Nortel Contivity Extranet Switch 2500 User manual

Getting Started with the
Contivity Extranet
Switch 2500
Part No. 306010-C Rev 00
February 2000

ii
Accuracy Notice
The products and specifications, configurations, and other technical information regarding the products con-
tained in this document are subject to change without notice. All statements, technical information, and recom-
mendations contained in this document are believed to be accurate and reliable but are presented without
warranty of any kind, expressed or implied, and users take full responsibility for their application of any prod-
ucts specified in this document.
Copyright © 2000 Nortel Networks N.A., Inc.
All rights reserved. Printed in the USA. February 2000.
The information in this document issubject to change withoutnotice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented with-
out express or implied warranty. Users must take full responsibility for their applications of any products spec-
ified in this document. The information in this document is proprietary to Nortel Networks, Inc.
The software described in this document is furnished under a license agreement and may only be used in ac-
cordance with the terms of that license. A summary of the Software License is in Appendix B.
Trademarks
Nortel Networks, Nortel Networks Contivity Extranet Switch 2500, Contivity, Extranet Ready, the Extranet
Ready logo, Personal Extranets, Infrastructure for Extranets, and the Nortel Networks logo are trademarks of
Nortel Networks, Inc., Microsoft, Windows 95, Windows 98, and Windows NT are registered trademarks of Mi-
crosoft Corporation.
The Microsoft Internet Explorer logo is a trademark or registered trademark of Microsoft Corporation in the
United States and/or other countries.
This product contains RSA Software.
This product incorporates MPPCTM compression from Hi/fnR.
All other trademarks and registered trademarks are the property of their respective owners.
Restricted Rights Legend
Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in sub-
paragraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer
software, the rights of the United States Government regarding its use, reproduction, and disclosure are as set
forth in the Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.

iii
Contents
Preface
Conventions .....................................................................................................................viii
Documentation ..........................................................................................................viii
Text ............................................................................................................................. ix
User Interface ............................................................................................................. ix
Related Publications ..........................................................................................................x
Nortel Networks Technical Publications ............................................................................ xi
Nortel Networks Customer Service ..................................................................................xii
Chapter 1
Introducing the Contivity Extranet Switch
The Switch ......................................................................................................................1-1
Components List .............................................................................................................1-4
Chapter 2
Cabling the Switch
Connecting the Cables ...................................................................................................2-2
Power Cord Requirements .......................................................................................2-3
Current Rating ..........................................................................................................2-3
Wall Outlet Connector ..............................................................................................2-3
Power Supply Connector ..........................................................................................2-3
Cord Length and Flexibility .......................................................................................2-3
LAN Interface Connections .............................................................................................2-4
LAN Speed Selection ...............................................................................................2-4
Connector Pinouts ....................................................................................................2-4
Dual V.35 WAN Interface (Optional) ...............................................................................2-5
Single V.35 WAN Interface (Optional) .............................................................................2-7
T1 CSU/DSU WAN Interface (Optional) .........................................................................2-9
Hardware Accelerator/Encryption Card ........................................................................2-10
Serial Interface Cable (Optional) ..................................................................................2-11

iv
Understanding the LEDs ..............................................................................................2-12
Chapter 3
Assigning a System Identity
Startup Configuration Requirements ..............................................................................3-2
Management IP Address ..........................................................................................3-2
Subnet Mask ............................................................................................................3-2
Default Gateway .......................................................................................................3-2
IP Address Configuration Utility ......................................................................................3-3
Requirements ...........................................................................................................3-3
Running the IP Configuration Utility .........................................................................3-3
Serial Interface Configuration .........................................................................................3-6
Prerequisites ............................................................................................................3-6
Procedure .................................................................................................................3-7
Chapter 4
Managing the Switch
Recommended Web Browser Versions and Settings .....................................................4-1
Platforms Supported ................................................................................................4-1
Browser Versions .....................................................................................................4-1
Display Setting .........................................................................................................4-1
Preparing for Configuration .............................................................................................4-2
Extranet Switch Welcome Display ..................................................................................4-3
Quick Start ...............................................................................................................4-5
Guided Config ..........................................................................................................4-5
Manage Switch .........................................................................................................4-5
Manage from Notebook ............................................................................................4-5
Register Online ........................................................................................................4-6
Logging in and Supplying a Password ............................................................................4-6
Quick Start Configuration Prerequisites .........................................................................4-7
Required Environment .............................................................................................4-8
Prerequisites ............................................................................................................4-9
Postconfiguration Testing .........................................................................................4-9
Configuration ................................................................................................................4-10
LAN/WAN Interfaces ..............................................................................................4-11
PPTP Users ...........................................................................................................4-12

v
Administrator ..........................................................................................................4-13
Date and Time ........................................................................................................4-13
Automatic Backup .........................................................................................................4-14
Chapter 5
Extranet Access Client Installation
Windows 95 ....................................................................................................................5-1
Windows 98 and Windows NT 4.0 ..................................................................................5-3
Chapter 6
Rack Mounting
Mounting Brackets ..........................................................................................................6-2
Rack Mount Installation Procedure .................................................................................6-3
Sliding Rails (Optional) .............................................................................................6-3
Sliding Rail Installation Procedure ...........................................................................6-5
Chapter 7
Changing Hardware Configurations
Removing the Top Cover ................................................................................................7-2
System Board ...........................................................................................................7-3
Installing Option Cards ...................................................................................................7-4
Installing Additional DIMMs ............................................................................................7-5
Memory Options .......................................................................................................7-6
Removing the Front Bezel ..............................................................................................7-7
Appendix A
Specifications
Physical ......................................................................................................................... A-1
Operating Environment .................................................................................................. A-1
Appendix B
Special Notices

vii
Preface
This guide steps you through the necessary tasks to get your Nortel NetworksTM
Contivity Extranet Switch 2500TM up and running. Topics include:
• Introducing the Contivity Extranet Switch
• Assigning a System Identity
• Managing the Switch
• Installing the Extranet Access Client
• Rack Mounting
• Changing Hardware Configurations
Complete details for configuring and monitoring the Switch are in Managing the
Contivity Extranet Switch.

Preface
viii
Conventions
This guide refers to the Contivity Extranet Switch as the CES or the Switch.
This guide assumes that you are familiar with Web browsers and their
general operation.
Documentation
This document uses the following conventions to distinguish among notes of
varying importance:
TIP: Good idea. A Tip is something that might be considered a good idea,
whether for security reasons or because it will save you time or effort.
IMPORTANT: Take particular notice. Important references contain concepts or
information that has bearing on other fields or situations (i.e., what
you do here affects other fields or options elsewhere).
Note: Take notice. Notes contain helpful suggestions or references to
materials contained in this document.
CAUTION: Be careful. In this situation, you might do something that
could result in damage to the equipment or loss of data.
WARNING: Danger. You are in a situation that could cause bodily
injury. Before working on equipment, beware of the hazards
involved with electrical circuitry and standard practices for
preventing accidents, such as disconnecting equipment from
its power source.

Getting Started with the Convtivity Extranet Switch 2500
ix
Text
This guide uses the following text conventions:
User Interface
Help Button
Click the Help button that is located in the upper right of displays to learn about
fields on a given page. Where appropriate, the information provides cause and
effect of an action; otherwise, it might offer troubleshooting steps.
italic text Indicates new terms and book titles.
screen text Indicates system output, for example, prompts and
system messages.
Example:
Set Nortel Networks Trap Monitor Filters
arrow ( →) Shows menu paths.
Example: Services →Available identifies the Switch
services that are available.

Preface
x
Related Publications
The following table lists the associated documentation that you will need to
configure and manage your Switch and describes the document’s objectives.
Document Description
Contivity Extranet Switch
Release Notes
Provides the latest information, including known
problems, workarounds, and special considerations.
Managing the
Contivity Extranet Switch
(included on the CD)
Provides complete details to configure, monitor, and
troubleshoot your Switch.

Getting Started with the Convtivity Extranet Switch 2500
xi
Nortel Networks Technical Publications
You can print Nortel Networks technical manuals and release notes free, directly
from the Internet. Go to support.baynetworks.com/library/tpubs/. Find the Nortel
Networks product for which you need documentation. Then locate the specific
category and model or version for your hardware or software product. Using
Adobe Acrobat Reader, you can open the manuals and release notes, search for the
sections you need, and print them on most standard printers. You can download
Acrobat Reader free from the Adobe Systems Web site, www.adobe.com.
You can purchase Nortel Networks documentation sets, CDs, and selected
technical publications through the Nortel Networks Collateral Catalog. The
catalog is located at support.baynetworks.com/catalog.html:
• The “CD ROMs” section lists available CDs.
• The “Guides/Books” section lists books on technical topics.
• The “Technical Manuals” section lists available printed
documentation sets.
Make a note of the part numbers and prices of the items that you want to order.
Use the “Marketing Collateral Catalog description” link to place an order and to
print the order form.

Preface
xii
Nortel Networks Customer Service
If you purchased a service contract for your Nortel Networks product from a
distributor or authorized reseller, contact the technical support staff for that
distributor or reseller for assistance.
If you purchased a Nortel Networks service program, contact one of the following
Nortel Networks Technical Solutions Centers:
Technical Solutions Center Telephone Number
United States and Canada 800-2LANWAN (800-252-6926);
enter Express Routing Code
(ERC): 176#
Valbonne, France 33-4-92-96-69-68
Sydney, Australia 61-2-9927-8800
Tokyo, Japan 81-3-5402-7041

1-1
Chapter 1
Introducing the Contivity Extranet Switch
The Switch
The Nortel Networks Contivity Extranet Switch 2500 provides scalable, secure,
manageable extranet access for up to 500 simultaneous users across the Public
Data Network (PDN).
The Switch's features include the most popular tunneling protocols, IP Security
(IPsec), Point-to-Point Tunneling Protocol (PPTP), Layer 2 Forwarding Tunneling
Protocol (L2TP), and Layer 2 Forwarding (L2F). IPsec uses digital certificates,
password-based keys, and tokens for authentication; PPTP, L2TP, and L2F use
Challenge Handshake Authentication Protocol (CHAP) or Password
Authentication Protocol (PAP) for authentication. The PPTP and L2TP
implementations for the Switch support MS-CHAP authentication with 56- to
128-bit key encryption. Figure 1-1 shows an intranet and extranet.

Getting Started with the Contivity Extranet Switch 2500
1-2
Figure 1-1. An Intranet and the Internet Make Up an Extranet
The Switch provides more security than traditional remote access schemes due to
the combination of authorization, authentication, privacy, and access control on a
per user basis. Additionally, the IPsec protocol and related Internet Security
Association & Key Management Protocol (ISAKMP) and the Oakley key
establishment protocol support further enhance the security offering.
For authentication and access control, the Switch supports an internal or external
Lightweight Directory Access Protocol (LDAP) server, and external Remote
Authentication Dial-In User Service (RADIUS) servers.
Contivity
Extranet
Switch
Reseller
Cable or DSL
LAN
56K
Modem
ISDN
Internet
Intranet
Extranet
Partner
Remote
Employee
Authentication
Server
E-Mail
Server
NT
Server
Firewall Router
ISP POP
ISP POP
ISP POP
ISP POP

Introducing the Contivity Extranet Switch
1-3
To restrict access, the Switch uses packet filtering based on Protocol ID,
Direction, Source and Destination IP addresses, Source and Destination Ports,
and TCP connection establishment.
The unique quality of service (QoS) mechanisms include call admission
and packet forwarding priorities, and support for Resource ReSerVation
Protocol (RSVP).
The HTML and Java Web management interface allows different Switch
administrators to have different access rights, including configuration, status, and
monitoring. The Switch offers RADIUS accounting support and extensive
logging, including events, system, configuration, and security logs.
Figure 1-2 shows a front view of the Switch.
Figure 1-2. The Contivity Extranet Switch 2500, Front View

Getting Started with the Contivity Extranet Switch 2500
1-4
Components List
The following table lists all of the components and accessories of the Contivity
Extranet Switch 2500. If for any reason you have not received all of the materials
listed, contact Nortel Networks Customer Service.
Optional Sliding Rail Bracket Set
Description Quantity
Extranet Switch 2500 1
Power Cord (ordered separately) 0
Molded Serial Cable DB9/DB25-to-DB9/DB25 1
Contivity Extranet Switch CD-ROM 1
Recovery Diskette 1
IP Address Configuration Utility Diskette 1
Getting Started Guide (this book) 1
Release notes 1
Mounting Brackets and hardware 2
Description Quantity
Slides 2
Slide Locking Brackets 2
Extender Brackets 2
Screws, #8-32 x 3/8 long, 100-degree flathead,
Phillips, black 4
Screws, #8-32 x 3/8 long, PPH steel zinc 14

2-1
Chapter 2
Cabling the Switch
This chapter provides the following information:
• Connecting power
• LAN/WAN connections to:
- 10/100BASE-TX LAN Interface
- Dual V.35 interface
- Single V.35 interface
- T1 CSU/DSU interface
- Hardware Accelerator
• Serial interface connection
• Understanding the LEDs
This chapter describes the cables that you must use with the Switch, including
pinouts for both LAN and WAN connections. Additionally, illustrations show the
power connectors, the serial connector, and the LAN/WAN connector. The LAN
port and 10/100BASE-TX LAN interface card LEDs are illustrated, and
accompanying tables describe the LED status indicators.

Getting Started with the Contivity Extranet Switch 2500
2-2
Connecting the Cables
1. Connect the power cords to the back of the Switch and to the electrical outlet.
2. Connect the 10/100BASE-TX LAN RJ-45 connector to the Switch.
3. Additionally, if you have LAN or WAN cards in Slots 1 through 3, connect
those cables (refer to “Installing Option Cards” on page 7-4).
Figure 2-1 shows the back view of the Switch.
Figure 2-1. Extranet Switch Back View
NOTE: Slot 4 is not supported.
CAUTION: The Contivity Extranet Switch 2500 power supply is factory set at
220V~ (VAC). You must set the power supply voltage selector
switch (on the back of the unit) to meet your input voltage
requirement (115 V or 220 V).
Serial
Slot1234
LAN
Power Reset
Voltage Selector
Switch

Cabling the Switch
2-3
Power Cord Requirements
Current Rating
The power cord(s) must be rated for the available AC voltage, and must have a
current rating that is at least 125 percent of the Switch's current rating (refer to
Appendix A).
Wall Outlet Connector
The power cords must terminate in a male plug with appropriate grounding. The
power cords must have certification marks from an acceptable regional agency.
Power Supply Connector
The connector that you plug into the Switch power supply AC receptacle must be
an IEC 320, Sheet C13, female.
Cord Length and Flexibility
The power cord must be less than 4.5 meters (14.7 feet) long, and it must be a
flexible HAR (harmonized) cord or VDE-certified cordage to comply with the
Switch's safety certifications.
WARNING:
1. Do not modify or use the AC power cord(s) if it is not the exact
type that is required for your power outlet.
2. Connect the LAN/WAN and serial port cables before you plug the
Switch's power cord into the outlet.
CAUTION: You should protect your Switch by plugging it into a
surge suppressor.

Getting Started with the Contivity Extranet Switch 2500
2-4
LAN Interface Connections
At least one LAN interface connection is for Web management.
100BASE-TX connections require Category 5, twisted-pair wire. The
100BASE-TX specification supports 100 Mb/s transmission over two pairs
of Category 5 twisted-pair Ethernet wiring; one pair each for transmit and
receive operations.
The maximum recommended cable segment length is 100 meters between a
100BASE-TX repeater and a workstation (due to signal timing requirements).
This wiring scheme complies with the EIA 568 wiring standard.
10BASE-T connections can use Category 3, 4, or 5 twisted-pair wiring.
LAN Speed Selection
The Switch automatically determines the speed of the LAN connection during
startup. To change the speed, turn off the unit, connect to the desired LAN, and
restart the unit.
Connector Pinouts
The LAN connectors on the Switch are RJ-45 straight-through. The following
illustration shows the Switch connector's 10/100BASE-TX pinouts.
Figure 2-2. 10/100BASE-TX Pinouts







































































23456781
















RD+ RD- TD+ RD-