Nortel Nortel Contivity Extranet Switch 4500 User manual

Getting Started with the
Contivity Extranet
Switch 4500
Part No. 306011-C Rev 00
February 2000

ii
Accuracy Notice
The products and specifications, configurations, and other technical information regarding the products con-
tained in this document are subject to change without notice. All statements, technical information, and recom-
mendations contained in this document are believed to be accurate and reliable but are presented without
warranty of any kind, expressed or implied, and users take full responsibility for their application of any prod-
ucts specified in this document.
Copyright © 2000 Nortel Networks
All rights reserved. Printed in the USA. February 2000.
The information in this document issubject to change withoutnotice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented with-
out express or implied warranty. Users must take full responsibility for their applications of any products spec-
ified in this document. The information in this document is proprietary to Nortel Networks, Inc.
The software described in this document is furnished under a license agreement and may only be used in ac-
cordance with the terms of that license. A summary of the Software License is in Appendix B.
Trademarks
Nortel Networks, Nortel Networks Contivity Extranet Switch 4500, Contivity, and the Nortel Networks logo are
trademarks of Nortel Networks, Inc.
Microsoft, Windows 95, Windows 98, and Windows NT are registered trademarks of Microsoft Corporation.
The Microsoft Internet Explorer logo is a trademark or registered trademark of Microsoft Corporation in the
United States and/or other countries.
This product contains RSA Software.
This product incorporates MPPCTM compression from Hi/fnR.
All other trademarks and registered trademarks are the property of their respective owners.
Restricted Rights Legend
Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in sub-
paragraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer
software, the rights of the United States Government regarding its use, reproduction, and disclosure are as set
forth in the Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.

iii
Contents
Preface
Conventions .....................................................................................................................viii
Documentation ..........................................................................................................viii
Text ............................................................................................................................. ix
User Interface ............................................................................................................. ix
Related Publications ..........................................................................................................x
Nortel Networks Technical Publications ............................................................................ xi
Nortel Networks Customer Service ..................................................................................xii
Chapter 1
Introducing the Contivity Extranet Switch
The Switch ......................................................................................................................1-1
Components List .............................................................................................................1-4
Chapter 2
Cabling the Switch
Connecting the Cables ...................................................................................................2-2
Power Cord Requirements .......................................................................................2-3
Current Rating ..........................................................................................................2-3
Wall Outlet Connector ..............................................................................................2-3
Power Supply Connector ..........................................................................................2-3
Cord Length and Flexibility .......................................................................................2-3
LAN Interface Connections .............................................................................................2-4
LAN Speed Selection ...............................................................................................2-4
Connector Pinouts ....................................................................................................2-4
Dual V.35 WAN Interface (Optional) ...............................................................................2-5
Single V.35 WAN Interface (Optional) .............................................................................2-7
T1 CSU/DSU WAN Interface (Optional) .........................................................................2-9
T3 Interface (Optional) ..................................................................................................2-10
Hardware Accelerator Encryption Card ........................................................................2-12

iv
Serial Interface Cable (Optional) ..................................................................................2-13
Understanding the LEDs ..............................................................................................2-14
Power-On, Power-Off Sequences .................................................................................2-18
Chapter 3
Assigning a System Identity
Startup Configuration Requirements ..............................................................................3-2
Management IP Address ..........................................................................................3-2
Subnet Mask ............................................................................................................3-2
Default Gateway .......................................................................................................3-2
IP Address Configuration Utility ......................................................................................3-3
Requirements ...........................................................................................................3-3
Running the IP Configuration Utility .........................................................................3-3
Serial Interface Configuration .........................................................................................3-6
Prerequisites ............................................................................................................3-6
Procedure .................................................................................................................3-7
Chapter 4
Managing the Switch
Recommended Web Browser Versions and Settings .....................................................4-1
Platforms Supported ................................................................................................4-1
Browser Versions .....................................................................................................4-1
Display Setting .........................................................................................................4-1
Preparing for Configuration .............................................................................................4-2
Extranet Switch Welcome Display ..................................................................................4-3
Quick Start ...............................................................................................................4-5
Guided Config ..........................................................................................................4-5
Manage Switch .........................................................................................................4-5
Manage from Notebook ............................................................................................4-5
Register Online ........................................................................................................4-6
Logging in and Supplying a Password ............................................................................4-6
Quick Start Configuration Prerequisites .........................................................................4-7
Required Environment .............................................................................................4-8
Prerequisites ............................................................................................................4-9
Postconfiguration Testing .........................................................................................4-9

v
Configuration ................................................................................................................4-10
LAN/WAN Interfaces ..............................................................................................4-11
PPTP Users ...........................................................................................................4-12
Administrator ..........................................................................................................4-13
Date and Time ........................................................................................................4-14
Automatic Backup .........................................................................................................4-14
Chapter 5
Extranet Access Client Installation
Windows 95 ....................................................................................................................5-1
Windows 98 and Windows NT 4.0 ..................................................................................5-3
Chapter 6
Rack Mounting
Mounting Brackets ..........................................................................................................6-2
Rack-Mount Installation Procedure ..........................................................................6-3
Chapter 7
Changing Hardware Configurations
System Board .................................................................................................................7-2
Installing Option Cards ...................................................................................................7-3
Installing Additional DIMMs ............................................................................................7-5
Memory Options .......................................................................................................7-6
Removing the Front Bezel ..............................................................................................7-7
Replacing a Power Supply ..............................................................................................7-9
Installing a Hard Disk Drive ..........................................................................................7-11
Appendix A
Specifications
Physical Specifications and Operating Environment ...................................................... A-1
Appendix B
Special Notices

VII
Preface
This guide takes you through the necessary tasks to get your Nortel NetworksTM
Contivity Extranet Switch 4500TM up and running. Topics include:
• Introducing the Contivity Extranet Switch
• Preparing Your Site
• Assigning a System Identity
• Managing the Switch
• Installing the Extranet Access Client
• Rack Mounting
• Changing Hardware Configurations
Complete details for configuring and monitoring the Switch are in Managing the
Contivity Extranet Switch.
Warning: The Contivity Extranet Switch 4500 weighs about 60 pounds and
should always be carried by two people.

Getting Started with the Contivity Extranet Switch 4500
VIII
Conventions
This guide refers to the Contivity Extranet Switch as the CES or the Switch. It
assumes that you are familiar with Web browsers and their general operation.
Documentation
This document uses the following conventions to distinguish among notes of
varying importance:
TIP: Good idea. A Tip is something that might be considered a good idea,
whether for security reasons or because it will save you time or effort.
IMPORTANT: Take particular notice. Important references contain concepts or
information that has bearing on other fields or situations (i.e., what
you do here affects other fields or options elsewhere).
Note: Take notice. Notes contain helpful suggestions or references to
materials contained in this document.
CAUTION: Be careful. In this situation, you might do something that
could result in damage to the equipment or loss of data.
WARNING: Danger. You are in a situation that could cause bodily
injury. Before working on equipment, beware of the hazards
involved with electrical circuitry and standard practices for
preventing accidents, such as disconnecting equipment from
its power source.

Preface
IX
Text
This guide uses the following text conventions:
User Interface
Help Button
Click the Help button that is located in the upper right of displays to learn about
fields on a given page. Where appropriate, the information provides cause and
effect of an action; otherwise, it might offer troubleshooting steps.
italic text Indicates new terms and book titles.
screen text Indicates system output, for example, prompts and
system messages.
Example:
Set Nortel Networks Trap Monitor Filters
arrow ( →) Shows menu paths.
Example: Services →Available identifies the Switch
services that are available.

Getting Started with the Contivity Extranet Switch 4500
X
Related Publications
The following table lists the associated documentation that you will need to
configure and manage your Switch and describes the document’s objectives.
Related Publications
Document Objective
Contivity Extranet Switch
Release Notes
Provides the latest information, including known
problems, workarounds, and special considerations.
Managing the
Contivity Extranet Switch
(included on the CD)
Provides complete details to configure, monitor, and
troubleshoot your Switch.

Preface
XI
Nortel Networks Technical Publications
You can print Nortel Networks technical manuals and release notes free, directly
from the Internet. Go to support.baynetworks.com/library/tpubs/. Find the Nortel
Networks product for which you need documentation. Then locate the specific
category and model or version for your hardware or software product. Using
Adobe Acrobat Reader, you can open the manuals and release notes, search for the
sections you need, and print them on most standard printers. You can download
Acrobat Reader free from the Adobe Systems Web site, www.adobe.com.
You can purchase Nortel Networks documentation sets, CDs, and selected
technical publications through the Nortel Networks Collateral Catalog. The
catalog is located at support.baynetworks.com/catalog.html:
• The “CD ROMs” section lists available CDs.
• The “Guides/Books” section lists books on technical topics.
• The “Technical Manuals” section lists available printed
documentation sets.
Make a note of the part numbers and prices of the items that you want to order.
Use the “Marketing Collateral Catalog description” link to place an order and to
print the order form.

Getting Started with the Contivity Extranet Switch 4500
XII
Nortel Networks Customer Service
If you purchased a service contract for your Nortel Networks product from a
distributor or authorized reseller, contact the technical support staff for that
distributor or reseller for assistance.
If you purchased a Nortel Networks service program, contact one of the following
Nortel Networks Technical Solutions Centers:
Technical Solutions Center Telephone Number
United States and Canada 800-2LANWAN (800-252-6926);
enter Express Routing Code
(ERC): 176#
Valbonne, France 33-4-92-96-69-68
Sydney, Australia 61-2-9927-8800
Tokyo, Japan 81-3-5402-7041

1-1
Chapter 1
Introducing the Contivity Extranet Switch
The Switch
The Nortel Networks Contivity Extranet Switch 4500 provides scalable, secure,
manageable extranet access for up to 5000 simultaneous users across the Public
Data Network (PDN).
The Switch's features include the most popular tunneling protocols, IP Security
(IPsec), Point-to-Point Tunneling Protocol (PPTP), Layer 2 Forwarding Tunneling
Protocol (L2TP), and Layer 2 Forwarding (L2F). IPsec uses digital certificates,
password-based keys, and tokens for authentication; PPTP, L2TP, and L2F use
Challenge Handshake Authentication Protocol (CHAP) or Password
Authentication Protocol (PAP) for authentication. The PPTP and L2TP
implementations for the Switch support MS-CHAP authentication with 56- to
128-bit key encryption.
Figure 1-1 shows an intranet and an extranet.

Getting Started with the Contivity Extranet Switch 4500
1-2
Figure 1-1. An Intranet and the Internet Make Up an Extranet
The Switch provides more security than traditional remote access schemes due to
the combination of authorization, authentication, privacy, and access control on a
per user basis. Additionally, the IPsec protocol and related Internet Security
Association & Key Management Protocol (ISAKMP) and the Oakley key
establishment protocol support further enhance the security offering.
For authentication and access control, the Switch supports an internal or external
Lightweight Directory Access Protocol (LDAP) server, and external Remote
Authentication Dial-In User Service (RADIUS) servers.
Contivity
Extranet
Switch
Reseller
Cable or DSL
LAN
56K
Modem
ISDN
Internet
Intranet
Extranet
Partner
Remote
Employee
Authentication
Server
E-Mail
Server
NT
Server
Firewall Router
ISP POP
ISP POP
ISP POP
ISP POP

Introducing the Contivity Extranet Switch
1-3
To restrict access, the Switch uses packet filtering based on Protocol ID,
Direction, Source and Destination IP addresses, Source and Destination Ports,
and TCP connection establishment.
The unique quality of service (QoS) mechanisms include call admission
and packet forwarding priorities, and support for Resource ReSerVation
Protocol (RSVP).
The HTML and Java Web management interface allows different Switch
administrators to have different access rights, including configuration, status, and
monitoring. The Switch offers RADIUS accounting support and extensive
logging, including events, system, configuration, and security logs.
Figure 1-2 shows a front view of the Switch.
Figure 1-2. The Contivity Extranet Switch 4500, Front View
Contivity Extranet Switch 4500

Getting Started with the Contivity Extranet Switch 4500
1-4
Components List
The following table lists all of the components and accessories of the Contivity
Extranet Switch 4500.
If for any reason you have not received all of the materials listed above, contact Nortel
Networks Customer Service.
Table 1-1. Contivity Extranet Switch 4500 Components
Description Quantity
Extranet Switch 4500 1
Power Cords (optional, ordered separately) 0
Molded Serial Cable DB9/DB25-to-DB9/DB25 1
Contivity Extranet Switch CD-ROM 1
Recovery Diskette 1
IP Address Configuration Utility Diskette 1
Getting Started Guide (this book) 1
Release notes 1
Vertical Rack Mounting Brackets and Hardware 2
Horizontal Rack Mounting Brackets and Hardware 2

2-1
Chapter 2
Cabling the Switch
This chapter provides the following information:
• Connecting power
• WAN/LAN connections to:
- 10/100BASE-TX LAN Interface
- Dual V.35 Interface
- Single V.35 Interface
- T1 CSU/DSU Interface
- T3 Interface
- Hardware Accelerator/Encryption Card
• Serial interface connection
• Understanding the LEDs
• Power-On, Power-Off Sequences
This chapter describes the cables that you must use with the Switch, including
pinouts for both LAN and WAN connections. Additionally, illustrations show the
power connectors, the serial connector, and the LAN connector.The LAN/WAN
port and 10/100BASE-TX LAN interface card LEDs are illustrated, and
accompanying tables describe the LED status indicators.

Getting Started with the Contivity Extranet Switch 4500
2-2
Connecting the Cables
1. Connect the power cords to the back of the Switch and to the electrical outlet.
2. Connect the 10/100BASE-TX LAN RJ-45 connector to the Switch.
3. Optionally, connect the LAN or WAN card cables.
Figure 2-1 shows the back view of the Switch.
Figure 2-1. Extranet Switch 4500 Back View
6
5
4
3
2
1
LAN
Connector
Serial
Connector

Cabling the Switch
2-3
Power Cord Requirements
Current Rating
The power cord(s) must be rated for the available AC voltage, and must have a
current rating that is at least 125 percent of the Switch's current rating (refer to
Appendix A).
Wall Outlet Connector
The power cords must terminate in a male plug with appropriate grounding. The
power cords must have certification marks from an acceptable regional agency.
Power Supply Connector
The connector that you plug into the Switch power supply AC receptacle must be
an IEC 320, Sheet C13, female.
Cord Length and Flexibility
The power cords must be less than 4.5 meters (14.7 feet) long, and it must be a
flexible HAR (harmonized) cord or VDE-certified cordage to comply with the
Switch's safety certifications.
WARNING:
1. Do not modify or use the AC power cord(s) if it is not the exact
type that is required for your power outlet.
2. Connect the LAN/WAN and serial port cables before you plug the
Switch's power cord into the outlet.
CAUTION: You should protect your Switch by plugging it into a
surge suppressor. For power source redundancy, connect one
power cord to a backup power supply, and the other power
cord into the main power supply.

Getting Started with the Contivity Extranet Switch 4500
2-4
LAN Interface Connections
At least one LAN interface connection is for Web management.
100BASE-TX connections require Category 5, twisted-pair wire. The
100BASE-TX specification supports 100 Mb/s transmission over two pairs
of Category 5 twisted-pair Ethernet wiring; one pair each for transmit and
receive operations.
The maximum recommended cable segment length is 100 meters between a
100BASE-TX repeater and a workstation (due to signal timing requirements).
This wiring scheme complies with the EIA 568 wiring standard.
10BASE-T connections can use Category 3, 4, or 5 twisted-pair wiring.
LAN Speed Selection
The Switch automatically determines the speed of the LAN connection during
startup. To change the speed, turn off the unit, connect to the desired LAN, and
restart the unit.
Connector Pinouts
The LAN connectors on the Switch are RJ-45 straight-through. The following
illustration shows the Switch connector's 10/100BASE-TX pinouts.
Figure 2-2. 10/100BASE-TX Pinouts







































































23456781
















RD+ RD- TD+ RD-