Nortel 2700 Page 17 Installation Manual Download

Page: 17 / 108

Nortel VPN Router Installation — VPN Router 2700

How to get help

This chapter explains how to get help for Nortel products and services.

Finding the latest updates on the Nortel Web site

The content of this documentation was current at the time the product was
released. To check for updates to the latest documentation and software for VPN
Router 2700, go to:

www.nortel.com/support

Select Security & VPN and then, in the section called Virtual Private Networking
(VPN), IPSEC, and SSL, click the appropriate VPN Router product.

Getting help from the Nortel Web site

The best way to get technical support for Nortel products is from the Nortel
Technical Support Web site:

www.nortel.com/support

Summary of Contents for 2700

Page 1: ...Version 7 05 300 NN46110 311 02 01 314708 F Rev 01 November 2007 Standard 600 Technology Park Drive Billerica MA 01821 4130 Nortel VPN Router Installation VPN Router 2700 ...

Page 2: ...he right to make changes to the products described in this document without notice Nortel Networks Inc does not assume any liability that may occur due to the use or application of the product s or circuit layout s described herein USA requirements only Federal Communications Commission FCC Compliance Notice Radio Frequency Notice Note This equipment has been tested and found to comply with the li...

Page 3: ...r für entsprechende Gegenmaßnahmen verantwortlich ist Attention Ceci est un produit de Classe A Dans un environnement domestique ce produit risque de créer des interférences radioélectriques il appartiendra alors à l utilisateur de prendre les mesures spécifiques appropriées EC Declaration of Conformity This product conforms or these products conform to the provisions of the R TTE Directive 1999 5...

Page 4: ...stomer a nonexclusive license to use a copy of the Software on only one machine at any one time or to the extent of the activation or authorized usage level whichever is applicable To the extent Software is furnished for use with designated hardware or Customer furnished equipment CFE Customer is granted a nonexclusive license to use Software only on such hardware or CFE as applicable Software con...

Page 5: ...d commercial computer software documentation and in the event Software is licensed for or on behalf of the United States Government the respective rights to the software and software documentation are governed by Nortel Networks standard commercial license in accordance with U S Federal Regulations at 48 C F R Sections 12 212 for non DoD entities and 48 C F R 227 7202 for DoD entities b Customer m...

Page 6: ...6 NN46110 311 02 01 ...

Page 7: ...p from a specialist by using an Express Routing Code 18 Getting help through a Nortel distributor or reseller 19 Preface 21 Before you begin 21 Text conventions 22 Acronyms 22 Related publications 23 Printed technical manuals 24 Chapter 1 Installing the Nortel VPN Router 2700 chassis 25 Description of the Nortel VPN Router 2700 25 Preparing to install the Nortel VPN Router 2700 26 Shipment content...

Page 8: ...Front panel LEDs 40 LEDs on the system 10 100BASE TX Ethernet port 41 10 100BASE TX Ethernet interface card LEDs 42 1000BASE T 1000 GT Ethernet interface card LEDs 42 1000BASE T 1000 MT Ethernet interface card LEDs 43 1000BASE SX Ethernet interface card LED 44 56 64K CSU DSU WAN interface card LEDs 45 ADSL WAN interface card LEDs 46 T1 E1 CSU DSU WAN interface card LEDs 47 Quad T1 E1 CSU DSU WAN i...

Page 9: ...ASE TX Ethernet LAN port 76 Serial port 77 Modem cable specifications 78 Hardware option cards 79 VPN Router Security Accelerator cards 80 SSL VPN Module 1000 81 10 100BASE TX Ethernet interface card 82 1000BASE T 1000 GT Ethernet interface card 83 1000BASE T 1000 MT Ethernet interface card 85 1000BASE SX Ethernet interface card 87 56 64K CSU DSU WAN interface card 88 ADSL WAN interface card 90 IS...

Page 10: ...10 Contents NN46110 311 02 01 ...

Page 11: ...Ethernet interface card 44 Figure 14 LEDs on the 56 64K CSU DSU WAN interface card 45 Figure 15 LEDs on the ADSL WAN interface card 46 Figure 16 LEDs on the T1 E1 CSU DSU WAN interface card 47 Figure 17 LEDs on the quad T1 E1 CSU DSU WAN interface card 48 Figure 18 LEDs on the single V 35 X 21 WAN interface card 49 Figure 19 LEDs on the SSL VPN Module 1000 50 Figure 20 Removing the front bezel 61 ...

Page 12: ... 35 1000BASE SX Ethernet interface card 87 Figure 36 56 64K CSU DSU WAN interface card 88 Figure 37 ADSL WAN interface card 90 Figure 38 ISDN BRI S T interface card or ISDN BRI U interface card 91 Figure 39 T1 E1 CSU DSU WAN interface card 92 Figure 40 T1 E1 CSU DSU WAN interface card full height card 93 Figure 41 Quad T1 E1 CSU DSU WAN interface card 95 Figure 42 V 90 modem interface card 96 Figu...

Page 13: ...SU DSU WAN interface card 47 Table 13 LED indicators on the quad T1 E1 CSU DSU WAN interface card 48 Table 14 LED indicators on the single V 35 X 21 WAN interface card 49 Table 15 LED indicators on the SSL VPN Module 1000 50 Table 16 Supported option cards for the 2600 and 2700 65 Table 17 Installing other option cards with the SSL VPN Module 1000 66 Table 18 Physical electrical and environmental ...

Page 14: ...6110 311 02 01 Table 30 T1 E1 CSU DSU cable pinouts for straight through connection 94 Table 31 V 90 modem cable pinouts 96 Table 32 V 35 cable pinouts 97 Table 33 X 21 cable pinouts 98 Table 34 T3 cable pinouts 100 ...

Page 15: ... Router 2700 NN46110 311 for Release 7 05 300 Features See the following section for information about feature changes 1000BASE T 1000 GT Ethernet card The 1000BASE T 1000 GT Ethernet card replaces the 10 100BASE TX Ethernet card See 1000BASE T 1000 GT Ethernet interface card on page 83 and 1000BASE T 1000 GT Ethernet interface card LEDs on page 42 ...

Page 16: ...16 New in this release NN46110 311 02 01 ...

Page 17: ...time the product was released To check for updates to the latest documentation and software for VPN Router 2700 go to www nortel com support Select Security VPN and then in the section called Virtual Private Networking VPN IPSEC and SSL click the appropriate VPN Router product Getting help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technic...

Page 18: ... a Nortel Solutions Center If you do not find the information you require on the Nortel Technical Support Web site and you have a Nortel support contract you can also get help over the phone from a Nortel Solutions Center In North America call 1 800 4NORTEL 1 800 466 7835 Outside North America go to the following Web site to obtain the phone number for your region www nortel com callus Getting hel...

Page 19: ...ation VPN Router 2700 Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller contact the technical support staff for that distributor or reseller ...

Page 20: ...20 How to get help NN46110 311 02 01 ...

Page 21: ...nical specifications for the VPN Router 2700 For complete information about configuring and monitoring the VPN Router 2700 see the documentation on the software CD For information about VPN Router documentation see Related publications on page 23 Before you begin This guide is intended for qualified service personnel who are installing the VPN Router 2700 for the first time or who need to install ...

Page 22: ...ook titles plain Courier text Indicates system output for example prompts and system messages Example File not found separator Shows menu paths Example Choose Status Health Check ADSL asymmetric digital subscriber line AES Advanced Encryption Standard AIS alarm indication signal CSU DSU channel service unit digital service unit DES Data Encryption Standard DIMM dual inline memory module DTE data t...

Page 23: ...authentication servers and services as well as digital certificates Nortel VPN Router Security Firewalls Filters NAT and QoS NN46110 601 provides instructions for configuring the VPN Router Stateful Firewall NAT and VPN Router interface and tunnel filters Nortel VPN Router Configuration Tunneling Protocols NN46110 503 provides instructions for configuring the tunneling protocols IPsec L2TP PPTP an...

Page 24: ...ubleshooting NN46110 602 provides information about backup and recovery file management upgrading software and troubleshooting This guide also provides instructions for monitoring gateway status and performance Nortel VPN Router Configuration TunnelGuard NN46110 307 provides information about configuring and using the TunnelGuard feature Printed technical manuals You can print selected technical m...

Page 25: ...he infrastructure of the Internet to replace traditional remote access gear The VPN Router 2700 provides routing firewall bandwidth management encryption authentication and data integrity services to ensure secure tunneling across IP networks and the Internet An individual user or group of users can be associated with a set of attributes that provide custom access to an extranet Note Before you in...

Page 26: ... VPN Accelerator cards VPN Router Security Accelerator card and Hardware Accelerator card and the Secure Sockets Layer SSL VPN Module 1000 one 10 100 Ethernet interface card installed in PCI slot 4 256 MB memory upgradable to 512 MB total Preparing to install the Nortel VPN Router 2700 Before you begin the installation verify that Your shipment is complete and undamaged You have the cables tools a...

Page 27: ...sed to support the chassis in an equipment rack 4 10 32 panhead screws Secures the rack mount shelf to the equipment rack and the chassis to the shelf 4 10 32 panhead cage nuts Used only if the equipment rack does not have threaded rail holes 4 Rubber feet Used to install the chassis on a surface 1 Antistatic wrist strap Used to direct the discharge of static electricity from your body to the chas...

Page 28: ...administrator Hardware for mounting the chassis in an equipment rack To install the VPN Router 2700 in an equipment rack you need a Phillips screwdriver and an equipment rack that meets the following specifications heavy duty steel construction width of 19 in 48 26 cm and depth of 24 in 60 96 cm Electronic Industries Association EIA standard hole spacing If the rack does not have threaded rail hol...

Page 29: ...rack on page 30 Installing the chassis on a flat surface If you decide to place the VPN Router 2700 on a flat surface make sure that the surface is large enough for the gateway and sturdy enough to support the combined weight of the VPN Router 2700 and the cables that you attach to it The VPN Router 2700 accessory kit includes four rubber feet that can be attached to the bottom of the gateway Figu...

Page 30: ...of 40oC 104oF Do not block the power supply vents or otherwise restrict air flow when you install the chassis in a rack Stabilize your rack so that it does not tip over under the weight of the gateway and other devices Ensure that the electrical branch circuits can handle the VPN Router 2700 and other units in the rack before you install and turn on the gateway Maintain a reliable earth ground pat...

Page 31: ...n Figure 4 3 Align the holes in the shelf with holes in the front of the rack Figure 4 Installing the shelf in the equipment rack 4 Ensure that the support flange snaps into place Figure 4 5 Insert one of the supplied panhead screws through the top hole on each side of the shelf into the hole in the rack and tighten the screws Figure 4 CS260003A Cage nut Rail without threaded holes CS260003A Flang...

Page 32: ...bezel from the VPN Router 2700 Figure 5 a Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise Figure 5 Removing the front bezel b Grip the two handles and firmly pull the bezel toward you to unsnap it from the chassis The first several times that you remove the front bezel the bezel can stick because the ball studs and socket clips are new...

Page 33: ...the bottom hole on each side of the shelf into the hole in the rack and tighten the screws Figure 4 on page 31 4 Replace the front bezel Figure 6 a Hold the two handles on the bezel and push it onto the chassis b Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis Figure 6 Replacing the front bezel CS260005B Press here ...

Page 34: ...34 Chapter 1 Installing the Nortel VPN Router 2700 chassis NN46110 311 02 01 ...

Page 35: ...s the following topics Caution Connect the cables to the built in Ethernet port and to the interfaces on the option cards that are installed in the VPN Router 2700 before you plug the power cord into the outlet Topic Page Connecting communications cables 36 Connecting the power cord 38 Verifying a successful installation 39 Understanding the LEDs 40 Caution Route all cabling for all WAN LAN and se...

Page 36: ...nd cable pinouts see Appendix A Technical specifications on page 75 Table 2 Interfaces and cables for the VPN Router 2700 Cable available from Nortel Interface Included Ordered separately Contact supplier 10 100BASE TX Ethernet system port X Serial port X 10 100BASE TX Ethernet X 10 100 1000BASE X Ethernet X 1000BASE T Ethernet copper X 1000BASE SX Ethernet fiber X1 1 Order either the LC to LC cab...

Page 37: ...Router 2700 in this order 1 Connect the 10 100BASE TX RJ 45 cable to the built in 10 100BASE TX Ethernet LAN port on the gateway Figure 7 2 If you plan to connect a terminal or PC to the gateway connect the serial cable shipped with the VPN Router 2700 to the serial port Figure 7 3 Connect all other cables to the ports on the installed interface cards If you ordered optional interface cards connec...

Page 38: ...power outlet Table 3 Power cord requirements Requirement Description Current rating The power cord must be rated for the available AC voltage and must have a current rating that is at least 125 percent of the gateway s current rating 2 A 100 VAC or 1A 220 VAC Certification The power cord must have certification marks from an acceptable regional agency Cord length and flexibility The power cord mus...

Page 39: ...ateway is operational 4 The Alert Fail LED lights yellow because the gateway is not configured For a newly installed VPN Router 2700 a yellow Alert Fail LED does not indicate an alarm condition After you configure the management IP address on the gateway the Alert Fail LED turns off See Chapter 3 Configuring the management IP interface on page 51 If the LEDs on the front panel light in this sequen...

Page 40: ...lete information about the health check event log and system log see Nortel VPN Router Troubleshooting NN46110 602 Table 4 Front panel LED indicators LED Indicator Description Power Nortel Networks logo On The gateway is receiving AC power Off The gateway is not receiving AC power Alert Fail Yellow A non fatal alarm condition exists The yellow alert condition is described in the health check displ...

Page 41: ...he LEDs on the system 10 100BASE TX Ethernet port Table 5 LED indicators on the system 10 100BASE TX Ethernet port LED Indicator Description Green On The LAN port is operating at 100 Mb s Off The LAN port is operating at 10 Mb s Yellow On The cable connections between the LAN port and the hub are good Off The cable connections between the LAN port and the hub are faulty Flashing The LAN port is se...

Page 42: ... following figure shows the LEDs on the 1000BASE T 1000 GT Ethernet interface card Figure 11 LEDs on the 1000BASE T 1000 GT Ethernet interface card Table 6 LED indicators on the 10 100BASE TX Ethernet interface card LED Indicator Description ACT LINK Steady green or Flashing green The card is sending or receiving network data The frequency of the flashes increases with increased traffic Off The ca...

Page 43: ... Indicator Description ACT LINK Steady green The port is connected to a valid link partner Flashing green The card is sending or receiving network data The frequency of the flashes increases with increased traffic Off The card is not sending or receiving data 10 100 1000 Yellow The port is operating at 1000 Mb s Green The port is operating at 100 Mb s Off The port is operating at 10 Mb s Table 8 L...

Page 44: ...The LAN port is operating at 10 Mb s Green The LAN port is operating at 100 Mb s Orange The LAN port is operating at 1000 Mb s Table 9 LED indicator on the 1000BASE SX Ethernet interface card LED Indicator Description ACT LNK Steady green The port is connected to a valid link partner Flashing green The LAN port is sending or receiving network data Off The port is not linked to a valid partner Tabl...

Page 45: ...terface card Table 10 LED indicators on the 56 64K CSU DSU WAN interface card LED Description Blue The blue alarm LED is lit when receiving an upstream failure denoted by an alarm indication signal AIS Red The red alarm LED is lit when a loss of signal LOS or out of frame OOF condition is detected on the receive signal Yellow The yellow alarm LED is lit when the far end equipment is in the red ala...

Page 46: ...Description Steady green Steady green The ADSL interface card is not initialized the software driver is not installed Off Off The ADSL interface card is initialized but has not established a link with the ADSL network Flashing green Off The ADSL interface card is attempting to establish a link with the ADSL network Steady green Off The ADSL interface card has established a link with the ADSL netwo...

Page 47: ...LED indicators on the T1 E1 CSU DSU WAN interface card LED Indicator Description LED 1 Red The red alarm LED is lit when a loss of signal LOS or out of frame OOF condition is detected on the receive signal LED 2 Blue The blue alarm LED is lit when receiving an upstream failure denoted by an alarm indication signal AIS LED 3 Yellow The yellow alarm LED is lit when the far end equipment is in the re...

Page 48: ...Description LED 1 Off Port 1 is disabled On Port 1 is enabled and operating normally Flashing Port 1 is enabled and in an alarm state red yellow or blue LED 2 Off Port 2 is disabled On Port 2 is enabled and operating normally Flashing Port 2 is enabled and in an alarm state red yellow or blue LED 3 Off Port 3 is disabled On Port 3 is enabled and operating normally Flashing Port 3 is enabled and in...

Page 49: ...ble 14 describes the LEDs on the single V 35 X 21 WAN interface card Table 14 LED indicators on the single V 35 X 21 WAN interface card LED Indicator Description LED 1 Red No external transmit clock source is available LED 2 Green The signals CDC and DSR are on between the DSU and the adapter LED 2 detects receive link status LED 3 Green Power to the adapter is on and the onboard microcode is load...

Page 50: ...Module 1000 Off The SSL VPN Module 1000 is not receiving power Activity LED 1 Steady green The SSL VPN Module 1000 is operating normally Flashing green Activity is occurring on the SSL VPN Module 1000 Yellow A reset occurred on the SSL VPN Module 1000 Activity LED 2 Not used This LED is often lit but it has no meaning Utilization 4 LEDs Steady green Together these four LEDs indicate an approximate...

Page 51: ...u complete the procedures in this chapter you can configure and manage the VPN Router 2700 using a Web browser from a PC To configure the management IP address you use the serial interface configuration menu You must connect a PC or terminal to the serial port on the VPN Router 2700 This chapter contains the following topics Topic Page Required information 52 Configuring the management IP address ...

Page 52: ...st reside in the 10 2 network Subnet mask The subnet mask specifies which IP addresses are directly reachable on the network and which ones must be routed through a gateway For example the IP address 10 2 3 3 with a subnet mask of 255 255 0 0 indicates that all hosts with addresses 10 2 n n are directly reachable Default gateway optional The default gateway routes packets to destinations for which...

Page 53: ...al cable supplied with the VPN Router 2700 from the gateway s serial port to a terminal or to the communications port on a PC 3 On the PC start HyperTerminal or another terminal emulation program and press Enter The Nortel VPN Router screen appears Nortel VPN Router Copyright c 1999 2005 Nortel Networks Inc Version V07_0 024 Creation date Jul 6 2006 08 23 16 Unit Serial Number 510649 Please enter ...

Page 54: ...9 Shutdown B System Boot Options P Configure Serial Port C Controlled Crash L Command Line Interface R Reset System to Factory Defaults E Exit Save and Invoke Changes Please select a menu choice 0 9 B P C L R E 5 To configure the Interface IP address from the serial menu type 1 and press Enter The interface menu appears Interface Menu 0 Slot 0 Port 2 Public LAN IP Address Subnet Mask 0 0 0 0 Speed...

Page 55: ... Enter The subnet mask prompt appears Old Subnet Mask 0 0 0 0 New Subnet Mask 8 At the New Subnet Mask prompt type the subnet mask for the management IP address and press Enter The Speed Duplex prompt appears 9 Press Enter to leave the speed and duplex settings unchanged The Interface menu appears again with the changes you made 0 Slot 0 Port 2 Public LAN IP Address Subnet Mask 0 0 0 0 Speed Duple...

Page 56: ... address New management IP address 12 Type the new management IP address and press Enter to configure the management IP address The new IP management address appears in the Management IP Address menu Management IP address menu M Management IP Address 192 167 120 13 R Return to the Main Menu Please select a menu choice M R 13 Type R and press Enter to return to the serial main menu The serial main ...

Page 57: ...f the following browsers Windows 2000 and NT Internet Explorer 6 0 or later Mozilla 1 7 or later Firefox all versions Netscape 7 x 8 0 x or 8 1 x Unix Firefox 1 5 or later Mozilla 1 7 or later Linux Firefox 1 5 or later Mozilla 1 7 or later To test the management IP address on the VPN Router 2700 1 Open a Web browser 2 In the URL field enter http followed by the management IP address that you assi...

Page 58: ...configured is on the same subnet as the physical LAN attached to the gateway Ensure that your PC is running a supported browser see Testing the configuration on page 57 Check the physical connections on the VPN Router 2700 especially the LAN cable and the power cord VPN Router 2700 If you still cannot connect to the VPN Router 2700 using a browser connect a terminal or PC to the gateway with the s...

Page 59: ...and serial interface cards SSL VPN Module 1000 VPN Accelerator cards VPN Router Security Accelerator card and Hardware Accelerator card Dual inline memory modules DIMM This chapter contains the following topics Topic Page Shutting down the system to add or replace hardware 60 Removing the front bezel and top cover 61 Attaching the antistatic wrist strap 64 Installing and replacing option cards 65 ...

Page 60: ... example enter reload power off disable logins Upgrade hardware For the complete syntax of the reload command see the Nortel VPN Router Using the Command Line Interface NN46110 507 2 Wait for the system to shut down 3 Disconnect the power cord from the power outlet and then disconnect the cord from the VPN Router 2700 The power receptacle is on the rear of the VPN Router 2700 Warning Risk of elect...

Page 61: ...own the system to add or replace hardware on page 60 2 Use a Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise Figure 20 Figure 20 Removing the front bezel 3 Grip the two handles and firmly pull the bezel toward you to unsnap it from the chassis Warning Risk of electric shock Turn off the VPN Router 2700 and unplug the power cord before you atte...

Page 62: ...he front of the chassis remove the two panhead screws that secure the bottom of the chassis to the equipment rack b Remove the VPN Router 2700 from the rack mount shelf and set it on a sturdy surface 2 Use a Phillips screwdriver to remove the four screws that secure the cover to the chassis Figure 21 Figure 21 Removing the top cover 3 Slide the top cover forward approximately 1 4 inch CS260006A Re...

Page 63: ...board Figure 22 Location of option card slots and DIMMs on the system board Warning Risk of injury Beware of danger if you incorrectly replace the battery Replace the battery with the same type or an equivalent battery only as recommended by the manufacturer s instructions In spite of this warning which is mandated for regulatory approval you must not change the battery If you suspect a dead batte...

Page 64: ...ttach the antistatic wrist strap 1 Locate the antistatic wrist strap and verify that the cable is attached to the wrist strap 2 Place the strap around your wrist and adjust the strap to ensure that the metal buckle inside the strap touches your skin 3 Insert the banana plug into the grounding jack at the rear of the chassis Figure 23 Figure 23 Location of the grounding jack for the antistatic wris...

Page 65: ...m number Restrictions SSL VPN Module 10001 1 Install this card in slot 1 only VPN Router 2700 Security Accelerator2 2 Install two cards of either type or one card of each type But see Table 17 on page 66 Do not install a Hardware Accelerator card in slot 4 Hardware Accelerator3 10 100BASE TX Ethernet interface 4 1000BASE T 1000 GT Ethernet interface4 4 1000BASE T 1000 MT interface copper 2 Install...

Page 66: ...ter 7 00 062 7 05 100 and later or 7 05 300 and later The VPN Router 2600 supports 10 100 Mbps operation only 5 The VPN Router 2700 must be running Version 5 0 or later 6 The VPN Router 2700 must be running Version 4 90 or later 7 The VPN Router 2700 must be running Version 4 80 or later 8 The VPN Router 2700 must be running Version 4 80 or later 9 The gateway must be running Version 4 76 or later...

Page 67: ...trap on page 64 5 Locate the slot where you plan to install the new or replacement option card 1000BASE T or 1000BASE SX interface You can install two cards only if none of these cards is installed VPN Router Security Accelerator Hardware Accelerator HSSI If a VPN Router Security Accelerator Hardware Accelerator or HSSI card is installed only one 1000BASE T 1000 MT or 1000BASE SX card can be insta...

Page 68: ... 7 Lower the new option card into the slot and gently press the connector into the slot Seat the card firmly in the slot If you do not seat the card properly it does not work 8 Replace the screw that secures the card to the slot Figure 24 9 Replace the top cover on the chassis Figure 21 on page 62 a Hold the cover at an angle and slide it onto the chassis Motherboard Option card Filler panel screw...

Page 69: ...quipment rack a Set the VPN Router 2700 on the rack mount shelf in the rack b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack and tighten the screws 11 Replace the front bezel Figure 25 a Hold the bezel by the two handles and push it onto the chassis b Use a screwdriver to tighten the two screws that secure the bezel to the chassis Figur...

Page 70: ...r 2700 using the Web GUI or the CLI and then unplug it as described in Shutting down the system to add or replace hardware on page 60 2 Remove the front bezel from the chassis and then remove the chassis from the equipment rack see Removing the front bezel and top cover on page 61 3 Remove the top cover from the chassis see Removing the front bezel and top cover on page 61 Caution Use of a memory ...

Page 71: ...IMM Figure 26 on page 72 b Pull the DIMM up to remove it from the slot 6 Press down the locking lever on either side of the slot where you plan to install the new DIMM Figure 26 on page 72 7 Place the new or replacement DIMM in the slot Figure 26 on page 72 Use the alignment keys to properly position the DIMM in the slot 8 Press the DIMM firmly into the socket 9 Pull up the locking lever on either...

Page 72: ... to the chassis and use a screwdriver to tighten the screws 11 Do the following to install the VPN Router 2700 in an equipment rack a Set the VPN Router 2700 on the rack mount shelf in the rack b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack and tighten the screws To remove DIMMs pull back locking levers and pull out DIMM To install DI...

Page 73: ...3 Nortel VPN Router Installation VPN Router 2700 12 Replace the front bezel Figure 25 on page 69 a Hold the bezel by the two handles and push it onto the chassis b Use the screwdriver to tighten the two screws that secure the bezel to the chassis ...

Page 74: ...74 Chapter 4 Installing option cards and DIMMs NN46110 311 02 01 ...

Page 75: ...l specifications for the chassis Table 18 Physical electrical and environmental specifications Specification Description Physical Height 5 25 in 13 335 cm Width 17 in 43 18 cm Depth 21 in 53 34 cm Weight 28 lbs 12 7 kg Electrical Voltage 100 120 VAC 220 240 VAC Current 2 A 100 VAC 1 A 220 VAC Frequency 50 60 Hz Environmental Operating temperature 32 104oF 0 40oC Storage temperature 40 185oF 40 85o...

Page 76: ...select cables for the interface as follows 100BASE TX connections require Category 5 twisted pair wire The 100BASE TX specification supports 100 Mb s transmission over two pairs of Category 5 twisted pair Ethernet wiring one pair each for transmit and receive operations Nortel recommends a maximum length of 100 meters for the cable segment between a 100BASE TX repeater and a workstation due to sig...

Page 77: ...ent IP address and subnet mask to the newly installed gateway for more information see Chapter 3 Configuring the management IP interface on page 51 The serial cable provided with the VPN Router 2700 is a DB9 DB25 to DB9 DB25 cable This cable provides a crossover connection transmit to receive and receive to transmit The DB9 connector goes into the gateway and the other DB9 or DB25 connector goes i...

Page 78: ...RS 232 C modem port Figure 29 Table 20 Multiple DB9 and DB25 connector pinouts Serial port DB9 connector Serial port DB25 connector Serial port DB25 connector Serial port DB9 connector Pinout Signal Pinout Signal Pinout Signal Pinout Signal 2 RXD 3 TXD 2 RXD 3 TXD 3 TXD 2 RXD 3 TXD 2 RXD 4 DTR 20 DSR 6 DTR 6 DSR 5 Ground 7 Ground 7 Ground 5 Ground 6 DSR 6 DTR 20 DSR 4 DTR 7 RTS 4 RTS 5 CTS 8 CTS 8...

Page 79: ...e 1000 10 100BASE TX Ethernet interface card nonRoHS compliant Table 21 Modem cable pinouts Nortel termination Modem termination Signal Pin to Pin Signal Data Carrier Detect 1 8 Data Carrier Detect Transmit Data TXD 2 2 Transmit Data TXD Receive Data RXD 3 3 Receive Data RXD Data Set Ready 4 6 Data Set Ready Data Terminal Ready 6 20 Data Terminal Ready Clear to Send 7 5 Clear to Send Request to Se...

Page 80: ...cards including the connector and the cable pinouts for each supported network interface card VPN Router Security Accelerator cards Nortel supports the VPN Router Security Accelerator option card that performs bulk encryption and compression algorithms for IPsec tunnel traffic Figure 30 shows the VPN Router Security Accelerator card Figure 30 VPN Router Security Accelerator card The VPN Router Sec...

Page 81: ... encryption MAC and compression algorithms against their software counterparts In the event POST fails the accelerator card is set offline For more information about the VPN Router Security Accelerator card and the Hardware Accelerator card and instructions for configuring these cards see the guide Nortel VPN Router Configuration Advanced Features NN46110 502 SSL VPN Module 1000 The SSL VPN Module...

Page 82: ... the SSL VPN module 10 100BASE TX Ethernet interface card The 10 100BASE TX Ethernet interface card has a single RJ 45 connector that provides the signals needed to interface to 10BASE T and 100BASE TX Ethernet equipment Figure 32 shows the 10 100BASE TX Ethernet interface card Figure 32 10 100BASE TX Ethernet interface card For information about the cables that you can connect to this interface a...

Page 83: ...uplex operation on these platforms Nortel recommends that both the interface and the attached devices are hard coded to the appropriate matching 10 100 speed and duplex settings The 1000BASE T 1000 GT Ethernet card supports 10 100 1000 Mbit s operation in the VPN Router 2700 2750 For the 1000BASE T 1000 GT Ethernet interface card to be recognized by the system the minimum required VPN Router opera...

Page 84: ...s a maximum length of 100 meters for the cable segment For 100BASE TX operation use Category 5 twisted pair wiring one pair each for transmit and receive operations The cable must comply with the EIA 568 wiring specification Nortel recommends a maximum length of 100 meters for the cable segment For 10BASE T operation use Category 3 4 or 5 twisted pair wiring The following table provides the pinout...

Page 85: ... cables for this port as follows For 1000BASE T operation use Category 5 four pair Ethernet wiring The cable must comply with the TIA 568 wiring specification Nortel recommends a maximum length of 100 meters for a cable segment For 100BASE TX operation use Category 5 twisted pair wiring one pair each for transmit and receive operations The cable must comply with the EIA 568 wiring specification No...

Page 86: ...86 Appendix A Technical specifications NN46110 311 02 01 7 TP3 8 TP3 Table 23 1000BASE T 1000 MT Ethernet port pinouts Pin Description ...

Page 87: ...has a single type LC fiber connector Figure 35 shows the 1000BASE SX Ethernet interface card Figure 35 1000BASE SX Ethernet interface card The port on the 1000BASE SX Ethernet interface card accommodates a multimode fiber MMF cable that meets MMF standards Select fiber cable for this interface as follows 50 micron MMF cable provides a distance range of 500 550 meters m 62 5 micron MMF cable provid...

Page 88: ...1 and 2 and the receive signal pins 7 and 8 are carried on a twisted pair inside the patch cord Nortel strongly recommends that you use factory made patch cords You connect the 56 64K CSU DSU WAN interface card to the service provider network using a straight through cable or a crossover cable depending on how the service provider wired its jack For a straight through connection you can use a stan...

Page 89: ...eive ring not used 3 3 not used not used 4 4 not used not used 5 5 not used not used 6 6 not used Receive tip 7 1 Transmit tip Receive ring 8 2 Transmit ring Caution For crossover connections do not use Ethernet cable If you use Ethernet cable the link cannot be established Table 25 56 64K CSU DSU cable pinouts for straight through connection Nortel termination Remote termination Signal Pin to Pin...

Page 90: ... digital subscriber line access multiplexer DSLAM and to telephone equipment Figure 37 shows the ADSL WAN interface card Figure 37 ADSL WAN interface card Included in the accessory box is a 7 foot RJ 11 cable to attach to the DSLAM Table 26 provides the ADSL port pinouts Note The ADSL Annex A and ADSL Annex B cards look identical Table 26 ADSL cable pinouts Pin Function 1 N C 2 Tip 3 Ring 4 N C AD...

Page 91: ...shows the ISDN BRI S T interface card or the ISDN BRI U interface card Both interface cards look the same Figure 38 ISDN BRI S T interface card or ISDN BRI U interface card The connector on the ISDN BRI S T and ISDN BRI U interface cards accommodates an 8 pin RJ 45 modular patch cord These cables are sold as Category 5 or Ethernet cables Table 27 provides the ISDN BRI S T cable pinouts Note Nortel...

Page 92: ...as a half height card and as a full height card Figure 39 shows the T1 E1 CSU DSU WAN interface card half height card Figure 39 T1 E1 CSU DSU WAN interface card Figure 40 on page 93 shows the T1 E1 CSU DSU WAN interface card full height card Table 28 ISDN BRI U cable pinouts Pin Function 1 N C 2 N C 3 N C 4 U interface network connection tip 5 U interface network connection ring 6 N C 7 N C 8 N C ...

Page 93: ...ovider network using a straight through cable or a crossover cable depending on how the service provider wired its jack For a straight through connection you can use a standard Category 5 Ethernet straight through cable For a crossover connection you cannot use a standard Category 5 crossover cable Do not interchange the T1 E1 CSU DSU crossover cable and the Ethernet crossover cable Table 29 provi...

Page 94: ...he T1 E1 CSU DSU does not work to specifications This condition can corrupt data Table 30 T1 E1 CSU DSU cable pinouts for straight through connection Nortel termination Remote termination Signal Pin to Pin Signal Receive A RXDA 1 1 Receive A RXDA Receive B RXDB 2 2 Receive B RXDB not used 3 3 not used Transmit B TXDB 4 4 Transmit B TXDB Transmit A TXDA 5 5 Transmit A TXDA not used 6 6 not used not...

Page 95: ...the transmit signal pins 4 and 5 and the receive signal pins 1 and 2 Nortel strongly recommends that you use factory made patch cords You connect the quad T1 E1 CSU DSU WAN interface card to the service provider network using a straight through cable or a crossover cable depending on how the service provider wired its jack For a straight through connection you can use a standard Category 5 Etherne...

Page 96: ...ce card Included in the accessory box is a 7 foot RJ 11 cable to attach to a telephone jack Table 31 provides the V 90 modem port cable pinouts Single V 35 X 21 WAN interface card The single V 35 X 21 WAN interface card has a single DB28S connector that provides the signals needed to interface to V 35 and X 21 equipment Figure 43 shows the single V 35 X 21 WAN interface card Figure 43 Single V 35 ...

Page 97: ...x A or B refers to an individual wire within a twisted pair Table 32 V 35 cable pinouts Standard wired end 28 pin male Signal name Pair number and conductor Special wired end 34 pin male Notes 2 TXDA pair 1A P 14 TXDB pair 1B S 3 RXDA pair 2A R 16 RXDB pair 2B T 15 TXCA pair 3A Y 12 TXCB pair 3B AA 17 RXCA pair 4A V 9 RXCB pair 4B X 24 SCTEA pair 5A U 11 SCTEB pair 5B W 4 RTSA pair 6A C 19 RTSB pa...

Page 98: ...ividual wire within a twisted pair 25 TM pair 12A NN 26 M0 SIGNAL GROUND pair 12B B Note 2 27 M1 SIGNAL GROUND pair 13A B Note 2 28 M2 pair 13B no conn Note 1 1 SHIELD pair 14A A Notes 3 4 7 SIGNAL GROUND pair 14B B Notes 2 4 Table 33 X 21 cable pinouts Standard wired end 28 pin male Signal name Pair number and conductor Standard wired end 15 pin male Notes 2 TXDA pair 1A 2 14 TXDB pair 1B 9 3 RXD...

Page 99: ...ield to Signal Ground because these are separate signals 5 CTSA pair 7A 5 13 CTSB pair 7B 12 6 DSRA pair 8A no conn Note 2 22 DSRB pair 8B no conn Note 2 20 DTRA pair 9A no conn Note 2 23 DTRB pair 9B no conn Note 2 8 DCDA pair 10A no conn Note 2 10 DCDB pair 10B no conn Note 2 18 LL pair 11A no conn Note 2 21 RL pair 11B no conn Note 2 25 TM pair 12A no conn Note 2 26 M0 pair 12B no conn Note 2 2...

Page 100: ... shows the HSSI WAN interface card Figure 44 HSSI WAN interface card Included in the accessory box is a cable that maps the T3 signals out to a 50 pin SCSI II male connector Table 34 provides the T3 cable pinouts Table 34 T3 cable pinouts 50 pin SCSI male Signal name 50 pin SCSI male 1 GND 1 2 RCB 2 3 CAB 3 4 RDB 4 5 LCB 5 6 STB 6 7 GND 7 8 TAB 8 9 TTB 9 10 LAB 10 11 TDB 11 12 LBB 12 13 GND 13 19 ...

Page 101: ...lation VPN Router 2700 26 GND 26 27 RCA 27 28 CAA 28 29 RDA 29 30 LCA 30 31 STA 31 32 GND 32 33 TAA 33 34 TTA 34 35 LAA 35 36 TDA 36 37 LBA 37 38 GND 38 44 GND 44 49 TESTA 49 50 GND 50 Table 34 T3 cable pinouts continued 50 pin SCSI male Signal name 50 pin SCSI male ...

Page 102: ...102 Appendix A Technical specifications NN46110 311 02 01 ...

Page 103: ...rnet interface card cable specifications 85 connector 85 described 85 installing 65 56 64K CSU DSU WAN interface card cable pinouts 89 connector 88 described 88 installing 65 LEDs 45 A AC power cord connecting 38 ordering 27 requirements 38 accelerator cards hardware encryption described 80 installing 65 accessories hardware shipped with the gateway 27 acronyms 22 ADSL WAN interface card cable pin...

Page 104: ...ors 10 100BASE TX Ethernet interface card 82 10 100BASE TX system LAN port 76 1000BASE SX Ethernet interface 87 1000BASE T Ethernet interface 85 56 64K CSU DSU WAN interface 88 ADSL WAN interface 90 HSSI WAN interface 100 ISDN BRI S T interface 91 quad T1 E1 CSU DSU WAN interface 95 single V 35 X 21 WAN interface 96 T1 E1 CSU DSU WAN interface 92 V 90 modem interface 96 conventions text 22 cover t...

Page 105: ...terfaces option card technical specifications 79 interfaces system technical specifications 76 Internet Explorer supported versions 57 IP address for managing the gateway See management IP address ISDN BRI S T interface card cable pinouts 91 connector 91 installing 65 ISDN BRI U interface card cable pinouts 92 installing 65 L LAN interface cards installing 65 LEDs 10 100BASE TX Ethernet 42 1000BAS...

Page 106: ... DSU WAN interface 89 ADSL WAN interface 90 HSSI WAN interface 100 ISDN BRI S T interface 91 ISDN BRI U interface 92 modem cable 79 quad T1 E1 CSU DSU WAN interface 93 serial interface cable 77 single V 35 WAN interface 97 single X 21 WAN interface 98 T1 E1 CSU DSU WAN interface 93 V 90 modem interface 96 plug AC power specifications 38 power cord connecting 38 ordering 27 requirements 38 powering...

Page 107: ... WAN interface card See HSSI WAN interface card technical publications 24 technical specifications 75 testing connectivity to the gateway 57 text conventions 22 top cover removing 62 replacing 68 troubleshooting the management IP address 58 turning off the gateway 60 U user interface Web 57 V V 35 WAN interface card See dual V 35 WAN interface card V 35 X 21 WAN interface card See single V 35 X 21...

Page 108: ...56 64K CSU DSU 45 ADSL 46 quad T1 E1 CSU DSU 48 single V 35 X 21 49 T1 E1 CSU DSU 47 specifications 56 64K CSU DSU 88 ADSL 90 HSSI 100 quad T1 E1 CSU DSU 95 single V 35 X 21 96 T1 E1 CSU DSU 92 Web interface to the gateway 57 wiring requirements Category 5 76 84 85 wrist strap antistatic attaching 64 X X 21 WAN interface card See single V 35 X 21 WAN interface card ...

Search results

Summary of Contents for 2700

Reviews:

Related manuals for 2700

Brands by name

Popular brands

Nortel 2700, Installation Manual

Search results

Summary of Contents for 2700

Reviews:

Related manuals for 2700

Brands by name

Popular brands