VPN Router Installation Guide

ManualsBrandsNortel Networks ManualsNetwork CardNortel Contivity Secure IP Services Gateway 2700

Version 7.05.300

NN46110-311 02.01

314708-F Rev 01

November 2007

Standard

600 Technology Park Drive

Billerica, MA 01821-4130

Nortel VPN Router Installation

— VPN Router 2700

Summary of content (108 pages)

PAGE 1
Version 7.05.300 NN46110-311 02.
PAGE 2
Copyright © 2007 Nortel Networks. All rights reserved. The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty. Users must take full responsibility for their applications of any products specified in this document. The information in this document is proprietary to Nortel Networks Inc.
PAGE 3
Warning: This is a Class A product. In a domestic environment, this product may cause radio interference, in which case, the user may be required to take appropriate measures. Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenmaßnahmen verantwortlich ist. Attention: Ceci est un produit de Classe A.
PAGE 4
Canada requirements only Canadian Department of Communications Radio Interference Regulations This digital apparatus (VPN Router 2700) does not exceed the Class A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
PAGE 5
provide support of any kind for the Software. Some jurisdictions do not allow exclusion of implied warranties, and, in such event, the above exclusions may not apply. 3. Limitation of Remedies.
PAGE 6
NN46110-311 02.
PAGE 7
Contents New in this release. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 1000BASE-T (1000 GT) Ethernet card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
Contents Installing the chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Installing the chassis on a flat surface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Installing the chassis in an equipment rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Rack-mount recommendations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Attaching the shelf in the equipment rack . . . . . .
PAGE 9
Contents 9 Chapter 4 Installing option cards and DIMMs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Shutting down the system to add or replace hardware . . . . . . . . . . . . . . . . . . . . . . . . 60 Removing the front bezel and top cover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Attaching the antistatic wrist strap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Installing and replacing option cards . . . . . . . . .
PAGE 10
Contents NN46110-311 02.
PAGE 11
Figures Figure 1 Front view of the VPN Router 2700 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Figure 2 Placement of rubber feet on the bottom of the chassis . . . . . . . . . . . . . . 29 Figure 3 Attaching the cage nuts to the rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Figure 4 Installing the shelf in the equipment rack . . . . . . . . . . . . . . . . . . . . . . . . . 31 Figure 5 Removing the front bezel . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 12
Figures Figure 30 VPN Router Security Accelerator card . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Figure 31 SSL VPN Module 1000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Figure 32 10/100BASE-TX Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . 82 Figure 33 1000BASE-T (1000 GT) Ethernet interface card . . . . . . . . . . . . . . . . . . . 84 Figure 34 1000BASE-T (1000 MT) Ethernet interface card . . . . . . . . . . . .
PAGE 13
Tables Table 1 Items shipped with the VPN Router 2700 . . . . . . . . . . . . . . . . . . . . . . . . . 27 Table 2 Interfaces and cables for the VPN Router 2700 . . . . . . . . . . . . . . . . . . . . 36 Table 3 Power cord requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Table 4 Front panel LED indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Table 5 LED indicators on the system 10/100BASE-TX Ethernet port . . . . . .
PAGE 14
Tables Table 30 T1/E1 CSU/DSU cable pinouts for straight-through connection . . . . . . . . 94 Table 31 V.90 modem cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Table 32 V.35 cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Table 33 X.21 cable pinouts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Table 34 T3 cable pinouts . . . . . . . . . . . . . . . . . . . .
PAGE 15
New in this release The following section details what’s new in Nortel VPN Router Installation— VPN Router 2700 (NN46110-311) for Release 7.05.300: Features See the following section for information about feature changes: 1000BASE-T (1000 GT) Ethernet card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card. See “1000BASE-T (1000 GT) Ethernet interface card” on page 83 and “1000BASE-T (1000 GT) Ethernet interface card LEDs” on page 42.
PAGE 16
New in this release NN46110-311 02.
PAGE 17
How to get help This chapter explains how to get help for Nortel products and services. Finding the latest updates on the Nortel Web site The content of this documentation was current at the time the product was released. To check for updates to the latest documentation and software for VPN Router 2700, go to: www.nortel.com/support Select Security & VPN and then, in the section called Virtual Private Networking (VPN), IPSEC, and SSL, click the appropriate VPN Router product.
PAGE 18
How to get help This site provides quick access to software, documentation, bulletins, and tools to address issues with Nortel products.
PAGE 19
How to get help 19 Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller.
PAGE 20
How to get help NN46110-311 02.
PAGE 21
Preface The VPN Router 2700 is part of the Nortel VPN Router product family. Nortel VPN Router 2700 supports secure, reliable IP VPNs in a single, integrated hardware device. Throughout this guide, the VPN Router 2700 is also referred to as the gateway. This guide provides instructions about how to install the VPN Router 2700 in an equipment rack and how to install and replace option cards and dual inline memory modules (DIMM).
PAGE 22
Preface Text conventions This guide uses the following text conventions: bold Courier text Indicates command names and options and text that you need to enter. Example: Use the show health command. Example: Enter terminal paging {off | on}. italic text Indicates new terms and book titles. plain Courier text Indicates system output, for example, prompts and system messages. Example: File not found. separator ( > ) Shows menu paths. Example: Choose Status > Health Check.
PAGE 23
Preface LED light emitting diode LOS loss of signal OOF out of frame PCI peripheral component interconnect RoHS Restriction of Use of Certain Hazardous Substances SSL Secure Sockets Layer VPN virtual private network WAN wide area network 23 Related publications For complete information about configuring, monitoring, and managing the VPN Router 2700, formerly known as the Contivity Secure IP Services Gateway 2700, refer to the following publications (included on the software CD): • • • •
PAGE 24
Preface • • • • • Nortel VPN Router Configuration — Routing (NN46110-504) provides instructions for configuring RIP, OSPF, and VRRP, as well as instructions for configuring ECMP, routing policy services, and client address redistribution. Nortel VPN Router Configuration — SSL VPN Services (NN46110-501) provides instructions for configuring services on the SSL VPN Module 1000, including authentication, networks, user groups, and portal links.
PAGE 25
Chapter 1 Installing the Nortel VPN Router 2700 chassis This chapter describes how to install the VPN Router 2700 chassis. Note: Before you install the chassis, use standard cable system practices to install all the network wiring on the premises.
PAGE 26
Chapter 1 Installing the Nortel VPN Router 2700 chassis Figure 1 shows the front view of the VPN Router 2700.
PAGE 27
Chapter 1 Installing the Nortel VPN Router 2700 chassis 27 Shipment contents In addition to the gateway and this guide, the shipping container for the VPN Router 2700 contains a number of hardware accessories and other items. Note: Nortel does not ship a power cord with the VPN Router 2750 unless you order one. Table 1 lists the hardware accessories and other items shipped with the VPN Router 2700.
PAGE 28
Chapter 1 Installing the Nortel VPN Router 2700 chassis Additional equipment You need items that are not included in the VPN Router 2700 shipping container. Before you begin the installation, ensure that you have all the cables, tools, and other equipment that you need. Cables You need cables that are not included in the VPN Router 2700 shipping container. For information about which cables are shipped and which ones you can order, see “Connecting communications cables” on page 36.
PAGE 29
Chapter 1 Installing the Nortel VPN Router 2700 chassis 29 Installing the chassis To install the VPN Router 2700, do one of the following: • • Position the chassis on a flat, sturdy, horizontal surface. Mount the chassis in a standard equipment rack (see “Installing the chassis in an equipment rack” on page 30).
PAGE 30
Chapter 1 Installing the Nortel VPN Router 2700 chassis Installing the chassis in an equipment rack To mount the VPN Router 2700 in an equipment rack, you need the following equipment: • • • • a standard 19-inch equipment rack four screws (supplied with the chassis) four cage nuts (supplied with the chassis) if the rack does not have threaded rail holes a #2 Phillips screwdriver Rack-mount recommendations When you mount the chassis in the rack, observe the following standard recommendations: • • • • •
PAGE 31
Chapter 1 Installing the Nortel VPN Router 2700 chassis 31 Figure 3 Attaching the cage nuts to the rack Rail without threaded holes Cage nut CS260003A 2 Position the rack-mount shelf inside the rack as shown in Figure 4. 3 Align the holes in the shelf with holes in the front of the rack. Figure 4 Installing the shelf in the equipment rack Rack edge Flange CS260003A 4 Ensure that the support flange snaps into place (Figure 4).
PAGE 32
Chapter 1 Installing the Nortel VPN Router 2700 chassis Mounting the chassis in the equipment rack Nortel recommends that two people install the chassis in the rack. To install the VPN Router 2700 in the equipment rack: 1 Set the VPN Router 2700 on the rack-mount shelf. 2 Remove the front bezel from the VPN Router 2700 (Figure 5). a Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise.
PAGE 33
Chapter 1 Installing the Nortel VPN Router 2700 chassis 33 3 Insert one of the supplied panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws (Figure 4 on page 31). 4 Replace the front bezel (Figure 6). a Hold the two handles on the bezel, and push it onto the chassis. b Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis.
PAGE 34
Chapter 1 Installing the Nortel VPN Router 2700 chassis NN46110-311 02.
PAGE 35
Chapter 2 Cabling the VPN Router and turning the power on This chapter provides information about how to connect communications cables and the power cord to the VPN Router 2700. Caution: Connect the cables to the built-in Ethernet port and to the interfaces on the option cards that are installed in the VPN Router 2700 before you plug the power cord into the outlet.
PAGE 36
Chapter 2 Cabling the VPN Router and turning the power on Connecting communications cables Gather the cables that you must attach to the VPN Router 2700. Table 2 lists the system ports and the ports provided on the optional interface cards that you can install in the VPN Router 2700. The table also indicates whether you can obtain cables for the ports from Nortel.
PAGE 37
Chapter 2 Cabling the VPN Router and turning the power on 37 Figure 7 shows the back of the VPN Router 2700. All interface cables and the power cord attach to the rear of the gateway. Figure 7 Rear view of the VPN Router 2700 Power Reset LAN 100-2240VAC 2-1A 50-60Hz Serial 1 2 3 4 CS260002A Connect the interface cables to the VPN Router 2700 in this order: 1 Connect the 10/100BASE-TX RJ-45 cable to the built-in 10/100BASE-TX Ethernet LAN port on the gateway (Figure 7).
PAGE 38
Chapter 2 Cabling the VPN Router and turning the power on Connecting the power cord You must order the power cord for the VPN Router 2700 separately. Caution: Risk of equipment damage Do not modify or use the AC power cord if it is not the exact type that is required for your power outlet. The power cord must meet the requirements described in Table 3.
PAGE 39
Chapter 2 Cabling the VPN Router and turning the power on 39 Verifying a successful installation After you connect the gateway to the power source and turn it on, you can verify a successful installation by checking the LEDs on the front panel (Figure 8 on page 40). The following sequence of LEDs occurs: 1 The power LED (the Nortel Networks logo) lights blue. 2 As the gateway boots, the Boot/Ready LED lights yellow.
PAGE 40
Chapter 2 Cabling the VPN Router and turning the power on Understanding the LEDs This section describes the LEDs on the front panel of the VPN Router 2700 and on the interface cards that have LEDs. You can confirm that the LAN and WAN interfaces are cabled properly by examining the LEDs. Front panel LEDs The front panel of the VPN Router 2700 has a lighted Nortel Networks logo and two LEDs (Figure 8). These LEDs indicate the status of the VPN Router 2700.
PAGE 41
Chapter 2 Cabling the VPN Router and turning the power on 41 LEDs on the system 10/100BASE-TX Ethernet port Figure 9 shows the LEDs for the 10/100BASE-TX Ethernet port located on the rear of the VPN Router 2700. Figure 9 LEDs on the system LAN port Yellow Green CS260011A Table 5 describes the LEDs on the system 10/100BASE-TX Ethernet port. Table 5 LED indicators on the system 10/100BASE-TX Ethernet port LED Indicator Description Green On The LAN port is operating at 100 Mb/s.
PAGE 42
Chapter 2 Cabling the VPN Router and turning the power on 10/100BASE-TX Ethernet interface card LEDs Figure 10 shows the LEDs on the 10/100BASE-TX Ethernet interface card. 100TX DATA ACT/LINK Figure 10 LEDs on the 10/100BASE-TX Ethernet interface card Activity/Link 10/100 Mb/s CS260009A Table 6 describes the LEDs on the 10/100BASE-TX Ethernet interface card.
PAGE 43
Chapter 2 Cabling the VPN Router and turning the power on 43 The following table describes the LEDs on the 1000BASE-T (1000 GT) Ethernet interface card. Table 7 LED indicators on the 1000BASE-T (1000 GT) Ethernet interface card LED Indicator Description ACT/LINK Steady green The port is connected to a valid link partner. Flashing green The card is sending or receiving network data. The frequency of the flashes increases with increased traffic. Off The card is not sending or receiving data.
PAGE 44
Chapter 2 Cabling the VPN Router and turning the power on Table 8 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card LED Indicator Description 10/100/1000 Off The LAN port is operating at 10 Mb/s. Green The LAN port is operating at 100 Mb/s. Orange The LAN port is operating at 1000 Mb/s. 1000BASE-SX Ethernet interface card LED Figure 13 shows the LED on the 1000BASE-SX Ethernet interface card.
PAGE 45
Chapter 2 Cabling the VPN Router and turning the power on 45 56/64K CSU/DSU WAN interface card LEDs Figure 14 shows the LEDs on the 56/64K CSU/DSU WAN interface card. Figure 14 LEDs on the 56/64K CSU/DSU WAN interface card Blue LED Red LED 56/64K DDS Green LED Yellow LED Table 10 describes the LEDs on the 56/64K CSU/DSU WAN interface card.
PAGE 46
Chapter 2 Cabling the VPN Router and turning the power on ADSL WAN interface card LEDs Figure 15 shows the LEDs on the ADSL WAN interface card. Figure 15 LEDs on the ADSL WAN interface card RX/TX LED RX/TX ADSL CONN CONN LED Table 11 describes the LEDs on the ADSL WAN interface card. Table 11 LED indicators on the ADSL WAN interface card CONN LED Tx/Rx LED Description Steady green Steady green The ADSL interface card is not initialized; the software driver is not installed.
PAGE 47
Chapter 2 Cabling the VPN Router and turning the power on 47 T1/E1 CSU/DSU WAN interface card LEDs Figure 16 shows the LEDs on the T1/E1 CSU/DSU WAN interface card. Figure 16 LEDs on the T1/E1 CSU/DSU WAN interface card LED 1, Red LED 2, Blue LED 4, Green LED 3, Yellow CS160012A Table 12 describes the LEDs on the T1/E1 CSU/DSU WAN interface card.
PAGE 48
Chapter 2 Cabling the VPN Router and turning the power on Quad T1/E1 CSU/DSU WAN interface card LEDs Figure 17 shows the LEDs on the quad T1/E1 CSU/DSU WAN interface card. Figure 17 LEDs on the quad T1/E1 CSU/DSU WAN interface card LED 1 LED 2 LED 3 LED 4 CS160012A Table 13 describes the LEDs on the quad T1/E1 CSU/DSU WAN interface card. Table 13 LED indicators on the quad T1/E1 CSU/DSU WAN interface card LED Indicator Description LED 1 Off Port 1 is disabled.
PAGE 49
Chapter 2 Cabling the VPN Router and turning the power on 49 Single V.35/X.21 WAN interface card LEDs Figure 18 shows the LEDs on the single V.35/X.21 WAN interface card. Figure 18 LEDs on the single V.35/X.21 WAN interface card LED 1, Red LED 2, Green LED 4, Green LED 3, Green Table 14 describes the LEDs on the single V.35/X.21 WAN interface card. Table 14 LED indicators on the single V.35/X.21 WAN interface card LED Indicator Description LED 1 Red No external transmit clock source is available.
PAGE 50
Chapter 2 Cabling the VPN Router and turning the power on SSL VPN Module 1000 LEDs Figure 19 shows the LEDs on the SSL VPN Module 1000. Figure 19 LEDs on the SSL VPN Module 1000 Utilization 1 Online 2 - Activity 11356EA Table 15 describes the LEDs on the SSL VPN Module 1000. Table 15 LED indicators on the SSL VPN Module 1000 LEDs Indicator Description Online Steady green The SSL VPN Module 1000 is operating normally. Yellow A reset occurred on the SSL VPN Module 1000.
PAGE 51
Chapter 3 Configuring the management IP interface This chapter describes how to configure a management IP address, subnet mask, and default gateway address on a newly installed VPN Router 2700. After you complete the procedures in this chapter, you can configure and manage the VPN Router 2700 using a Web browser from a PC. To configure the management IP address, you use the serial interface configuration menu. You must connect a PC or terminal to the serial port on the VPN Router 2700.
PAGE 52
Chapter 3 Configuring the management IP interface Required information Before you configure the management interface, collect this information: • IP address for the management interface The management IP address must be accessible from one of the private physical interfaces on the VPN Router 2700. For example, if you plan to assign IP address 10.2.3.3 with subnet mask 255.255.0.0 to the private physical interface, the management IP address must reside in the 10.2 network.
PAGE 53
Chapter 3 Configuring the management IP interface 53 Configuring the management IP address You use the serial interface to assign the VPN Router 2700 a management IP address and subnet mask so that you can then use a Web browser for management. To configure the management IP address using the serial interface: 1 Turn on the terminal or PC.
PAGE 54
Chapter 3 Configuring the management IP interface The serial main menu appears. Main Menu: System is currently in NORMAL mode.
PAGE 55
Chapter 3 Configuring the management IP interface 55 6 Type 0, and press Enter to configure the IP address. The IP address prompt appears. 0) Slot 0, Port 2, Public LAN IP Address = Subnet Mask = 0.0.0.0 Speed/Duplex = AutoNegotiate *Type 0.0.0.0 to delete. *Just type to skip. Old IP address = New IP address = 7 Type a new IP address, and press Enter. The subnet mask prompt appears. Old Subnet Mask = 0.0.0.
PAGE 56
Chapter 3 Configuring the management IP interface Type R, and press Enter to return to the serial main menu. 10 To configure the management IP address, type 0 and press Enter. The Management IP Address menu appears. - Management IP Address Menu M) Management IP Address = R) Return to the Main Menu Please select a menu choice (M,R): 11 Type M, and press Enter. The Management IP Address prompt appears. *Type 0.0.0.0 to delete. *Just type to skip.
PAGE 57
Chapter 3 Configuring the management IP interface 57 For detailed information about configuring and managing the VPN Router 2700, refer to the documentation on the VPN Router software CD. Testing the configuration After you assign a management IP address to the VPN Router 2700, start your Web browser to verify that you can access the gateway from the browser.
PAGE 58
Chapter 3 Configuring the management IP interface 3 Go to Nortel VPN Router Configuration — Basic Features (NN46110-500) for information about configuring the VPN Router 2700. Troubleshooting If you cannot connect to the VPN Router 2700 using your browser, check the following items: • • • • • Ensure that you entered the correct IP address in the browser window. Type a known URL in the browser window to make sure that your network connection is good.
PAGE 59
Chapter 4 Installing option cards and DIMMs This chapter provides instructions on how to install and replace the following field replaceable units (FRU) in the VPN Router 2700: • • • • LAN, WAN, and serial interface cards SSL VPN Module 1000 VPN Accelerator cards (VPN Router Security Accelerator card and Hardware Accelerator card) Dual inline memory modules (DIMM) This chapter contains the following topics: Topic Page Shutting down the system to add or replace hardware 60 Removing the front bezel
PAGE 60
Chapter 4 Installing option cards and DIMMs Shutting down the system to add or replace hardware To install or replace an option card or a DIMM, you must first shut down the VPN Router 2700 and unplug it. Warning: Risk of electric shock Shut down the VPN Router 2700 as described in this section before you attempt to add or replace an option card or DIMM. To shut down the VPN Router 2700: 1 Use the Web GUI or the command line interface (CLI) to shut down the gateway.
PAGE 61
Chapter 4 Installing option cards and DIMMs 61 Removing the front bezel and top cover To install option cards or DIMMs, you must remove the front bezel and the top cover from the gateway. To remove the front bezel: 1 Shut down the VPN Router 2700 using the Web GUI or the CLI and then unplug it as described in “Shutting down the system to add or replace hardware” on page 60.
PAGE 62
Chapter 4 Installing option cards and DIMMs The first several times that you remove the front bezel, the bezel can stick because the ball studs and socket clips are new. To remove the top cover: 1 2 If the gateway is in an equipment rack, remove it from the rack. a At the front of the chassis, remove the two panhead screws that secure the bottom of the chassis to the equipment rack. b Remove the VPN Router 2700 from the rack-mount shelf, and set it on a sturdy surface.
PAGE 63
Chapter 4 Installing option cards and DIMMs 63 4 Lift the lid 2 or 3 inches, and pull it off the chassis. The VPN Router 2700 system board is now exposed. Figure 22 shows the location of the option card slots and the DIMMs on the system board. Figure 22 Location of option card slots and DIMMs on the system board DIMMs 1 2 4 option card slots 1 2 3 4 CS260008A Warning: Risk of injury Beware of danger if you incorrectly replace the battery.
PAGE 64
Chapter 4 Installing option cards and DIMMs Attaching the antistatic wrist strap Nortel ships the VPN Router 2700 with an antistatic wrist strap. The antistatic wrist strap directs the discharge of static electricity from your body to the chassis of the gateway to avoid damage to sensitive electronic components. You must wear an antistatic wrist strap on your arm when you remove, install, or handle option cards and DIMMs. Caution: Risk of equipment damage Electrostatic discharge can damage hardware.
PAGE 65
Chapter 4 Installing option cards and DIMMs 65 Installing and replacing option cards The VPN Router 2700 has four slots for option cards (Figure 22 on page 63). This section provides instructions on adding new option cards to the VPN Router 2700 or, if necessary, replacing an existing card. Table 16 lists the option cards that you can install in the VPN Router 2700.. Note: The 1000BASE-T (1000 GT) Ethernet interface card only operates at 10/100 Mbit/s on the VPN Router 2600.
PAGE 66
Chapter 4 Installing option cards and DIMMs Table 16 Supported option cards for the 2600 and 2700 Maximum number Option card V.90 modem interface 4 Single V.35/X.21 WAN interface (full-height) 4 Single V.35/X.21 WAN interface (half-height)8 4 HSSI WAN interface9 2 1 2 3 4 5 6 7 8 9 Restrictions If an SSL VPN Module 1000 is in slot 1, do not install the V.90 modem interface card in slot 2. Do not install in slot 4; install in slot 3 or 1 if possible.
PAGE 67
Chapter 4 Installing option cards and DIMMs 67 Table 17 Installing other option cards with the SSL VPN Module 1000 (continued) Option card Restrictions with SSL VPN Module 1000 installed 1000BASE-T or 1000BASE-SX interface You can install two cards only if none of these cards is installed: • VPN Router Security Accelerator • Hardware Accelerator • HSSI If a VPN Router Security Accelerator, Hardware Accelerator, or HSSI card is installed, only one 1000BASE-T (1000 MT) or 1000BASE-SX card can be installed.
PAGE 68
Chapter 4 Installing option cards and DIMMs 6 Remove the filler panel screw, and pull out the filler panel (or the option card that you are replacing) from the slot (Figure 24). Figure 24 Installing and removing an option card Rear of unit Filler panel screw Option card Motherboard Option card slots CS2600017A 7 Lower the new option card into the slot, and gently press the connector into the slot. Seat the card firmly in the slot. If you do not seat the card properly, it does not work.
PAGE 69
Chapter 4 Installing option cards and DIMMs 69 b Insert the four screws that secure the cover to the chassis, and use a screwdriver to tighten them. 10 Do the following to mount the VPN Router 2700 in an equipment rack: a Set the VPN Router 2700 on the rack-mount shelf in the rack. b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws. 11 Replace the front bezel (Figure 25).
PAGE 70
Chapter 4 Installing option cards and DIMMs Installing and replacing DIMMs The VPN Router 2700 has two slots for dual inline memory modules (DIMMs) (Figure 22 on page 63). Unless you ordered additional memory, Nortelships the VPN Router 2700 with one 256 MB DIMM installed. You can upgrade memory in the gateway by installing a second 256 MB DIMM. Caution: Use of a memory module not purchased from Nortel can render void your warranty or your service contract.
PAGE 71
Chapter 4 Installing option cards and DIMMs 71 4 Attach the antistatic wrist strap that was shipped with the VPN Router 2700 (see “Attaching the antistatic wrist strap” on page 64). Caution: Risk of equipment damage Electrostatic discharge can damage VPN Router 2700 components. 5 To replace a DIMM, remove the installed DIMM as follows: a Press down the locking lever on either side of the DIMM (Figure 26 on page 72). b Pull the DIMM up to remove it from the slot.
PAGE 72
Chapter 4 Installing option cards and DIMMs Figure 26 Installing and removing a DIMM Alignment keys To remove DIMMs, pull back locking levers and pull out DIMM. To install DIMMs, pull back locking levers and push in DIMM. Locking lever 10 Replace the top cover on the chassis (Figure 21 on page 62). a Hold the cover at an angle, and slide it onto the chassis. b Insert the four screws that secure the cover to the chassis, and use a screwdriver to tighten the screws.
PAGE 73
Chapter 4 Installing option cards and DIMMs 73 12 Replace the front bezel (Figure 25 on page 69). a Hold the bezel by the two handles, and push it onto the chassis. b Use the screwdriver to tighten the two screws that secure the bezel to the chassis.
PAGE 74
Chapter 4 Installing option cards and DIMMs NN46110-311 02.
PAGE 75
Appendix A Technical specifications This appendix provides technical specifications for the VPN Router 2700 chassis and the VPN Router 2700 interfaces. Chassis specifications Table 18 lists physical, electrical, and environmental specifications for the chassis. Table 18 Physical, electrical, and environmental specifications Specification Description Physical Height 5.25 in. (13.335 cm) Width 17 in. (43.18 cm) Depth 21 in. (53.34 cm) Weight 28 lbs. (12.
PAGE 76
Appendix A Technical specifications Table 18 Physical, electrical, and environmental specifications (continued) Specification Description Operating altitude 7000 ft (2133.6 m) maximum Storage altitude 40,000 ft (12,192 m) maximum System ports The VPN Router 2700 system board provides the following built-in interfaces: • • 10/100BASE-TX Ethernet LAN port serial port This section provides information about the 10/100BASE-TX Ethernet LAN port and the serial port on the system board.
PAGE 77
Appendix A Technical specifications 77 Figure 27 10/100BASE-TX Ethernet connector RD+RD- TD+ TD12345678 CS260010A Table 19 provides the 10/100BASE-TX Ethernet port pinouts. Table 19 10/100BASE-TX Ethernet port pinouts Pin Description 1 RD + 2 RD - 3 TD + 6 TD - Serial port The system board provides a serial port on the rear of the chassis to enable out-of-band management.
PAGE 78
Appendix A Technical specifications Figure 28 Serial cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 Pin 1 Pin 13 Pin 14 Pin 25 9-position D-sub receptacle with screw locks (ground shield connected to backshell) 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A Table 20 provides the multiple DB9/DB25 serial interface cable pinouts.
PAGE 79
Appendix A Technical specifications 79 Figure 29 Modem cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 9-position D-sub receptacle with screw locks (ground shield connected to backshell) Pin 1 Pin 13 Pin 14 Pin 25 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A Table 21 provides the modem cable pinouts.
PAGE 80
Appendix A Technical specifications • • • • • • • • • • • • 10/100/1000BASE-X Ethernet interface card (RoHS-compliant) 1000BASE-T Ethernet interface card 1000BASE-SX Ethernet interface card 56/64K CSU/DSU WAN interface card ADSL WAN interface card ISDN BRI interface card T1 CSU/DSU WAN interface card (full-height card) T1/E1 CSU/DSU WAN interface card (half-height card) Quad T1/E1 CSU/DSU WAN interface card V.90 modem interface card Single V.35/X.
PAGE 81
Appendix A Technical specifications 81 The VPN Router Security Accelerator card is the successor to the Hardware Accelerator card. The Hardware Accelerator Hifn 7811 card has been discontinued effective January 2006 although Nortel still supports this card. Along with providing support for AES, the VPN Router Security Accelerator card provides increased encryption throughput and improved compression performance. Note: The VPN Router card has one green LED; the Hardware Accelerator card has no LEDs.
PAGE 82
Appendix A Technical specifications The SSL VPN Module 1000 is supported on the VPN Router 5000, 2700, 2750, and 1740 gateways running VPN Router Version 5.0 software. You must install the SSL VPN Module 1000 in slot 1 of the VPN Router 5000, 2700, 2750, or 1740. The Nortel VPN Router distinguishes between the services that it provides and the services that the SSL VPN Module 1000 provides and immediately forwards the appropriate traffic to the SSL VPN module.
PAGE 83
Appendix A Technical specifications 83 1000BASE-T (1000 GT) Ethernet interface card The 1000BASE-T (1000 GT) Ethernet card replaces the 10/100BASE-TX Ethernet card (see the previous section). This card provides 10/100/1000 Mbit/s Ethernet services and supports autonegotiation. The card supports the IEEE 802.3ab standard and provides RJ-45/CAT 5 interconnection. It can operate in either full or half duplex mode at 10/100 Mbit/s, and in full duplex mode at 1 Gbit/s. At 1 Gbit/s, autonegotiation must be used.
PAGE 84
Appendix A Technical specifications Figure 33 1000BASE-T (1000 GT) Ethernet interface card Select cables for this card as follows. Keep in mind that this card is auto-negotiating and uses the highest possible data rate: • For 1000BASE-T operation, use Category 5 four-pair Ethernet wiring. The cable must comply with the TIA 568 wiring specification. Nortel recommends a maximum length of 100 meters for the cable segment.
PAGE 85
Appendix A Technical specifications 85 1000BASE-T (1000 MT) Ethernet interface card Use the 1000BASE-T (1000 MT) Ethernet interface card to connect to Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. This interface card has a single RJ-45 connector. Figure 34 shows the 1000BASE-T Ethernet interface card.
PAGE 86
Appendix A Technical specifications Table 23 1000BASE-T (1000 MT)Ethernet port pinouts NN46110-311 02.
PAGE 87
Appendix A Technical specifications 87 1000BASE-SX Ethernet interface card The 1000BASE-SX Ethernet interface card implements short-wavelength (850 nm) laser transmissions. Use this interface card to connect to fiber Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. The 1000BASE-SX Ethernet interface card has a single type LC fiber connector. Figure 35 shows the 1000BASE-SX Ethernet interface card.
PAGE 88
Appendix A Technical specifications 56/64K CSU/DSU WAN interface card The 56/64K CSU/DSU WAN interface card has a single RJ-48 connector that provides the signals needed to interface to network equipment. Figure 36 shows the 56/64K CSU/DSU WAN interface card. Figure 36 56/64K CSU/DSU WAN interface card 56/64K DDS The connector on the 56/64K CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord. These cables are sold as Category 5, or Ethernet, cables.
PAGE 89
Appendix A Technical specifications 89 Table 24 56/64K CSU/DSU cable pinouts for crossover connection Nortel termination Remote termination Signal Pin # to Pin # Signal Transmit tip 1 7 Receive tip Transmit ring 2 8 Receive ring not used 3 3 not used not used 4 4 not used not used 5 5 not used not used 6 6 not used Receive tip 7 1 Transmit tip Receive ring 8 2 Transmit ring The cable operates properly if you do not connect pins 3, 4, 5, and 6.
PAGE 90
Appendix A Technical specifications ADSL WAN interface card The ADSL Annex A and Annex B WAN interface cards have a single RJ-11 connector that provides the signals needed to interface to the digital subscriber line access multiplexer (DSLAM) and to telephone equipment. Figure 37 shows the ADSL WAN interface card. Note: The ADSL Annex A and ADSL Annex B cards look identical.
PAGE 91
Appendix A Technical specifications 91 ISDN BRI interface card The ISDN BRI S/T and ISDN BRI U interface cards have a single RJ-45 connector that provides the signals needed to interface to ISDN equipment. (To connect the ISDN S/T interface to the ISDN network, you must attach an external NT-1 device to the RJ-45 connector.) Figure 38 shows the ISDN BRI S/T interface card or the ISDN BRI U interface card. Both interface cards look the same.
PAGE 92
Appendix A Technical specifications Table 28 provides the ISDN BRI U cable pinouts. Table 28 ISDN BRI U cable pinouts Pin Function 1 N/C 2 N/C 3 N/C 4 U interface network connection (tip) 5 U interface network connection (ring) 6 N/C 7 N/C 8 N/C T1/E1 CSU/DSU WAN interface card The T1/E1 CSU/DSU WAN interface card has a single connector that provides the signals needed to interface to T1 or E1 equipment. Nortel ships this interface card as a half-height card and as a full-height card.
PAGE 93
Appendix A Technical specifications 93 Figure 40 T1/E1 CSU/DSU WAN interface card (full-height card) CS160012A The connector on the T1/E1 CSU/DSU WAN interface accommodates an 8-pin RJ-48 modular patch cord. These cables are sold as Category 5, or Ethernet, cables. Note: Nortel does not supply the T1/E1 CSU/DSU WAN interface cable with the WAN interface card. Use cable that is wired in accordance with EIA-568-A wiring style.
PAGE 94
Appendix A Technical specifications Table 29 T1/E1 CSU/DSU cable pinouts for crossover connection (continued) Standard-wired end 8-pin male Signal name Pair number and conductor Special-wired end 8-pin male 5 TXDA->RXDA wht/blu pair 1A 1 6 not used green pair 3B 6 7 not used wht/brn pair 4A 7 8 not used brown pair 4B 8 The cable operates properly if you do not connect pins 3, 6, 7, and 8. Caution: For crossover connections, do not use Ethernet cable.
PAGE 95
Appendix A Technical specifications 95 Quad T1/E1 CSU/DSU WAN interface card The quad T1/E1 CSU/DSU WAN interface card has four connectors that provide the signals needed to interface to T1 or E1 equipment. Figure 41 shows the quad T1/E1 CSU/DSU WAN interface card. Figure 41 Quad T1/E1 CSU/DSU WAN interface card CS160012A Each connector on the quad T1/E1 CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord. These cables are sold as Category 5, or Ethernet, cables.
PAGE 96
Appendix A Technical specifications V.90 modem interface card The V.90 modem interface card has two RJ-11 connectors that provide the signals needed to interface to an incoming telephone line and to telephone equipment. Figure 42 shows the V.90 modem interface card. LINE PHONE Figure 42 V.90 modem interface card Included in the accessory box is a 7-foot RJ-11 cable to attach to a telephone jack. Table 31 provides the V.90 modem port cable pinouts. Table 31 V.
PAGE 97
Appendix A Technical specifications 97 You need a DSU/CSU (digital service unit/channel service unit) between the WAN connection and the gateway. You can order a V.35 or X.21 cable to attach to the connector. With this cable, the WAN adapter can function as DTE (data terminal equipment). Table 32 provides the V.35 cable pinouts. Table 33 on page 98 provides the X.21 cable pinouts. (The pair suffix A or B refers to an individual wire within a twisted pair.) Table 32 V.
PAGE 98
Appendix A Technical specifications Table 32 V.35 cable pinouts (continued) Standard-wired end 28-pin male Signal name Pair number and conductor Special-wired end 34-pin male 25 TM pair 12A NN 26 M0<-SIGNAL GROUND pair 12B B Note 2 27 M1<-SIGNAL GROUND pair 13A B Note 2 28 M2 pair 13B no conn Note 1 1 SHIELD pair 14A A Notes 3,4 7 SIGNAL GROUND pair 14B B Notes 2,4 Notes The following notes apply to the single V.35 DTE cable: 1.
PAGE 99
Appendix A Technical specifications 99 Table 33 X.
PAGE 100
Appendix A Technical specifications HSSI WAN interface card The HSSI WAN interface card has a 50-pin SCSI II female connector that provides the signals needed to interface to a T3 modem or modem eliminator. Figure 44 shows the HSSI WAN interface card. Figure 44 HSSI WAN interface card CS460003A Included in the accessory box is a cable that maps the T3 signals out to a 50-pin SCSI II male connector. Table 34 provides the T3 cable pinouts.
PAGE 101
Appendix A Technical specifications 101 Table 34 T3 cable pinouts (continued) 50-pin SCSI male Signal name 50-pin SCSI male 26 GND 26 27 RCA 27 28 CAA 28 29 RDA 29 30 LCA 30 31 STA 31 32 GND 32 33 TAA 33 34 TTA 34 35 LAA 35 36 TDA 36 37 LBA 37 38 GND 38 44 GND 44 49 TESTA 49 50 GND 50 Nortel VPN Router Installation — VPN Router 2700
PAGE 102
Appendix A Technical specifications NN46110-311 02.
PAGE 103
Index Numerics A 10/100BASE Ethernet interface card installing 65 AC power cord connecting 38 ordering 27 requirements 38 10/100BASE-TX Ethernet interface card cable specifications 76 connector 76 described 82 LEDs 42 accelerator cards, hardware encryption described 80 installing 65 10/100BASE-TX system LAN port cable specifications 76 connector 76 LEDs 41 accessories, hardware, shipped with the gateway 27 acronyms 22 ADSL WAN interface card cable pinouts 90 connector 90 described 90 installing
PAGE 104
Index 1000BASE-T connector 85 100BASE-TX connector 76 10BASE-T connector 76 56/64K CSU/DSU WAN interface 88 ADSL WAN interface 90 HSSI WAN interface 100 ISDN BRI interface 91 modem 78 quad T1/E1 CSU/DSU WAN interface 95 serial interface 77 single V.35/X.21 WAN interface 97 T1/E1 CSU/DSU WAN interface 93 V.
PAGE 105
Index 105 Internet Explorer, supported versions 57 Gigabit Ethernet interface cards installing 65 specifications 1000BASE-SX 87 1000BASE-T 85 IP address for managing the gateway.
PAGE 106
Index serial interface cable 77 single V.35 WAN interface 97 single X.21 WAN interface 98 T1/E1 CSU/DSU WAN interface 93 V.
PAGE 107
Index 107 serial interface cards installing 65 specifications ISDN BRI 91 V.90 modem 96 See HSSI WAN interface card technical publications 24 technical specifications 75 testing connectivity to the gateway 57 serial main menu 54 text conventions 22 shelf for rack-mount installation 30 top cover removing 62 replacing 68 shipment contents 27 shutting down the gateway 60 troubleshooting the management IP address 58 single V.35/X.21 WAN interface card connector 96 installing 65 LEDs 49 V.
PAGE 108
Index supported in VPN Router 2700 65 VPN Router Security Accelerator card described 80 installing 65 W WAN interface cards installing 65 LEDs 56/64K CSU/DSU 45 ADSL 46 quad T1/E1 CSU/DSU 48 single V.35/X.21 49 T1/E1 CSU/DSU 47 specifications 56/64K CSU/DSU 88 ADSL 90 HSSI 100 quad T1/E1 CSU/DSU 95 single V.35/X.21 96 T1/E1 CSU/DSU 92 Web interface to the gateway 57 wiring requirements, Category 5 76, 84, 85 wrist strap, antistatic, attaching 64 X X.21 WAN interface card. See single V.35/X.