0xedd1 compressed_size=4109639 entry=0x80020000 Diagnostics size=1459880 sum=0x8154 compressed_size=614417 entry=0x80020000 RouterCpu1 S/W size=1520104 sum=0x4a2c compressed_size=652528 entry=0x82020000 Testing S/W Integrity <<...
  • Page 79: Reload Command From The Cli

    Reload Command from the CLI You can reboot the XSR firmware by issuing the command prompted to confirm the command. Once the firmware is reloaded, the configuration is loaded from the startup-config file. Bootrom Monitor Commands bc and bw Using Bootrom Monitor mode, you can activate warm or cold reboots by entering respectively.
  • Page 80 Bootrom Monitor Mode Commands All the commands in each group can be listed by entering the command group letter. The main menu provides the following functions: • Reboot warm or cold • Update Bootrom • File system-related commands for the Flash ROM file system •...
  • Page 81 bootFirst size=28992 sum=0xc2e5 compressed_size=28992 entry=0x80020000 bootrom size=842656 sum=0xfa65 compressed_size=347728 entry=0x81e00000 Proceed with erasing current Bootrom in flash and replace with btXSR3000_1_2.fls? (y/n) y First copy of Bootrom ... Erasing 3 sectors at address=0xbfc20000 Programming 131072(0x20000) bytes at address 0xbfc20000 Programming 131072(0x20000) bytes at address 0xbfc40000 Programming 85600(0x14e60) bytes at address 0xbfc60000 Verifying Bootrom flash sectors Locking 3 Bootrom flash sectors...
  • Page 82: Del

    Bootrom Monitor Mode Commands This command shows free disk space. Sample output is shown as follows: XSR-3150:df Free space on flash: is 3383296 bytes (0x33a000). This command removes a file from This command lists the contents of the current directory in long format. The command displays the following sample output: XSR-3150: dir Listing Directory flash::...
  • Page 83: Ffc

    Set working directory to flash: Using default Bootrom password. The system is not secure!!! Use “bp” to change password This command formats the CompactFlash card. This command retrieves a file over the network using a remote IP address/file path. This command modifies network parameters. You are prompted to enter data by the following script.
  • Page 84: Remove

    Bootrom Monitor Mode Commands remove This command removes a file using the syntax rename This command renames a file using the syntax This command displays boot values. Sample output is shown as follows: XSR-3150: sb Current boot file is xsr3000.fls Boot selector default is flashrom, compactFlash, network Available Network boot devices: sbe0 This command displays a fault report.
  • Page 85 This command displays XSR 3000 Series inventory with this sample output: XSR-3150: si Hardware: Motherboard Information: XSR-3150 ID: 9002914-04 REV0A CPLD Rev 3 Serial Number: 2914024201123206 Processor: Broadcom BCM1250 Rev 2 at 600MHz PowerSupply1, PowerSupply2 Fans 1 2 3 4 5 7 8 10 CPU Temperature Max: 80C Router Temperature Max: 60C RAM: 512MB without interleave...
  • Page 86 This command shows the bootrom version with sample output below: XSR-3150: sv HW Version: 9002914-04 REV0A CPU: Broadcom BCM1250 Rev 2 VxWorks version: VxWorks5.4.2 Bootrom version: 1.0 Creation date: Apr 14 2003, 10:12:36 3-42 Software Configuration X-Pedition Security Router Bootrom Copyright 2003 Enterasys Networks Inc. Serial Number: 3646031700233215...
  • Page 87: Appendix A: Specifications

    System Specifications This appendix details XSR data about hardware functionality including: • Processor, system memory, chassis, power supply, interfaces • Required cabling, CompactFlash and other accessories • Pinout assignments for WAN and LAN interfaces • LED behavior Refer to tables throughout this appendix for specific information. Category Processor Hardware...
  • Page 88: Cable, Compactflash And Accessory Specifications

    Chassis LEDs Cable, CompactFlash and Accessory Specifications Refer to the following table for specifications of cables, CompactFlash and accessories for the XSR. This equipment can all be obtained separately from Enterasys Networks or through any computer supply retailer. Part Description 6’...
  • Page 89 Table A-2 XSR Cabling/Accessory Guide (continued) Part Description 1000Base-SX Mini-GBIC with connector 1000Base-LX Mini-GBIC with connector 1000Base-SX Mini-GBIC with connector 2-port synch/asynch card 4-port synch/asynch card 6’ DB-15, X.21 DTE, twisted-pair cable 6’ DB-25, EIA-232/530 DTE twisted-pair cable 6’ DB-37, EIA-449 DTE, twisted-pair cable 6’...
  • Page 90: Com (Console) Port

    Cable, CompactFlash and Accessory Specifications COM (Console) Port The XSR comes equipped with a COM serial port useful for initial configuration and management. Using a serial (null modem) cable, you can attach the router’s DB-9 COM port to a data terminal port and directly configure the XSR over the asynchronous connection.
  • Page 91: Gigabitethernet Ports

    GigabitEthernet Ports The XSR comes equipped with three GigabitEthernet (LAN) ports that support full-duplex 10, 100, or 1000 Mbps transmission. The ports conform to IEEE 802.3 standards with 8-pin modular RJ-45 connectors. Because these ports have internal MDI crossover capabilities which allow them to detect which mode (DTE or DCE) the link partner is operating at, you can use any cable to attach the XSR with a PC or uplink port as long as a fully populated cable (all four pairs) is connected to take advantage of full gigabit bandwidth.
  • Page 92: Copper/Fiber-Optic Ethernet Nims

    Cable, CompactFlash and Accessory Specifications Copper/Fiber-optic Ethernet NIMs The single-port Copper or Fiber-optic Ethernet NIMs, shown in provide interfaces for half and full-duplex 10/100Base-T or fiber-optic 100Base-F transmission over LAN or WAN networks, respectively. The Copper Ethernet NIM incorporates a standard 8- pin modular RJ-45 connector and the Fiber-optic Ethernet NIM has an MT-RJ multi-mode interface.
  • Page 93: 2/4-Port Serial Nim Card Port

    2/4-Port Serial NIM Card Port The High Speed Serial NIM card, as shown in serial link to four different types of DTEs: DB-15, 25, 37, and V.35. This interface supports dual and quad traffic up to 8 Mbps. Refer to Figure A-7 through J1: 68-pin male SCSI II type connector...
  • Page 94 Cable, CompactFlash and Accessory Specifications J1: 68-pin male SCSI II type connector J2 - J5: DB-25 type male connector Figure A-8 EIA-232/530 DTE Pin Assignments DSR0+ DSR0- J2...J5 - DB-25 type male connector RxD0+ RxD0- TxD0+ TxD0- RTS0+ RTS0- DTR0+ DTR0- CTS0+ CTS0-...
  • Page 95 Figure A-9 ON0+ ON0- RD0+ RD0- SD0+ SD0- RS0+ RS0- TR0+ TR0- CS0+ CS0- ST0+ ST0- RT0+ RT0- Shield GND ON1+ ON1- RD1+ RD1- SD1+ SD1- RS1+ RS1- TR1+ TR1- CS1+ CS1- ST1+ ST1- RT1+ RT1- Shield GND ON2+ ON2- J1: 68-pin male SCSI II type connector RD2+ RD2-...
  • Page 96 Cable, CompactFlash and Accessory Specifications PORT 3 (EIA-232/530) PORT 2 (V.35) J1: 68-pin male SCSI III-type connector J3, J5: V.35-type male connector J2. J4: DB-25-type male connector Pins not shown are unused. A-10 Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments DSR3+ DSR3- RxD3+...
  • Page 97 Figure A-11 DSR0 RD0+ RD0 - SD0+ SD0 - RTS0 DTR0 CTS0 SCT0+ SCT0- SCR0+ SCR0- Signa l GND Signa l GND DSR1 RD1+ RD1 - SD1+ SD1 - RTS1 DTR1 CTS1 SCT1+ SCT1- SCR1+ SCR1- Signa l GND Signa l GND DSR2 J1: 68-pin male SCSI II type connector RD2+...
  • Page 98: T1/E1/Isdn Pri Nim Card Ports

    Cable, CompactFlash and Accessory Specifications T1/E1/ISDN PRI NIM Card Ports The T1/E1/ISDN PRI NIM, as shown in Ethernet (WAN) ports that support fractional T1/E1 transmission in full-channel, fractional or unchannelized format with 8-pin modular RJ-48C connectors and include a built-in DSU/CSU. Cables required for these ports must be 100-ohm, straight-through, twisted-pair for T1 lines and a 120-ohm version for E1 lines.
  • Page 99: Balun For E1 Or Pri Nim Cards

    Balun for E1 or PRI NIM Cards Some overseas electrical systems require that you use a balun and grounding shunt when utilizing an E1 or PRI NIM card on the XSR. A balun is an adapter employed to connect a 75-ohm coaxial cable pair (2 BNC connectors) to a 120-ohm twisted pair cable (RJ-48C connector).
  • Page 100: Grounding Shunt For E1 Nim Cards

    Cable, CompactFlash and Accessory Specifications Grounding Shunt for E1 NIM Cards If you connect a balun to a 75-ohm line, you will also need to attach a grounding shunt (or terminal strip) to any NIM pins whose RJ-48C connectors utilize the balun. The XSR requires that you use a shunt (shown in interface, which are not needed to complete the connection.
  • Page 101: T3/E3 Nim Card

    Cable, CompactFlash and Accessory Specifications T3/E3 NIM Card The T3/E3 full and sub-rate NIM, as shown in Figure A-17, is equipped with 1 Ethernet (WAN) port that supports fractional T3/E3 transmission in un-channelized or clear channel mode with BNC connectors. User data are encapsulated in HDLC packets before being sent to the line. Figure A-17 1-Port T3/E3 NIM Card Cables required for this NIM must be 75-ohm, DS3 Type 734 or 735 coaxial.
  • Page 102: 1/2-Port Bri-S/T Isdb Nim Card Ports

    Cable, CompactFlash and Accessory Specifications 1/2-Port BRI-S/T ISDB NIM Card Ports The XSR provides a serial NIM card for 1 or 2 WAN interfaces over an ISDN-S/T BRI line, as shown in Figure traffic. See Figure A-19 Port 0 Activation LED Termination Shunt for the ISDN BRI-S/T NIM Card ISDN BRI-S/T terminal equipment devices may be connected at random points of the cable in point-to-point or point-to-multipoint configurations.
  • Page 103: Installing Shunt/Terminal Strip

    Cable, CompactFlash and Accessory Specifications Installing Shunt/Terminal Strip To install the shunt or terminal strip, attach two dual-pin units vertically to P1 and P2 four-pin jumpers corresponding to the RJ-45 port using a balun, as shown in Figure A-20. Any other RJ-45 ports on the NIM card connected to 120-ohm lines do not require shunts.
  • Page 104: 1/2-Port Bri-U Nim Card Ports

    Cable, CompactFlash and Accessory Specifications 1/2-Port BRI-U NIM Card Ports The XSR provides a serial NIM card for 1 or 2 WAN interfaces over an ISDN BRI-U line, as shown Figure A-21. Port 0 and 1 LEDs shine when the lines are active and ready to receive traffic. Port 0 Activation LED Refer to Figure A-22...
  • Page 105: 1-Port Adsl Nim Card Port

    1-Port ADSL NIM Card Port The XSR’s Asymmetric Digital Subscriber Line (ADSL) NIM card, as shown in provides 1 WAN port on an ADSL over POTS (Annex A/C) or ISDN (Annex B) line with a 6-pin RJ-11 connector. The ADSL NIM supports both G.dmt and G.lite standards. ADSL NIMs are shipped with a CompactFlash card containing DSP firmware.
  • Page 106: T1/E1 Drop & Insert (D&I) Nim

    Cable, CompactFlash and Accessory Specifications T1/E1 Drop & Insert (D&I) NIM The XSR’s 2-port T1/E1 D&I NIM card, as shown in between the Central Office T1/E1 line and a PBX. It de-couples Channel Associated Signaling (CAS) and Voice DS0 timeslots and redirects them to a PBX, and conversely, reintegrates Voice DS0 timeslots from the PBX with the T1/E1 data stream.
  • Page 107: Compactflash Memory Card

    CompactFlash Memory Card The optional plug-in CompactFlash (CF) memory card, shown in chip controller and flash memory modules in a matchbook-sized package with a 50-pin, PCMCIA connector consisting of two rows of 25 female contacts each. The PCMCIA male interface supports both Type I and Type II CF cards. Note that the CF release mechanism pops out when you install the card.
  • Page 108 Cable, CompactFlash and Accessory Specifications COM(munication) Ethernet Port 1, 2, 3 Fiber/Copper GBIC (Ethernet) Port BRI NIM Port 0/1 ADSL NIM 1 ADSL NIM 2 T3/E3 NIM: •LOS (Loss of Signal) •LOF (Loss of Frame) •Alarm •Enable Copper Ethernet NIM Fiber-optic Ethernet NIM A-22 Table A-3 LED Description (continued)
  • Page 109: Index

    Balun description A-13 Balun adapter BRI S/T card part numbers BRI S/Tpin assignments A-16 BRI U card part numbers BRI-U pin assignments A-18, A-19, A-20 Broadcom 1250 processor cable/accessory guide cabling part numbers Canadian notices channelized card specifications chassis dimensions specifications port configuration port pinouts...
  • Page 110 features GigabitEthernet port pinouts hardware features hardware specifications how to attach the Ethernet serial cable 2-10 how to attach the internal power supply cord 2-12 how to attach the serial Console cable how to attach the WAN cables how to configure Frame Relay 3-15 how to configure IP routing 3-14...

Table of Contents

Save PDF