Nortel 2750, Installation Manual

Page 1: ...Version 7 05 300 NN46110 318 02 01 322831 B Rev 01 November 2007 Standard 600 Technology Park Drive Billerica MA 01821 4130 Nortel VPN Router Installation VPN Router 2750 ...

Page 2: ...o the products described in this document without notice Nortel Networks Inc does not assume any liability that may occur due to the use or application of the product s or circuit layout s described herein USA requirements only Federal Communications Commission FCC Compliance Notice Radio Frequency Notice Note This equipment has been tested and found to comply with the limits for a Class A digital...

Page 3: ...r für entsprechende Gegenmaßnahmen verantwortlich ist Attention Ceci est un produit de Classe A Dans un environnement domestique ce produit risque de créer des interférences radioélectriques il appartiendra alors à l utilisateur de prendre les mesures spécifiques appropriées EC Declaration of Conformity This product conforms or these products conform to the provisions of the R TTE Directive 1999 5...

Page 4: ...t any one time or to the extent of the activation or authorized usage level whichever is applicable To the extent Software is furnished for use with designated hardware or Customer furnished equipment CFE Customer is granted a nonexclusive license to use Software only on such hardware or CFE as applicable Software contains trade secrets and Customer agrees to treat Software as confidential informa...

Page 5: ...d for or on behalf of the United States Government the respective rights to the software and software documentation are governed by Nortel Networks standard commercial license in accordance with U S Federal Regulations at 48 C F R Sections 12 212 for non DoD entities and 48 C F R 227 7202 for DoD entities b Customer may terminate the license at any time Nortel Networks may terminate the license if...

Page 6: ...6 NN46110 318 02 01 ...

Page 7: ...p from a specialist by using an Express Routing Code 18 Getting help through a Nortel distributor or reseller 19 Preface 21 Before you begin 21 Text conventions 22 Acronyms 22 Related publications 23 Printed technical manuals 24 Chapter 1 Installing the Nortel VPN Router 2750 chassis 25 Description of the Nortel VPN Router 2750 25 Preparing to install the Nortel VPN Router 2750 26 Shipment content...

Page 8: ...Front panel LEDs 40 LEDs on the system 10 100BASE TX Ethernet ports 41 10 100BASE TX Ethernet interface card LEDs 42 1000BASE T 1000 GT Ethernet interface card LEDs 43 1000BASE T 1000 MT Ethernet interface card LEDs 43 1000BASE SX Ethernet interface card LED 44 56 64K CSU DSU WAN interface card LEDs 46 ADSL WAN interface card LEDs 47 T1 E1 CSU DSU WAN interface card LEDs 48 Quad T1 E1 CSU DSU WAN ...

Page 9: ... System ports 78 10 100BASE TX Ethernet LAN ports 78 Serial port 79 Modem cable specifications 80 Hardware option cards 81 VPN Router Security Accelerator 82 SSL VPN Module 1000 83 10 100BASE TX Ethernet interface card 84 1000BASE T 1000 GT Ethernet interface card 85 1000BASE T 1000 MT Ethernet interface card 87 1000BASE SX Ethernet interface card 88 56 64K CSU DSU WAN interface card 89 ADSL WAN i...

Page 10: ...10 Contents NN46110 318 02 01 Index 103 ...

Page 11: ...1000BASE SX Ethernet interface card 44 Figure 14 LEDs on the 56 64K CSU DSU WAN interface card 46 Figure 15 LEDs on the ADSL WAN interface card 47 Figure 16 LEDs on the T1 E1 CSU DSU WAN interface card 48 Figure 17 LEDs on the quad T1 E1 CSU DSU WAN interface card 49 Figure 18 LEDs on the single V 35 X 21 WAN interface card 50 Figure 19 LEDs on the SSL VPN Module 1000 51 Figure 20 Removing the fro...

Page 12: ...t interface card 87 Figure 35 1000BASE SX Ethernet interface card 88 Figure 36 56 64K CSU DSU WAN interface card 89 Figure 37 ADSL WAN interface card 91 Figure 38 ISDN BRI S T or IDSDN BRI U 92 Figure 39 T1 E1 CSU DSU WAN interface card half height card 94 Figure 40 T1 E1 CSU DSU WAN interface card full height card 94 Figure 41 Quad T1 E1 CSU DSU WAN interface card 96 Figure 42 V 90 modem interfac...

Page 13: ...e T1 E1 CSU DSU WAN interface card 48 Table 13 LED indicators on the quad T1 E1 CSU DSU WAN interface card 49 Table 14 LED indicators on the single V 35 X 21 WAN interface card 50 Table 15 LED indicators on the SSL VPN Module 1000 51 Table 16 Supported option cards for the Nortel VPN Router 2750 2750 68 Table 17 Installing other option cards with the SSL VPN Module 1000 69 Table 18 Physical electr...

Page 14: ...0 T1 E1 CSU DSU cable pinouts for crossover connection 95 Table 31 T1 E1 CSU DSU cable pinouts for straight through connection 96 Table 32 V 90 modem cable pinouts 98 Table 33 V 35 cable pinouts 98 Table 34 X 21 cable pinouts 100 Table 35 T3 cable pinouts 101 ...

Page 15: ...PN Router 2750 NN46110 318 for Release 7 05 300 Features See the following sections for information about feature related changes 1000BASE T 1000 GT Ethernet card The 1000BASE T 1000 GT Ethernet card is new for Release 7 05 300 See 1000BASE T 1000 GT Ethernet interface card LEDs on page 43 and 1000BASE T 1000 GT Ethernet interface card on page 85 ...

Page 16: ...16 New in this release NN46110 318 02 01 ...

Page 17: ...me the product was released To check for updates to the latest documentation and software for the VPN Router 2750 go to www nortel com support Select Security VPN and then in the section called Virtual Private Networking VPN IPSEC and SSL click the appropriate VPN Router product Getting help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Techn...

Page 18: ... a Nortel Solutions Center If you do not find the information you require on the Nortel Technical Support Web site and you have a Nortel support contract you can also get help over the phone from a Nortel Solutions Center In North America call 1 800 4NORTEL 1 800 466 7835 Outside North America go to the following Web site to obtain the phone number for your region www nortel com callus Getting hel...

Page 19: ...ation VPN Router 2750 Getting help through a Nortel distributor or reseller If you purchased a service contract for your Nortel product from a distributor or authorized reseller contact the technical support staff for that distributor or reseller ...

Page 20: ...20 How to get help NN46110 318 02 01 ...

Page 21: ...ical specifications for the VPN Router 2750 For complete information about configuring and monitoring the VPN Router 2750 see the documentation on the software CD For information about VPN Router documentation see Related publications on page 23 Before you begin This guide is intended for qualified service personnel who are installing the VPN Router 2750 for the first time or who need to install o...

Page 22: ... titles plain Courier text Indicates system output for example prompts and system messages Example File not found separator Shows menu paths Example Choose Status Health Check ADSL asymmetric digital subscriber line AES Advanced Encryption Standard AIS alarm indication signal CSU DSU channel service unit digital service unit DES Data Encryption Standard DIMM dual inline memory module DTE data term...

Page 23: ...vices as well as digital certificates Nortel VPN Router Security Firewalls Filters NAT and QoS NN46110 601 provides instructions for configuring the Stateful Firewall NAT and VPN Router interface and tunnel filters Nortel VPN Router Configuration Tunneling Protocols NN46110 503 provides instructions for configuring the tunneling protocols IPsec L2TP PPTP and L2F Nortel VPN Router Configuration Adv...

Page 24: ...o configure manage and monitor the gateway Nortel VPN Router Troubleshooting NN46110 602 provides information about backup and recovery file management upgrading software and troubleshooting This guide also provides instructions for monitoring gateway status and performance Printed technical manuals You can print selected technical manuals and release notes free directly from the Internet Go to ww...

Page 25: ...data network The VPN Router 2750 provides routing firewall bandwidth management encryption authentication and data integrity services to ensure secure tunneling across IP networks and the Internet The VPN Router 2750 is available in two models VPN Router 2750 with five tunnels 128 bit VPN Router 2750 with 2 000 tunnels 128 bit Note Before you install the chassis ensure that you install all network...

Page 26: ...interconnect PCI slots that can contain optional interface cards a VPN Router Security Accelerator card and the Secure Sockets Layer SSL VPN Module 1000 a memory of 256 MB that is upgradable to 512 MB total Preparing to install the Nortel VPN Router 2750 Before you begin the installation verify that Your shipment is complete and undamaged You have the cables tools and other equipment that you need...

Page 27: ...ead screws Secures the rack mount shelf and the chassis to the equipment rack 4 10 32 panhead cage nuts Used if the equipment rack does not have threaded rail holes 4 Rubber feet Used to install the chassis on a surface 1 Antistatic wrist strap Directs the discharge of static electricity from your body to the chassis to prevent damage to sensitive electronic components 1 Molded serial cable DB9 DB...

Page 28: ...strator Hardware for mounting the chassis in an equipment rack To install the VPN Router 2750 in an equipment rack you need a Phillips screwdriver and an equipment rack that meets the following specifications heavy duty steel construction width of 19 in 48 26 cm and depth of 24 in 60 96 cm Electronic Industries Association EIA standard hole spacing If the rack does not have threaded rail holes you...

Page 29: ...t rack on page 30 Installing the chassis on a flat surface If you decide to place the VPN Router 2750 on a flat surface ensure that the surface is large enough for the gateway and sturdy enough to support the combined weight of the VPN Router 2750 and the cables that you attach to it The VPN Router 2750 accessory kit includes four rubber feet that you can attach to the bottom of the gateway Figure...

Page 30: ...ack does not exceed 104oF Do not block the power supply vents or otherwise restrict air flow when installing the chassis in the rack Stabilize your rack so that it does not tip over under the weight of the gateway and other devices Ensure that the electrical branch circuits can handle the VPN Router 2750 and other units in the rack before you install and turn on the gateway Maintain a reliable ear...

Page 31: ...he shelf with holes in the front of the rack Figure 4 Installing the shelf in the equipment rack 4 Snap the support flange into place Figure 4 Ensure that the alignment pin above the flange fits into the appropriate hole 5 Insert one of the supplied panhead screws through the top hole on each side of the shelf into the hole in the rack and tighten the screws Figure 4 CS260003A Cage nut Rail withou...

Page 32: ...bezel from the VPN Router 2750 Figure 5 a Use the Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise Figure 5 Removing the front bezel b Grip the two handles and firmly pull the bezel toward you to unsnap it from the chassis The first several times that you remove the front bezel the bezel can stick because the ball studs and socket clips are new...

Page 33: ...the bottom hole on each side of the shelf into the hole in the rack and tighten the screws Figure 4 on page 31 4 Replace the front bezel Figure 6 a Hold the two handles on the bezel and push it onto the chassis b Use the Phillips screwdriver to tighten the two screws that secure the bezel to the chassis Figure 6 Replacing the front bezel CS260005E Press here ...

Page 34: ...34 Chapter 1 Installing the Nortel VPN Router 2750 chassis NN46110 318 02 01 ...

Page 35: ...ics Caution Connect the cables to the built in Ethernet ports and to the interfaces on the option cards installed in the VPN Router 2750 before you plug the power cord into the outlet Topic Page Connecting communications cables 36 Connecting the power cord 37 Verifying a successful installation 39 Understanding the LEDs 40 Caution You must route the cabling for all wide area network WAN local area...

Page 36: ...le pinouts see Appendix A Technical specifications on page 77 Table 2 Interfaces and cables for the Nortel VPN Router 2750 Cable available from Nortel Interface Included Ordered separately Contact supplier 10 100BASE TX Ethernet system ports X Serial port X 10 100BASE TX Ethernet X 1000BASE T 1000 GT Ethernet X 1000BASE T 1000 MT Ethernet copper X 1000BASE SX Ethernet fiber X1 1 Order either the L...

Page 37: ...cable shipped with the VPN Router 2750 to the serial port Figure 7 if you plan to connect a terminal or PC to the gateway 3 Connect all other cables to the ports on the installed interface cards If you ordered optional interface cards connect the cables for these interfaces to the ports Connecting the power cord You must order the power cord for the VPN Router 2750 separately Caution Risk of equip...

Page 38: ...for the available AC voltage and must have a current rating that is at least 125 percent of the gateway s current rating 5 A 100 VAC or 3 A 240 VAC Certification The power cord must have certification marks from an acceptable regional agency Cord length and flexibility The power cord must be less than 4 5 meters 14 7 feet long It must be a flexible HAR harmonized cord or VDE certified cordage to c...

Page 39: ...dy LED lights green to indicate that the gateway is operational after the boot process is complete 5 The Alert LED lights yellow because the gateway is not configured For a newly installed VPN Router 2750 a yellow Alert LED does not indicate an alarm condition After you configure the gateway the Alert LED turns off See Chapter 3 Configuring the management IP interface on page 53 If the LEDs on the...

Page 40: ... For complete information about the health check event log and system log see Nortel VPN Router Troubleshooting Table 4 Front panel LED indicators LED Indicator Description Power Nortel logo On The gateway is receiving AC power Off The gateway is not receiving AC power Alert Yellow A non fatal alarm condition exists The yellow alert condition is described in the health check display Red A serious ...

Page 41: ...scribes the LEDs on the system 10 100BASE TX Ethernet ports Table 5 LED indicators on the system 10 100BASE TX Ethernet ports LED Indicator Description Green On The LAN port is operating at 100 Mb s Off The LAN port is operating at 10 Mb s Yellow On The cable connections between the LAN port and the hub are good Off The cable connections between the LAN port and the hub are faulty Flashing The LAN...

Page 42: ...Ds on the 10 100BASE TX Ethernet interface card Table 6 LED indicators on the 10 100BASE TX Ethernet interface card LED Indicator Description ACT LINK Steady green or Flashing green The card is sending or receiving network data The frequency of the flashes increases with increased traffic Off The card is not sending or receiving data 10 100TX Green The port is operating at 100 Mb s Off The port is...

Page 43: ...terface card 1000BASE T 1000 MT Ethernet interface card LEDs Figure 12 shows the LEDs on the 1000BASE T Ethernet interface card Table 7 LED indicators on the 1000 GT Ethernet interface card LED Indicator Description ACT LINK Steady green The port is connected to a valid link partner Flashing green The card is sending or receiving network data The frequency of the flashes increases with increased t...

Page 44: ...X Ethernet interface card Table 8 LED indicators on the 1000BASE T 1000 MT Ethernet interface card LED Indicator Description ACT LNK Steady green The port is connected to a valid link partner Flashing green The LAN port is sending or receiving network data Off The port is not linked to a valid partner 10 100 1000 Off The LAN port is operating at 10 Mb s Green The LAN port is operating at 100 Mb s ...

Page 45: ...bes the LED on the 1000BASE SX Ethernet interface card Table 9 LED indicator on the 1000BASE SX Ethernet interface card LED Indicator Description ACT LNK Steady green The port is connected to a valid link partner Flashing green The LAN port is sending or receiving network data Off The port is not linked to a valid partner ...

Page 46: ...rface card detects a DDS out of frame OOF condition on the receive signal Red The red alarm LED is lit when the interface card detects a DDS loss of signal LOS or loss of frame LOF condition on the receive signal Yellow The yellow alarm LED is lit when the interface card detects a DDS out of service condition on the receive signal This LED indicates that the far end equipment detects a local LOS o...

Page 47: ...terface card CONN LED Tx Rx LED Description Steady green Steady green The ADSL interface card is not initialized the software driver is not installed Off Off The ADSL interface card is initialized but has not established a link with the ADSL network Flashing green Off The ADSL interface card is attempting to establish a link with the ADSL network Steady green Off The ADSL interface card has establ...

Page 48: ...on the T1 E1 CSU DSU WAN interface card LED Indicator Description LED 1 Red The red alarm LED is lit when a loss of signal LOS or out of frame OOF condition is detected on the receive signal LED 2 Blue The blue alarm LED is lit when receiving an upstream failure denoted by an alarm indication signal AIS LED 3 Yellow The yellow alarm LED is lit when the far end equipment is in the red alarm conditi...

Page 49: ...SU WAN interface card LED Indicator Description LED 1 Off Port 1 is disabled On Port 1 is enabled and operating normally Flashing Port 1 is enabled and in an alarm state red yellow or blue LED 2 Off Port 2 is disabled On Port 2 is enabled and operating normally Flashing Port 2 is enabled and in an alarm state red yellow or blue LED 3 Off Port 3 is disabled On Port 3 is enabled and operating normal...

Page 50: ...es the LEDs on the single V 35 X 21 WAN interface card Table 14 LED indicators on the single V 35 X 21 WAN interface card LED Indicator Description LED 1 Red No external transmit clock source is available LED 2 Green The signals CDC and DSR are on between the DSU and the adapter LED 2 detects receive link status LED 3 Green Power to the adapter is on and the onboard microcode is loaded LED 4 Green...

Page 51: ... occurred on the SSL VPN Module 1000 Off The SSL VPN Module 1000 is not receiving power Activity LED 1 Steady green The SSL VPN Module 1000 is operating normally Flashing green Activity is occurring on the SSL VPN Module 1000 Yellow A reset occurred on the SSL VPN Module 1000 Activity LED 2 Not used This LED is often lit but it has no meaning Utilization 4 LEDs Steady green Together these four LED...

Page 52: ...52 Chapter 2 Cabling the VPN Router and turning the power on NN46110 318 02 01 ...

Page 53: ...After you complete the procedures in this chapter you can configure and manage the VPN Router 2750 using a Web browser from a PC To configure the management IP interface you use the serial interface configuration menu You must connect a PC or terminal to the serial port on the VPN Router 2750 This chapter contains the following topics Topic Page Required information 54 Configuring the management I...

Page 54: ...st reside in the 10 2 network Subnet mask The subnet mask specifies which IP addresses are directly reachable on the network and which ones must be routed through a gateway For example the IP address 10 2 3 3 with a subnet mask of 255 255 0 0 indicates that all hosts with addresses 10 2 n n are directly reachable Default gateway optional The default gateway routes packets to destinations for which...

Page 55: ...serial cable supplied with the VPN Router 2750 from the gateway s serial port to a terminal or to the communications port on a PC 3 On the PC start HyperTerminal or another terminal emulation program and press Enter The Welcome window appears Welcome to the VPN Router Copyright c 1999 2005 Nortel Networks Inc Version V06_20 004 Creation date Mar 7 2006 13 52 02 Unit Serial Number 19677 Please ente...

Page 56: ...9 Shutdown B System Boot Options P Configure Serial Port C Controlled Crash L Command Line Interface R Reset System to Factory Defaults E Exit Save and Invoke Changes Please select a menu choice 0 9 B P C L R E 5 To configure the Interface IP address from the serial menu type 1 and press Enter The interface menu appears Interface Menu 0 Slot 0 Port 2 Public LAN IP Address Subnet Mask 0 0 0 0 Speed...

Page 57: ... Enter The subnet mask prompt appears Old Subnet Mask 0 0 0 0 New Subnet Mask 8 At the New Subnet Mask prompt type the subnet mask for the management IP address and press Enter The Speed Duplex prompt appears 9 Press Enter to leave the speed and duplex settings unchanged The Interface menu appears again with the changes you made 0 Slot 0 Port 2 Public LAN IP Address Subnet Mask 0 0 0 0 Speed Duple...

Page 58: ... address New management IP address 12 Type the new management IP address and press Enter to configure the management IP address The new IP management address appears in the Management IP Address menu Management IP address menu M Management IP Address 192 167 120 13 R Return to the Main Menu Please select a menu choice M R 13 Type R and press Enter to return to the serial main menu The serial main ...

Page 59: ...cape 7 x 8 0 x or 8 1 x Unix Firefox 1 5 Monzilla 1 7 Linux Firefox 1 5 Monzilla 1 7 To test the management IP address on the VPN Router 2750 1 Open a Web browser 2 In the URL field enter http followed by the management IP address that you assigned to the VPN Router 2750 For example if the management IP address is 47 17 248 52 enter http 47 17 248 52 If the Welcome window appears you correctly con...

Page 60: ...ttached to the gateway Ensure that your PC is running a supported browser see Testing the configuration on page 59 Check the physical connections on the VPN Router 2750 especially the LAN cables and the power cord If you still cannot connect to the VPN Router 2750 using a browser connect a terminal or PC to the gateway with the serial cable and check the management IP address listed in the serial ...

Page 61: ...ter 2750 LAN WAN and serial interface cards Secure Sockets Layer SSL VPN Module 1000 VPN Router Security Accelerator card Dual inline memory modules DIMM This chapter contains the following topics Topic Page Shutting down the system to add or replace hardware 62 Removing the front bezel and top cover 63 Attaching the antistatic wrist strap 67 Installing and replacing option cards 68 Installing and...

Page 62: ...gateway after shutdown CLI Use the reload command to shut down the system For example enter reload power off disable logins Upgrade hardware For the complete syntax of the reload command see Nortel VPN Router Using the Command Line Interface NN46110 507 2 Wait for the system to shut down 3 Disconnect the power cord from the power outlet and then disconnect the cord from the VPN Router 2750 The pow...

Page 63: ...ezel 1 Shut down the VPN Router 2750 using the Web GUI or the CLI and then unplug it as described in Shutting down the system to add or replace hardware on page 62 2 Use a Phillips screwdriver to turn each of the two screws on the front bezel a quarter turn counterclockwise Figure 20 Figure 20 Removing the front bezel Warning Risk of electric shock Turn off the VPN Router 2750 and unplug it before...

Page 64: ...move the VPN Router 2750 from the rack if the router is installed in an equipment rack a At the front of the chassis remove the two panhead screws that secure the bottom of the chassis to the equipment rack b Remove the VPN Router 2750 from the rack mount shelf c Set the VPN Router 2750 on a sturdy surface 2 Use a Phillips screwdriver to remove the four screws that secure the cover to the chassis ...

Page 65: ...de the top cover forward approximately 1 4 inch 4 Lift the lid 2 or 3 inches and pull it off the chassis The VPN Router 2750 system board is now exposed Figure 22 shows the location of the option card and DIMM slots on the system board CS260006A Remove these 4 screws Slide cover forward and lift up Boot Ready Alert Alert Boot Ready ...

Page 66: ...correctly replace the battery Replace the battery with the same type or an equivalent battery only as recommended by the manufacturer s instructions In spite of this warning which is mandated for regulatory approval you must not change the battery If you suspect a dead battery contact Nortel Customer Support Option card slots DIMMs 1 and 2 DIMM slots CS160004A 2 1 PCI slots 1 2 3 4 ...

Page 67: ...IMMs To attach the antistatic wrist strap 1 Locate the antistatic wrist strap and verify that the cable is attached to the wrist strap 2 Place the strap around your wrist and adjust the strap to ensure that the metal buckle inside the strap touches your skin 3 Insert the banana plug into the grounding jack at the rear of the chassis Figure 23 Figure 23 Location of the grounding jack for the antist...

Page 68: ... two 1000BASE T 1000 MT 1000 MT cards two 1000BASE SX cards or one card of each type But see Table 17 on page 69 1000BASE SX interface fiber 5 56 64K channel service unit digital service unit CSU DSU WAN interface6 4 Asymmetric digital subscriber line ADSL WAN interface7 4 Integrated Services Digital Network ISDN BRI S T or U interface8 4 T1 CSU DSU WAN interface full height 4 For E1 support you m...

Page 69: ... or later 8 The VPN Router 2750 2750 must be running Version 4 80 or later 9 The VPN Router 2750 2750 must be running Version 4 90 or later 10 The VPN Router 2750 2750 must be running Version 4 80 or later 11 The VPN Router 2750 2750 must be running Version 4 80 or later 12 The gateway must be running Version 4 76 or later or the hardware revision must be at least 03 Table 17 Installing other opti...

Page 70: ...e chassis see Removing the front bezel and top cover on page 63 4 Attach the antistatic wrist strap that was shipped with the VPN Router 2750 see Attaching the antistatic wrist strap on page 67 5 Locate the slot where you plan to install the new or replacement option card 6 Remove the filler panel screw 7 Pull out the filler panel or the option card that you are replacing from the slot Figure 24 W...

Page 71: ...seat the card it does not work 9 Replace the screw that secures the card to the slot Figure 24 on page 71 10 Replace the top cover on the chassis Figure 21 on page 65 a Hold the cover at an angle and slide it onto the chassis b Insert the four screws that secure the cover to the chassis and use a screwdriver to tighten the screws 11 Do the following to install the VPN Router 2750 in an equipment r...

Page 72: ...ure 25 a Hold the bezel by the two handles and push the bezel onto the chassis b Use a screwdriver to tighten the two screws that secure the bezel to the chassis Figure 25 Replacing the front bezel Installing and replacing DIMMs The VPN Router 2750 has two slots for dual inline memory modules DIMM Figure 22 on page 66 Unless you ordered additional memory the VPN Router 2750 is shipped with one 256...

Page 73: ... rack see Removing the front bezel and top cover on page 63 3 Remove the top cover from the chassis see Removing the front bezel and top cover on page 63 4 Attach the antistatic wrist strap that was shipped with the VPN Router 2750 see Attaching the antistatic wrist strap on page 67 Caution Use of a memory module not purchased from Nortel can render void your warranty or your service contract Caut...

Page 74: ...ot where you plan to install the new DIMM Figure 26 7 Place the new or replacement DIMM in the slot Figure 26 Use the alignment keys to properly position the DIMM in the slot 8 Press the DIMM firmly into the socket 9 Pull up the locking lever on either side of the DIMM to snap it into position Figure 26 Installing and removing a DIMM To remove DIMMs pull back locking levers and pull out DIMM To in...

Page 75: ...hten the screws 11 To install the VPN Router 2750 in an equipment rack do the following a Set the VPN Router 2750 on the rack mount shelf in the rack b Insert one of the panhead screws through the bottom hole on each side of the shelf into the hole in the rack and tighten the screws Figure 4 on page 31 12 Replace the front bezel Figure 25 on page 72 a Hold the bezel by the two handles and push the...

Page 76: ...76 Chapter 4 Installing option cards and DIMMs NN46110 318 02 01 ...

Page 77: ...l specifications for the chassis Table 18 Physical electrical and environmental specifications Specification Description Physical Height 5 25 in 13 335 cm Width 17 in 43 18 cm Depth 21 in 53 34 cm Weight 28 lbs 12 7 kg Electrical Voltage 100 240 VAC Current 5 A 100 VAC or 3 A 240 VAC Frequency 50 60 Hz Environmental Operating temperature 32 104oF 0 40oC Storage temperature 40 185oF 40 85oC Operati...

Page 78: ...BASE T or 100BASE TX operation select cables for the interfaces as follows 100BASE TX connections require Category 5 twisted pair wire The 100BASE TX specification supports 100 Mb s transmission over two pairs of Category 5 twisted pair Ethernet wiring one pair each for transmit and receive operations Nortel recommends a maximum length of 100 meters for the cable segment between a 100BASE TX repea...

Page 79: ...ess and subnet mask to the newly installed gateway for more information see Chapter 3 Configuring the management IP interface on page 53 The serial cable that Nortel supplies with the VPN Router 2750 is a DB9 DB25 to DB9 DB25 cable This cable provides a crossover connection transmit to receive and receive to transmit The DB9 connector goes into the gateway and the other DB9 or DB25 connector goes ...

Page 80: ... C modem port Figure 29 on page 81 Table 20 Multiple DB9 and DB25 connector pinouts Serial port DB9 connector Serial port DB25 connector Serial port DB25 connector Serial port DB9 connector Pinout Signal Pinout Signal Pinout Signal Pinout Signal 2 RXD 3 TXD 2 RXD 3 TXD 3 TXD 2 RXD 3 TXD 2 RXD 4 DTR 20 DSR 6 DTR 6 DSR 5 Ground 7 Ground 7 Ground 5 Ground 6 DSR 6 DTR 20 DSR 4 DTR 7 RTS 4 RTS 5 CTS 8 ...

Page 81: ...000 GT Ethernet interface card Table 21 Modem cable pinouts Nortel termination Modem termination Signal Pin to Pin Signal Data Carrier Detect 1 8 Data Carrier Detect Transmit Data TXD 2 2 Transmit Data TXD Receive Data RXD 3 3 Receive Data RXD Data Set Ready 4 6 Data Set Ready Data Terminal Ready 6 20 Data Terminal Ready Clear to Send 7 5 Clear to Send Request to Send 8 4 Request to Send Pin 1 Pin...

Page 82: ...rted network interface card For more information about the restrictions on the option cards see Table 16 on page 68 VPN Router Security Accelerator Nortel supports the VPN Router Security Accelerator option card that performs bulk encryption and compression algorithms for IPsec tunnel traffic Figure 30 shows the VPN Router Security Accelerator card Figure 30 VPN Router Security Accelerator card Th...

Page 83: ...he hardware This test includes validation of the accelerator s encryption MAC and compression algorithms against their software counterparts In the event POST fails the accelerator card is set offline For more information about the VPN Router Security Accelerator card and instructions for configuring this card see the guide Nortel VPN Router Configuration Advanced Features NN46110 502 SSL VPN Modu...

Page 84: ...he SSL VPN module 10 100BASE TX Ethernet interface card The 10 100BASE TX Ethernet interface card has a single RJ 45 connector that provides the signals needed to interface to 10BASE T and 100BASE TX Ethernet equipment Figure 32 shows the 10 100BASE TX Ethernet interface card Figure 32 10 100BASE TX Ethernet interface card For information about the cables that you can connect to this interface and...

Page 85: ...t s and in full duplex mode at 1 Gbit s At 1 Gbit s autonegotiation must be used The 1000BASE T 1000 GT Ethernet card supports 10 100 1000 Mbit s operation in the VPN Router 2700 2750 For the 1000BASE T 1000 GT Ethernet interface card to be recognized by the system the minimum required VPN Router operating software is 5 05 330 6 05 140 and all subsequent versions 7 00 062 7 05 100 and all subseque...

Page 86: ...ion Nortel recommends a maximum length of 100 meters for the cable segment For 100BASE TX operation use Category 5 twisted pair wiring one pair each for transmit and receive operations The cable must comply with the EIA 568 wiring specification Nortel recommends a maximum length of 100 meters for the cable segment For 10BASE T operation use Category 3 4 or 5 twisted pair wiring The following table...

Page 87: ...ables for this port as follows For 1000BASE T operation use Category 5 four pair Ethernet wiring The cable must comply with the TIA 568 wiring specification Nortel recommends a maximum length of 100 meters for the cable segment For 100BASE TX operation use Category 5 twisted pair wiring one pair each for transmit and receive operations The cable must comply with the EIA 568 wiring specification No...

Page 88: ...ows the 1000BASE SX Ethernet interface card Figure 35 1000BASE SX Ethernet interface card The port on the 1000BASE SX Ethernet interface card accommodates a multimode fiber MMF cable that meets MMF standards Select fiber cable for this interface as follows 50 micron MMF cable provides a distance range of 500 550 meters m 62 5 micron MMF cable provides a distance range of 220 275 m You can order a ...

Page 89: ...tes an 8 pin RJ 48 modular patch cord Use cable that is wired in accordance with ANSI T1 410 wiring style This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal pins 1 and 2 and the receive signal pins 7 and 8 Nortel strongly recommends that you use professionally manufactured patch cords You connect the 56 64K CSU DSU WAN interface card to the service prov...

Page 90: ...ination Signal Pin to Pin Signal Transmit tip 1 7 Receive tip Transmit ring 2 8 Receive ring not used 3 3 not used not used 4 4 not used not used 5 5 not used not used 6 6 not used Receive tip 7 1 Transmit tip Receive ring 8 2 Transmit ring Table 25 56 64K CSU DSU cable pinouts for straight through connection Nortel termination Remote termination Signal Pin to Pin Signal Transmit tip 1 1 Transmit ...

Page 91: ...igure 37 shows the ADSL WAN interface card Figure 37 ADSL WAN interface card Included in the accessory box with the ADSL WAN interface card is a 7 foot cable to attach to the DSLAM The Annex A cable is an RJ 11 to RJ 11 cable The Annex B cable is an RJ 11 to RJ 45 cable Table 26 provides the pinouts for the ADSL Annex A cable Note The ADSL Annex A and ADSL Annex B cards look identical Table 26 ADS...

Page 92: ...l NT 1 device to the RJ 45 connector Figure 38 shows the ISDN BRI S T interface card or the ISDN BRI U interface card The two look identical Figure 38 ISDN BRI S T or IDSDN BRI U The connector on the ISDN BRI S T and ISDN BRI U interface cards accommodates an 8 pin RJ 45 modular patch cord These cables are sold as Category 5 or Ethernet cables Table 27 ADSL Annex B cable pinouts RJ 11 termination ...

Page 93: ... pinouts Table 29 provides the ISDN BRI U cable pinouts Table 28 ISDN BRI S T cable pinouts Pin Function 1 N C 2 N C 3 Receive 4 Transmit 5 Transmit 6 Receive 7 N C 8 N C Table 29 ISDN BRI U cable pinouts Pin Function 1 N C 2 N C 3 N C 4 U interface network connection tip 5 U interface network connection ring 6 N C 7 N C 8 N C ...

Page 94: ...1 E1 CSU DSU WAN interface card full height card The connector on the T1 E1 CSU DSU WAN interface accommodates an 8 pin RJ 48 modular patch cord These cables are commonly sold as Category 5 or Ethernet cables Use cable that is wired in accordance with EIA 568 A wiring style This wiring style ensures that a twisted pair inside the patch cord carries the transmit signal pins 4 and 5 and the receive ...

Page 95: ...et crossover cable Table 30 provides the T1 E1 CSU DSU cable pinouts for a crossover connection The cable operates properly if you do not connect pins 3 6 7 and 8 Table 30 T1 E1 CSU DSU cable pinouts for crossover connection Standard wired end 8 pin male Signal name Pair number and conductor Special wired end 8 pin male 1 RXDA TXDA wht org pair 2A 5 2 RXDB TXDB orange pair 2B 4 3 not used wht grn ...

Page 96: ...rd Each connector on the quad T1 E1 CSU DSU WAN interface card accommodates an 8 pin RJ 48 modular patch cord These cables are sold as Category 5 or Ethernet cables Table 31 T1 E1 CSU DSU cable pinouts for straight through connection Nortel termination Remote termination Signal Pin to Pin Signal Receive A RXDA 1 1 Receive A RXDA Receive B RXDB 2 2 Receive B RXDB not used 3 3 not used Transmit B TX...

Page 97: ... connection you can use a standard Category 5 Ethernet straight through cable For a crossover connection you cannot use a standard Category 5 crossover cable Do not interchange the T1 E1 CSU DSU crossover cable and the Ethernet crossover cable For information about the cable pinouts for a crossover connection see Table 30 on page 95 For information about the cable pinouts for a straight through co...

Page 98: ...rvice unit channel service unit between the WAN connection and the gateway You can order a V 35 or X 21 cable to attach to the connector With this cable the WAN adapter can function as DTE data terminal equipment Table 33 provides the V 35 cable pinouts Table 34 on page 100 provides the X 21 cable pinouts The pair suffix A or B refers to an individual wire within a twisted pair Table 32 V 90 modem...

Page 99: ... 11 SCTEB pair 5B W 4 RTSA pair 6A C 19 RTSB pair 6B no conn Note 1 5 CTSA pair 7A D 13 CTSB pair 7B no conn Note 1 6 DSRA pair 8A E 22 DSRB pair 8B J 20 DTRA pair 9A H 23 DTRB pair 9B no conn Note 1 8 DCDA pair 10A F 10 DCDB pair 10B no conn Note 1 18 LL pair 11A L 21 RL pair 11B N 25 TM pair 12A NN 26 M0 SIGNAL GROUND pair 12B B Note 2 27 M1 SIGNAL GROUND pair 13A B Note 2 28 M2 pair 13B no conn...

Page 100: ...d conductor Standard wired end 15 pin male Notes 2 TXDA pair 1A 2 14 TXDB pair 1B 9 3 RXDA pair 2A 4 16 RXDB pair 2B 11 15 TXCA pair 3A 6 12 TXCB pair 3B 13 17 RXCA pair 4A pair 5A Note 1 9 RXCB pair 4B pair 5B Note 1 24 SCTEA pair 5A pair 4A Note 1 11 SCTEB pair 5B pair 4B Note 1 4 RTSA pair 6A 3 19 RTSB pair 6B 10 5 CTSA pair 7A 5 13 CTSB pair 7B 12 6 DSRA pair 8A no conn Note 2 22 DSRB pair 8B ...

Page 101: ...WAN interface card The HSSI WAN interface card has a 50 pin SCSI II female connector that provides the signals needed to interface to a T3 modem or modem eliminator Figure 44 shows the HSSI WAN interface card Figure 44 HSSI WAN interface card Included in the accessory box is a cable that maps the T3 signals out to a 50 pin SCSI II male connector Table 35 provides the T3 cable pinouts 28 M2 SIGNAL ...

Page 102: ...AB 10 11 TDB 11 12 LBB 12 13 GND 13 19 GND 19 24 TESTB 24 25 GND 25 26 GND 26 27 RCA 27 28 CAA 28 29 RDA 29 30 LCA 30 31 STA 31 32 GND 32 33 TAA 33 34 TTA 34 35 LAA 35 36 TDA 36 37 LBA 37 38 GND 38 44 GND 44 49 TESTA 49 50 GND 50 Table 35 T3 cable pinouts continued 50 pin SCSI male Signal name 50 pin SCSI male ...

Page 103: ...U DSU WAN interface card cable pinouts 90 92 connector 89 described 89 LEDs 46 A AC power cord connecting 38 ordering 27 requirements 38 accessories hardware shipped with the gateway 27 acronyms 22 ADSL WAN interface card cable pinouts Annex A 91 cable pinouts Annex B 92 connector 91 described 91 LEDs 47 antistatic wrist strap attaching 67 B bezel front removing 32 63 replacing 33 72 browsers supp...

Page 104: ...4K CSU DSU WAN interface 89 ADSL WAN interface 91 HSSI WAN interface 101 ISDN BRI S T interface 92 quad T1 E1 CSU DSU WAN interface 96 single V 35 X 21 WAN interface 98 T1 E1 CSU DSU WAN interface 94 V 90 modem interface 97 conventions text 22 cover top removing 64 replacing 71 D default gateway defined 54 DIMMs dual inline memory modules installing 72 E electrical specifications 77 environmental ...

Page 105: ...ble pinouts 93 L LAN interface cards LEDs 10 100BASE Ethernet 42 1000BASE SX Ethernet 44 1000BASE T 1000 GT Ethernet 43 1000BASE T 1000 MT Ethernet 43 specifications 10 100 TXBASE 84 1000BASE SX 88 1000BASE T 87 LAN ports system cable specifications 78 connector 78 LEDs 41 LEDs 10 100BASE TX Ethernet interface card 42 1000BASE SX Ethernet interface card 44 1000BASE T 1000 GT Ethernet interface car...

Page 106: ...rface 98 plug AC power specifications 38 power cord connecting 38 ordering 27 requirements 38 powering down the gateway 62 processor cards See VPN Router Security Accelerator card Hardware Accelerator card SSL VPN Module 1000 publications hard copy 24 related 23 Q quad T1 E1 CSU DSU WAN interface card cable pinouts 95 connector 96 described 96 LEDs 49 R rack equipment specifications 28 rack mount ...

Page 107: ... card See single V 35 X 21 WAN interface card V 90 modem interface card cable pinouts 98 connectors 97 verifying a successful installation 39 verifying the management IP interface 59 VPN Router 2750 configuring management IP address for 53 connecting cables to 35 connecting power cord 38 description 25 installing option cards and DIMMs 61 option cards installing 68 supported in VPN Router 2750 68 ...

Page 108: ...108 Index NN46110 318 02 01 X X 21 WAN interface card See single V 35 X 21 WAN interface card ...