manualshive.com logo in svg

Nortel 1500 Series, Getting Started, Page: 14 / 72

Share
Download
Nortel 1500 Series Getting Started Download Page 14

Getting Started with the Contivity Extranet Switch 1500 Series

1-2

Figure 1-1.

An Intranet and the Internet Make Up an Extranet

The Switch provides more security than traditional remote access schemes due to 
the combination of authorization, authentication, privacy, and access control on a 
per user basis. Additionally, the IPsec protocol and related Internet Security 
Association & Key Management Protocol (ISAKMP) and the Oakley key 
establishment protocol support further enhance the security offering.

For authentication and access control, the Switch supports an internal or external 
Lightweight Directory Access Protocol (LDAP) server and external Remote 
Authentication Dial-In User Service (RADIUS) servers. 

Contivity

Extranet
Switch   

Reseller

Cable or DSL

LAN

56K

M odem

ISDN

Internet

Intranet

Extranet

P artner

Rem ote
Em ployee

Authentication

Server

E -M ail

Server

NT

Server

Firewall

Router

ISP PO P

ISP PO P

ISP P O P

ISP  PO P

Summary of Contents for 1500 Series

Page 1: ...Getting Started with the Contivity Extranet Switch 1500 Series Part No 306009 B Rev 00 February 2000 ...

Page 2: ...ly be used in ac cordance with the terms of that license A summary of the Software License is in Appendix B Trademarks Nortel Networks Nortel Networks Extranet Switch 1500 Contivity Extranet Ready the Extranet Ready logo Personal Extranets Infrastructure for Extranets and the Nortel Networks logo are trademarks of Nortel Net works Inc Microsoft Windows 95 Windows 98 and Windows NT are registered t...

Page 3: ... Contivity Extranet Switch The Switch 1 1 Components List 1 4 Chapter 2 Preparing Your Site Selecting a Site 2 1 Safety Guidelines 2 2 Switch Power ON OFF 2 2 Check the Voltage Switch 2 2 External Vent Cooling and Airflow 2 3 Chapter 3 Cabling the Switch Connecting the Cables 3 2 Power Cord Requirements 3 3 Current Rating 3 3 Wall Outlet Connector 3 3 Power Supply Connector 3 3 Cord Length and Fle...

Page 4: ... Mask 4 2 Default Gateway Optional 4 2 IP Address Configuration Utility 4 3 Requirements 4 3 Running the IP Configuration Utility 4 3 Serial Interface Configuration 4 6 Prerequisites 4 6 Procedure 4 7 Chapter 5 Managing the Switch Recommended Web Browsers 5 1 Platforms Supported 5 1 Browser Versions 5 1 Display Setting 5 1 Preparing for Configuration 5 2 Extranet Switch Welcome Display 5 3 Quick S...

Page 5: ...dministrator 5 13 Date and Time 5 14 Automatic Backup 5 14 Chapter 6 Extranet Access Client Installation Windows 95 6 1 Windows 98 and Windows NT 4 0 6 3 Appendix A Specifications and Compliance Physical A 1 Operating Environment A 1 Declaration of the Manufacturer or Importer A 1 Safety Compliance A 2 Electromagnetic Compatibility EMC A 2 Harmonics A 2 Appendix B Special Notices ...

Page 6: ......

Page 7: ...s up and running Topics include Introducing the Contivity Extranet Switch Preparing Your Site Assigning a System Identity Managing the Switch Installing the Extranet Access Client Rack Mounting Changing Hardware Configurations Complete details for configuring and monitoring the Switch are in Managing the Contivity Extranet Switch ...

Page 8: ...fort IMPORTANT Take particular notice Important references contain concepts or information that has bearing on other fields or situations i e what you do here affects other fields or options elsewhere Note Take notice Notes contain helpful suggestions or references to materials contained in this document CAUTION Be careful In this situation you might do something that could result in damage to the...

Page 9: ...ge Where appropriate the information provides cause and effect of an action otherwise it might offer troubleshooting steps italic text Indicates new terms and book titles screen text Indicates system output for example prompts and system messages Example Set Nortel Networks Trap Monitor Filters arrow Shows menu paths Example Services Available identifies the Switch services that are available ...

Page 10: ... and manage your Switch and describes the document s objectives Related Publications Document Objective Contivity Extranet Switch Release Notes Provides the latest information including known problems workarounds and special considerations Managing the Contivity Extranet Switch included on the CD Provides complete details to configure monitor and troubleshoot your Switch ...

Page 11: ... them on most standard printers You can download Acrobat Reader free from the Adobe Systems Web site www adobe com You can purchase Nortel Networks documentation sets CDs and selected technical publications through the Nortel Networks Collateral Catalog The catalog is located at support baynetworks com catalog html The CD ROMs section lists available CDs The Guides Books section lists books on tec...

Page 12: ...the technical support staff for that distributor or reseller for assistance If you purchased a Nortel Networks service program contact one of the following Nortel Networks Technical Solutions Centers Technical Solutions Center Telephone Number United States and Canada 800 2LANWAN 800 252 6926 enter Express Routing Code ERC 176 Valbonne France 33 4 92 96 69 68 Sydney Australia 61 2 9927 8800 Tokyo ...

Page 13: ...witch includes the most popular tunneling protocols IP Security IPsec Point to Point Tunneling Protocol PPTP Layer 2 Forwarding Tunneling Protocol L2TP and Layer 2 Forwarding L2F IPsec uses digital certificates password based keys and tokens for authentication PPTP L2TP and L2F use Challenge Handshake Authentication Protocol CHAP or Password Authentication Protocol PAP for authentication The PPTP ...

Page 14: ... Security Association Key Management Protocol ISAKMP and the Oakley key establishment protocol support further enhance the security offering For authentication and access control the Switch supports an internal or external Lightweight Directory Access Protocol LDAP server and external Remote Authentication Dial In User Service RADIUS servers Contivity Extranet Switch Reseller Cable or DSL LAN 56K ...

Page 15: ...e quality of service QoS mechanisms include call admission and packet forwarding priorities and support for Resource ReSerVation Protocol RSVP The HTML and Java Web management interface allows different Switch administrators to have different access rights including configuration status and monitoring The Switch offers RADIUS accounting support and extensive logging including events system configu...

Page 16: ...tch 1500 Series has no user serviceable components If for any reason you have not received all of the materials listed above contact Nortel Networks Customer Service Description Quantity Extranet Switch 1500 Series 1 Power Cord ordered separately 0 Molded Serial Cable DB9 DB25 to DB9 DB25 1 WAN V 35 Cable only with 1520 1 Contivity Extranet Switch CD ROM 1 Recovery Diskette 1 IP Address Configurat...

Page 17: ...ical office environment You should select a site that meets the following criteria Has a desktop or surface that is off the floor Has access to a grounded three pronged power outlet Uses a NEMA 5 15R outlet for 100 120 VAC or a NEMA 6 15R outlet for 200 240 VAC US and Canada Uses a three pronged power outlet that is applicable for the region s electrical code elsewhere Remains dust free and clean ...

Page 18: ...lug the AC power cord from the power supply or wall outlet Check the Voltage Switch Before you connect the power cord to the back panel of the Switch ensure that the voltage selector switch is correctly set to the appropriate AC line source voltage For line voltages between 100 and 127 VAC set the power supply line voltage selector to 115V 115 VAC 200 and 240 VAC set the power supply line voltage ...

Page 19: ...ernal Vent Cooling and Airflow The Switch has external vents for cooling and air flow on The chassis bezel The back panel On each of the side panels Keep the side vents clear of obstruction to ensure proper cooling of the Switch ...

Page 20: ......

Page 21: ... Contivity Extranet Switch 1500 Series The 1500 and 1510 support connections to LAN interfaces The 1520 supports connections to Single V 35 interfaces The 1530 supports connections to T1 CSU DSU interfaces Additionally this chapter cites the LAN WAN pinouts and the Switch s LED descriptions Figure 3 1 shows a back view of the Contivity Extranet Switch that shows various connector locations ...

Page 22: ...bles as follows Connect the power cord to the back of the Switch and to the electrical outlet Connect the LAN WAN card cables as necessary WARNING Connect the LAN and serial port cables before you plug the Switch s power cord into the outlet LNK ACT 100 T X DATA 115 230V Selector Switch Power Connector LAN Connector 10 100 BaseT Card Serial Connector ...

Page 23: ...connector that you plug into the Switch power supply AC receptacle must be an IEC 320 Sheet C13 female Cord Length and Flexibility The power cord must be less than 4 5 meters 14 7 feet long and it must be a flexible HAR harmonized cord or VDE certified cordage to comply with the Switch s safety certifications WARNING 1 Do not modify the AC power cord if it is not the exact type that is required fo...

Page 24: ...tions 100 meters is the maximum recommended cable segment length between a 100BASE TX repeater and a workstation due to signal timing requirements This wiring scheme complies with the EIA 568 wiring standard 10BASE T connections can use Category 3 4 or 5 twisted pair wiring LAN Speed Selection The Switch automatically determines the speed of the LAN connection during power up To change the speed s...

Page 25: ... in the accessory box is a cable that maps the DB26S signals to a standard V 35 connector Table 3 1 shows the cable pinouts Table 3 1 DB26S to V 35 Cable Pinouts DB26 Signal V 35 1 Shield A 2 TXDA P 3 RXDA R 4 RTSA C 5 CTSA D 6 DSRA E 7 GND B 8 DCDA F 9 RXCB X 10 DCDB no conn 11 SCTEB W 12 TXCB AA 14 TXDB S 15 TXCA Y 16 RXDB T 17 RXCA V 18 LL L 19 RTSB no conn 20 DTRA H 21 RL N 22 DSRB j 23 DTRB n...

Page 26: ...ect respectively to pin A of 34 pin connector and pin 1 of the standard 28 pin connector The term no conn means the wire is not connected to a pin in the 34 pin connector Wires 12B 13A and 14B connect to pin B in the 34 pin connector Unused pins in the 34 pin connector need not be present Do not connect Shield to Signal Ground as these are separate signals The pair suffix A or B refers to an indiv...

Page 27: ... is different from the commonly available crossover cable which crosses the green pair with the orange pair No cables are supplied with the T1 CSU DSU Table 3 2 shows the cable pinouts Table 3 2 T1 CSU DSU Cable Pinouts The cable will operate properly if pins 3 6 7 and 8 are not connected DB26S Signal T1 CSU DSU 1 RXDA TXDA 5 2 RXDB TXDB 4 3 not used 3 4 TXDB RXDB 2 5 TXDA RXDA 1 6 not used 6 7 no...

Page 28: ...ms were to arise The serial cable provided with the Switch is a DB9 DB25 to DB9 DB25 This provides a crossover transmit to receive and receive to transmit The DB9 connector goes into the Switch and the other DB9 or DB25 connector goes into your workstation You should ignore the extra DB25 connection that is attached to the Switch Table 3 3 shows the multiple cable DB 9 DB25 serial interface cable ...

Page 29: ...to the RJ 45 connector of the LAN port or the LEDs located on the card panel Figure 3 3 shows the LAN Port LEDs Look at the condition of the LEDs then examine the corresponding LED tables to better understand the indications Figure 3 3 LAN Port LEDs Table 3 4 LAN Port LED Indicators LED Indicator Description Orange On The cable connections between the LAN port and the hub are good Off The cable co...

Page 30: ...derstand the indications Figure 3 4 Single V 35 LEDs Table 3 5 Single V 35 LED Indicators LED Description LED1 Power is on to the adapter and the onboard microcode is loaded LED2 The signals CDC and DSR are on between the DSU and the adapter LED2 detects receive link status LED3 Cable is detected LED4 No external transmit clock source is available LED 4 Red LED 3 Green LED 1 Yellow LED 2 Blue ...

Page 31: ...r LED Description LED1 Yellow Yellow alarm LED is lit when the far end equipment is in the red alarm condition LED2 Blue Blue alarm LED is lit when receiving an upstream failure denoted by an alarm indication signal AIS LED3 Green Normal operation LED4 Red Red alarm is lit when a loss of signal LOS or out of frame OOF condition is detected on the receive signal All LEDs off Port disabled LED 4 Red...

Page 32: ...10 100BASE TX LAN LED Card Indicators LED Indicator Description LNK On The cable connections between the card and the device to which this interface is attached are good Off The cable connections between the card and the device to which this interface is attached are faulty ACT On or Flashing The card is sending or receiving network data The frequency of the flashes increases with increased traffi...

Page 33: ...al numbers of unconfigured Switches It then displays a table for you to enter the Management IP address subnet mask and default gateway optional To configure the Switch from the serial interface configuration menu you must first connect the serial interface cable to the Switch Then you can use a terminal emulation application to enter the Management IP address subnet mask and default gateway optio...

Page 34: ...e private physical interface then the Management IP address must reside in the 10 2 network Carefully record the Management IP address Later during the Quick Start or the Guided Configuration you need to supply IP addresses for the physical interfaces Subnet Mask The Subnet Mask defines how many bits of the IP Address represent the network the device is on and how many bits represent the host s ID...

Page 35: ...test the function of your TCP IP stack send a PING command to any host Running the IP Configuration Utility The program ExtNetIP exe is on a diskette labeled IP Address Configuration Utility that accompanies the Switch You can copy the utility to your hard disk and execute it from there or you can load it from the diskette drive The ExtNetIP exe program launches the IP Address Configuration Utilit...

Page 36: ... display appears while the program searches for an unconfigured Switch Figure 4 1 Serial Number Search Display The program automatically enters the Serial Number for the first available Switch into the table of Contivity Switches Figure 4 2 IP Address Configuration Utility Display ...

Page 37: ...otherboard manufacturer 3 Click Apply to configure the Management IP Address Subnet Mask and Default Gateway on the Switch The IP Address Configuration Utility screen disappears When the Switch updates its configuration with the Management IP Address Subnet Mask and optional Default Gateway your default Web browser automatically opens to the Contivity Extranet Switch Welcome screen 4 Click Close t...

Page 38: ...access the Switch from the serial interface of your PC Typically the serial interface configuration procedure is only necessary in a system recovery situation The serial interface configuration menu allows you to give the Switch a Management IP address Subnet Mask and Gateway IP Address so that you can use a Web browser for management Prerequisites The terminal emulator on your PC must use the fol...

Page 39: ...ult Interface IP Address Controlled Crash Reset to Factory Defaults 3 Follow the screen prompts Some of the descriptions of the fields required to complete this procedure are in the section Startup Configuration Requirements on page 4 4 2 Other descriptions follow Allow HTTP Management enables you to manage the Switch using a Web browser A Controlled Crash forces the Switch into a hard crash state...

Page 40: ...ask 3 Gateway IP Address 4 Allow HTTP Management 5 Interface IP Address C Controlled Crash R Reset to Factory Defaults E Exit 0 0 0 0 resets to factory default value of NULL Please select a menu choice 1 5 C R E Figure 4 3 Sample Serial Interface Display 4 After you complete the configuration type E to Exit You can then manage the Switch from a Web browser Important This Administrator s Password i...

Page 41: ... features For the management interface to function properly verify that your Web browser meets the following minimum requirements Platforms Supported The Switch supports Windows 95 Windows 98 Windows NT and Macintosh operating systems Browser Versions The Switch supports the following Web browsers Microsoft Internet Explorer Version 4 0 or later is required Netscape Communicator Version 4 0 or lat...

Page 42: ...th an address pool you need a range of IP addresses An Authentication database If you are not using internal authentication with the LDAP database be sure you have either the external LDAP or the RADIUS server IP Address and password or Shared Secret password An external accounting server such as RADIUS with its IP Address and Shared Secret password Client dial in Prepare the clients for the type ...

Page 43: ...iguration Once you are familiar with the Switch s navigation menu and capabilities then you can select Manage Extranet Switch Following is a sample Extranet Switch Welcome display followed by descriptions of each configuration option A detailed checklist describes what you need to properly configure your Switch followed by full details of the different procedures Complete details for configuring a...

Page 44: ...Getting Started with the Contivity Extranet Switch 1500 Series 5 4 Figure 5 1 Switch Welcome Display ...

Page 45: ...then steps you through the area such as Profiles one subsection at a time Online context sensitive Help is available for each subsection Provided you have the information required to set up the Switch the Guided Configuration can to take two to three hours to complete depending on whether your configuration is simple or more complicated Manage Extranet Switch Click to begin a standard configuratio...

Page 46: ...ult Login and Password in lowercase letters as follows Login admin Password setup IMPORTANT If you change your password and later need to access the Serial Interface Configuration you must enter the modified password The factory default password is no longer valid in this case Also make sure you change the default Administrator s Login and Password as soon as possible refer to the Admin Administra...

Page 47: ...uisites This screen acts as a checklist for you to prepare for the Quick Start configuration Assembling the information beforehand and verifying that you can establish a PPTP Client session makes Quick Start easy Figure 5 2 Quick Start Prerequisites Display ...

Page 48: ...an Internal Client Address Pool A DHCP Server on the private LAN segment dynamically assigns IP addresses on behalf of remote users The DHCP server is automatically discovered by broadcasting on the private interface that is associated with the Management IP Address With an Internal Client Address Pool you need a range of IP addresses Local Lightweight Directory Access Protocol LDAP database authe...

Page 49: ...agement IP Address for the Switch Subnet Mask for the local subnet User IDs and Passwords PPTP Users up to three Administrator Post Configuration Testing To test your configuration verify that a PPTP remote user can dial in from an external system Refer to the Contivity Extranet Switch Administrator s Guide the Switch s online help and the Microsoft PPTP documentation for additional information ...

Page 50: ...t Mask establish the tunnel as Private your private LAN or Public public data networks and configure up to three PPTP Users and an Administrator with User IDs and Passwords You can also set the system s date and time The following figure show partial displays of the Quick Start Configuration screen Figure 5 3 Quick Start Configuration Display ...

Page 51: ...figuration Subnet Mask The Subnet Mask defines how many bits of the IP Address represent the network the device is on and how many bits represent the host s ID on the network The device uses the Subnet Mask to determine which IP Addresses are directly reachable on the network and which are only reachable through a gateway A sample IP Address is 10 2 3 3 with a Subnet Mask of 255 255 0 0 This indic...

Page 52: ...Indicates that this interface is attached to the Private network and that it can accept non tunneled networking protocols such as TCP IP FTP and HTTP The Private interface also accepts tunneled protocols such as IPsec PPTP L2TP and L2F that can be used for secure management access to the Switch PPTP Users User ID Enter a User ID The User ID works along with the password as the authentication mecha...

Page 53: ... Primary Administrator User ID UID and Password The Primary Administrator User ID and Password combination always has access to all displays and controls You can also use this UID to access the serial port There can be only one Primary Administrator User ID Enter an appropriate User ID for the Primary Administrator This UID has the privileges to modify and view all controls in the Switch Password ...

Page 54: ... to 23 59 59 Automatic Backup The Automatic Backup screen under the Manage configuration option allows you to configure regular intervals when your system files are saved to designated host backup file servers IMPORTANT You should configure Automatic Backups immediately so that you do not lose system or configuration information in case of problems You configure the Automatic Backup servers from t...

Page 55: ...e asked to reboot your system twice 2 Next install Wsockupd exe Winsock update if you are using the retail version of Windows 95 Reboot your system after installing the update You now have the Microsoft PPTP tunneling client installed 3 Complete the IPsec installation by running the Eac_20d exe Nortel Networks Extranet Access Client The installation is self explanatory You might need your Windows ...

Page 56: ... the Remove button This forces the Network Neighborhood to use NetBIOS over TCP IP which is compatible with the Extranet Switch c Under the Identity tab configure the Workgroup to be the same as your company s internal workgroup For example Nortelnetworks d Next under the Identity tab verify that the Computer Name is different from your PC at work Otherwise you would be attempting to log a second ...

Page 57: ...nd click on Add Scroll down to select Remote Access Service and click on OK Windows 98 Under the Network Control Panel from the Start menu select Settings Control Panel select Add Adapter Microsoft Dial up Adapter 3 Under the Protocols tab for Windows NT or under the Network Control Panel for Windows 98 verify that NetBEUI is not installed If NetBEUI is listed click on it then click on the Remove ...

Page 58: ......

Page 59: ... Environment Temperature 50 F 95 F 10 C 35 C Relative Humidity 10 90 non condensing Declaration of the Manufacturer or Importer Nortel Networks hereby certifies that this product is in compliance with EU EMC Directive 89 336 EEC using standards EN55022 Class B and EN50082 1 and the Low Voltage Directive 73 23 EEC via standard EN60950 Additional compliance information is in Appendix B Special Notic...

Page 60: ...74 SEC 207 94 Electromagnetic Compatibility EMC USA FCC CFR 47 Part 15 Tested Class B Canada IC ICES 003 Class B Europe EN55022 Class B EN 61000 3 2 95 EN50082 1 IEC 801 2 ESD Susceptibility IEC 801 3 Radiated Immunity IEC 801 4 Electrical Fast Transient International CISPR 22 93 Class B Japan VCCI Class B ITE Harmonics Europe EN 61000 3 2 1995 Japan MITI Guideline for the Suppression of High Harm...

Page 61: ...ons are permitted provided that the above copyright notice and this paragraph are duplicated in all such forms and that any documentation advertising materials and other materials related to such distribution and use acknowledge that such portions of the software were developed by the University of California Berkeley The name of the University may not be used to endorse or promote products derive...

Page 62: ...ent This is to certify that the Nortel Networks Contivity Extranet Switch 1500 Series is shielded against the generation of radio interference in accordance with the application of Council Directive 89 336 EEC Article 4a Conformity is declared by the application of EN 55 022 Class A CISPR 22 Warning This is a Class A product In a domestic environment this product may cause radio interference in wh...

Page 63: ...HE TERMS EXPRESSED IN THIS AGREEMENT ARE THE ONLY TERMS UNDER WHICH NORTEL NETWORKS WILL PERMIT YOU TO USE THE SOFTWARE If you do not accept these terms and conditions return the product unused and in the original shipping container within 30 days of purchase to obtain a credit for the full purchase price 1 License Grant Nortel Networks Inc Nortel Networks grants the end user of the Software Licen...

Page 64: ...period as the sole remedy Nortel Networks will at its discretion provide a suitable fix patch or workaround for the problem that may be included in a future Software release Nortel Networks further warrants to Licensee that the media on which the Software is provided will be free from defects in materials and workmanship under normal use for a period of 90 days from the date Software is first ship...

Page 65: ...apply to the examination of the Software to facilitate interoperability Licensee agrees to notify Nortel Networks of any such intended examination of the Software and may procure support and assistance from Nortel Networks 7 Term and termination This license is effective until terminated however all of the restrictions with respect to Nortel Networks copyright in the Software and user manuals will...

Page 66: ...entication Dial In User Service Livingston Enterprises Inc 6920 Koll Center Parkway Pleasanton CA 94566 Copyright 1992 Livingston Enterprises Inc Permission to use copy modify and distribute this software for any purpose and without fee is hereby granted provided that this copyright and permission notice appear on all copies and supporting documentation the name of Livingston Enterprises Inc not b...

Page 67: ...IVERSITY OF MICHIGAN AND MERIT NETWORK INC DO NOT WARRANT THAT THE FUNCTIONS CONTAINED IN THE SOFTWARE WILL MEET LICENSEE S REQUIREMENTS OR THAT OPERATION WILL BE UNINTERRUPTED OR ERROR FREE The Regents of the University of Michigan and Merit Network Inc shall not be liable for any special indirect incidental or consequential damages with respect to any claim by Licensee or any third party arising...

Page 68: ......

Page 69: ...ch introducing the 1 1 conventions viii ix cooling 2 3 customer support xii D date 5 14 DB26S to V 35 connector 3 5 3 7 pinouts 3 5 3 7 DB9 or DB25 connectors 3 8 default gateway 4 2 5 11 DHCP 5 8 diskette IP Address Configuration Utility 4 3 documentation map x DSU CSU required 3 6 E electrical A 1 G gateway IP address serial interface 4 7 Guided Configuration 5 3 5 5 H heat sources 2 1 height A ...

Page 70: ...erface configuration requirements 4 6 connector 3 8 software latest registration 5 5 speed selection 3 4 subnet mask 5 9 support Nortel Networks xii system board LAN 5 11 system identity assigning a 4 1 system IP address serial interface 4 7 system IP subnet mask serial interface 4 7 T technical publications xi technical support xii technical tips registration 5 5 temperature A 1 terminal emulatio...

Page 71: ...Index 3 Web browsers 4 5 recommended 5 1 weight A 1 Welcome display 5 3 width A 1 ...

Page 72: ......

Reviews:

No comments