Nortel 5109 Manual

4655 Great America Parkway
Santa Clara, CA 95054
Phone 1-800-4Nortel
http://www.nortel.com
Nortel Switched Firewall
5100 Series Release 2.3.3
Hardware Installation Guide
TM
part number: 216382-D, October 2005

2
216382-D
Copyright © Nortel Networks 2002–2005. All rights reserved.
This document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, and decompilation. No part of this document may be reproduced in any form by any
means without prior written authorization of Nortel Networks, Inc. Documentation is provided “as is”
without warranty of any kind, either express or implied, including any kind of implied or express
warranty of non-infringement or the implied warranties of merchantability or fitness for a particular
purpose.
U.S. Government End Users: This document is provided with a “commercial item” as defined by FAR
2.101 (Oct 1995) and contains “commercial technical data” and “commercial software
documentation” as those terms are used in FAR 12.211-12.212 (Oct 1995). Government End Users
are authorized to use this documentation only in accordance with those rights and restrictions set forth
herein, consistent with FAR 12.211- 12.212 (Oct 1995), DFARS 227.7202 (JUN 1995) and DFARS
252.227-7015 (Nov 1995).
Nortel Networks, Inc. reserves the right to change any products described herein at any time, and
without notice. Nortel Networks, Inc. assumes no responsibility or liability arising from the use of
products described herein, except as expressly agreed to in writing by Nortel Networks, Inc. The use
and purchase of this product does not convey a license under any patent rights, trademark rights, or
any other intellectual property rights of Nortel Networks, Inc.
Nortel, Nortel Networks, the Nortel logo, and the Globemark are trademarks of Nortel Networks.
Check Point, OPSEC, and SmartUpdate are trademarks of Check Point Software Technologies Ltd.
Firewall-1 and VPN-1 are registered trademarks of Check Point Software Technologies Ltd.
Portions of this manual are Copyright © 2005 Check Point Software Technologies Ltd. All Rights
Reserved.
Portions of this manual are Copyright © 2004 Dell Computer Corporation. All Rights Reserved.
Any other trademarks appearing in this manual are owned by their respective companies.
Export
This product, software and related technology is subject to U.S. export control and may be subject to
export or import regulations in other countries. Purchaser must strictly comply with all such laws and
regulations. A license to export or reexport may be required by the U.S. Department of Commerce.
Licensing
This product includes software developed by Check Point Software Technologies (http://
www.checkpoint.com). This product also contains software developed by other parties.

3
Hardware Installation Guide
Regulatory Compliance
International regulatory statements of conformity
This is to certify that the Nortel Networks 5100 Series is evaluated to the international regulatory
standards for electromagnetic compliance (EMC) and safety and were found to have met the
requirements for the following international standards:
EMC - Electromagnetic Emissions – CISPR 22, Class A
EMC - Electromagnetic Immunity – CISPR 24
Electrical Safety – IEC 60950, with CB member national deviations
Further, the equipment has been certified as compliant with the national standards as detailed below.
National electromagnetic compliance (EMC) statements of
compliance
FCC statement (USA only)
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the Federal Communications Commission (FCC) rules. These limits are
designed to provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment. This equipment generates, uses, and can radiate radio
frequency energy. If it is not installed and used in accordance with the instruction manual, it may
cause harmful interference to radio communications. Operation of this equipment in a residential area
is likely to cause harmful interference, in which case users will be required to take whatever measures
may be necessary to correct the interference at their own expense.
ICES statement (Canada only)
Canadian Department of Communications Radio Interference Regulations
This digital apparatus does not exceed the Class A limits for radio-noise emissions from digital
apparatus as set out in the Radio Interference Regulations of the Canadian Department of
Communications.
Règlement sur le brouillage radioélectrique du ministère des
Communications
Cet appareil numérique respecte les limites de bruits radioélectriques visant les appareils numériques
de classe A prescrites dans le Règlement sur le brouillage radioélectrique du ministère des
Communications du Canada.
CE marking statement (Europe only)
EN 55 022 statements
This is to certify that the Nortel Networks equipment are shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC. Conformity is
declared by the application of EN 55 022 Class A (CISPR 22).

4
216382-D
Warning: This is a Class A product. In a domestic environment, this product may cause radio
interference, in which case, the user may be required to take appropriate measures.
Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb
dieses Gerätes Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende
Gegenmaßnahmen verantwortlich ist.
Attention: Ceci est un produit de Classe A. Dans un environnement domestique, ce produit risque de
créer des interférences radioélectriques, il appartiendra alors à l’utilisateur de prendre les mesures
spécifiques appropriées.
EN 55 024 statement
This is to certify that the Nortel Networks equipment is shielded against the susceptibility to radio
interference in accordance with the application of Council Directive 89/336/EEC. Conformity is
declared by the application of EN 55 024 (CISPR 24).
EC Declaration of Conformity
This product conforms to the provisions of the R&TTE Directive 1999/5/EC.
VCCI statement (Japan/Nippon only)
This is a Class A product based on the standard of the Voluntary Control Council for Interference
(VCCI) for information technology equipment. If this equipment is used in a domestic environment,
radio disturbance may arise. When such trouble occurs, the user may be required to take corrective
actions.
BSMI statement (Taiwan only)
This is a Class A product based on the standard of the Bureau of Standards, Metrology and Inspection
(BSMI) CNS 13438, Class A.
MIC notice (Republic of Korea only)
This device has been approved for use in Business applications only per the Class A requirements of
the Republic of Korea Ministry of Information and Communications (MIC). This device may not be
sold for use in a non-business application. Reference Regulatory label on the base of the equipment
for specific Korean approval information.

5
Hardware Installation Guide
National Safety Statements of Compliance
CE marking statement (Europe only)
EN 60 950 statement
This is to certify that the Nortel Networks equipment are in compliance with the requirements of EN
60 950 in accordance with the Low Voltage Directive. Additional national differences for all
European Union countries have been evaluated for compliance. Some components installed within
the 8000 Series chassis may use a nickel-metal hydride (NiMH) and/or lithium-ion battery. The
NiMH and lithium-ion batteries are long-life batteries, and it is very possible that you will never need
to replace them. However, should you need to replace them, refer to the individual component manual
for directions on replacement and disposal of the battery.
Lithium Battery Cautions
Caution—This product contains a lithium battery. Batteries are not customer replaceable parts. They
may explode if mishandled. Do not dispose of the battery in fire. Do not disassemble or recharge.
(Norge) ADVARSEL—Litiumbatteri - Eksplosjonsfare. Ved utskifting benyttes kun batteri som
anbefalt av apparatfabrikanten. Brukt batteri returneres apparatleverandøren.
(Sverige) VARNING—Explosionsfara vid felaktigt batteribyte. Använd samma batterityp eller en
ekvivalent typ som rekommenderas av apparattillverkaren. Kassera använt batteri enligt fabrikantens
instruktion.
(Danmark) ADVARSEL! Litiumbatteri - Eksplosionsfare ved fejlagtig håndtering. Udskiftning må
kun ske med batteri af samme fabrikat og type. Levér det brugte batteri tilbage til leverandøren.
(Suomi)VAROITUS—Paristo voi räjähtää, jos se on virheellisesti asennettu. Vaihda paristo
ainoastaan laitevalmistajan suosittelemaan tyyppiin. Hävitä käytetty paristo valmistajan ohjeiden
mukaisesti.
Safety Information
Caution—Nortel Networks products are designed to work with single-phase power systems having a
grounded neutral conductor. To reduce the risk of electric shock, do not plug Nortel Networks
products into any other type of power system. Contact your facilities manager or a qualified
electrician if you are not sure what type of power is supplied to your building.
Caution—Not all power cords have the same ratings. Household extension cords do not have
overload protection and are not meant for use with computer systems. Do not use household extension
cords with your Nortel Networks product.
Caution—Your Nortel Networks product is shipped with a grounding type (three-wire) power cord.
To reduce the risk of electric shock, always plug the cord into a grounded power outlet.

6
216382-D
NOM statement (Mexico only)
The following information is provided on the devices described in this document in compliance with
the safety requirements of the Norma Oficial Méxicana (NOM):
Exporter:Nortel Networks, Inc.
4655 Great America Parkway
Santa Clara CA 95054 USA
Importer:Nortel Networks de México, S.A. de C.V.
Avenida Insurgentes Sur #1605
Piso 30, Oficina
Col. San Jose Insurgentes
Deleg-Benito Juarez
México D.F. 03900
Tel:[phone]
Fax: [phone]
Input:100 to 240 VAC, 50 to 60 Hz, 9 A max. per power supply
single supply, or + one redundant supply configurations
Información NOM (unicamente para México)
La información siguiente se proporciona en el dispositivo o en los dispositivos descritos en este
documento, en cumplimiento con los requisitos de la Norma Oficial Méxicana (NOM):
Exportador: Nortel Networks, Inc.
4655 Great America Parkway
Santa Clara, CA 95054 USA
Importador: Nortel Networks de México, S.A. de C.V.
Avenida Insurgentes Sur #1605
Piso 30, Oficina
Col. San Jose Insurgentes
Deleg-Benito Juarez
México D.F. 03900
Tel: [phone]
Fax:[phone]
Embarcar a:100 to 240 V CA, 50 to 60 Hz, 9 A max. por fuente de poder
una fuente o una + configuraciones de una fuente redundante

216382-D, October 2005
7
Contents
Contents 7
Preface 11
Who should use this book 11
How this book is organized 11
Typographic conventions 12
How to get help 13
Getting help from the Nortel web site 13
Getting help over the telephone from a Nortel Solutions Center 13
Using an Express Routing Code to get help from a specialist 14
Getting help through a Nortel distributor or reseller 14
Chapter 1: Introduction 15
Related documentation 16
Platform summary 16
Hardware platforms 17
Switched Firewall 5111-NE1 17
Switched Firewall 5114-NE1 20
Switched Firewall 5106 22
Switched Firewall 5109 24
Switched Firewall 5114 26
Removing and attaching the bezel 28
Chapter 2: Installing 31
Required equipment 32
Safety precautions 33
Rack installation 34
Removing the bezel 34
Marking the rack 34
Mounting the NSF 5111-NE1 and

8
216382-D
NSF 5114-NE1 36
Mounting the NSF 5106, NSF 5109, or NSF 5114 37
Stand-alone or tabletop installation 38
Chapter 3: Connecting 39
Connecting network cables 40
Example Switched Firewall network topology 40
Network connector and cable specifications 43
RJ-45 Connector specifications for 10/100/1000 Mbps Ethernet 43
Network cables: straight-through versus crossover 44
LC fiber-optic connector specifications for Gigabit Ethernet 45
Port LED indicators 46
NSF 5111-NE1 46
NSF 5114-NE1 47
NSF 5106 48
NSF 5109 49
NSF 5114 50
Connecting power 51
Connecting AC power for the Switched Firewall 51
Turning power on and off 52
Connecting a console terminal 52
Requirements 52
Console connector and cable specifications 53
Establishing a connection 54
Appendix A: Specifications 55
NSF 5111-NE1 and NSF 5114-NE1 56
Physical characteristics 56
Power requirements 56
Port specifications for NSF 5111-NE1 and NSF 5114-NE1 57
Supported standards 57
Environmental specifications 57
NSF 5106 58
Physical characteristics 58
Power requirements 58
Port specifications 59
Supported standards 59
Environmental specifications 59

9
Hardware Installation Guide
NSF 5109 and NSF 5114 60
Physical characteristics 60
Power requirements 60
Port specifications for NSF 5109 and NSF 5114 60
Supported standards 61
Environmental specifications 61

10
216382-D

216382-D, October 2005
11
Preface
This Hardware Installation Guide describes the Nortel Switched Firewall 5100 Series
hardware platforms, introduces the components and features of the system, and explains how
to perform installation, configuration, and maintenance.
Who should use this book
This Hardware Installation Guide is intended for network installers and system administrators
engaged in configuring and maintaining a network. The installers and administrators must be
familiar with Ethernet concepts and IP addressing.
How this book is organized
The chapters in this book are organized as follows:
Chapter 1, Introduction, provides an overview of the major features of the Nortel Switched
Firewall, including the physical layout of its components and the basic concepts behind
component operation.
Chapter 2, Installing, describes how to mount the Nortel Switched Firewall, connect network
cables, and attach power.
Chapter 3, Connecting, describes how to connect the components of a Nortel Switched
Firewall 5100 Series.
Appendix A, Specifications, describes the physical characteristics of the Nortel Switched
Firewall components.

Nortel Switched Firewall 5100 Series 2.3.3 Hardware Installation Guide
12 Preface
216382-D, October 2005
Typographic conventions
The following table describes the typographic styles used in this book.
Table 1 Typographic Conventions
Typeface or
Symbol
Meaning Example
AaBbCc123 This fixed-width type is used for names of
commands, files, and directories used within
the text.
View the readme.txt file.
It also depicts on-screen computer output and
prompts.
Main#
AaBbCc123 This italicized type shows book titles, special
terms, or words to be emphasized.
Read your User’s Guide
thoroughly.
AaBbCc123 This fixed-width, bold type appears in com-
mand examples. It shows text that must be
typed in exactly as shown.
Main# sys
<AaBbCc123> Italicized type within angle-brackets appears
in command examples as a parameter place-
holder. Replace the indicated text with the
appropriate real name or value when using the
command. Do not type the brackets.
To establish a Telnet
session, enter:
host# telnet <IP address>
[ ] Command items shown inside square brack-
ets are optional and can be used or excluded
as the situation demands. Do not type the
brackets.
host# ls [-a]
|Command items separated by the vertical bar
depict a list of possible values, only one of
which should be entered. The vertical bar can
be literally considered to mean “or.”
System# autoneg on|off
This can also be used to separate different
selections within a window-based menu bar.
Select Edit | Copy from
the window’s menu bar.
<Key> Non-alphanumeric keyboard items are shown
in regular type inside brackets. When
directed, press the appropriate key. Do not
type the brackets.
Press the <Enter> key.

Nortel Switched Firewall 5100 Series 2.3.3 Hardware Installation Guide
Preface 13
216382-D, October 2005
How to get help
This section explains how to get help for Nortel products and services.
Getting help from the Nortel web site
Technical support for Nortel products is available on the Nortel Technical Support web site at:
www.nortel.com/support.
The Nortel Technical Support web site delivers quick access to software, documentation,
bulletins, and tools to provide technical support for Nortel products.
Use the Nortel Technical Support web site to do the following:
download technical information, including the following items:
software
documentation
product bulletins
search the Technical Support web site and the Nortel Knowledge Base for answers to
technical questions
sign up for automatic notification of new software and documentation for Nortel
equipment
open and manage technical support cases
Getting help over the telephone from a Nortel Solutions
Center
If you do not find the information you require on the Nortel Technical Support web site, you
can get help over the telephone from a Nortel Solutions Center. You must have a Nortel
support contract to use the Nortel Solutions Center.
To reach a Nortel Solutions Center, do one of the following;
In North America, call 1–800–4NORTEL (1–800–466–7835).
Outside North America, go to the following web site to obtain the telephone number for
your region: www.nortel.com/callus.

Nortel Switched Firewall 5100 Series 2.3.3 Hardware Installation Guide
14 Preface
216382-D, October 2005
Using an Express Routing Code to get help from a specialist
You can find Express Routing Codes (ERC) for many Nortel products and services on the
Nortel Technical Support web site. ERCs allow you to connect directly to service and support
organizations based on specific products or services.
To locate the ERC for your product or service, go to www.nortel.com/erc.
Getting help through a Nortel distributor or reseller
If you purchased a service contract for your Nortel product from a distributor or authorized
reseller, contact the technical support staff for that distributor or reseller.

216382-D, October 2005
15
CHAPTER 1
Introduction
This hardware installation guide describes the Nortel Switched Firewall 5100 Series hardware
platforms and how to install them.
This chapter discusses the following topics:
Related documentation on page 16
Platform summary on page 16
Hardware platforms on page 17
Switched Firewall 5111-NE1 on page 17
Switched Firewall 5114-NE1 on page 20
Switched Firewall 5106 on page 22
Switched Firewall 5109 on page 24
Switched Firewall 5114 on page 26
Removing and attaching the bezel on page 28

Nortel Switched Firewall 5100 Series Hardware Installation Guide
216382-D, October 2005
16 Chapter 1: Introduction
Related documentation
For setup, configuration, software maintenance, and release-specific information, see the
following related documentation:
Nortel Switched Firewall 2.3.3 User’s Guide and Command Reference (213455-L)
Nortel Switched Firewall 2.3.3 Browser-Based Users Guide (216383-D)
Nortel Switched Firewall 5100 Series 2.3.3 Release Notes (213456-S)
The documents are posted on the Nortel Technical Support web site.
Platform summary
The Nortel Switched Firewall 5100 Series hardware platforms are shipped with the following
hardware systems:
Existing systems: NSF 5111-NE1, NSF 5114-NE1, NSF 5106, NSF 5109, and NSF 5114.
The platforms differ with respect to hardware features and performance; however, in all other
operational aspects—software, certification, system management, logging, and monitoring—
the platforms are the same.
Table 2 describes the hardware features of the NSF 5111-NE1 and NSF 5114 NE1 platforms.
Table 2 Hardware features for the NSF 5111-NE1 and NSF 5114-NE1 Platforms
Switched Firewall
Features
5111-NE1 5114-NE1
Port capacity Two embedded
10/100/1000 Mbps Copper
Ethernet ports.
1 quad Copper Ethernet (4
10/100/1000 Mbps Copper
Ethernet ports.)
Two embedded
10/100/1000 Mbps Copper
Ethernet ports.
1 dual fiber Ethernet (2
1000 Mbps fiber Ethernet
ports.)
RAM 512 MB 1 GB
hard drive capac-
ity
40 GB 40 GB
Dimension/Chassis 1U, 19-inch rack-mount 1U, 19-inch rack-mount

Nortel Switched Firewall 5100 Series Hardware Installation Guide
216382-D, October 2005
Chapter 1: Introduction 17
Table 3 describes the hardware features for the NSF 5106, NSF 5109, and NSF 5114
platforms.
Hardware platforms
This section describes the hardware platforms.
Switched Firewall 5111-NE1
Figure 1 shows the NSF 5111-NE1 with the front bezel.
Figure 1 NSF 5111-NE1 with front bezel
Table 3 Hardware Features for the NSF 5106, NSF 5109, and NSF 5114 Platforms
Switched
Firewall
Features
5106 5109 5114
Port
capacity
Two embedded
10/100 Mbps Ether-
net ports.
1 dual Copper
Ethernet (2
10/100/1000 Mbps
ports).
Two embedded
10/100/1000 Mbps
Copper Ethernet
ports.
1 quad Copper Ether-
net (4 10/100 Mbps
Copper Ethernet
ports.
Two embedded
10/100/1000 Mbps
Copper Ethernet ports.
1 dual fiber Ethernet
(2 1000Base-SX mul-
timode fiber with LC
type connectors.)
RAM 512 MB 512 MB 1 GB
hard drive
capacity
20 GB 40 GB 40 GB
Dimension/
Chassis
1U, 19-inch
rack-mount
1U, 19-inch rack-
mount
1U, 19-inch rack-
mount
System Status LED
Hard Disk Activity LED
Reset Button Power LED
Power Button
Switched Firewall 5109

Nortel Switched Firewall 5100 Series Hardware Installation Guide
216382-D, October 2005
18 Chapter 1: Introduction
Figure 2 shows the NSF 5111-NE1 with the bezel removed. For instructions on how to remove
the bezel, refer to Removing and attaching the bezel on page 28.
Figure 2 NSF 5111-NE1 front panel
1. CD-ROM drive
Supported media:
hardware: CD-R , CD-RW
filesystem: iso9660, joliet
2. Reset button
The reset button is equivalent to quickly pressing the power off/on button twice on a running
system. Nortel recommends that you to power off using the power button, wait for 10 seconds,
and then power on the system, instead of using the reset button.
3. Power button
4. System status LED (amber)
The system status LED indicates the operation of the four fans, CPU temperature, chassis
ambient temperature, and the voltage (+5v, +12v).
LED is normally off. If the system detects a problem with any of the system voltages, temperature
sensors, or fans, this LED blinks amber.When the system is reset, the LED is off. When the system is
running, this LED displays solid green. If the system hangs, the LED flashes.
5. Hard drive activity LED (green)
This LED blinks when activity is detected on the hard drive.
6. Power LED (green)
7. USB ports: 2
The USB devices supported are:
4
23
567
1

Nortel Switched Firewall 5100 Series Hardware Installation Guide
216382-D, October 2005
Chapter 1: Introduction 19
USB storage memory stick (having FAT filesystem)
APC Uninterruptible Power Supply (UPS) with USB interface
Figure 3 shows the rear panel of the NSF 5111-NE1
Figure 3 NSF 5111-NE1 rear panel.
1. Power on/off switch
2. Power socket or AC receptacle
3. Power supply fan
4. Auxiliary cooling fan
5. Serial port (DCE, for console connection)
6. Port 1 10/100/1000 Mbps copper Ethernet
7. Port 2 10/100/1000 Mbps copper Ethernet
(See Table 11 on page 47 for ports 1 and 2 LED status conditions.)
8. Port 3 10/100/1000 Mbps copper Ethernet
9. Port 4 10/100/1000 Mbps copper Ethernet
10. Port 5 10/100/1000 Mbps copper Ethernet
11. Port 6 10/100/1000 Mbps copper Ethernet
(See Table 10 on page 46 for ports 3—6 LED status conditions.)
23
7
6
8 910 11
15
4

Nortel Switched Firewall 5100 Series Hardware Installation Guide
216382-D, October 2005
20 Chapter 1: Introduction
Switched Firewall 5114-NE1
The NSF 5114-NE1 front panel bezel is identical to the NSF 5111-NE1 front panel bezel (see
Figure 2). Figure 4 shows the NSF 5114-NE1 with the front bezel.
Figure 4 NSF 5114-NE1 with front bezel
Figure 5 shows the NSF 5114-NE1 with the bezel removed. See Removing and attaching the
bezel on page 28 for instructions on how to remove or attach the NSF 5114-NE1 front panel
bezel.
Figure 5 NSF 5114-NE1 front panel
1. CD-ROM drive
Supported media:
hardware: CD-R , CD-RW
filesystem: iso9660, joliet
2. Reset button
The reset button is equivalent to quickly pressing the power off /on button twice on a running
system. Nortel recommends that you power off using the power button, wait for 10 seconds,
and then power on the system, instead of using the reset button.
System Status LED
Hard Disk Activity LED
Reset Button Power LED
Power Button
Switched Firewall 5114
4
23
567
1