Copyright 2006 Hewlett-Packard Development Company, LP. The information contained herein is subject
to change without notice.
This document contains proprietary information, which is protected by copyright. No part of this document
can be photocopied, reproduced, or translated into another language without the prior written consent of
Hewlett-Packard.
Trademarks
CompactFlash is a registered trademark of the CompactFlash Association (CFA).
Any brand names and product names included in this manual are trademarks, registered trademarks, or
trade names of their respective holders.
Software Licensing Agreement
Use of the software is subject to the HP Software License terms. A copy of the HP Software License is
included in the product package and can be found on the ProCurve SROS Documentation CD.
Disclaimer
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO
THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be
liable for errors contained herein or for incidental or consequential damages in connection with the
furnishing, performance, or use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not
furnished by Hewlett-Packard.
Warranty
See the Customer Support/Warranty booklet included with the product.
A copy of the specific warranty terms applicable to your Hewlett-Packard products and replacement parts
can be obtained from your HP Sales and Service Office or authorized dealer.
4Copyright 2006 Hewlett-Packard Development Company, LP5990-8878
ProCurve Secure Router Installation Guide Table of Contents
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP8
1.INTRODUCTION TO THE PROCURVE SECURE ROUTER
This installation guide describes the ProCurve Secure Router, details basic functionality, gives installation
instructions, and lists hardware specifications. For more information on router configuration for a specific
application, refer to the supplemental documents provided on your ProCurve SROS Documentation CD.
The router can be managed and configured through the command line interface CLI (accessible via the
VT100 (
Console connection) or Telnet) or through the Graphical User Interface (GUI), using a Web
browser. These two methods are described in the Quick Start Guide provided with your router. For detailed
information on the CLI, refer to the SROS Command Line Interface Reference Guide, also on the CD. The
GUI is contains integrated help and various wizards to facilitate configuration. The
Console port is
enabled by default, with no configured password.
The ProCurve Secure Router is a mid-range IP router designed for medium- to large-office connectivity
over Frame Relay or point-to-point (PPP) networks. This modular platform offers a complete solution for
access routing and WAN connectivity in a single, compact package. The main base units support a variety
of interchangeable interface modules and backup modules. The ProCurve Secure Router base units include
the following:
ProCurve Secure Router 7102dl
•1U-high housing, rack-mountable, metal enclosure
•Two module (card) slots
•Two built-in Ethernet ports
•
Console port
•
Encryption Module slot
•
Compact Flash slot
ProCurve Secure Router 7203dl
•1U-high housing, rack-mountable, metal enclosure
•Three module (card) slots (two small, one wide)
•Two built-in Ethernet ports
•
Console port
•
Encryption Module slot
•
Compact Flash slot
•Redundant power supply (RPS) option
The interface modules in this series provide the following WAN connectivity options:
•T1/FT1
•T1/FT1 + DSX-1
•Dual T1
•E1/FE1
•E1/FE1 + G.703 Drop
•Dual E1/FE1
•Dual ISDN BRI (U and S/T)
•Serial (V.35/X.21)
•ADSL (Annex A and Annex B)
•Octal Serial Wide Module
•Octal T1/E1 Wide Module (no external CSU/DSU needed)
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP9
Introduction to the ProCurve Secure RouterProCurve Secure Router Installation Guide
If needed, an ISDN BRI U Backup Module, ISDN BRI S/T Backup Module, or Analog Modem Backup
Module can plug onto any narrow interface module, providing backup capability. Refer to Installing Interface and Backup Modules on page 38 for more details.
For VPN applications using the ProCurve Secure Router, the optional 7100/7200 IPSec Module and
7100/7200 IPSec Base Module provide or activate encryption/decryption and security services. Refer to
Installing the Encryption Module on page 40. The installation of the optional encryption module enables
the software features associated with the VPN services.
Features
The ProCurve Secure Routers have the following features:
•Modular network interface via module (card) slots
•1U-high metal chassis with two or three slots for option modules
•Two integrated 10/100BaseT Ethernet ports (RJ-45 with auto-MDIX)
Maximum Altitude3.05 km (10,000 ft)3.05 km (10,000 ft)
0°C to 50°C (32°F to 122°F)0°C to 50°C (32°F to 122°F)
-20°C to 70°C (-4°F to 158°F)-20°C to 70°C (-4°F to 158°F)
Up to 95 percent at 30°C (86°F)Up to 95 percent at 30°C (86°F)
Up to 95 percent at 30°C (86°F)Up to 95 percent at 30°C (86°F)
Unpack and Inspect the System
Each ProCurve Secure Router unit is shipped in its own cardboard shipping carton. Open each carton
carefully, and avoid deep penetration into the carton with sharp objects.
After unpacking the unit, inspect it for possible shipping damage. If the equipment has been damaged in
transit, immediately file a claim with the carrier and contact your local HP representative or reseller.
Contents of Shipments
ProCurve Secure Router 7000dl (7102dl and 7203dl)
Shipments of the ProCurve Secure Router 7000dl include the following items:
•ProCurve Secure Router 7000dl base unit
•Racking hardware
•ProCurve SROS Documentation CD
•Installation Guide
•Quick Start Guide
•Software License, Warranty, and Support documentation
•Console cable, power cord
ProCurve Secure Router dl 1xT1 Module
Shipments of the 1xT1 Module include the following items:
•1xT1 Interface Module
•Quick Start Guide
•15-foot RJ-45 to RJ-45 cable
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP11
Introduction to the ProCurve Secure RouterProCurve Secure Router Installation Guide
ProCurve Secure Router dl 1xT1 + DSX-1 Module
Shipments of the 1xT1 + DSX-1 Module include the following items:
•1xT1 + DSX-1 Interface Module
•Quick Start Guide
•15-foot RJ-45 to RJ-45 cable
ProCurve Secure Router dl 2xT1 Module
Shipments of the 2xT1 Module include the following items:
•2xT1 Interface Module
•Quick Start Guide
•Two 15-foot RJ-45 to RJ-45 cables
ProCurve Secure Router dl 1xE1 Module
Shipments of the 1xE1 Module include the following items:
•1xE1 Interface Module
•Quick Start Guide
•15-foot RJ-45 to RJ-45 cable
ProCurve Secure Router dl 1xE1 + G.703 Module
Shipments of the 1xE1 + G.703 Module include the following items:
•1xE1 + G.703 Interface Module
•Quick Start Guide
•15-foot RJ-45 to RJ-45 cable
ProCurve Secure Router dl 2xE1 Module
Shipments of the 2xE1 Module include the following items:
•2xE1 Interface Module
•Quick Start Guide
•Two 15-foot RJ-45 to RJ-45 cables
ProCurve Secure Router dl 2xISDN BRI S/T Module
Shipments of the 2xISDN BRI S/T Module include the following items:
•2xISDN BRI Interface Module
•Quick Start Guide
•7-foot RJ-45 to RJ-11 cable
ProCurve Secure Router dl 2xISDN BRI U Module
Shipments of the 2xISDN BRI U Module include the following items:
•2xISDN BRI U Interface Module
•Quick Start Guide
•7-foot RJ-45 to RJ-11 cable
12Copyright 2006 Hewlett-Packard Development Company, LP5990-3760
ProCurve Secure Router Installation Guide Introduction to the ProCurve Secure Router
ProCurve Secure Router dl 1xSerial Module
Shipments of the 1xSerial Module include the following items:
•1xSerial Interface Module
•Quick Start Guide
Note
Cables for the 1xSerial module must be ordered separately: V.35 DTE (J8757A) or X.21
DTE (J8755A).
ProCurve Secure Router dl 1xADSL2+ Annex A Module
Shipments of the 1xADSL2+ Annex A Module include the following items:
•1xADSL2+ Annex A Interface Module
•Quick Start Guide
•7-foot RJ-11 to RJ-11 cable
ProCurve Secure Router dl 1xADSL2+ Annex B Module
Shipments of the 1xADSL2+ Annex B Module include the following items:
•1xADSL2+ Annex B Interface Module
•Quick Start Guide
•7-foot RJ-11 to RJ-45 cable
ProCurve Secure Router dl ISDN BRI U Backup Module
Shipments of the ISDN BRI U Backup Module include the following items:
Figure 1 shows the ProCurve Secure Router 7102dl front panel. Figure 2 shows the
ProCurve Secure Router 7203dl front panel. The pictures show the chassis with modules installed.
Eth 0/2
Eth 0/1
ACTIVITY LED
dldl
Power
Fault
ProCurve 7102dl
Secure Router
J8752A
Console
LINK LED
Slots
12
Stat Stat
Bkp Bkp
Tx Tx
Rx Rx
Figure 1. ProCurve Secure Router 7102dl Front Panel Layout
Eth 0/2
Slots
3
Stat
Act
Test
Eth 0/1
dldl
Power
Fault
ProCurve 7203dl
Secure Router
J8753A
Console
12
Stat Stat
Bkp Bkp
Tx Tx
Rx Rx
Figure 2. ProCurve Secure Router 7203dl Front Panel Layout
Front Panel Switches, Interfaces, and LEDs
Table 1 describes the front panel LEDs.
Table 1. ProCurve Secure Router LEDs
LEDColorIndicates that…
Power
Off
Green (flashing)
Green (solid)Power is on and self-test passed.
FaultOffOperation is normal.
Orange (flashing)
Slot 1/Slot 2 Stat
OffNo interface module is installed, or interface is administratively down.
Green (solid)Link is up and everything is operational.
Red (solid)
Yellow (solid)Unit is in test.
The AC power input is off. Fault LED flashes slowly if RPS backup
power is on.
Unit is powering up. On power-up, the Power LED flashes if self-test
fails.
A fault condition exists:
One or more cooling fans have failed.
AC power is not being received or internal primary AC/DC
converter has failed.
One or more option modules have failed.
Current alarm condition is present on the WAN interface, or there is a
self-test failure. The LED illuminates if an interface is configured and in
the “no shutdown” condition, but a valid physical network connection
has not yet been established.
dl
wide
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP15
Slot 1/Slot 2 - Tx/RxOffThere is no activity on the WAN or backup interface.
Slot 3 - Stat
(7203dl only)
Slot 3 - Act
(7203dl only)
Slot 3 - Test
(7203dl only)
ETH 0/1 Link
ETH 0/2 Activity
OffNo backup module is installed.
Green (solid)
Green (flashing)Backup is active.
Red (solid)
Yellow (solid)Unit is in test.
Green (flashing)There is activity on the WAN or backup interface.
OffModule is not installed.
Green (solid)Module is recognized by the system.
Red (solid)An alarm condition is occurring on the module interface.
OffThere is no data activity on the module.
Green (flashing)There is data activity on the module.
OffModule is not in test.
Yellow (solid)Module is in test mode.
Off10/100BaseT Ethernet connection is inactive.
Green (solid)10/100BaseT Ethernet connection is active.
OffNo Tx or Rx data is present.
Yellow (flashing)Tx or Rx data is present.
Backup module is ready. For the ISDN BRI backup module, green solid
indicates that the negotiation with the switch is complete.
An alarm condition is occurring on the backup interface, or there is a
self-test failure. An interface is configured and in the “no shutdown”
condition, but a valid physical network connection has not yet been
established.
Console Interface
The Console interface is an EIA-232 serial port (DTE) which provides for local management and
configuration (via a DB-9 female connector). Table A-1 on page 43 shows the
Note
10/100BaseT Ethernet Interface and Activity LEDs
Connection directly to an external modem requires a straight-through cable.
Console port pinouts.
The Ethernet ports (Eth 0/1, Eth 0/2) are RJ-45 connectors with LEDs. The yellow activity LED flashes
when data traffic is being sent or received on the Ethernet port. The green link LED is on when the router
has a good connection to the LAN. Refer to Table A-2 on page 43 for the Ethernet port pinouts. The
Ethernet port provides the following:
•10BaseT or 100BaseT with a single connector
•Auto-negotiation
•CSMA/CD
•IEEE 802.3 compatibility
•Auto-MDIX
Module Card Slots
The module card slots support various network plug-in cards. These card options are described in the
section Option Modules on page 18.
16Copyright 2006 Hewlett-Packard Development Company, LP5990-3760
This slot supports the 7100/7200 IPSec Module (part number J8471A) and the 7100/7200 IPSec Base
Module (J9026A). These modules are designed to be used in the ProCurve Secure Router to activate
encryption/decryption and security services.
The 7100/7200 IPSec Module (J8471A) provides the following security services to the host processor:
DES, triple-DES(3DES), AES, SHA-1, MD5, and random number generation. Performance metrics
include 528 Mbps (DES), 176 Mbps (3DES), and 422 Mbps (AES). The power consumption of the card
does not exceed 2 watts. See Installing the Encryption Module on page 40 for installation instructions.
The 7100/7200 IPSec Base Module (J9026A) activate software encryption/decryption and security
services for IPSec VPNs. The card activates the following software security services in the host processor:
DES, triple-DES (3DES), AES, SHA-1, MD5, and random number generation.The power consumption of
the card does not exceed 1 watt. See Installing the Encryption Module on page 40 for installation
instructions.
Compact Flash Slot
This slot supports any Type 1 CompactFlash® card (16 MB to 1GB). See Installing a CompactFlash®
Card on page 40.
Redundant Power Supply (RPS) Input
This input supports a backup power supply for the unit with the use of the ProCurve 600 Redundant and
External Power Supply (J8168A). See Supplying Redundant Power to the Unit on page 41.
Power Supply
The ProCurve Secure Router has a worldwide auto-ranging AC power supply with an IEC connector. The
appropriate three-prong cable is included in the shipment. Please refer to Supplying Power to the Unit on
page 41 for connection details.
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP17
ProCurve Secure Router option modules are not hot-swappable. Disconnect power from
the base unit before installing or removing modules.
The ProCurve Secure Router accepts several option modules designed to meet a variety of networking
requirements. The option modules are of three types: plug-in interface modules, plug-on backup modules,
and wide modules.
Interface modules are cards which plug directly into the option module slots located on the front of the
base unit. These cards provide the following types of interfaces:
•1xT1 Interface Module on page 19
•1xT1 + DSX-1 Interface Module on page 20
•2xT1 Interface Module on page 21
•1xE1 Interface Module on page 22
•1xE1 + G.703 Drop and Insert Interface Module on page 23
•2xE1 Interface Module on page 24
•1xSerial Interface Module on page 25
•1xADSL2+ Annex A Interface Module on page 26
•1xADSL2+ Annex B Interface Module on page 27
•2xISDN BRI S/T Interface Module on page 28
•2xISDN BRI U Interface Module on page 29
Wide modules are cards which plug directly into the wide module slot located on the front of the base unit.
Two wide modules are available for use with the ProCurve Secure Router 7203dl:
•8xT1/E1 Wide Module on page 30
•8xSerial Wide Module on page 32
Backup modules are plug-on cards which plug directly on to the interface module prior to installation into
the base unit. A backup module must be plugged on to an interface module in order for the backup port on
the interface module to be active. The ProCurve Secure Router supports three different backup modules
(only two can be installed simultaneously):
•ISDN BRI U Backup Module on page 33
•ISDN S/T Backup Module on page 34
•Analog Modem Backup Module on page 35
This section describes each module, providing individual card specifications and features. Refer to
Connector Pin Definitions on page 43 for pinout information. Installing Interface and Backup Modules on
page 38 provides information on card installation.
18Copyright 2006 Hewlett-Packard Development Company, LP5990-3760
The 1xT1 Interface Module (see Figure 5) provides a T1 (full T1 or fractional T1) WAN interface for
the ProCurve Secure Router. Refer to Table A-3 on page 44 for the T1 connector pinouts, and refer to
Table A-12 on page 47 for the backup connector pinouts. An optional backup module is required for
backup applications.
Figure 5. 1xT1 Interface Module
Features and Specifications
Operating Modes
•T1/FT1 Frame Relay/Multilink Frame
Relay
•T1/FT1 PPP/Multilink PPP
•T1/FT1 HDLC
T1/FT1 Interface
•Supported Standards: AT&T TR 62411,
AT&T TR 54016, ANSI T1.403,
Bellcore TR 194
•Line Rate: 1.544 Mbps +
75 bps
•Line Code: AMI or B8ZS
•Framing: D4 (SF) or ESF
•FT1 Line Rate: DS0 channelized
•Input Signal: 0 to -36 dB (DS1)
•Line Build-Out: 0, -7.5, -15, -22.5 dB (long)
or 0 to 655 feet (short)
•Connector: RJ-48C
•DS0 Assignment: Programmable
Clock Source
•Network
•Internal
Physical
•Dimensions: 6.99 cm (2.75 in) W x
10.80 cm (4.25 in) D
Diagnostics
•Test Pattern Generation and Detection: 511,
QRSS, all ones, all zeros
•Network loopbacks (local and remote);
responds to both inband and FDL loop
codes
•Alarm generation and detection
•Network and user sets of performance data
(15 minutes and 24 hours)
Compliance
•ACTA/FCC Part 68, IC CS-03
•UL/CUL 60950, IEC 60950
•EMC - see Electromagnetic Compatibility (EMC) Table on page 62
Environmental
•Operating Temperature: 0°C to 50°C (32°F
to 122°F)
•Non-Operating Temperature: -20°C to 70°C
(-4°F to 158°F)
•Relative Humidity: Up to 95 percent
noncondensing at 30°C (86°F)
•Non-Operating Relative Humidity: Up to
95 percent noncondensing at 30°C (86°F)
•Altitude: Up to 3.05 km (10,000 ft)
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP19
The 1xT1 + DSX-1 Interface Module (see Figure 6) provides a full T1 or fractional T1 network interface and
a DSX-1 interface. Refer to Table A-3 on page 44 for the T1 connector pinouts, Table A-5 on page 44 for the
DSX-1 connector pinouts, and Table A-12 on page 47 for the backup connector pinouts. An optional backup
module is required for backup applications.
The 2xT1 Interface Module (see Figure 7) provides two T1 interfaces for the ProCurve Secure Router. The
module provides up to 1.544 Mbps on each network interface. Refer to Table A-3 on page 44 for the
pinouts. Refer to Table A-12 on page 47 for the backup connector pinouts. An optional backup module is
required for backup applications.
•Network loopbacks (local and remote);
responds to both inband and FDL loop code
(T1 interface only)
•Alarm generation and detection
•Network performance data (15 minutes an
24 hours)
Compliance
•ACTA/FCC Part 68, IC CS-03
•UL/CUL 60950, IEC 60950
•EMC - refer to Electromagnetic Compatibility (EMC) Table on page 62.
Environmental
•Operating Temperature: 0°C to 50°C (32°
to 122°F)
•Non-Operating Temperature: -20°C to 70°
(-4°F to 158°F)
•Relative Humidity: Up to 95 percent
noncondensing at 30°C (86°F)
•Non-Operating Relative Humidity: Up to
95 percent noncondensing at 30°C (86°F)
•Altitude: Up to 3.05 km (10,000 ft)
Note
The 2xT1 module supports a single clock source for both T1 interfaces. Changing the
clock source on one T1 interface automatically affects the configuration of the other T1
interface. For example, setting the clock to line on the first T1 configures the clock source
of the second T1 as through.
5990-3760Copyright 2006 Hewlett-Packard Development Company, LP21
The 1xE1 Interface Module (see Figure 8) provides an E1 interface for the ProCurve Secure Router meeting
the requirements of ITU-T G.703/G.704. The module provides a single 2.048 Mbps network interface. Refer
to Table A-4 on page 44 for the pinouts. Refer to Table A-12 on page 47 for the backup connector pinouts.
An optional backup module is required for backup applications.
The 1xE1 + G.703 Drop and Insert Interface Module (see Figure 9) provides a single E1 interface
(2.043 Mbps) with user-selectable TS0 assignment and a G.703 drop port which may be used to drop and
insert traffic to an E1 PBX. Refer to Table A-4 on page 44 for the E1 pinouts. Refer to Table A-6 on page 45
for the G.703 pinouts. Refer to Table A-12 on page 47 for the backup connector pinouts. An optional backup
module is required for backup applications.
Figure 9. 1xE1 + G.703 Drop and Insert Interface Module
The 2xE1 Interface Module (see Figure 10) provides two E1 interfaces for the ProCurve Secure Router
meeting the requirements of ITU-T G.703/G.704. The module provides up to 2.048 Mbps on each network
interface. Refer to Table A-4 on page 44 for the pinouts. Refer to Table A-12 on page 47 for the backup
connector pinouts. An optional backup module is required for backup applications.
•FE1 Line Rate: Channelized timeslot
(in multiples of 56/64 kbps)
•Receiver Sensitivity: -30 dB
•Connector: RJ-48C
Diagnostics
•Test Pattern Generation and Detection: QRSS,
15
- 1, all ones, all zeros
2
•Network loopbacks
•Alarm generation and detection
•Network performance data (15 minutes and
24 hours)
Clock Source
•Network, internal, and through
Compliance
•ACIF S016, ETSI TBR 12/TBR 13
•EN 60950, IEC 60950, AS/NZS 60950
•EMC - see Electromagnetic Compatibility (EMC) Table on page 62
Environmental
•Operating Temperature: 0°C to 50°C (32°F
to 122°F)
•Non-Operating Temperature: -20°C to 70°
(-4°F to 158°F)
•Relative Humidity: Up to 95 percent
noncondensing at 30°C (86°F)
•Non-Operating Relative Humidity: Up to
95 percent noncondensing at 30°C (86°F)
•Altitude: Up to 3.05 km (10,000 ft)
Physical
•Dimensions: 6.99 cm (2.75 in) W x
10.80 cm (4.25 in) D
Note
The 2xE1 module supports a single clock source for both E1 interfaces. Changing the
clock source on one E1 interface automatically affects the configuration of the other E1
interface. For example, setting the clock to line on the first E1 configures the clock source
of the second E1 as through.
24Copyright 2006 Hewlett-Packard Development Company, LP5990-3760
Loading...
+ 56 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.