Nortel 7 - Page 74

To Next Page

To Previous Page

74 Chapter 3 Setting up the Nortel VPN Router 1010, 1050, and 1100

NN46110-500

Main Page

Restricted Rights Legend2
Table of Contents5
Preface15
Before You Begin15
Text Conventions15
Acronyms17
Related Publications19
Hard-Copy Technical Manuals20
How to Get Help20
Finding the Latest Updates on the Nortel Web Site20
Getting Help from the Nortel Web Site20
Getting Help over the Phone from a Nortel Solutions Center21
Getting Help from a Specialist by Using an Express Routing Code21
Getting Help through a Nortel Distributor or Reseller21
New in this Release23
Features23
Systemlog Lifetime or Disk Size Limit Usage Option24
FTP Server Passive Mode Parameter24
Source Ips Access Restriction to Management24
SSH Server Configurations24
Overview25
Network Deployment Alternatives25
Virtual Private Networking26
Figure 1 Typical PDN26
Licensing Features27
Figure 2 VPN Service Models27
Command Line Interface28
Federal Information Processing Standard (FIPS)28
Getting Started29
IP Addressing29
Figure 3 Sample IP Addressing Scheme30
Table 1 Sample IP Addressing Associations30
Management Virtual Address31
Figure 4 MVA on Separate Subnet from Private Physical Interfaces32
Figure 5 MVA on same Subnet as Private Physical Interface33
Figure 6 MVA Managing from a Remote PC33
Configuring MVA with the Serial Menu34
Configuring Interfaces36
Multinetting38
Table 2 Services Supported on a Multinetted Interface39
Changing the Management IP Address41
Figure 7 Deployment Scenario41
Restricting Source Ips Access to Management44
Configuring ACL through the CLI44
Accessing ACL through the GUI45
Configuring the Serial Interface45
Using Boot Modes50
Managing through a Web Browser50
Preparing for Configuration52
Table 3 Web Interface Configuration Options53
Table 4 Configuration Checklist53
Welcome Window56
Setting up the Nortel VPN Router 1010, 1050, and 110059
Default Configuration59
Figure 8 Default Configuration60
Branch Office Quick Start Utility61
Enterprise Environment62
Service Provider Environment63
Table 5 Subnet Assignments63
Deployment Procedure65
Table 6 BOQS Parameters66
Branch Office Quick Start Template67
Connecting for Internet Access67
Before You Begin67
Check that You Received the Following Items67
Cable the VPN Router and Turn the Power on68
Make Sure that Your Pcs Can Obtain IP Addresses Automatically69
Test the VPN Router and Start the Quick-Start Tool69
DHCP Instructions70
Pppoe Instructions70
Static IP Instructions71
Compact Flash Disk72
Configuring User Tunnels75
Figure 9 Tunnel Connection Configuration75
Configuring Group Characteristics78
Setting up User Tunnels81
Configuring Inverse Split Tunneling85
Figure 10 Inverse Split Tunneling85
Figure 11 Inverse Split Tunneling86
Inverse Split Tunneling87
Using the 0.0.0.0/0 Subnet Wildcard87
Configuring the Subnet Wildcard87
Figure 12 Edit > Ipsec Page for Wildcard88
Table 7 Split Tunneling Mode Options88
Configuring Tunneling Modes Using the CLI89
Configuring the System91
Configuring the System Identity91
Setting up LAN Interfaces93
Figure 13 LAN-To-Nortel VPN Router Connection93
Edit LAN Interface Window95
Multinetting97
Figure 14 LAN > Interfaces Window98
Figure 15 LAN Interfaces > Add IP Address Window99
Configuring Multinetting Using the CLI100
Adding an IP Address100
Deleting an IP Address100
Table 8 Adding/Deleting a Secondary Address100
Table 9 Configuring OSPF over a Secondary Address101
Table 10 Configuring RIP over a Secondary Address102
Asynchronous Data over TCP105
Figure 16 Asynchronous Data over TCP105
Configuring Network Time Protocol (NTP)106
Configuring System Settings108
Using Proxy ARP111
Using the SSH Server to Allow Secure Sessions112
Using the GUI for SSH Server112
Enabling the SSH Server112
Figure 17 SSH Server112
Configuring the SSH Server113
Figure 18 Allowed Services Window114
Using the CLI for SSH Server115
Defining an SSH Server (CLI)115
Enabling or Restarting the SSH Server115
Displaying the Current Settings for the SSH Server116
Disabling the SSH Server116
Restricted Product - Export License Requirement117
Configuring Branch Office Tunnels119
Figure 19 Typical Branch Office Environment120
Figure 20 Branch-To-Branch with a Firewall and a Router121
Figure 21 Indirectly Connected Branch Offices122
PPTP Nested Tunnels123
DNS for Branch Office Tunnel Endpoints124
Vpn Dns124
Round Robin DNS125
Figure 22 VPN DNS125
Figure 23 Failover Example126
Dynamic DNS127
Figure 24 Load Balancing Example127
Configuring a Branch Office128
Figure 25 Setting up a Branch Office Configuration129
Adding a Group130
Adding a Tunnel130
Configuring a Tunnel Connection131
Sample Branch Office Configuration133
Figure 26 Sample Branch Office Configuration134
Sample Branch Office Procedure135
Configuring Control Tunnels137
Control Tunnel Types138
Figure 27 Branch Office Control Tunnel138
Figure 28 Sample Control Tunnel Environment139
Restricted Mode140
Nailed-Up Control Tunnels140
Creating Control Tunnels141
Adding a Group142
Adding a Control Tunnel143
Configuring a Control Tunnel Connection144
Creating a User Control Tunnel from the Serial Interface146
Configuring Ipsec Mobility and Persistent Mode147
Figure 29 Example Configuration148
Configuring Ipsec Mobility and Persistent Mode148
Ipsec Mobility on Nortel VPN Router149
Roaming Performance Factors149
Logging and Status for Clients and Servers149
Ipsec Mobility and NAT150
Roaming from Behind NAT to Behind NAT150
Roaming from Behind NAT to no NAT151
Roaming from no NAT to Behind NAT151
Ipsec Mobility in NAT Environment152
Routing Table Changes152
Table 11 Configuration Considerations152
Initial Contact Payload (ICP)153
Maximum Roaming Time154
Persistent Tunneling155
Session Persistence Time155
Configuring Ipsec Mobility and Persistence156
Configuring Ipsec Mobility156
Branch Office Quick Start Template163
Glossary165
Index173

Nortel 7 - Page 74

Table of Contents

Related product manuals