Nortel 5100 Series Release 2.3.3 User manual

4655 Great America Parkway
Santa Clara, CA 95054
Phone 1-800-4Nortel
http://www.nortel.com
Nortel Switched Firewall 5100 Series
Release 2.3.3
Browser-Based Interface User’s Guide
part number: 216383-D, October 2005

2
216383-D
Copyright © Nortel Networks 2002– 2005. All rights reserved.
This document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, and decompilation. No part of this document may be reproduced in any form by any means
without prior written authorization of Nortel Networks, Inc. Documentation is provided “as is” without
warranty of any kind, either express or implied, including any kind of implied or express warranty of non-
infringement or the implied warranties of merchantability or fitness for a particular purpose.
U.S. Government End Users: This document is provided with a “commercial item” as defined by FAR
2.101 (Oct 1995) and contains “commercial technical data” and “commercial software
documentation” as those terms are used in FAR 12.211-12.212 (Oct 1995). Government End Users
are authorized to use this documentation only in accordance with those rights and restrictions set forth
herein, consistent with FAR 12.211- 12.212 (Oct 1995), DFARS 227.7202 (JUN 1995) and DFARS
252.227-7015 (Nov 1995).
Nortel Networks, Inc. reserves the right to change any products described herein at any time, and
without notice. Nortel Networks, Inc. assumes no responsibility or liability arising from the use of
products described herein, except as expressly agreed to in writing by Nortel Networks, Inc. The use
and purchase of this product does not convey a license under any patent rights, trademark rights, or
any other intellectual property rights of Nortel Networks, Inc.
Nortel, Nortel Networks, the Nortel logo, and the Globemark are trademarks of Nortel Networks.
Check Point, OPSEC, and SmartUpdate are trademarks of Check Point Software Technologies Ltd.
FireWall-1 and VPN-1 are registered trademarks of Check Point Software Technologies Ltd.
Portions of this manual are Copyright © 2001 Check Point Software Technologies Ltd. All Rights
Reserved.
Portions of this manual are Copyright © 2001 Dell Computer Corporation. All Rights Reserved.
Any other trademarks appearing in this manual are owned by their respective companies.

216383-D October 2005
3
Contents
Preface 7
Who should use this book 7
How this book is organized 7
Typographic conventions 8
How to get help 9
Getting help from the Nortel web site 9
Getting help over the telephone from a Nortel Solutions Center 9
Using an Express Routing Code to get help from a specialist 10
Getting help through a Nortel distributor or reseller 10
Chapter 1: Introduction 11
Characteristics of the BBI 11
Getting started 12
Requirements 12
Enabling the BBI 12
CLI configuration tasks 12
Setting up the web browser 14
Starting the BBI 14
Using the VRRP virtual IP address to access the NSF BBI 15
Logging in 15
Loading the main page 16
Chapter 2: Basics of the Browser-Based Interface 17
Interface components 17

Nortel Switched Firewall Browser-Based Interface Users Guide
4 Contents
216383-D October 2005
Basic operation 22
Pending change exceptions 22
Lost changes 22
Creating a configuration 23
Viewing pending changes 23
Clearing pending changes 23
Submitting changes 23
Global command forms 24
Apply Changes 24
Diff 26
Revert 27
Logout 28
Help 29
Context-sensitive Help 29
Task-based Help 30
Chapter 3: Browser-Based Interface forms reference 33
BBI main menu selections 33
System form 34
NSF 5100 Ticker form 34
Cluster forms 38
Director(s) form 38
Time forms 40
Logs forms 42
Warnings form 49
Network forms 50
DNS form 51
Ports form 52
Routes forms 54
Network/Routes/OSPF forms 59
DHCP Relay forms 69
Interfaces form 74
Bridges form 78
VRRP form 80
GRE Tunnels form 82
Status forms 85
Firewall forms 89
Settings form 89

Nortel Switched Firewall Browser-Based Interface Users Guide
Contents 5
216383-D October 2005
License Management form 91
Installed License(s) form 93
Synchronization form 94
SMART Clients form 95
SecurID form 96
Operation forms 97
Director(s) form 97
Configuration form 98
Image Update forms 99
Administration forms 102
Monitor forms 102
Users forms 110
Access List form 115
Telnet-SSH form 117
Web forms 118
SNMP forms 126
SSH Keys form 135
RADIUS form 138
APC UPS form 141
Audit form 142
Diagnostics forms 145
Logs form 145
Events form 147
Audit Log form 148
Maintenance forms 149
System Commands form 151
Debug forms 152
Wizards forms 154
Initial Configuration Wizard 155
Add Wizard forms 156
Configure Wizard forms 157

Nortel Switched Firewall Browser-Based Interface Users Guide
6 Contents
216383-D October 2005

216383-D October 2005
7
Preface
This Quick Guide describes the Nortel Switched Firewall Browser-Based Interface (BBI). The
components and features of the BBI can be used as an alternative to the Nortel Switched
Firewall Command Line Interface (CLI) documented in the Nortel Switched Firewall 2.3.3
User’s Guide and Command Reference, (213455-L).
Who should use this book
This Quick Guide is intended for network installers and system administrators engaged in
configuring and maintaining a network. Installers and administrators must be familiar with
Ethernet concepts and IP addressing.
How this book is organized
The chapters in this book are organized as follows:
Chapter 1, Introduction,on page 11 describes how to enable and access the BBI.
Chapter 2, Basics of the Browser-Based Interface, on page 17 describes the BBI global
commands, the BBI page components, and how to access the context-sensitive online Help for
referencing page fields, buttons, and labels.
Chapter 3, Browser-Based Interface forms reference, on page 33 describes in detail all of the
forms associated with the BBI.

Nortel Switched Firewall Browser-Based Interface Users Guide
8 Preface
216383-D October 2005
Typographic conventions
The following table describes the typographic styles used in this book.
Table 1 Typographic conventions
Typeface or
Symbol
Meaning Example
AaBbCc123 This fixed-width type is used for names of
commands, files, and directories used within
the text.
View the readme.txt file.
It also depicts on-screen computer output and
prompts.
Main#
AaBbCc123 This italicized type shows book titles, special
terms, or words to be emphasized.
Read your User’s Guide
thoroughly.
AaBbCc123 This fixed-width, bold type appears in com-
mand examples. It shows text that must be
typed in exactly as shown.
Main# sys
<AaBbCc123> Italicized type within angle brackets appears
in command examples as a parameter place-
holder. Replace the indicated text with the
appropriate real name or value when using the
command. Do not type the brackets.
To establish a Telnet
session, enter:
host# telnet <IP address>
[ ] Command items shown inside square brack-
ets are optional and can be used or excluded
as the situation demands. Do not type the
brackets.
host# ls [-a]
|Command items separated by the vertical bar
depict a list of possible values, only one of
which should be entered. The vertical bar is
considered to mean “or.”
System# autoneg on|off
This can also be used to separate different
selections within a window-based menu bar.
Select Edit | Copy from
the window’s menu bar.
<Key> Non-alphanumeric keyboard items are shown
in regular type inside brackets. When
directed, press the appropriate key.
Press the <Enter> key.

Nortel Switched Firewall Browser-Based Interface Users Guide
Preface 9
216383-D October 2005
How to get help
This section explains how to get help for Nortel products and services.
Getting help from the Nortel web site
The best way to get technical support for Nortel products is from the Nortel Technical Support
web site at: www.nortel.com/support.
This site provides quick access to software, documentation, bulletins, and tools to address
issues with Nortel products.
Use the Nortel Technical Support web site to do the following:
download technical information, including the following items:
software
documentation
product bulletins
search the Technical Support web site and the Nortel Knowledge Base for answers to
technical questions
sign up for automatic notification of new software and documentation for Nortel
equipment
open and manage technical support cases
Getting help over the telephone from a Nortel Solutions
Center
If you do not find the information you require on the Nortel Technical Support web site, you
can get help over the telephone from a Nortel Solutions Center. You must have a Nortel
support contract to use the Nortel Solutions Center.
To reach a Nortel Solutions Center, do one of the following;
In North America, call 1–800–4NORTEL (1–800–466–7835).
Outside North America, go to the following web site to obtain the telephone number for
your region: www.nortel.com/callus.

Nortel Switched Firewall Browser-Based Interface Users Guide
10 Preface
216383-D October 2005
Using an Express Routing Code to get help from a specialist
You can find Express Routing Codes (ERC) for many Nortel products and services on the
Nortel Technical Support web site. ERCs allow you to connect directly to service and support
organizations based on specific products or services.
To locate the ERC for your product or service, go to www.nortel.com/erc.
Getting help through a Nortel distributor or reseller
If you purchased a service contract for your Nortel product from a distributor or authorized
reseller, contact the technical support staff for that distributor or reseller.