Version 8.0 NN46110-316 03.
Copyright © 2008 Nortel Networks. All rights reserved. The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty. Users must take full responsibility for their applications of any products specified in this document. The information in this document is proprietary to Nortel Networks Inc.
European requirements only EN 55 022 statement This is to certify that the Nortel Networks VPN Router 1750 is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN 55 022 Class A (CISPR 22). Warning: This is a Class A product. In a domestic environment, this product may cause radio interference, in which case, the user may be required to take appropriate measures.
Taiwan requirements Bureau of Standards, Metrology and Inspection (BSMI) statement Canada requirements only Canadian Department of Communications Radio Interference Regulations This digital apparatus (VPN Router 1750) does not exceed the Class A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
event designated hardware or CFE is no longer in use, Customer will promptly return the Software to Nortel Networks or certify its destruction. Nortel Networks may audit by remote polling or other reasonable means to determine Customer’s Software activation or usage levels. If suppliers of third party software included in Software require Nortel Networks to include additional or different terms, Customer agrees to abide by such terms provided by Nortel Networks with respect to such third party software.
NN46110-316 03.
Contents Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Text conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1000BASE-SX Ethernet interface card LED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 56/64K CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 ADSL WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 T1/E1 CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Quad T1/E1 CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . 34 Single V.
Technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Chassis specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 System ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 10/100BASE-TX Ethernet LAN ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Serial port . . . . . . . . . . . . . . . . .
Nortel VPN Router Installation — VPN Router 1750
Preface The Nortel VPN Router 1750 is part of the Nortel VPN Router product family. The Nortel VPN Routers support secure, reliable IP VPNs in a single, integrated hardware device. Throughout this document, the VPN Router is also referred to as the gateway. This document provides instructions to install the VPN Router 1750 for the first time and to replace field replaceable units (FRU).
Preface Text conventions This guide uses the following text conventions: angle brackets (< >) Indicates that you choose the text to enter based on the description inside the brackets. Do not type the brackets when entering the command. Example: If the command syntax is ping , you enter ping 192.32.10.12 bold Courier text Indicates command names, options, and text that you need to enter. Example: Use the show health command. Example: Enter terminal paging {off | on}.
Preface 13 italic text Indicates new terms, book titles, and variables in command syntax descriptions. Where a variable is two or more words, an underscore connects the words. Example: If the command syntax is ping , ip_address is one variable and you substitute one value for it. plain Courier text Indicates system output, for example, prompts and system messages. Example: File not found. separator (,) Shows menu paths. Example: Choose Status, Health Check.
Preface Related publications For more information about the Nortel VPN Router 1750, see the following publications: • • • • • • • • • • • NN46110-316 03.01 Release notes provide the most recent information, including brief descriptions of the new features, problems fixed in this release, and known problems and workarounds. Nortel VPN Router 1750 Configuration — Client (NN46110-306) provides information to install and configure client software for the VPN Router 1750.
Preface • • • • • 15 Nortel VPN Router 1750 Configuration — Firewalls, Filters, NAT, and QoS (NN46110-508) provides instructions to configure the Stateful Firewall and VPN Router 1750 interface and tunnel filters. Nortel VPN Router 1750 Security — Servers, Authentication, and Certificates (NN46110-600) provides instructions to configure authentication services and digital certificates.
Preface Finding the most recent updates on the Nortel Web site The content of this documentation is current at the time the product is released. To check for updates to the most recent documentation and software for VPN Router 1750, click one of the following links. Link Web site Most recent software Nortel page for VPN Router software located at support.nortel.com/go/ main.jsp?cscat=SOFTWARE&poid=12325 Most recent documentation Nortel page for VPN Router documentation located at support.nortel.
Preface 17 Getting help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technical Support Web site: www.nortel.com/support This site provides quick access to software, documentation, bulletins, and tools to address issues with Nortel products.
Preface www.nortel.com/erc Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller. NN46110-316 03.
New in this release The following section details what’s new in Nortel VPN Router Installation— VPN Router 1750 (NN46110-316) for Release 8.0: • • “Features” on page 19 “Other changes” on page 19 Features See the following section for information about feature changes: • “Models” on page 19 Models Starting with Release 8.0, the Nortel VPN Router 1750 is available in two 128-bit models. For more information, see “Description of the Nortel VPN Router 1750” on page 37.
New in this release NN46110-316 03.
Chapter 1 Cables and power This chapter provides information about how to connect communications cables and the power cord to the VPN Router 1750. Caution: Before you plug the power cord into the outlet, connect the cables to the built-in Ethernet ports and to the interfaces on the option cards installed in the VPN Router 1750.
Chapter 1 Cables and power Connecting communications cables Gather the cables to attach to the VPN Router 1750. “Interfaces and cables for the Nortel VPN Router 1750” on page 22 lists the system ports and the ports on the optional interface cards that you can install in the VPN Router 1750. The following table also indicates whether you can obtain cables for the ports from Nortel.
Chapter 1 Cables and power 23 For information about the connectors and cable pinouts, see Appendix A, “Technical specifications,” on page 69. “Rear view of the Nortel VPN Router 1750” on page 23 shows the back of the VPN Router 1750. All interface cables and the power cord attach to the rear of the gateway.
Chapter 1 Cables and power Connecting the power cord You must order the power cord for the VPN Router 1750 separately. Caution: Risk of equipment damage Do not modify or use the AC power cord if it is not the exact type that is required for your power outlet. The power cord must meet the requirements described in “Power cord requirements” on page 24.
Chapter 1 Cables and power 25 3 Press and release the power switch on the rear of the VPN Router 1750, and wait for the gateway to start. Verifying a successful installation After you connect the gateway to the power source and turn it on, you can verify a successful installation by checking the light emitting diodes (LED) on the front panel. For more information, see “Front panel LEDs” on page 26. The following sequence of LEDs occurs: 1 The power LED (the Nortel logo) lights blue.
Chapter 1 Cables and power LEDs This section describes the LEDs on the front panel of the VPN Router 1750 and on the interface cards that use LEDs. You can confirm that you properly connect the LAN and WAN interface cables by examining the LEDs. Front panel LEDs The front panel of the VPN Router 1750 has a lighted Nortel logo and two LEDs as shown in the following figure. These LEDs indicate the status of the VPN Router 1750.
Chapter 1 Cables and power 27 LEDs on the system 10/100BASE-TX Ethernet ports Each of the 10/100BASE-TX Ethernet ports on the rear of the VPN Router 1750 has two LEDs; see “LEDs on the system 10/100BASE-TX Ethernet ports” on page 27. Figure 3 LEDs on the system 10/100BASE-TX Ethernet ports Yellow Green CS260011A The following table describes the LEDs on the system 10/100BASE-TX Ethernet ports.
Chapter 1 Cables and power 10/100BASE-TX Ethernet interface card LEDs The following figure shows the LEDs on the 10/100BASE-TX Ethernet interface card. Activity/Link 100TX ACT/LINK DATA Figure 4 LEDs on the 10/100BASE-TX Ethernet interface card 10/100 Mb/s CS260009A The following table describes the LEDs on the 10/100BASE-TX Ethernet interface card.
Chapter 1 Cables and power 29 The following table describes the LEDs on the 1000BASE-T (1000 GT) Ethernet interface card. Table 6 LED indicators on the 1000BASE-T (1000 GT) Ethernet interface card LED Indicator Description ACT/LINK Steady green The port connects to a valid link partner. Flashing green The card is sending or receiving network data. The frequency of the flashes increases with increased traffic. Off The card is not sending or receiving data. Yellow The port operates at 1000 Mb/s.
Chapter 1 Cables and power Table 7 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card LED Indicator Description 10/100/1000 Off The LAN port operates at 10 Mb/s. Green The LAN port operates at 100 Mb/s. Orange The LAN port operates at 1000 Mb/s. 1000BASE-SX Ethernet interface card LED The following figure shows the LED on the 1000BASE-SX Ethernet interface card.
Chapter 1 Cables and power 31 56/64K CSU/DSU WAN interface card LEDs The following figure shows the LEDs on the 56/64K CSU/DSU WAN interface card. Figure 8 LEDs on the 56/64K CSU/DSU WAN interface card Blue LED Red LED 56/64K DDS Green LED Yellow LED The following figure describes the LEDs on the 56/64K CSU/DSU WAN interface card.
Chapter 1 Cables and power ADSL WAN interface card LEDs The following figure shows the LEDs on the asymmetric digital subscriber line (ADSL) WAN interface card. Figure 9 LEDs on the ADSL WAN interface card RX/TX LED RX/TX ADSL CONN CONN LED The following table describes the LEDs on the ADSL WAN interface card.
Chapter 1 Cables and power 33 T1/E1 CSU/DSU WAN interface card LEDs The following figure shows the LEDs on the T1/E1 CSU/DSU WAN interface card. Figure 10 LEDs on the T1/E1 CSU/DSU WAN interface card LED 1, Red LED 2, Blue LED 4, Green LED 3, Yellow CS160012A The following table describes the LEDs on the T1/E1 CSU/DSU WAN interface card.
Chapter 1 Cables and power Quad T1/E1 CSU/DSU WAN interface card LEDs The following figure shows the LEDs on the quad T1/E1 channel service unit/ digital service unit (CSU/DSU) WAN interface card. Figure 11 LEDs on the quad T1/E1 CSU/DSU WAN interface card LED 1 LED 2 LED 3 LED 4 CS160012A The following table describes the LEDs on the quad T1/E1 CSU/DSU WAN interface card.
Chapter 1 Cables and power 35 Single V.35/X.21 WAN interface card LEDs The following figure shows the LEDs on the single V.35/X.21 WAN interface card. Figure 12 LEDs on the single V.35/X.21 WAN interface card LED 1, Red LED 2, Green LED 4, Green LED 3, Green The following table describes the LEDs on the single V.35/X.21 WAN interface card. Table 13 LED indicators on the single V.35/X.21 WAN interface card LED Indicator Description LED 1 Red No external transmit clock source is available.
Chapter 1 Cables and power SSL VPN Module 1000 LEDs The following figure shows the LEDs on the Secure Sockets Layer (SSL) VPN Module 1000. Figure 13 LEDs on the SSL VPN Module 1000 Utilization 1 Online 2 - Activity 11356EA The following table describes the LEDs on the SSL VPN Module 1000. Table 14 LED indicators on the SSL VPN Module 1000 LEDs Indicator Description Online Steady green The SSL VPN Module 1000 operates normally. Yellow A reset occurred on the SSL VPN Module 1000.
Chapter 2 Nortel VPN Router 1750 chassis This chapter describes how to install the VPN Router 1750 chassis. Note: Before you install the chassis, use standard cable system practices to install all network wiring on the premises.
Chapter 2 Nortel VPN Router 1750 chassis The following figure shows the front view of the Nortel VPN Router 1750.
Chapter 2 Nortel VPN Router 1750 chassis 39 Shipment contents In addition to the gateway and this guide, the shipping container for the VPN Router 1750 contains a number of hardware accessories and other items. Note: Unless you specifically ordered a power cable, Nortel does not ship one with the VPN Router 1750.
Chapter 2 Nortel VPN Router 1750 chassis Additional equipment You need items that do not ship in the VPN Router 1750 shipping container. Before you begin the installation, ensure that you have all the cables, tools, and other equipment that you need. Cables You need cables that do not ship in the VPN Router 1750 shipping container. For more information about which cables ship and which ones you can order, see “Connecting communications cables” on page 22.
Chapter 2 Nortel VPN Router 1750 chassis 41 Chassis installation To install the VPN Router 1750, perform one of the following procedures: • • Position the chassis on a flat, sturdy, horizontal surface. Mount the chassis in a standard equipment rack. For more information, see “Installing the chassis in an equipment rack” on page 42.
Chapter 2 Nortel VPN Router 1750 chassis Installing the chassis in an equipment rack To mount the VPN Router 1750 in an equipment rack, you need the following equipment: • • • • standard 19-inch equipment rack four screws (supplied with the chassis) four cage nuts (supplied with the chassis) if the rack does not have threaded rail holes a #2 Phillips screwdriver Rack-mount recommendations When you mount the chassis in the equipment rack, observe the following standard recommendations: • • • • • The m
Chapter 2 Nortel VPN Router 1750 chassis 43 1 Attach a cage nut in four locations at the front of the rack, if the holes in the vertical supports of the rack are not threaded. Rail without threaded holes Cage nut CS260003A 2 Position the rack-mount shelf inside the rack as shown in the following graphic. Rack edge Flange CS260003A 3 Align the holes in the shelf with holes in the front of the rack. 4 Snap the support flange into place.
Chapter 2 Nortel VPN Router 1750 chassis Mounting the chassis in the equipment rack Nortel recommends that two people install the chassis in the rack. To install the VPN Router 1750 in the equipment rack, perform the following steps: 1 Set the VPN Router 1750 on the rack-mount shelf. 2 Remove the front bezel from the VPN Router 1750 as shown in the following figure. CS260015E 3 Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise.
Chapter 2 Nortel VPN Router 1750 chassis 45 6 Replace the front bezel as shown in the following figure. Press here CS260005E 7 Hold the two handles on the bezel, and push it onto the chassis. 8 Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis.
Chapter 2 Nortel VPN Router 1750 chassis NN46110-316 03.
Chapter 3 Option card and DIMM installation This chapter provides instructions about how to install and replace the following field replaceable units (FRU) in the VPN Router 1750: • • • • Local Area Network (LAN), Wide Area Network (WAN), and serial interface cards Secure Sockets Layer (SSL) VPN Module 1000 VPN Accelerator cards (VPN Router Security Accelerator [CSA] card and Hardware Accelerator card) dual inline memory modules (DIMM) This chapter contains the following topics: • • • • • “Shutting d
Chapter 3 Option card and DIMM installation Shutting down the system to add or replace hardware To install or replace an option card or a DIMM, you must first shut down the VPN Router 1750 and unplug it. Warning: Risk of electric shock Before you attempt to add or replace an option card or DIMM, shut down the VPN Router 1750 as described in this section.
Chapter 3 Option card and DIMM installation 49 Removing the front bezel and top cover To install option cards or DIMMs, you must remove the front bezel and the top cover from the gateway. To remove the front bezel, perform the following steps: 1 Shut down the VPN Router 1750 using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 48.
Chapter 3 Option card and DIMM installation The first several times that you remove the front bezel, the bezel can stick because the ball studs and socket clips are new. To remove the top cover, perform the following steps: 1 Remove the router from the rack if it is mounted in an equipment rack. 2 At the front of the chassis, remove the two panhead screws that secure the bottom of the chassis to the equipment rack.
Chapter 3 Option card and DIMM installation 51 6 Lift the lid 2 or 3 inches, and then pull it off the chassis. The VPN Router 1750 system board is now exposed. The following figure shows the location of the option card and DIMM slots on the system board. DIMMs (1 and 2) Option card slots 2 1 DIMM slots 1 2 3 4 PCI slots CS160004A Warning: Risk of injury Beware of danger if you incorrectly replace the battery.
Chapter 3 Option card and DIMM installation Attaching the antistatic wrist strap Nortel ships the VPN Router 1750 with an antistatic wrist strap, which directs the discharge of static electricity from your body to the chassis of the gateway to avoid damage to sensitive electronic components. You must wear an antistatic wrist strap on your arm when you remove, install, or handle option cards and DIMMs. Caution: Risk of equipment damage Electrostatic discharge can damage hardware.
Chapter 3 Option card and DIMM installation 53 Option card installation and replacement The VPN Router 1750 provides four slots for option cards. This section provides instructions about how you can add new option cards to the VPN Router 1750 or, if necessary, replace an existing card. The following table lists the option cards that you can install in the VPN Router 1750.
Chapter 3 Option card and DIMM installation Table 16 Supported option cards for the Nortel VPN Router 1750 Maximum number Option card Restrictions V.90 modem interface 4 If you install an SSL VPN Module 1000 in slot 1, do not install the V.90 modem interface card in slot 2. The VPN Router 1750 must run Version 4.80 or later. Single V.35/X.21 WAN interface (full-height) 4 — Single V.35/X.21 WAN interface (half-height) 4 The VPN Router 1750 must run Version 4.80 or later.
Chapter 3 Option card and DIMM installation 55 Installing and replacing an option card Before you install or replace an interface card or Hardware Accelerator card, complete the following procedures: • Shut down the VPN Router 1750 by using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 48. Warning: Risk of electric shock Turn off the VPN Router 1750 and unplug it before you attempt to install an option card.
Chapter 3 Option card and DIMM installation 2 Remove the filler panel screw, and pull out the filler panel (or the option card to replace) from the slot as shown in the following figure. Rear of unit Filler panel screw Option card Motherboard Option card slots CS2600017A 3 Lower the new option card into the slot, and then gently press the connector into the slot. Seat the card in the slot. If you do not properly seat the card, it does not work.
Chapter 3 Option card and DIMM installation 57 8 If you want to install the VPN Router 1750 in an equipment rack, mount it in the rack. 9 Set the VPN Router 1750 on the rack-mount shelf in the rack. 10 Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack, and tighten the screws. 11 Replace the front bezel. 12 Hold the bezel by the two handles, and push it onto the chassis.
Chapter 3 Option card and DIMM installation Caution: Install the same type of DIMM that is installed in your gateway. For example, do not install a 256 MB DIMM in the VPN Router 1750. Before you install or replace a DIMM, complete the following procedures: • Shut down the VPN Router 1750 by using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 48.
Chapter 3 Option card and DIMM installation 59 4 Press the DIMM firmly into the socket. 5 Pull up the locking lever on either side of the DIMM to snap it into position; see the following figure. Alignment keys To remove DIMMs, pull back locking levers and pull out DIMM. To install DIMMs, pull back locking levers and push in DIMM.
Chapter 3 Option card and DIMM installation 6 Replace the top cover on the chassis. 7 Hold the cover at an angle, and slide it onto the chassis. 8 Insert the four screws that secure the cover to the chassis, and use a screwdriver to tighten the screws. 9 If you want to install the VPN Router 1750 in an equipment rack, mount it in the rack. 10 Set the VPN Router 1750 on the rack-mount shelf in the rack.
Chapter 4 Management IP interface configuration This chapter describes how to configure a management Internet Protocol (IP) address, subnet mask, and default gateway address on a newly installed VPN Router 1750. After you complete the procedures in this chapter, you can configure and manage the VPN Router 1750 by using a Web browser from a PC. To configure the management IP interface, you can use the serial interface configuration menu.
Chapter 4 Management IP interface configuration Required information Before you configure the management interface, collect the following information: • IP address for the management interface The management IP address must be accessible from one of the private physical interfaces on the VPN Router 1750. For example, if you plan to assign IP address 10.2.3.3 with subnet mask 255.255.0.0 to the private physical interface, the management IP address must reside in the 10.2 network.
Chapter 4 Management IP interface configuration 63 Configuring the management IP address Use the serial interface to assign the VPN Router 1750 a management IP address and subnet mask so that you can then use a Web browser for management. To configure the management IP address using the serial interface, perform the following steps: 1 Turn on the terminal or PC.
Chapter 4 Management IP interface configuration The serial main menu appears with the following message. Main Menu: System is currently in NORMAL mode.
Chapter 4 Management IP interface configuration 65 7 Type 0, and then press Enter to configure the IP address. The IP address prompt appears: 0) Slot 0, Port 2, Public LAN IP Address = Subnet Mask = 0.0.0.0 Speed/Duplex = AutoNegotiate *Type 0.0.0.0 to delete. *Just type to skip. Old IP address = New IP address = 8 Type a new IP address, and then press Enter. The subnet mask prompt appears: Old Subnet Mask = 0.0.0.
Chapter 4 Management IP interface configuration 11 Type R, and then press Enter to return to the serial main menu. 12 To configure the management IP address, type 0, and then press Enter. The Management IP Address menu appears: - Management IP Address Menu M) Management IP Address = R) Return to the Main Menu Please select a menu choice (M,R): 13 Type M, and then press Enter. The Management IP Address prompt appears: *Type 0.0.0.0 to delete. *Just type to skip.
Chapter 4 Management IP interface configuration 67 Testing the configuration After you assign a management IP address to the VPN Router 1750, start a Web browser to verify that you can access the gateway from a browser. To manage the VPN Router 1750 by using the GUI, your PC must run one of the following browsers: • • • Internet Explorer Version 6.0 or later Netscape Navigator 4.79 or 6.2 Firefox 2.
Chapter 4 Management IP interface configuration Troubleshooting If you cannot connect to the VPN Router 1750 by using your browser, check the following items: • • • • • Ensure that you entered the correct IP address in the browser window. Type a known URL in the browser window to ensure that your network connection is good. Check that the management IP address is on the same subnet as the physical Local Area Network (LAN) attached to the gateway.
Appendix A Technical specifications This appendix provides technical specifications for the VPN Router 1750 chassis and the chassis interfaces. Chassis specifications The following table lists physical, electrical, and environmental specifications for the chassis. Table 17 Physical, electrical, and environmental specifications Specification Description Physical Height 5.25 in. (13.335 cm) Width 17 in. (43.18 cm) Depth 21 in. (53.34 cm) Weight 28 lbs. (12.
Appendix A Technical specifications Table 17 Physical, electrical, and environmental specifications (continued) Specification Description Operating altitude 8202 ft (2500 m) maximum Storage altitude 40 000 ft (12 192 m) maximum System ports This section provides information about the 10/100BASE-TX Ethernet LAN ports and the serial port on the system board.
Appendix A Technical specifications 71 Figure 17 10/100BASE-TX Ethernet connector 87654321 RD- RD+ TD- TD+ CS260010A The following table provides the 10/100BASE-TX Ethernet port pinouts. Table 18 10/100BASE-TX Ethernet port pinouts Pin Description 1 TD + 2 TD - 3 RD + 6 RD - Serial port The system board provides a serial port on the rear of the chassis to enable out-of-band management. Use the serial port to assign the management IP address and subnet mask to the newly installed gateway.
Appendix A Technical specifications Figure 18 Modem cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 Pin 1 Pin 13 Pin 14 Pin 25 9-position D-sub receptacle with screw locks (ground shield connected to backshell) 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A The following table provides the multiple DB9 and DB25 serial interface cable pinouts.
Appendix A Technical specifications 73 Figure 19 Modem cable (9-pin D-sub plug to RS-232-C modem plug) 10 ft (3.05 m) Pin 5 Pin 1 Pin 9 Pin 6 9-position D-sub receptacle with screw locks (ground shield connected to backshell) Pin 1 Pin 13 Pin 14 Pin 25 25-position D-sub plug with screw locks (ground shield connected to backshell) CAB0056A The following table provides the modem cable pinouts.
Appendix A Technical specifications • • • • • • • • • • • • • • Secure Sockets Layer (SSL) VPN Module 1000 10/100BASE-TX Ethernet interface card 1000BASE-T (1000 GT) Ethernet interface card 1000BASE-T (1000 MT) Ethernet interface card 1000BASE-SX Ethernet interface card 56/64K Digital Service Unit/Channel Service Unit (CSU/DSU) WAN interface card Asymmetric Digital Subscriber Line (ADSL) WAN interface card Integrated Services Digital Network (ISDN) Basic Rate Interface (BRI) interface card T1 CSU/DSU W
Appendix A Technical specifications 75 Figure 20 VPN Router Security Accelerator card The VPN Router Security Accelerator card is the successor to the Hardware Accelerator card. Even though Nortel discontinued the Hardware Accelerator Hifn 7811 card effective January 2006, Nortel still supports this card. The VPN Router Security Accelerator card provides increased encryption throughput and improved compression performance.
Appendix A Technical specifications Figure 21 SSL VPN Module 1000 Utilization 1 Online 2 - Activity 11356EA The SSL VPN Module 1000 has no external access: all traffic to and from the SSL VPN Module 1000 card occurs over an internal high-speed link. The VPN Router 5000, 2700, and 1750 gateways running VPN Router Version 5.0 software support the SSL VPN Module 1000. You must install the SSL VPN Module 1000 in slot 1 of the VPN Router 5000, 2700, or 1750.
Appendix A Technical specifications 77 10/100BASE-TX Ethernet interface card The 10/100BASE-TX Ethernet interface card has a single RJ-45 connector that provides the signals needed to interface to 10BASE-T and 100BASE-TX Ethernet equipment. The following figure shows the 10/100BASE-TX Ethernet interface card.
Appendix A Technical specifications The following figure shows the 1000BASE-T (1000 GT) Ethernet interface full-height card for VPN Router 1750. Figure 23 1000BASE-T (1000 GT) Ethernet interface card Select cables for the card as follows, keeping in mind that this card is autonegotiating and uses the highest possible data rate: • For 1000BASE-T operation, use category 5 four-pair Ethernet wiring. The cable must comply with the TIA 568 wiring specification.
Appendix A Technical specifications 79 1000BASE-T (1000 MT) Ethernet interface card Use the 1000BASE-T (1000 MT) Ethernet interface card to connect to Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. This interface card has a single RJ-45 connector. The following figure shows the 1000BASE-T (1000 MT) Ethernet interface card.
Appendix A Technical specifications Table 22 1000BASE-T (1000 MT) Ethernet port pinouts NN46110-316 03.
Appendix A Technical specifications 81 1000BASE-SX Ethernet interface card The 1000BASE-SX Ethernet interface card implements short-wavelength (850 nm) laser transmissions. Use this interface card to connect to fiber Gigabit Ethernet interfaces on other devices in your network, as well as to provide increased throughput. The 1000BASE-SX Ethernet interface card has a single type LC fiber connector. The following figure shows the 1000BASE-SX Ethernet interface card.
Appendix A Technical specifications 56/64K CSU/DSU WAN interface card The 56/64K CSU/DSU WAN interface card has a single RJ-48 connector that provides the signals needed to interface to network equipment. The following figure shows the 56/64K CSU/DSU WAN interface card. Figure 26 56/64K CSU/DSU WAN interface card 56/64K DDS The connector on the 56/64K CSU/DSU WAN interface card accommodates an 8-pin RJ-48 modular patch cord.
Appendix A Technical specifications 83 The following table provides the 56/64K CSU/DSU cable pinouts for a crossover connection.
Appendix A Technical specifications ADSL WAN interface card The ADSL Annex A and Annex B WAN interface cards have a single RJ-11 connector that provides the signals needed to interface to the ADSL-provisioned telephone line. “ADSL WAN interface card” on page 84 shows the ADSL WAN interface card. Note: The ADSL Annex A and ADSL Annex B cards look identical.
Appendix A Technical specifications 85 The following table provides the pinouts for the ADSL Annex B cable. Table 26 ADSL Annex B cable pinouts RJ-11 termination RJ-45 termination Signal Pin # to Pin # Signal N/C 1 6 N/C Tip 2 5 Tip Ring 3 4 Ring N/C 4 3 N/C ISDN BRI interface card The ISDN BRI S/T and ISDN BRI U interface cards have a single RJ-45 connector that provides the signals to interface to ISDN equipment.
Appendix A Technical specifications The following table provides the ISDN BRI S/T cable pinouts. Table 27 ISDN BRI S/T cable pinouts Pin Function 1 N/C 2 N/C 3 Receive + 4 Transmit + 5 Transmit - 6 Receive - 7 N/C 8 N/C The following table provides the ISDN BRI U cable pinouts. Table 28 ISDN BRI U cable pinouts Pin Function 1 N/C 2 N/C 3 N/C 4 U interface network connection (tip) 5 U interface network connection (ring) 6 N/C 7 N/C 8 N/C NN46110-316 03.
Appendix A Technical specifications 87 T1/E1 CSU/DSU WAN interface card The T1/E1 CSU/DSU WAN interface card has a single connector that provides the signals to interface to T1 or E1 equipment. This interface card ships as a half-height card and as a full-height card. The following figure shows the T1/E1 CSU/DSU WAN interface card (half-height card).
Appendix A Technical specifications Use cable that is wired in accordance with EIA-568-A wiring style. This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal (pins 4 and 5) and the receive signal (pins 1 and 2). Nortel strongly recommends that you use professionally manufactured patch cords.
Appendix A Technical specifications 89 The following table provides the T1/E1 CSU/DSU cable pinouts for a straight-through connection.
Appendix A Technical specifications Use cable that is wired in accordance with EIA-568-A wiring style. This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal (pins 4 and 5) and the receive signal (pins 1 and 2). nortel strongly recommends that you use professionally manufactured patch cords.
Appendix A Technical specifications 91 The following table provides the V.90 modem port cable pinouts. Table 31 MV.90 modem cable pinouts Pin Function 1 N/C 2 Tip 3 Ring 4 N/C Single V.35/X.21 WAN interface card The single V.35/X.21 WAN interface card has a single DB28S connector that provides the signals to interface to V.35 and X.21 equipment. The following figure shows the single V.35/X.21 WAN interface card. Figure 33 Single V.35/X.
Appendix A Technical specifications Table 32 V.
Appendix A Technical specifications 93 Table 32 V.35 cable pinouts (continued) Signal name Pair number and conductor Specialwired end 34-pin male Notes 26 M0<-SIGNAL GROUND Pair 12B B Wires 12B, 13A, and 14B connect to pin B in the 34-pin connector. 27 M1<-SIGNAL GROUND Pair 13A B Wires 12B, 13A, and 14B connect to pin B in the 34-pin connector. 28 M2 Pair 13B No conn The term No conn means the wire does not connect to a pin in the 34-pin connector.
Appendix A Technical specifications The following table provides the X.21 cable pinouts. (The pair suffix A or B refers to an individual wire within a twisted pair.) Table 33 X.
Appendix A Technical specifications 95 Table 33 X.21 cable pinouts (continued) Standardwired end 28-pin male Signal name Pair number and conductor Standardwired end 15-pin male 20 DTRA Pair 9A No conn The term No conn means the wire does not connect to a pin in the 15-pin connector. 23 DTRB Pair 9B No conn The term No conn means the wire does not connect to a pin in the 15-pin connector.
Appendix A Technical specifications Table 33 X.21 cable pinouts (continued) Standardwired end 28-pin male Signal name Pair number and conductor Standardwired end 15-pin male 1 SHIELD Pair 14A 1 At each end, the cable shield and connector shell must connect to pin 1 of the connector. Do not interconnect Shield to Signal Ground because these are separate signals. 7 SIGNAL GROUND Pair 14B 8 Wires 13B and 14B connect to pin 8 in the 15-pin connector.
Appendix A Technical specifications 97 Table 34 T3 cable pinouts (continued) 50-pin SCSI male Signal name 50-pin SCSI male 3 CAB 3 4 RDB 4 5 LCB 5 6 STB 6 7 GND 7 8 TAB 8 9 TTB 9 10 LAB 10 11 TDB 11 12 LBB 12 13 GND 13 19 GND 19 24 TESTB 24 25 GND 25 26 GND 26 27 RCA 27 28 CAA 28 29 RDA 29 30 LCA 30 31 STA 31 32 GND 32 33 TAA 33 34 TTA 34 35 LAA 35 36 TDA 36 37 LBA 37 38 GND 38 44 GND 44 49 TESTA 49 50 GND 50 Nortel
Appendix A Technical specifications NN46110-316 03.
Index Numerics LEDs 31 10/100BASE Ethernet interface card cable specifications 70 connector 70 installing 53 A AC power cord connecting 24 ordering 39 requirements 24 10/100BASE system LAN ports cable specifications 70 connector 70 accelerator cards, hardware encryption described 74 installing 53 10/100BASE-TX Ethernet interface card described 77 LEDs 28 accessories, hardware, shipped with the gateway 39 10/100BASE-TX system LAN ports LEDs 27 ADSL WAN interface card cable pinouts, Annex A 84 ca
Index technical specifications 1000BASE-SX connector 81 1000BASE-T (1000 MT) connector 79 100BASE-TX connector 70 10BASE-T connector 70 56/64K CSU/DSU WAN interface 82 ADSL WAN interface 84 HSSI WAN interface 96 ISDN BRI interface 85 modem 73 quad T1/E1 CSU/DSU WAN interface 90 serial interface 71 single V.35/X.21 WAN interface 91 T1/E1 CSU/DSU WAN interface 87 V.
Index 101 front panel LEDs 26 IP address for managing the gateway.
Index M single V.35 WAN interface 91 single X.21 WAN interface 94 T1/E1 CSU/DSU WAN interface 88 V.
Index 103 specifications ISDN BRI 85 V.90 modem 90 technical specifications 69 testing connectivity to the gateway 67 shelf for rack-mount installation 42 top cover removing 50 replacing 56 shipment contents 39 troubleshooting the management IP address 68 shutting down the gateway 48 turning off the gateway 48 serial main menu 64 single V.35/X.21 WAN interface card connector 91 installing 53 LEDs 35 V.35 pinouts 91 X.
Index W WAN interface cards installing 53 LEDs 56/64K CSU/DSU 31 ADSL 32 quad T1/E1 CSU/DSU 34 single V.35/X.21 35 T1/E1 CSU/DSU 33 specifications 56/64K CSU/DSU 82 ADSL 84 HSSI 96 quad T1/E1 CSU/DSU 89 single V.35/X.21 91 T1/E1 CSU/DSU 87 Web interface to the gateway 67 wiring requirements, Category 5 70, 78, 79 wrist strap, antistatic, attaching 52 X X.21 WAN interface card. See single V.35/X.21 WAN interface card NN46110-316 03.
