Nortel BSR222 User manual

BSR222
Business Secure Router
Document Number: NN47922-301
Document Version: 1.4
Date: May 2007
Nortel Business Secure Router 222 — Fundamentals

2
NN47922-301NN47922-301
Copyright © Nortel 2005–2006
All rights reserved.
The information in this document is subject to change without notice. The statements, configurations, technical data, and
recommendations in this document are believed to be accurate and reliable, but are presented without express or implied
warranty. The information in this document is proprietary to Nortel.
Trademarks
Nortel, Nortel (Logo), the Globemark, and This is the way, This is Nortel (Design mark) are trademarks of Nortel.
Microsoft, MS, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
All other trademarks and registered trademarks are the property of their respective owners.

3
Nortel Business Secure Router 222 — Fundamentals
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Text conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Acronyms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Hard-copy technical manuals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
AC Power Adapter Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 1
Introducing the Business Secure Router . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Chapter 2
Hardware installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1 Front panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.2 Rear panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Chapter 3
Setting up your computer IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3.1 Static or dynamic configuration (Windows 2000/NT/XP) . . . . . . . . . . . . . . . . . 17
3.2 Checking your computer IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 4
Configuring your Business Secure Router . . . . . . . . . . . . . . . . . . . . . . . . . 21
4.1 Accessing your Business Secure Router via the WebGUI . . . . . . . . . . . . . . . 21
4.2 Using the wizard to configure for internet access . . . . . . . . . . . . . . . . . . . . . . 24
Internet connection with ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Internet connection with PPPoE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Internet connection with PPTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4Contents
NN47922-301
WAN IP address assignment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
4.3 Test your internet connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Chapter 5
User Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
General Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
VPN Client Termination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Advanced Router Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Setting up the router when the system has a server . . . . . . . . . . . . . . . . . . . . 35
Connecting two sites to establish a virtual private network . . . . . . . . . . . . . . . 35
Adding IP telephony to a multi-site network . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Configuring the router to act as a Nortel VPN Server (Client Termination) . . . 37
Configuring the router to connect to a Nortel VPN Server (Client Emulation) . 37
Allowing remote management of a LAN-connected BCM50 . . . . . . . . . . . . . . 37
Setting up the router for guest access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Preventing heavy data traffic from impacting telephone calls . . . . . . . . . . . . . 38
Setting Up a Remote Office with a UNIStim IP Telephone . . . . . . . . . . . . . . . 39
Inter-Operability With Third-Party Routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
VPN Connections With Cisco Routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Chapter 6
Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Problem: None of the LEDs turn on when you turn on the Business Secure Router
41
Problem: You cannot access the Business Secure Router from the LAN . . . . 41
Problem: You cannot ping any computer on the LAN . . . . . . . . . . . . . . . . . . . 41
Problem: You cannot get a WAN IP address from the ISP . . . . . . . . . . . . . . . 42
Problem: You cannot access the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

5
Nortel Business Secure Router 222 — Fundamentals
Table 1 Internet account information worksheet 11
Table 2 Front panel details 14
Table 3 Rear panel details 15

6
NN47922-301

Preface 7
Nortel Business Secure Router 222 — Fundamentals
Preface
This Quick Start Guide provides instructions for installing and configuring your
Nortel Business Secure Router 222 as an Office Gateway for your network. After
completing this guide, you can access the Internet securely through your Nortel
Business Secure Router 222.
Before you begin
This Quick Start Guide is intended for network managers who are installing the
Nortel Business Secure Router 222 for the first time. It assumes that you are
familiar with the type of Internet connection used with your Business Secure
Router.
Text conventions
This guide uses the following text conventions:
Acronyms
This guide uses the following acronyms:
italic text Indicates new terms, book titles, and variables in
command syntax descriptions. Where a variable is two
or more words, the words are connected by an
underscore.
Example: If the command syntax is
show at <valid_route> , valid_route is one
variable and you substitute one value for it.
ADSL asymmetric digital subscriber line
DHCP Dynamic Host Configuration Protocol

8Preface
NN47922-301
Related publications
For more information about using the Nortel Business Secure Router 222, refer to
the following publication:
•Configuring and Troubleshooting the Nortel Business Secure Router 222
(317517-A)
DNS domain name server
ENET Ethernet
IP Internet Protocol
ISP Internet Service Provider
LAN local area network
LLC logical link control
PPPoA Point-to-Point Protocol over ADSL
PPPoE Point-to-Point Protocol over Ethernet
RFC request for comment
SUA single user account
TCP/IP Transmission Control Protocol/Internet Protocol
VC virtual channel
VCI virtual channel identifier
VPI virtual path identifier
WAN wide area network

Preface 9
Nortel Business Secure Router 222 — Fundamentals
Hard-copy technical manuals
You can print selected technical manuals and release notes free, directly from the
Internet. Go to www.nortel.com/documentation. Find the product for which you
need documentation. Then locate the specific category and model or version for
your hardware or software product. Use *Adobe Reader* to open the manuals and
release notes, search for the sections you need, and print them on most standard
printers. Go to the Adobe Systems web site at www.adobe.com to download a free
copy of Adobe Reader.
How to get help
If you purchased a service contract for your Nortel product from a distributor or
authorized reseller, contact the technical support staff for that distributor or
reseller for assistance.
If you purchased a Nortel service program, contact Nortel Technical Support. To
obtain contact information online, go to www.nortel.com/cgi-bin/comments/
comments.cgi, then click on Technical Support.
From the Technical Support page, you can open a Customer Service Request
online or find the telephone number for the nearest Technical Solutions Center.
If you are not connected to the Internet, you can call 1-800-4NORTEL
(1-800-466-7835) to learn the telephone number for the nearest Technical
Solutions Center.
An Express Routing Code (ERC) is available for many Nortel products and
services. When you use an ERC, your call is routed to a technical support person
who specializes in supporting that product or service. To locate an ERC for your
product or service, go to http://www.nortel.com/help/contact/erc/index.html.

10 Preface
NN47922-301
AC Power Adapter Specifications
Use only power supplies listed in the user instructions.
Phihong, Model PSA21R-180
Note: Not to remove the plug and plug into a wall outlet by itself; always attach
the plug to the power supply first before insert into the wall.
Leader, Model MU18-2180100-XX (XX can be A1, A2, A3, B2 or C5 for the
different plugs used)

Chapter 1 Introducing the Business Secure Router 11
Nortel Business Secure Router 222 — Fundamentals
Chapter 1
Introducing the Business Secure Router
The Nortel Business Secure Router 222 is the ideal secure gateway for all data
passing between the Internet and the LAN. By integrating Network Address
Translation (NAT), firewall and Virtual Private Network (VPN) capability, the
Nortel Business Secure Router 222 is a complete security solution that protects
your Intranet and efficiently manages data traffic on your network. The embedded
WebGUI is easy to operate and totally independent of the operating system
platform you use.
You must have an Internet account already set up and have most of the following
information.
Table 1 Internet account information worksheet
Your device WAN IP Address (if given): __________________
Subnet Mask: __________________
Remote IP Address (if given): ____________
DNS Server IP Address (if given): First __________________, Second _________________,
Third _________________
Encapsulation (select one below):
 Ethernet Service Type:
_______________________
Login Server IP Address:
______________
User Name: ____________ Password: ____________
 PPTP
User Name: ____________ Password: ____________
PPTP Server IP Address: ___________
Connection ID (if required): ____________
PPPoE (PPPoE) Service Name: ____________
User Name: ____________ Password: ____________

12 Chapter 1 Introducing the Business Secure Router
NN47922-301

Chapter 2 Hardware installation 13
Nortel Business Secure Router 222 — Fundamentals
Chapter 2
Hardware installation
Caution: To keep the Business Secure Router operating at optimal
internal temperature, keep the bottom, sides, and rear clear of
obstructions and away from the exhaust of other equipment.
Caution: AC Power Adapter Specifications
Only use the approved Phihong Model PSA21R-180 power supply with
this device.
NOTE: Attach the appropriate plug to the power supply first before
inserting it into the power outlet.
Caution: Electro-static Discharge can disrupt the router. Use
appropriate handling precautions to avoid ESD. Avoid touching the
connectors on the router, particularly when it is in use.

14 Chapter 2 Hardware installation
NN47922-301
2.1 Front panel
Table 2 Front panel details
LABEL DESCRIPTION
Step 1: 1-4 Connect a computer to one of these ports with an Ethernet cable.
These ports are auto-negotiating (can connect at 10 or 100Mb/s)
and auto-sensing (automatically adjusts to the type of Ethernet
cable you use, straight-through or crossover).
Step 2 Connect your cable or DSL modem to this port with the cable that
came with your modem.

Chapter 2 Hardware installation 15
Nortel Business Secure Router 222 — Fundamentals
2.2 Rear panel
Table 3 Rear panel details
LABEL DESCRIPTION
Step 3
POWER
Connect the included power adaptor (use only this adapter) to this
power socket.
After you have made the connections, connect the power cable to a power supply and
look at the front panel LEDs. The power LED blinks while performing system testing and
then stays on if the testing is successful. The Ethernet port LEDs turn on if the ports are
properly connected. Refer to
Configuring and Troubleshooting the Nortel Business
Secure Router 222 for more detailed LED descriptions.
CON/AUX port,
CON/AUX
switch
Only connect this port if you want to configure the Business Secure
Router using the SMT via console port. See your User's Guide for
details.
Set this switch to the CON (Console) side to use the CON/AUX port as
a console port for local device configuration and management. Connect
the 9-pin male end of the console cable to the console port of the
Business Secure Router and the other end to a serial port (COM1,
COM2 or other COM port) on your computer. Your computer must have
a terminal emulation communications program (such as
HyperTerminal) set to VT100 terminal emulation, no parity, 8 data bits,
1 stop bit, no flow control and 9600 b/s port speed.
RESET Press this button for one to three seconds to restart the Business
Secure Router. Press this button for longer than three seconds to
return the Business Secure Router to the factory defaults (password is
setup, LAN IP address 192.168.1.1, terminal emulation settings as
described above; see your User's Guide for details).

16 Chapter 2 Hardware installation
NN47922-301

Chapter 3 Setting up your computer IP address 17
Nortel Business Secure Router 222 — Fundamentals
Chapter 3
Setting up your computer IP address
The BSR222 is already set up to assign your computer an IP address. Use this
section to set up your computer to receive an IP address or assign it a static IP
address in the 192.168.1.34 to 192.168.1.254 range with a subnet mask of
255.255.255.0. This is necessary to ensure that your computer can communicate
with your Business Secure Router.
Your computer must have an Ethernet card and TCP/IP installed. TCP/IP must
already be installed on computers using Windows NT/2000/XP or Macintosh OS
7 and later operating systems. Instructions are provided here for configuring
Windows 2000, NT and XP operating systems. Refer to Nortel Business Secure
Router 222 Configuration — Basics (NN47922-500) and Nortel Business Secure
Router 222 Configuration — Advanced (NN47922-501) for detailed IP address
configuration for Windows 95, 98, Me and Macintosh and Linux computer
operating systems.
3.1 Static or dynamic configuration (Windows 2000/NT/XP)
1In Windows XP, click Start, Control Panel.
aIn Windows 2000/NT, click Start, Settings, Control Panel.
2In Windows XP, click Network Connections.
aIn Windows 2000/NT, click Network and Dial-up Connections.
3Right-click Local Area Connection and then click Properties.
4Select Internet Protocol (TCP/IP) (under the General tab in Windows XP)
and click Properties.
5The Internet Protocol TCP/IP Properties screen appears (the General tab in
Windows XP).
aTo have your computer assigned a dynamic IP address, click Obtain an
IP address automatically.
bTo configure a static IP address, click Use the following IP Address and
fill in the IP address (choose one from 192.168.1.34 to 192.168.1.254),
Subnet mask (255.255.255.0), and Default gateway (192.168.1.1) fields.

18 Chapter 3 Setting up your computer IP address
NN47922-301
Nortel recommends that you do not use a static IP address in the same
range as the Business Secure Router DHCP server address pool
(192.168.1.2 to 192.168.1.33 by default).
6Click Advanced. Remove any previously installed gateways in the IP Settings
tab and click OK to go back to the Internet Protocol TCP/IP Properties screen.

Chapter 3 Setting up your computer IP address 19
Nortel Business Secure Router 222 — Fundamentals
7Click Obtain DNS server address automatically if you do not know your
DNS server IP address(es).
aIf you know your DNS server IP addresses, click Use the following DNS
server addresses, and type them in the Preferred DNS server and
Alternate DNS server fields.
bIf you have more than two DNS servers, click Advanced, select the DNS
tab and then configure the two DNS servers using the Add button.
8Click OK to close the Internet Protocol (TCP/IP) Properties window.
9Click OK to close the Local Area Connection Properties window.
3.2 Checking your computer IP address
1On your computer, click Start, (All) Programs, Accessories and then
Command Prompt.
2In the Command Prompt window, type ipconfig and then press Enter. Your
computer IP address must be in the correct range (192.168.1.2 to
192.168.1.254), with subnet mask 255.255.255.0, in order to communicate
with the Business Secure Router.
Refer to Nortel Business Secure Router 222 Configuration — Basics
(NN47922-500) and Nortel Business Secure Router 222 Configuration —
Advanced (NN47922-501) for detailed IP address configuration for other
Windows and Macintosh computer operating systems.

20 Chapter 3 Setting up your computer IP address
NN47922-301