User Guide

ManualsBrandsNortel Networks ManualsOther2750

Version 7.05.300

NN46110-318 02.01

322831-B Rev 01

November 2007

Standard

600 Technology Park Drive

Billerica, MA 01821-4130

Nortel VPN Router Installation

— VPN Router 2750

Summary of content (108 pages)

PAGE 1
Version 7.05.300 NN46110-318 02.
PAGE 2
Copyright © 2007 Nortel Networks. All Rights Reserved. The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty. Users must take full responsibility for their applications of any products specified in this document. The information in this document is proprietary to Nortel Networks Inc.
PAGE 3
Warning: This is a Class A product. In a domestic environment, this product may cause radio interference, in which case, the user may be required to take appropriate measures. Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenmaßnahmen verantwortlich ist. Attention: Ceci est un produit de Classe A.
PAGE 4
Canada requirements only Canadian Department of Communications Radio Interference Regulations This digital apparatus (VPN Router 2750) does not exceed the Class A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
PAGE 5
3. Limitation of Remedies.
PAGE 6
NN46110-318 02.
PAGE 7
Contents New in this release. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1000BASE-T (1000 GT) Ethernet card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
Contents Installing the chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Installing the chassis on a flat surface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Installing the chassis in an equipment rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Rack-mount recommendations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Attaching the shelf in the equipment rack . . . . . .
PAGE 9
Chapter 4 Installing option cards and DIMMs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Shutting down the system to add or replace hardware . . . . . . . . . . . . . . . . . . . . . . . . 62 Removing the front bezel and top cover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Attaching the antistatic wrist strap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Installing and replacing option cards . . . . . . . . . . . . .
PAGE 10
Contents Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 NN46110-318 02.
PAGE 11
Figures Figure 1 Front view of the Nortel VPN Router 2750 . . . . . . . . . . . . . . . . . . . . . . . . 26 Figure 2 Placement of rubber feet on the bottom of the chassis . . . . . . . . . . . . . . 29 Figure 3 Attaching the cage nuts to the rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Figure 4 Installing the shelf in the equipment rack . . . . . . . . . . . . . . . . . . . . . . . . . 31 Figure 5 Removing the front bezel . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 12
Figures Figure 30 VPN Router Security Accelerator card . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Figure 31 SSL VPN Module 1000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Figure 32 10/100BASE-TX Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . 84 Figure 33 1000BASE-T (1000 GT) Ethernet interface card (all models except VPN Router 2750 1100) 86 Figure 34 1000BASE-T (1000 MT) Ethernet interface card . . . . . . . . . . .
PAGE 13
Tables Table 1 Items shipped with the Nortel VPN Router 2750 . . . . . . . . . . . . . . . . . . . 27 Table 2 Interfaces and cables for the Nortel VPN Router 2750 . . . . . . . . . . . . . . . 36 Table 3 Power cord requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Table 4 Front panel LED indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Table 5 LED indicators on the system 10/100BASE-TX Ethernet ports . . . . . . . .
PAGE 14
Table 30 T1/E1 CSU/DSU cable pinouts for crossover connection . . . . . . . . . . . . . 95 Table 31 T1/E1 CSU/DSU cable pinouts for straight-through connection . . . . . . . . 96 Table 32 V.90 modem cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Table 33 V.35 cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Table 34 X.21 cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 15
New in this release The following section details what’s new in Nortel VPN Router Installation— VPN Router 2750 (NN46110-318) for Release 7.05.300. Features See the following sections for information about feature-related changes. 1000BASE-T (1000 GT) Ethernet card The 1000BASE-T (1000 GT) Ethernet card is new for Release 7.05.300. See “1000BASE-T (1000 GT) Ethernet interface card LEDs” on page 43 and “1000BASE-T (1000 GT) Ethernet interface card” on page 85.
PAGE 16
New in this release NN46110-318 02.
PAGE 17
How to get help This chapter explains how to get help for Nortel products and services. Finding the latest updates on the Nortel Web site The content of this documentation was current at the time the product was released. To check for updates to the latest documentation and software for the VPN Router 2750, go to: www.nortel.com/support Select Security & VPN and then, in the section called Virtual Private Networking (VPN), IPSEC, and SSL, click the appropriate VPN Router product.
PAGE 18
How to get help This site provides quick access to software, documentation, bulletins, and tools to address issues with Nortel products.
PAGE 19
How to get help 19 Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller.
PAGE 20
How to get help NN46110-318 02.
PAGE 21
Preface The Nortel VPN Router 2750 is part of the Nortel VPN router product family. The VPN Nortel Routers support secure, reliable IP VPNs in a single, integrated hardware device. Throughout this guide, the VPN Router is also referred to as the gateway. This guide provides instructions for installing the VPN Router 2750 for the first time and for replacing any field replaceable unit (FRU).
PAGE 22
Preface Text conventions This guide uses the following text conventions: bold Courier text Indicates command names and options and text that you need to enter. Example: Use the show health command. Example: Enter terminal paging {off | on}. italic text Indicates new terms and book titles. plain Courier text Indicates system output, for example, prompts and system messages. Example: File not found. separator ( > ) Shows menu paths. Example: Choose Status > Health Check.
PAGE 23
Preface ISDN Integrated Services Digital Network LAN local area network LED light emitting diode LOS loss of signal OOF out of frame PCI peripheral component interconnect SSL Secure Sockets Layer VPN virtual private network WAN wide area network 23 Related publications For complete information about configuring, monitoring, and managing the VPN Router 2750, refer to the following publications (included on the software CD): • • • • • • Release notes provide the latest information, in
PAGE 24
Preface • • • • Nortel VPN Router Configuration — Routing (NN46110-504) provides instructions for configuring RIP, OSPF, and VRRP, as well as instructions for configuring ECMP, routing policy services, and client address redistribution. Nortel VPN Router Configuration — SSL VPN Services (NN46110-501) provides instructions for configuring services on the SSL VPN Module 1000, including authentication, networks, user groups, and portal links.
PAGE 25
Chapter 1 Installing the Nortel VPN Router 2750 chassis This chapter describes how to install the VPN Router 2750 chassis. Note: Before you install the chassis, ensure that you install all network wiring on the premises using standard cable system practices.
PAGE 26
Chapter 1 Installing the Nortel VPN Router 2750 chassis Figure 1 shows the front view of the Nortel VPN Router 2750.
PAGE 27
Chapter 1 Installing the Nortel VPN Router 2750 chassis 27 Shipment contents In addition to the gateway and this guide, the shipping container for the VPN Router 2750 contains a number of hardware accessories and other items (Table 1). Note: Nortel does not ship a power cord with the VPN Router 2750 unless you order one.
PAGE 28
Chapter 1 Installing the Nortel VPN Router 2750 chassis Additional equipment You need items that are not included in the VPN Router 2750 shipping container. Before you begin the installation, ensure that you have all the cables, tools, and other equipment that you need. Cables You need cables that are not included in the VPN Router 2750 shipping container. For information about which cables are shipped and which ones you can order, see “Connecting communications cables” on page 36.
PAGE 29
Chapter 1 Installing the Nortel VPN Router 2750 chassis 29 Installing the chassis To install the VPN Router 2750, do one of the following: • • Position the chassis on a flat, sturdy, horizontal surface. Mount the chassis in a standard equipment rack (see “Installing the chassis in an equipment rack” on page 30).
PAGE 30
Chapter 1 Installing the Nortel VPN Router 2750 chassis Installing the chassis in an equipment rack To mount the VPN Router 2750 in an equipment rack, you need the following equipment: • • • • a standard 19-inch equipment rack four screws (supplied with the chassis) four cage nuts (supplied with the chassis) if the rack does not have threaded rail holes a #2 Phillips screwdriver Rack-mount recommendations When you mount the chassis in the equipment rack, observe the following standard recommendations:
PAGE 31
Chapter 1 Installing the Nortel VPN Router 2750 chassis 31 Figure 3 Attaching the cage nuts to the rack Rail without threaded holes Cage nut CS260003A 2 Position the rack-mount shelf inside the rack as shown in Figure 4. 3 Align the holes in the shelf with holes in the front of the rack. Figure 4 Installing the shelf in the equipment rack Rack edge Flange CS260003A 4 Snap the support flange into place (Figure 4). Ensure that the alignment pin above the flange fits into the appropriate hole.
PAGE 32
Chapter 1 Installing the Nortel VPN Router 2750 chassis Mounting the chassis in the equipment rack Nortel recommends that two people install the chassis in the rack. To install the VPN Router 2750 in the equipment rack: 1 Set the VPN Router 2750 on the rack-mount shelf. 2 Remove the front bezel from the VPN Router 2750 (Figure 5). a Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise.
PAGE 33
Chapter 1 Installing the Nortel VPN Router 2750 chassis 33 3 Insert one of the supplied panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws (Figure 4 on page 31). 4 Replace the front bezel (Figure 6). a Hold the two handles on the bezel, and push it onto the chassis. b Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis.
PAGE 34
Chapter 1 Installing the Nortel VPN Router 2750 chassis NN46110-318 02.
PAGE 35
Chapter 2 Cabling the VPN Router and turning the power on This chapter provides information about how to connect communications cables and the power cord to the VPN Router 2750. Caution: Connect the cables to the built-in Ethernet ports and to the interfaces on the option cards installed in the VPN Router 2750 before you plug the power cord into the outlet.
PAGE 36
Chapter 2 Cabling the VPN Router and turning the power on Connecting communications cables Gather the cables to attach to the VPN Router 2750. Table 2 lists the system ports and the ports provided on the optional interface cards that you can install in the VPN Router 2750. The table also indicates whether you can obtain cables for the ports from Nortel.
PAGE 37
Chapter 2 Cabling the VPN Router and turning the power on 37 Figure 7 shows the back of the VPN Router 2750. All interface cables and the power cord attach to the rear of the gateway.
PAGE 38
Chapter 2 Cabling the VPN Router and turning the power on The power cord must meet the requirements described in Table 3. Table 3 Power cord requirements Requirement Description Current rating The power cord must be rated for the available AC voltage and must have a current rating that is at least 125 percent of the gateway’s current rating (5 A @ 100 VAC or 3 A @ 240 VAC). Certification The power cord must have certification marks from an acceptable regional agency.
PAGE 39
Chapter 2 Cabling the VPN Router and turning the power on 39 Verifying a successful installation After you connect the gateway to the power source and turn it on, you can verify a successful installation by checking the light emitting diodes (LED) on the front panel (Figure 8 on page 40). The following sequence of LEDs should occur: 1 The power LED (the Nortel logo) lights blue. 2 The Alert LED lights red, and the Boot/Ready LED lights green.
PAGE 40
Chapter 2 Cabling the VPN Router and turning the power on Understanding the LEDs This section describes the LEDs on the front panel of the VPN Router 2750 and on the interface cards that have LEDs. You can confirm that you properly cabled the LAN and WAN interfaces by examining the LEDs. Front panel LEDs The front panel of the VPN Router 2750 has a lighted Nortel logo and two LEDs (Figure 8). These LEDs indicate the status of the VPN Router 2750.
PAGE 41
Chapter 2 Cabling the VPN Router and turning the power on 41 LEDs on the system 10/100BASE-TX Ethernet ports Each of the two 10/100BASE-TX Ethernet ports on the rear of the VPN Router 2750 has two LEDs (Figure 9). Figure 9 LEDs on the system 10/100BASE-TX Ethernet ports Yellow Green CS260011A Table 5 describes the LEDs on the system 10/100BASE-TX Ethernet ports.
PAGE 42
Chapter 2 Cabling the VPN Router and turning the power on 10/100BASE-TX Ethernet interface card LEDs Figure 10 shows the LEDs on the 10/100BASE-TX Ethernet interface card. Activity/Link 100TX DATA ACT/LINK Figure 10 LEDs on the 10/100BASE-TX Ethernet interface card 10/100 Mb/s CS260009A Table 6 describes the LEDs on the 10/100BASE-TX Ethernet interface card.
PAGE 43
Chapter 2 Cabling the VPN Router and turning the power on 43 1000BASE-T (1000 GT) Ethernet interface card LEDs The following figure shows the LEDs on the 10BASE-T/100BASE-TX/ 1000BASE-T 1000 GT Ethernet interface card. Figure 11 LEDs on the 1000 GT Ethernet interface card The following table describes the LEDs on the 1000 GT Ethernet interface card.
PAGE 44
Chapter 2 Cabling the VPN Router and turning the power on ACT/LNK 10 = OFF 100 = GRN 1000 = ORG ACT/LNK Intel PRO R Figure 12 LEDs on the 1000BASE-T (1000 MT) Ethernet interface card 10/100/1000 11287EA Table 8 describes the LEDs on the 1000BASE-T Ethernet interface card. Table 8 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card LED Indicator Description ACT/LNK Steady green The port is connected to a valid link partner.
PAGE 45
Chapter 2 Cabling the VPN Router and turning the power on 45 Table 9 describes the LED on the 1000BASE-SX Ethernet interface card. Table 9 LED indicator on the 1000BASE-SX Ethernet interface card LED Indicator Description ACT/LNK Steady green The port is connected to a valid link partner. Flashing green The LAN port is sending or receiving network data. Off The port is not linked to a valid partner.
PAGE 46
Chapter 2 Cabling the VPN Router and turning the power on 56/64K CSU/DSU WAN interface card LEDs Figure 14 shows the LEDs on the 56/64K CSU/DSU WAN interface card. Figure 14 LEDs on the 56/64K CSU/DSU WAN interface card Blue LED Red LED 56/64K DDS Green LED Yellow LED Table 10 describes the LEDs on the 56/64K CSU/DSU WAN interface card.
PAGE 47
Chapter 2 Cabling the VPN Router and turning the power on 47 ADSL WAN interface card LEDs Figure 15 shows the LEDs on the asymmetric digital subscriber line (ADSL) WAN interface card. Figure 15 LEDs on the ADSL WAN interface card RX/TX LED RX/TX ADSL CONN CONN LED Table 11 describes the LEDs on the ADSL WAN interface card.
PAGE 48
Chapter 2 Cabling the VPN Router and turning the power on T1/E1 CSU/DSU WAN interface card LEDs Figure 16 shows the LEDs on the T1/E1 CSU/DSU WAN interface card. Figure 16 LEDs on the T1/E1 CSU/DSU WAN interface card LED 1, Red LED 2, Blue LED 4, Green LED 3, Yellow CS160012A Table 12 describes the LEDs on the T1/E1 CSU/DSU WAN interface card.
PAGE 49
Chapter 2 Cabling the VPN Router and turning the power on 49 Quad T1/E1 CSU/DSU WAN interface card LEDs Figure 17 shows the LEDs on the quad T1/E1 channel service unit/digital service unit (CSU/DSU) WAN interface card. Figure 17 LEDs on the quad T1/E1 CSU/DSU WAN interface card LED 1 LED 2 LED 3 LED 4 CS160012A Table 13 describes the LEDs on the quad T1/E1 CSU/DSU WAN interface card.
PAGE 50
Chapter 2 Cabling the VPN Router and turning the power on Single V.35/X.21 WAN interface card LEDs Figure 18 shows the LEDs on the single V.35/X.21 WAN interface card. Figure 18 LEDs on the single V.35/X.21 WAN interface card LED 1, Red LED 2, Green LED 4, Green LED 3, Green Table 14 describes the LEDs on the single V.35/X.21 WAN interface card. Table 14 LED indicators on the single V.35/X.21 WAN interface card LED Indicator Description LED 1 Red No external transmit clock source is available.
PAGE 51
Chapter 2 Cabling the VPN Router and turning the power on 51 SSL VPN Module 1000 LEDs Figure 19 shows the LEDs on the Secure Sockets Layer (SSL) VPN Module 1000. Figure 19 LEDs on the SSL VPN Module 1000 Utilization 1 Online 2 - Activity 11356EA Table 15 describes the LEDs on the SSL VPN Module 1000. Table 15 LED indicators on the SSL VPN Module 1000 LEDs Indicator Description Online Steady green The SSL VPN Module 1000 is operating normally. Yellow A reset occurred on the SSL VPN Module 1000.
PAGE 52
Chapter 2 Cabling the VPN Router and turning the power on NN46110-318 02.
PAGE 53
Chapter 3 Configuring the management IP interface This chapter describes how to configure a management Internet Protocol (IP) address, subnet mask, and default gateway address on a newly installed VPN Router 2750. After you complete the procedures in this chapter, you can configure and manage the VPN Router 2750 using a Web browser from a PC. To configure the management IP interface, you use the serial interface configuration menu.
PAGE 54
Chapter 3 Configuring the management IP interface Required information Before you configure the management interface, collect this information: • IP address for the management interface The management IP address must be accessible from one of the private physical interfaces on the VPN Router 2750. For example, if you plan to assign IP address 10.2.3.3 with subnet mask 255.255.0.0 to the private physical interface, the management IP address must reside in the 10.2 network.
PAGE 55
Chapter 3 Configuring the management IP interface 55 Configuring the management IP address You use the serial interface to assign the VPN Router 2750 a management IP address and subnet mask so that you can then use a Web browser for management. To configure the management IP address using the serial interface: 1 Turn on the terminal or PC.
PAGE 56
Chapter 3 Configuring the management IP interface The serial main menu appears. Main Menu: System is currently in NORMAL mode.
PAGE 57
Chapter 3 Configuring the management IP interface 57 6 Type 0, and press Enter to configure the IP address. The IP address prompt appears. 0) Slot 0, Port 2, Public LAN IP Address = Subnet Mask = 0.0.0.0 Speed/Duplex = AutoNegotiate *Type 0.0.0.0 to delete. *Just type to skip. Old IP address = New IP address = 7 Type a new IP address, and press Enter. The subnet mask prompt appears. Old Subnet Mask = 0.0.0.
PAGE 58
Chapter 3 Configuring the management IP interface Type R, and press Enter to return to the serial main menu. 10 To configure the management IP address, type 0, and press Enter. The Management IP Address menu appears. - Management IP Address Menu M) Management IP Address = R) Return to the Main Menu Please select a menu choice (M,R): 11 Type M, and press Enter. The Management IP Address prompt appears. *Type 0.0.0.0 to delete. *Just type to skip.
PAGE 59
Chapter 3 Configuring the management IP interface 59 Testing the configuration After you assign a management IP address to the VPN Router 2750, start your Web browser to verify that you can access the gateway from the browser. To manage the VPN Router 2750 using the GUI, your PC must be running one of the following browsers: • • • Windows 2000 and NT — Internet Explorer 6.0 — Monzilla 1.7 — Firefox (all versions) — Netscape 7.x, 8.0.x or 8.1.x Unix — Firefox 1.5 — Monzilla 1.7 Linux — Firefox 1.
PAGE 60
Chapter 3 Configuring the management IP interface Troubleshooting If you cannot connect to the VPN Router 2750 using your browser, check the following items: • • • • • Ensure that you entered the correct IP address in the browser window. Type a known URL in the browser window to ensure that your network connection is good. Check that the management IP address that you configured is on the same subnet as the physical LAN attached to the gateway.
PAGE 61
Chapter 4 Installing option cards and DIMMs This chapter provides instructions about how to install and replace the following field replaceable units (FRU) in the VPN Router 2750: • • • • LAN, WAN, and serial interface cards Secure Sockets Layer (SSL) VPN Module 1000 VPN Router Security Accelerator card Dual inline memory modules (DIMM) This chapter contains the following topics: Topic Page Shutting down the system to add or replace hardware 62 Removing the front bezel and top cover 63 Attaching
PAGE 62
Chapter 4 Installing option cards and DIMMs Shutting down the system to add or replace hardware To install or replace an option card or a DIMM, you must first shut down the VPN Router 2750 and unplug it. Warning: Risk of electric shock Shut down the VPN Router 2750 as described in this section before you attempt to add or replace an option card or DIMM. To shut down the VPN Router 2750: 1 Use the Web graphical user interface (GUI) or the command line interface (CLI) to shut down the gateway.
PAGE 63
Chapter 4 Installing option cards and DIMMs 63 Removing the front bezel and top cover To install option cards or DIMMs, you must remove the front bezel and the top cover from the gateway. To remove the front bezel: 1 Shut down the VPN Router 2750 using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 62. Warning: Risk of electric shock Turn off the VPN Router 2750, and unplug it before you attempt to install an option card or DIMM.
PAGE 64
Chapter 4 Installing option cards and DIMMs 3 Grip the two handles, and firmly pull the bezel toward you to unsnap it from the chassis. Caution: Risk of equipment damage Do not use the piece with the Nortel logo and the LEDs as a handle. The first several times that you remove the front bezel, the bezel can stick because the ball studs and socket clips are new. To remove the top cover: 1 2 NN46110-318 02.01 Remove the VPN Router 2750 from the rack if the router is installed in an equipment rack.
PAGE 65
Chapter 4 Installing option cards and DIMMs 65 Figure 21 Removing the top cover Remove these 4 screws Alert Boot/Ready Alert Boot/Ready Slide cover forward and lift up CS260006A 3 Slide the top cover forward approximately 1/4 inch. 4 Lift the lid 2 or 3 inches, and pull it off the chassis. The VPN Router 2750 system board is now exposed. Figure 22 shows the location of the option card and DIMM slots on the system board.
PAGE 66
Chapter 4 Installing option cards and DIMMs Figure 22 Location of option card and DIMM slots on the system board DIMMs (1 and 2) Option card slots 2 1 DIMM slots 1 2 3 4 PCI slots CS160004A Warning: Risk of injury Beware of danger if you incorrectly replace the battery. Replace the battery with the same type or an equivalent battery only, as recommended by the manufacturer’s instructions. In spite of this warning, which is mandated for regulatory approval, you must not change the battery.
PAGE 67
Chapter 4 Installing option cards and DIMMs 67 Attaching the antistatic wrist strap Nortel ships the VPN Router 2750 with an antistatic wrist strap. The antistatic wrist strap directs the discharge of static electricity from your body to the chassis of the gateway to avoid damage to sensitive electronic components. You must wear an antistatic wrist strap on your arm when you remove, install, or handle option cards and DIMMs. Caution: Risk of equipment damage Electrostatic discharge can damage hardware.
PAGE 68
Chapter 4 Installing option cards and DIMMs Installing and replacing option cards The VPN Router 2750 has four slots for option cards (Figure 22 on page 66). This section provides instructions about adding new option cards to the gateway or, if necessary, replacing an existing card. Table 16 lists the option cards that you can install in the VPN Router 2750.
PAGE 69
Chapter 4 Installing option cards and DIMMs 69 1 The VPN Router 2750 2750 must be running Version 5.0 or later. 2 The VPN Router 2750 2750 must be running Version 4.90 or later. 3 The VPN Router 2750 must be running Version 5.05.330, 6.05.140 and later, 7.00.062, 7.05.100 and later, or 7.05.300 and later. 4 The VPN Router 2750 2750 must be running Version 4.90 or later. 5 The VPN Router 2750 2750 must be running Version 4.90 or later. 6 The VPN Router 2750 2750 must be running Version 5.0 or later.
PAGE 70
Chapter 4 Installing option cards and DIMMs 1 Shut down the VPN Router 2750 using the Web GUI or the command line interface and then unplug it as described in “Shutting down the system to add or replace hardware” on page 62. Warning: Risk of electric shock Turn off the VPN Router 2750 and unplug it before you attempt to install an option card. 2 Remove the front bezel from the chassis, and then remove the chassis from the equipment rack (see “Removing the front bezel and top cover” on page 63).
PAGE 71
Chapter 4 Installing option cards and DIMMs 71 Figure 24 Installing and removing an option card Rear of unit Filler panel screw Option card Motherboard Option card slots CS2600017A 8 Lower the new option card into the slot, and gently press the connector into the slot. Seat the card firmly in the slot. If you do not properly seat the card, it does not work. 9 Replace the screw that secures the card to the slot (Figure 24 on page 71). 10 Replace the top cover on the chassis (Figure 21 on page 65).
PAGE 72
Chapter 4 Installing option cards and DIMMs a Set the VPN Router 2750 on the rack-mount shelf in the rack. b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws (Figure 4 on page 31). 12 Replace the front bezel (Figure 25). a Hold the bezel by the two handles, and push the bezel onto the chassis. b Use a screwdriver, to tighten the two screws that secure the bezel to the chassis.
PAGE 73
Chapter 4 Installing option cards and DIMMs 73 This section provides instructions on adding a second DIMM to the VPN Router 2750 or, if necessary, replacing an existing DIMM. Caution: Use of a memory module not purchased from Nortel can render void your warranty or your service contract. Caution: Ensure that you install the same type of DIMM that is already installed in your gateway.
PAGE 74
Chapter 4 Installing option cards and DIMMs 5 To replace a DIMM, remove the installed DIMM as follows: a Press down the locking lever on either side of the DIMM (Figure 26). b Pull the DIMM up to remove it from the slot. 6 Press down the locking lever on either side of the slot where you plan to install the new DIMM (Figure 26). 7 Place the new or replacement DIMM in the slot (Figure 26). Use the alignment keys to properly position the DIMM in the slot. 8 Press the DIMM firmly into the socket.
PAGE 75
Chapter 4 Installing option cards and DIMMs 75 10 Replace the top cover on the chassis (Figure 21 on page 65). a Hold the cover at an angle, and slide it onto the chassis. b Insert the four screws that secure the cover to the chassis, and use the screwdriver to tighten the screws. 11 To install the VPN Router 2750 in an equipment rack, do the following: a Set the VPN Router 2750 on the rack-mount shelf in the rack.
PAGE 76
Chapter 4 Installing option cards and DIMMs NN46110-318 02.
PAGE 77
Appendix A Technical specifications This appendix provides technical specifications for the VPN Router 2750 chassis and the chassis interfaces. Chassis specifications Table 18 lists physical, electrical, and environmental specifications for the chassis. Table 18 Physical, electrical, and environmental specifications Specification Description Physical Height 5.25 in. (13.335 cm) Width 17 in. (43.18 cm) Depth 21 in. (53.34 cm) Weight 28 lbs. (12.
PAGE 78
Appendix A Technical specifications Table 18 Physical, electrical, and environmental specifications (continued) Specification Description Operating altitude 8202 ft (2500 m) maximum Storage altitude 40 000 ft (12 192 m) maximum System ports The VPN Router 2750 system board provides the following built-in interfaces: • • two 10/100BASE-TX Ethernet local area network (LAN) ports serial port This section provides information about the 10/100BASE-TX Ethernet LAN ports and the serial port on the syste
PAGE 79
Appendix A Technical specifications 79 Figure 27 10/100BASE-TX Ethernet connector 87654321 RD- RD+ TD- TD+ CS260010A Table 19 provides the 10/100BASE-TX Ethernet port pinouts. Table 19 10/100BASE-X Ethernet port pinouts Pin Description 1 TD + 2 TD - 3 RD + 6 RD - Serial port The system board provides a serial port on the rear of the chassis to enable out-of-band management.
PAGE 80
Appendix A Technical specifications Figure 28 Serial cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 Pin 1 Pin 13 Pin 14 Pin 25 9-position D-sub receptacle with screw locks (ground shield connected to backshell) 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A Table 20 provides the multiple DB9/DB25 serial interface cable pinouts.
PAGE 81
Appendix A Technical specifications 81 Figure 29 Modem cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 9-position D-sub receptacle with screw locks (ground shield connected to backshell) Pin 1 Pin 13 Pin 14 Pin 25 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A Table 21 provides the modem cable pinouts.
PAGE 82
Appendix A Technical specifications • • • • • • • • • • • 1000BASE-T (1000 MT) Ethernet interface card 1000BASE-SX Ethernet interface card 56/64K CSU/DSU WAN interface card ADSL WAN interface card ISDN BRI interface card T1 CSU/DSU WAN interface card (full-height card) T1/E1 CSU/DSU WAN interface card (half-height card) Quad T1/E1 CSU/DSU WAN interface card V.90 modem interface card Single V.35/X.
PAGE 83
Appendix A Technical specifications 83 The VPN Router Security Accelerator card is the successor to the Hardware Accelerator card. The Hardware Accelerator Hifn 7811 card has been discontinued effective January 2006 although Nortel still supports this card. However, the VPN Router 2750 does not support the Hardware Accelerator card. Along with providing support for AES, the VPN Router Security Accelerator card provides increased encryption throughput and improved compression performance.
PAGE 84
Appendix A Technical specifications The SSL VPN Module 1000 is supported on VPN Router 5000, 2750, 2700, and 1750 gateways running VPN Router Version 5.0 software. You must install the SSL VPN Module 1000 in slot 1 of the VPN Router 5000, 2750, 2700, or 1750. The VPN Router gateway distinguishes between the services that it provides and the services that the SSL VPN Module 1000 provides and immediately forwards the appropriate traffic to the SSL VPN module.
PAGE 85
Appendix A Technical specifications 85 1000BASE-T (1000 GT) Ethernet interface card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card (see the previous section). This card provides 10/100/1000 Mbit/s Ethernet services and supports autonegotiation. The card supports the IEEE 802.3ab standard and provides RJ-45/CAT 5 interconnection. It can operate in either full or half duplex mode at 10/100 Mbit/s, and in full duplex mode at 1 Gbit/s. At 1 Gbit/s, autonegotiation must be used.
PAGE 86
Appendix A Technical specifications Figure 33 1000BASE-T (1000 GT) Ethernet interface card (all models except VPN Router 2750 1100) Select cables for this card as follows. Keep in mind that this card is auto-negotiating and uses the highest possible data rate: • For 1000BASE-T operation, use Category 5 four-pair Ethernet wiring. The cable must comply with the TIA 568 wiring specification. Nortel recommends a maximum length of 100 meters for the cable segment.
PAGE 87
Appendix A Technical specifications 87 1000BASE-T (1000 MT) Ethernet interface card Use the 1000BASE-T Ethernet interface card to connect to Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. This interface card has a single RJ-45 connector. Figure 34 shows the 1000BASE-T Ethernet interface card.
PAGE 88
Appendix A Technical specifications Table 23 1000BASE-T Ethernet port pinouts Pin Description 7 TP3+ 8 TP3- 1000BASE-SX Ethernet interface card The 1000BASE-SX Ethernet interface card implements short-wavelength (850 nm) laser transmissions. Use this interface card to connect to fiber Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. The 1000BASE-SX Ethernet interface card has a single type LC fiber connector.
PAGE 89
Appendix A Technical specifications 89 56/64K CSU/DSU WAN interface card The 56/64K CSU/DSU WAN interface card has a single RJ-48 connector that provides the signals needed to interface to network equipment. Figure 36 shows the 56/64K CSU/DSU WAN interface card. Figure 36 56/64K CSU/DSU WAN interface card 56/64K DDS The connector on the 56/64K CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord.
PAGE 90
Appendix A Technical specifications Table 24 provides the 56/64K CSU/DSU cable pinouts for a crossover connection.
PAGE 91
Appendix A Technical specifications 91 ADSL WAN interface card The ADSL Annex A and Annex B WAN interface cards have a single RJ-11 connector that provides the signals needed to interface to the ADSL-provisioned telephone line. Figure 37 shows the ADSL WAN interface card. Note: The ADSL Annex A and ADSL Annex B cards look identical. Figure 37 ADSL WAN interface card ADSL RX/TX CONN Included in the accessory box with the ADSL WAN interface card is a 7-foot cable to attach to the DSLAM.
PAGE 92
Appendix A Technical specifications Table 27 provides the pinouts for the ADSL Annex B cable. Table 27 ADSL Annex B cable pinouts RJ-11 termination RJ-45 termination Signal Pin # to Pin # Signal N/C 1 6 N/C Tip 2 5 Tip Ring 3 4 Ring N/C 4 3 N/C ISDN BRI interface card The ISDN BRI S/T and ISDN BRI U interface cards have a single RJ-45 connector that provides the signals needed to interface to ISDN equipment.
PAGE 93
Appendix A Technical specifications 93 Table 28 provides the ISDN BRI S/T cable pinouts. Table 28 ISDN BRI S/T cable pinouts Pin Function 1 N/C 2 N/C 3 Receive + 4 Transmit + 5 Transmit - 6 Receive - 7 N/C 8 N/C Table 29 provides the ISDN BRI U cable pinouts.
PAGE 94
Appendix A Technical specifications T1/E1 CSU/DSU WAN interface card The T1/E1 CSU/DSU WAN interface card has a single connector that provides the signals needed to interface to T1 or E1 equipment. This interface card ships as a half-height card and as a full-height card. Figure 39 shows the T1/E1 CSU/DSU WAN interface card (half-height card).
PAGE 95
Appendix A Technical specifications 95 You connect the T1/E1 CSU/DSU WAN interface card to the service provider network using a straight-through cable or a crossover cable, depending on how the service provider wired its jack. • • For a straight-through connection, you can use a standard Category 5 (Ethernet) straight-through cable. For a crossover connection, you cannot use a standard Category 5 crossover cable. Do not interchange the T1/E1 CSU/DSU crossover cable and the Ethernet crossover cable.
PAGE 96
Appendix A Technical specifications Table 31 provides the T1/E1 CSU/DSU cable pinouts for a straight-through connection.
PAGE 97
Appendix A Technical specifications 97 Use cable that is wired in accordance with EIA-568-A wiring style. This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal (pins 4 and 5) and the receive signal (pins 1 and 2). Nortel strongly recommends that you use professionally manufactured patch cords.
PAGE 98
Appendix A Technical specifications Table 32 provides the V.90 modem port cable pinouts. Table 32 V.90 modem cable pinouts Pin Function 1 N/C 2 Tip 3 Ring 4 N/C Single V.35/X.21 WAN interface card The single V.35/X.21 WAN interface card has a single DB28S connector that provides the signals needed to interface to V.35 and X.21 equipment. Figure 43 on page 98 shows the single V.35/X.21 WAN interface card. Figure 43 Single V.35/X.
PAGE 99
Appendix A Technical specifications 99 Table 33 V.
PAGE 100
Appendix A Technical specifications 3. At each end, the cable shield and connector shell must connect respectively to pin A of the 34-pin connector and pin 1 of the standard 28-pin connector. 4. Do not connect Shield to Signal Ground because these are separate signals. Table 34 provides the X.21 cable pinouts. (The pair suffix A or B refers to an individual wire within a twisted pair.) Table 34 X.
PAGE 101
Appendix A Technical specifications 101 Table 34 X.21 cable pinouts (continued) Standard-wired end 28-pin male Signal name Pair number and conductor Standard-wired end 15-pin male Notes 28 M2<-SIGNAL GROUND pair 13B 8 Note 3 1 SHIELD pair 14A 1 Note 4,5 7 SIGNAL GROUND pair 14B 8 Note 3,5 The following notes apply to the single X.21 cable: 1. Wires of pair 4 connect to wires of pair 5, but not to any pins in the DA-15. 2.
PAGE 102
Appendix A Technical specifications Table 35 T3 cable pinouts (continued) 50-pin SCSI male Signal name 50-pin SCSI male 4 RDB 4 5 LCB 5 6 STB 6 7 GND 7 8 TAB 8 9 TTB 9 10 LAB 10 11 TDB 11 12 LBB 12 13 GND 13 19 GND 19 24 TESTB 24 25 GND 25 26 GND 26 27 RCA 27 28 CAA 28 29 RDA 29 30 LCA 30 31 STA 31 32 GND 32 33 TAA 33 34 TTA 34 35 LAA 35 36 TDA 36 37 LBA 37 38 GND 38 44 GND 44 49 TESTA 49 50 GND 50 NN46110-318 02.
PAGE 103
Index Numerics requirements 38 accessories, hardware, shipped with the gateway 27 10/100BASE-TX Ethernet interface card 84 cable specifications 78 connector 78 described 84 LEDs 42 acronyms 22 ADSL WAN interface card cable pinouts, Annex A 91 cable pinouts, Annex B 92 connector 91 described 91 LEDs 47 10/100BASE-TX system LAN ports cable specifications 78 connector 78 LEDs 41 antistatic wrist strap, attaching 67 1000BASE-SX Ethernet interface card cable specifications 88 connector 88 described 88
PAGE 104
Index quad T1/E1 CSU/DSU WAN interface 97 serial interface 79 single V.35/X.21 WAN interface 98 T1/E1 CSU/DSU WAN interface 94 V.
PAGE 105
Index 105 specifications 81 See also VPN Router Security Accelerator card, Ethernet interface cards, Hardware Accelerator card, serial interface cards, SSL VPN Module card, WAN interface cards help by phone 18 latest Web updates 17 Nortel Web site 17 through Nortel distributor 18, 19 using Express Routing Code 18 help, How to get 17 HSSI WAN interface card cable pinouts 101 connector 101 I installing DIMMs 72 installing the chassis in an equipment rack 30 on a flat surface 29 prerequisites 26 interfaces, o
PAGE 106
Index O Q option cards specifications 81 See also VPN Router Security Accelerator card (CSA), Ethernet interface cards, Hardware Accelerator card, serial interface cards, SSL VPN Module card, WAN interface cards quad T1/E1 CSU/DSU WAN interface card cable pinouts 95 connector 96 described 96 LEDs 49 option cards, installing VPN Router 2750 68 R P rack-mount considerations 30 physical specifications 77 pinouts 10/100BASE-TX Ethernet connector 78 1000BASE-SX Ethernet interface 88 1000BASE-T Ether
PAGE 107
Index 107 serial port 79 system ports 78 SSL VPN Module 1000 described 83 LEDs 51 subnet mask, defined 54 system LAN ports cable specifications 78 connector 78 LEDs 41 system ports, specifications 78 T T1/E1 CSU/DSU WAN interface card cable pinouts 95 connector 94 LEDs 48 T3 HSSI WAN interface card.
PAGE 108
Index X X.21 WAN interface card. See single V.35/X.21 WAN interface card NN46110-318 02.