Nortel Networks 1750 User Manual

Version 8.0

NN46110-316 03.01
318022-D Rev 01
13 October 2008
Standard
600 Technology Park Drive
Billerica, MA 01821-4130

Nortel VPN Router Installation
— VPN Router 1750

2

Copyright © 2008 Nortel Networks. All rights reserved.

The information in this document is subject to change without notice. The statements, configurations, technical data, and
recommendations in this document are believed to be accurate and reliable, but are presented without express or implied
warranty. Users must take full responsibility for their applications of any products specified in this document. The
information in this document is proprietary to Nortel Networks Inc.

Trademarks

Nortel, the Nortel logo, and the Globemark are trademarks of Nortel Networks.
Adobe and Acrobat Reader are trademarks of Adobe Systems Incorporated.
Hi/fn and LZS are trademarks of Hi/fn, Inc.
HyperTerminal is a trademark of Hilgraeve, Inc.
Intel is a trademark of Intel Corporation.
Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation.
Netscape and Netscape Navigator are trademarks of Netscape Communications Corporation.
All other trademarks are the property of their respective owners.

Statement of conditions

In the interest of improving internal design, operational function, and/or reliability, Nortel Networks Inc. reserves the
right to make changes to the products described in this document without notice.

Nortel Networks Inc. does not assume any liability that may occur due to the use or application of the product(s) or
circuit layout(s) described herein.

USA requirements only

Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice

Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to
Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when
the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency
energy. If it is not installed and used in accordance with the instruction manual, it may cause harmful interference to
radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which
case users will be required to take whatever measures may be necessary to correct the interference at their own expense.

NN46110-316 03.01

European requirements only

EN 55 022 statement

This is to certify that the Nortel Networks VPN Router 1750 is shielded against the generation of radio interference in
accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application
of EN 55 022 Class A (CISPR 22).

War nin g: This is a Class A product. In a domestic environment, this product may cause radio interference, in which
case, the user may be required to take appropriate measures.

Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes
Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenmaßnahmen verantwortlich ist.

Attention: Ceci est un produit de Classe A. Dans un environnement domestique, ce produit risque de créer des
interférences radioélectriques, il appartiendra alors à l’utilisateur de prendre les mesures spécifiques appropriées.

EC Declaration of Conformity

This product conforms (or these products conform) to the provisions of the R&TTE Directive 1999/5/EC.

Japan/Nippon requirements only

Denan statement

3

Voluntary Control Council for Interference (VCCI) statement

Nortel VPN Router Installation — VPN Router 1750

4

Taiwan requirements

Bureau of Standards, Metrology and Inspection (BSMI) statement

Canada requirements only

Canadian Department of Communications Radio Interference Regulations

This digital apparatus (VPN Router 1750) does not exceed the Class A limits for radio-noise emissions from digital
apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.

Règlement sur le brouillage radioélectrique du ministère des Communications

Cet appareil numérique (VPN Router 1750) respecte les limites de bruits radioélectriques visant les appareils
numériques de classe A prescrites dans le Règlement sur le brouillage radioélectrique du ministère des Communications
du Canada.

Nortel Networks Inc. software license agreement

This Software License Agreement (“License Agreement”) is between you, the end-user (“Customer”) and Nortel
Networks Corporation and its subsidiaries and affiliates (“Nortel Networks”). PLEASE READ THE FOLLOWING
CAREFULLY. YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE
SOFTWARE. USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE
AGREEMENT. If you do not accept these terms and conditions, return the Software, unused and in the original shipping
container, within 30 days of purchase to obtain a credit for the full purchase price.

“Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or affiliates, and is copyrighted
and licensed, not sold. Software consists of machine-readable instructions, its components, data, audio-visual content
(such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies. Nortel
Networks grants you a license to use the Software only in the country where you acquired the Software. You obtain no
rights other than those granted to you under this License Agreement. You are responsible for the selection of the
Software and for the installation of, use of, and results obtained from the Software.

1. Licensed Use of Software. Nortel Networks grants Customer a nonexclusive license to use a copy of the Software
on only one machine at any one time or to the extent of the activation or authorized usage level, whichever is applicable.
To the extent Software is furnished for use with designated hardware or Customer furnished equipment (“CFE”),
Customer is granted a nonexclusive license to use Software only on such hardware or CFE, as applicable. Software
contains trade secrets and Customer agrees to treat Software as confidential information using the same care and
discretion Customer uses with its own similar information that it does not wish to disclose, publish or disseminate.
Customer will ensure that anyone who uses the Software does so only in compliance with the terms of this Agreement.
Customer shall not a) use, copy, modify, transfer or distribute the Software except as expressly authorized; b) reverse
assemble, reverse compile, reverse engineer or otherwise translate the Software; c) create derivative works or
modifications unless expressly authorized; or d) sublicense, rent or lease the Software. Licensors of intellectual property
to Nortel Networks are beneficiaries of this provision. Upon termination or breach of the license by Customer or in the

NN46110-316 03.01

event designated hardware or CFE is no longer in use, Customer will promptly return the Software to Nortel Networks or
certify its destruction. Nortel Networks may audit by remote polling or other reasonable means to determine Customer’s
Software activation or usage levels. If suppliers of third party software included in Software require Nortel Networks to
include additional or different terms, Customer agrees to abide by such terms provided by Nortel Networks with respect
to such third party software.

2. Warranty. Except as may be otherwise expressly agreed to in writing between Nortel Networks and Customer,
Software is provided “AS IS” without any warranties (conditions) of any kind. NORTEL NETWORKS DISCLAIMS
ALL WARRANTIES (CONDITIONS) FOR THE SOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING,
BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT. Nortel Networks is not obligated to
provide support of any kind for the Software. Some jurisdictions do not allow exclusion of implied warranties, and, in
such event, the above exclusions may not apply.

3. Limitation of Remedies. IN NO EVENT SHALL NORTEL NETWORKS OR ITS AGENTS OR SUPPLIERS BE
LIABLE FOR ANY OF THE FOLLOWING: a) DAMAGES BASED ON ANY THIRD PARTY CLAIM; b) LOSS OF,
OR DAMAGE TO, CUSTOMER’S RECORDS, FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL,
INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS),
WHETHER IN CONTRACT, TORT OR OTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OF YOUR
USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS, ITS AGENTS OR SUPPLIERS HAVE BEEN
ADVISED OF THEIR POSSIBILITY. The forgoing limitations of remedies also apply to any developer and/or supplier
of the Software. Such developer and/or supplier is an intended beneficiary of this Section. Some jurisdictions do not
allow these limitations or exclusions and, in such event, they may not apply.

4. General

a. If Customer is the United States Government, the following paragraph shall apply: All Nortel Networks

Software available under this License Agreement is commercial computer software and commercial computer
software documentation and, in the event Software is licensed for or on behalf of the United States
Government, the respective rights to the software and software documentation are governed by Nortel
Networks standard commercial license in accordance with U.S. Federal Regulations at 48 C.F.R. Sections

12.212 (for non-DoD entities) and 48 C.F.R. 227.7202 (for DoD entities).

b. Customer may terminate the license at any time. Nortel Networks may terminate the license if Customer fails

to comply with the terms and conditions of this license. In either event, upon termination, Customer must
either return the Software to Nortel Networks or certify its destruction.

c. Customer is responsible for payment of any taxes, including personal property taxes, resulting from

Customer’s use of the Software. Customer agrees to comply with all applicable laws including all applicable

export and import laws and regulations.
d. Neither party may bring an action, regardless of form, more than two years af ter the cause of the action arose.
e. The terms and conditions of this License Agreement form the complete and exclusive agreement between

Customer and Nortel Networks.
f. This License Agreement is governed by the laws of the country in which Customer acquires the Software. If

the Software is acquired in the United States, then this License Agreement is governed by the laws of the state

of New York.

5

Nortel VPN Router Installation — VPN Router 1750

6

NN46110-316 03.01

Contents

Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Text conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Printed technical manuals . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Finding the most recent updates on the Nortel Web site . . . . . . . . . . . . . . . . . . . . 16

Getting help from the Nortel Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Getting help over the phone from a Nortel Solutions Center . . . . . . . . . . . . . . . . . 17

Getting help from a specialist by using an Express Routing Code . . . . . . . . . . . . 17

Getting help through a Nortel distributor or reseller . . . . . . . . . . . . . . . . . . . . . . . . 18

New in this release. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19

Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Other changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Document changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

7

Cables and power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Connecting communications cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Connecting the power cord . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Verifying a successful installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Front panel LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

LEDs on the system 10/100BASE-TX Ethernet ports . . . . . . . . . . . . . . . . . . . . . . 27

10/100BASE-TX Ethernet interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

1000BASE-T (1000 GT) Ethernet interface card LEDs . . . . . . . . . . . . . . . . . . . . . 28

1000BASE-T (1000 MT) Ethernet interface card LEDs . . . . . . . . . . . . . . . . . . . . . 29

Nortel VPN Router Installation — VPN Router 1750

1000BASE-SX Ethernet interface card LED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

56/64K CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

ADSL WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

T1/E1 CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Quad T1/E1 CSU/DSU WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . 34

Single V.35/X.21 WAN interface card LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

SSL VPN Module 1000 LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Nortel VPN Router 1750 chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Description of the Nortel VPN Router 1750 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Shipment contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Additional equipment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Site requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Chassis installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Installing the chassis on a flat surface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Installing the chassis in an equipment rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

Option card and DIMM installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

8

Shutting down the system to add or replace hardware . . . . . . . . . . . . . . . . . . . . . . . . 48

Removing the front bezel and top cover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Attaching the antistatic wrist strap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Option card installation and replacement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Installing the SSL VPN Module 1000 with other option cards . . . . . . . . . . . . . . . . 54

Installing and replacing an option card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Installing and replacing DIMMs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Management IP interface configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Required information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Configuring the management IP address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Testing the configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Nortel VPN Router Installation — VPN Router 1750

Technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Chassis specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

System ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

10/100BASE-TX Ethernet LAN ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Serial port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Modem cable specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

Hardware option cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

VPN Router Security Accelerator card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

SSL VPN Module 1000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

10/100BASE-TX Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

1000BASE-T (1000 GT) Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . . 77

1000BASE-T (1000 MT) Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . . 79

1000BASE-SX Ethernet interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

56/64K CSU/DSU WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

ADSL WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

ISDN BRI interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

T1/E1 CSU/DSU WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Quad T1/E1 CSU/DSU WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

V.90 modem interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Single V.35/X.21 WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

HSSI WAN interface card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

9

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

Nortel VPN Router Installation — VPN Router 1750

10

Nortel VPN Router Installation — VPN Router 1750

Preface

The Nortel VPN Router 1750 is part of the Nortel VPN Router product family.
The Nortel VPN Routers support secure, reliable IP VPNs in a single, integrated
hardware device. Throughout this document, the VPN Router is also referred to as
the gateway.

This document provides instructions to install the VPN Router 1750 for the first
time and to replace field replaceable units (FRU). This document also provides
some initial configuration information and includes technical specifications for
the VPN Router 1750.

For complete information about how to configure and monitor the VPN Router
1750, see the documentation on the software CD that Nortel shipped with the
router.

Before you begin

11

This guide is intended for qualified service personnel who install the VPN Router
1750 for the first time or who need to install or replace the following field
replaceable units (FRU):

• Local Area Network (LAN), Wide Area Network (WAN), and serial interface
cards

• VPN Accelerator cards (VPN Router Security Accelerator [CSA] card and
Hardware accelerator card)

• Secure Sockets Layer (SSL) VPN Module 1000

• dual inline memory modules (DIMM)

Before you install the VPN Router 1750, use standard cable system practices to
install all the network wiring on the premises.

Nortel VPN Router Installation — VPN Router 1750

12 Preface

Text conventions

This guide uses the following text conventions:

angle brackets (< >) Indicates that you choose the text to enter based on the

description inside the brackets. Do not type the
brackets when entering the command.

Example: If the command syntax is

ping <ip_address>, you enter
ping 192.32.10.12

bold Courier text

Indicates command names, options, and text that you
need to enter.

Example: Use the
Example: Enter

show health command.

terminal paging {off | on}.

braces ({}) Indicates required elements in syntax descriptions

where more than one option exists. You must choose
only one option. Do not type the braces when you enter
the command.

Example: If the command syntax is

source {external | internal}

ldap-server source external or

either

ldap-server source internal

ldap-server

, you must enter

, but not both.

brackets ([ ]) Indicates optional elements in syntax descriptions. Do

not type the brackets when you enter the command.
Example: If the command syntax is

show ntp [associations], you can enter

show ntp or show ntp associations.

either
Example: If the command syntax is default rsvp

[token-bucket
default rsvp, default rsvp token-bucket
depth, or default rsvp token-bucket rate.

{depth | rate}], you can enter

ellipsis points (. . .) Indicates that you repeat the last element of the

command as needed.
Example: If the command syntax is

more diskn:<directory>/...<file_name>,

you enter

more and the fully qualified name of the file.

NN46110-316 03.01

Preface 13

italic text Indicates new terms, book titles, and variables in

command syntax descriptions. Where a variable is two
or more words, an underscore connects the words.

Example: If the command syntax is

ping <ip_address>, ip_address is one variable

and you substitute one value for it.

plain Courier
text

Indicates system output, for example, prompts and
system messages.

Example:

File not found.

separator (,) Shows menu paths.

Example: Choose Status, Health Check.

vertical line (

| ) Separates choices for command keywords and

arguments. Enter only one choice. Do not type the
vertical line when you enter the command.

Example: If the command syntax is

terminal paging {off | on}, you enter either
terminal paging off or terminal paging on,

but not both.

Nortel VPN Router Installation — VPN Router 1750

14 Preface

Related publications

For more information about the Nortel VPN Router 1750, see the following
publications:

• Release notes provide the most recent information, including brief
descriptions of the new features, problems fixed in this release, and known
problems and workarounds.

• Nortel VPN Router 1750 Configuration — Client (NN46110-306) provides
information to install and configure client software for the VPN Router 1750.

• Nortel VPN Router 1750 Configuration — TunnelGuard (NN46110-307)
provides information to configure and use the TunnelGuard feature.

• Nortel VPN Router Upgrades — Server Software Release 8.0 (NN46110-407)
provides information to upgrade the server software to the most recent release.

• Nortel VPN Router Installation and Upgrade — Client Software Release 8.01
(NN46110-409) provides information to upgrade the Nortel VPN Client to the
most recent release.

• Nortel VPN Router 1750 Configuration — Basic Features (NN46110-500)
introduces the product and provides information about initial setup and
configuration.

• Nortel VPN Router 1750 Configuration — SSL VPN Services (NN46110-501)
provides instructions to configure services on the SSL VPN Module 1000,
including authentication, networks, user groups, and portal links.

• Nortel VPN Router Configuration — Advanced Features (NN46110-502)
provides configuration information for advanced features such as the
Point-to-Point Protocol (PPP), Frame Relay, and interoperability with other
vendors.

• Nortel VPN Router 1750 Configuration — Tunneling Protocols

(NN46110-503) provides configuration information for the tunneling
protocols IPsec, Layer 2 Tunneling Protocol (L2TP), Point-to-Point
Tunneling Protocol (PPTP), and Layer 2 Forwarding (L2F).

• Nortel VPN Router 1750 Configuration — Routing (NN46110-504) provides
instructions to configure the Border Gateway Protocol (BGP), Routing
Information Protocol (RIP), Open Shortest Path First (OSPF), Virtual Router
Redundancy Protocol (VRRP), Equal Cost Multipath (ECMP), routing policy
services, and client address redistribution (CAR).

• Nortel VPN Router 1750 Using the Command Line Interface (NN46110-507)
provides syntax, descriptions, and examples for the commands that you can
use from the command line interface (CLI).

NN46110-316 03.01

• Nortel VPN Router 1750 Configuration — Firewalls, Filters, NAT, and QoS
(NN46110-508) provides instructions to configure the Stateful Firewall and
VPN Router 1750 interface and tunnel filters.

• Nortel VPN Router 1750 Security — Servers, Authentication, and Certificates
(NN46110-600) provides instructions to configure authentication services and
digital certificates.

• Nortel VPN Router 1750 Troubleshooting — Server (NN46110-602) provides
information about system administrator tasks such as recovery, and
instructions to monitor VPN Router status and performance. This document
provides troubleshooting information and event log messages.

• Nortel VPN Router Administration (NN46110-603) provides information
about system administrator tasks such as backups, file management, serial
connections, initial passwords, and general network management functions.

• Nortel VPN Router 1750 Troubleshooting — Client (NN46110-700) provides
information to troubleshoot installation and connectivity problems with the
Nortel VPN Client.

Printed technical manuals

Preface 15

To print selected technical manuals and release notes for free, directly from the
Internet, go to www.nortel.com/documentation, find the product for which you
need documentation, and then locate the specific category and model or version
for your hardware or software product. Use Adobe Reader to open the manuals
and release notes, search for the sections you need, and then print them on most
standard printers. Go to the Adobe Systems Web site at www.adobe.com to
download a free copy of the Adobe Reader.

How to get help

This section explains how to get help for Nortel products and services.

Nortel VPN Router Installation — VPN Router 1750

16 Preface

Finding the most recent updates on the Nortel Web site

The content of this documentation is current at the time the product is released. To
check for updates to the most recent documentation and software for VPN Router
1750, click one of the following links.

Link Web site

Most recent software Nortel page for VPN Router software located at

support.nortel.com/go/
main.jsp?cscat=SOFTWARE&poid=12325

Most recent
documentation

Nortel page for VPN Router documentation
located at

support.nortel.com/go/
main.jsp?cscat=DOCUMENTATION&poid=12325

NN46110-316 03.01

Preface 17

Getting help from the Nortel Web site

The best way to get technical support for Nortel products is from the Nortel
Technical Support Web site:

www.nortel.com/support

This site provides quick access to software, documentation, bulletins, and tools to
address issues with Nortel products. From this site, you can perform the following
activities:

• download software, documentation, and product bulletins

• search the Technical Support Web site and the Nortel Knowledge Base for
answers to technical issues

• sign up for automatic notification of new software and documentation for
Nortel equipment

• open and manage technical support cases

Getting help over the phone from a Nortel Solutions Center

If you do not find the information you require on the Nortel Technical Support
Web site, and you have a Nortel support contract, you can also get help over the
phone from a Nortel Solutions Center.

In North America, call 1-800-4NORTEL (1-800-466-7835).

Outside North America, go to the following Web site to obtain the phone number
for your region:

www.nortel.com/callus

Getting help from a specialist by using an Express Routing Code

To access some Nortel Technical Solutions Centers, you can use an Express
Routing Code (ERC) to quickly route your call to a specialist in your Nortel
product or service. To locate the ERC for your product or service, go to the
following Web site:

Nortel VPN Router Installation — VPN Router 1750

18 Preface

Getting help through a Nortel distributor or reseller

www.nortel.com/erc

If you purchased a service contract for your Nortel product from a distributor or
authorized reseller, contact the technical support staff for that distributor or
reseller.

NN46110-316 03.01

New in this release

The following section details what’s new in Nortel VPN Router Installation—
VPN Router 1750 (NN46110-316) for Release 8.0:

• “Features” on page 19

• “Other changes” on page 19

Features

See the following section for information about feature changes:

• “Models” on page 19

Models

Starting with Release 8.0, the Nortel VPN Router 1750 is available in two 128-bit
models. For more information, see “Description of the Nortel VPN Router 1750”

on page 37.

19

Other changes

For information that is not feature related, see the following section:

• “Document changes” on page 19

Document changes

This document is changed to comply with Nortel writing conventions.

Nortel VPN Router Installation — VPN Router 1750

20 New in this release

NN46110-316 03.01

Chapter 1
Cables and power

This chapter provides information about how to connect communications cables
and the power cord to the VPN Router 1750.

Caution: Before you plug the power cord into the outlet, connect the
cables to the built-in Ethernet ports and to the interfaces on the option
cards installed in the VPN Router 1750.

This chapter contains the following topics:

• “Connecting communications cables” on page 22

• “Connecting the power cord” on page 24

• “Verifying a successful installation” on page 25

• “LEDs” on page 26

21

Caution: You must route the cabling for all wide area network (WAN),

local area network (LAN), and serial connections inside the building
environment.

Nortel VPN Router Installation — VPN Router 1750

22 Chapter 1 Cables and power

Connecting communications cables

Gather the cables to attach to the VPN Router 1750.

“Interfaces and cables for the Nortel VPN Router 1750” on page 22 lists the

system ports and the ports on the optional interface cards that you can install in the
VPN Router 1750. The following table also indicates whether you can obtain
cables for the ports from Nortel.

Table 1 Interfaces and cables for the Nortel VPN Router 1750

Cable available from Nortel

Interface Included Ordered separately Contact supplier

10/100BASE-TX Ethernet system ports X

Serial port X

10/100BASE-TX Ethernet X

1000BASE-T (1000 GT) Ethernet X

1000BASE-T (1000 MT) Ethernet
(copper)

1000BASE-SX Ethernet (fiber) Order either the LC-to-LC

56/64K Channel Service Unit (CSU)/
Data Service Unit (DSU) WAN

Asymmetric Digital Subscriber Line
(ADSL) WAN

Integrated Services Digital Network
(ISDN) Basic Rate Interface (BRI)

V.90 modem X

T1/E1 CSU/DSU WAN X

Quad T1/E1 CSU/DSU WAN X

Single V.35/X.21 WAN Order either the V.35

Dual V.35 WAN X

HSSI WAN X

X

cable or the LC-to-SC
cable.

cable or the X.21 cable.

X

X

X

NN46110-316 03.01

Chapter 1 Cables and power 23

For information about the connectors and cable pinouts, see Appendix A,

“Technical specifications,” on page 69.

“Rear view of the Nortel VPN Router 1750” on page 23 shows the back of the

VPN Router 1750. All interface cables and the power cord attach to the rear of the
gateway.

Figure 1 Rear view of the Nortel VPN Router 1750

4 PCI slots

VPN Router 1750

100 - 240 V~

5 - 3 A

60 - 50 Hz

receptacle

Power

Power
switch

Serial Port

Serial portAC

LAN0 LAN1

1234

10/100

Ethernet

LAN ports

11424EA

Connect the interface cables to the VPN Router 1750 in the following order:

1 Connect the 10/100BASE-TX RJ-45 cables to the built-in 10/100BASE-TX

Ethernet LAN ports on the gateway.

2 If you plan to connect a terminal or PC to the gateway, connect the serial cable

that ships with the VPN Router 1750 to the serial port.

3 Connect all other cables to the ports on the installed interface cards.

If you ordered optional interface cards, connect the cables for these interfaces
to the ports.

Nortel VPN Router Installation — VPN Router 1750

24 Chapter 1 Cables and power

Connecting the power cord

You must order the power cord for the VPN Router 1750 separately.

Caution: Risk of equipment damage

Do not modify or use the AC power cord if it is not the exact type that is
required for your power outlet.

The power cord must meet the requirements described in “Power cord

requirements” on page 24.

Table 2 Power cord requirements

Requirement Description

Current rating The power cord must be rated for the available AC voltage and

Certification The power cord must have certification marks from an

Cord length and flexibility The power cord must be less than 4.5 meters (14.7 feet) long.

Power supply connector The connector that you plug into the AC receptacle on the

Wall outlet connector The power cord must terminate in a male plug with

must have a current rating that is at least 125 percent of the
current rating of the gateway (5 A @ 100 Voltage Alternating
Current (VAC) or 3 A @ 240 VAC).

acceptable regional agency.

The cord must be a flexible harmonized cord or VDE-certified
cordage to comply with the gateway safety certifications.

gateway must be an IEC 320, Sheet C13 female.

appropriate grounding.

To connect the power cord and turn on the system power, perform the following
steps:

1 Connect the power cord to the AC receptacle on the back of the gateway, as

shown in “Rear view of the Nortel VPN Router 1750” on page 23.

2 Connect the power cord to the power outlet.

Caution: Risk of equipment damage

Protect the VPN Router 1750 by plugging it into a surge suppressor.

NN46110-316 03.01

3 Press and release the power switch on the rear of the VPN Router 1750, and

wait for the gateway to start.

Verifying a successful installation

After you connect the gateway to the power source and turn it on, you can verify a
successful installation by checking the light emitting diodes (LED) on the front
panel. For more information, see “Front panel LEDs” on page 26.

The following sequence of LEDs occurs:

1 The power LED (the Nortel logo) lights blue.

2 The Alert LED lights red and the Boot/Ready LED lights green.

3 When the gateway begins the boot sequence, the Boot/Ready LED lights

yellow and the Alert LED turns off.

4 After the boot process is complete, the Boot/Ready LED lights green, which

indicates that the gateway is operational.

Chapter 1 Cables and power 25

5 The Alert LED lights yellow because the gateway is not configured.

For a newly installed VPN Router 1750, a yellow Alert LED does not indicate
an alarm condition. After you configure the gateway, the Alert LED turns off.
For more information, see Chapter 4, “Management IP interface

configuration,” on page 61.

If the LEDs on the front panel light in the preceding sequence, the installation is
successful. If the LEDs do not light in the preceding sequence, check that you
correctly installed the bezel on the gateway and that you properly attached the
power cord to the power supply. For more information, see “Connecting the power

cord” on page 24.

If the VPN Router 1750 still does not start, contact your local Nortel Technical
Solutions Center. For more information, see “How to get help” on page 15.

Nortel VPN Router Installation — VPN Router 1750

26 Chapter 1 Cables and power

LEDs

This section describes the LEDs on the front panel of the VPN Router 1750 and
on the interface cards that use LEDs. You can confirm that you properly connect
the LAN and WAN interface cables by examining the LEDs.

Front panel LEDs

The front panel of the VPN Router 1750 has a lighted Nortel logo and two LEDs
as shown in the following figure. These LEDs indicate the status of the VPN
Router 1750.

Figure 2 Front panel LEDs

Powe r

Alert

Boot/Ready

Alert

Boot/Ready

CS160013A

The following table describes the LEDs on the VPN Router 1750 front panel.

Table 3 Front panel LED indicators

LED Indicator Description

Power (Nortel
logo)

Alert Yellow A nonfatal alarm condition exists. The health check

Boot/Ready Yellow The gateway is starting and is in a nonready state.

On The gateway receives AC power.

Off The gateway does not receive AC power.

display describes the yellow alert condition.

Red A serious alarm condition exists that requires attention.

A red alert usually indicates a hardware error. The health
check display describes the red alert condition.

Green The boot process is complete, and the gateway is in a

state of readiness.

For more information about the health check, event log, and system log, see
Nortel VPN Router Troubleshooting — Server (NN46110-602).

NN46110-316 03.01

Chapter 1 Cables and power 27

LEDs on the system 10/100BASE-TX Ethernet ports

Each of the 10/100BASE-TX Ethernet ports on the rear of the VPN Router 1750
has two LEDs; see “LEDs on the system 10/100BASE-TX Ethernet ports” on

page 27.

Figure 3 LEDs on the system 10/100BASE-TX Ethernet ports

Green

CS260011A

Yellow

The following table describes the LEDs on the system 10/100BASE-TX Ethernet
ports.

Table 4 LED indicators on the system 10/100BASE-TX Ethernet ports

LED Indicator Description

Green On The LAN port operates at 100 Megabits per second

(Mb/s).

Off The LAN port operates at 10 Mb/s.

Yellow On The cable connections between the LAN port and the

hub are good.

Off The cable connections between the LAN port and the

Flashing The LAN port is sending or receiving network data.

hub are faulty.

The frequency of the flashes increases with
increased traffic.

Nortel VPN Router Installation — VPN Router 1750

28 Chapter 1 Cables and power

10/100BASE-TX Ethernet interface card LEDs

The following figure shows the LEDs on the 10/100BASE-TX Ethernet interface
card.

Figure 4 LEDs on the 10/100BASE-TX Ethernet interface card

DATA

ACT/LINK

Activity/Link

100TX

10/100 Mb/s

CS260009A

The following table describes the LEDs on the 10/100BASE-TX Ethernet
interface card.

Table 5 LED indicators on the 10/100BASE-TX Ethernet interface card

LED Indicator Description

ACT/LINK Steady green or

flashing green

Off The card is not sending or receiving data.

10/100TX Green The port operates at 100 Mb/s.

Off The port operates at 10 Mb/s.

The card is sending or receiving network data. The
frequency of the flashes increases with increased
traffic.

1000BASE-T (1000 GT) Ethernet interface card LEDs

The following figure shows the LEDs on the 1000BASE-T (1000 GT) Ethernet
interface card.

Figure 5 LEDs on the 1000BASE-T (1000 GT) Ethernet interface card

NN46110-316 03.01

Chapter 1 Cables and power 29

The following table describes the LEDs on the 1000BASE-T (1000 GT) Ethernet
interface card.

Table 6 LED indicators on the 1000BASE-T (1000 GT) Ethernet interface card

LED Indicator Description

ACT/LINK Steady green The port connects to a valid link partner.

Flashing green The card is sending or receiving network data. The

frequency of the flashes increases with increased
traffic.

Off The card is not sending or receiving data.

10/100/1000 Yellow The port operates at 1000 Mb/s.

Green The port operates at 100 Mb/s.

Off The port operates at 10 Mb/s.

1000BASE-T (1000 MT) Ethernet interface card LEDs

The following figure shows the LEDs on the 1000BASE-T (1000 MT) Ethernet
interface card.

Figure 6 LEDs on the 1000BASE-T (1000 MT) Ethernet interface card

R

Intel PRO

ACT/LNK

ACT/LNK

10 = OFF

10/100/1000

100 = GRN

1000 = ORG

11287EA

The following table describes the LEDs on the 1000BASE-T Ethernet interface
card.

Table 7 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card

LED Indicator Description

ACT/LNK Steady green The port connects to a valid link partner.

Flashing green The LAN port is sending or receiving network data.

Off The port does not link to a valid partner.

Nortel VPN Router Installation — VPN Router 1750

30 Chapter 1 Cables and power

Table 7 LED indicators on the 1000BASE-T (1000 MT) Ethernet interface card

LED Indicator Description

10/100/1000 Off The LAN port operates at 10 Mb/s.

Green The LAN port operates at 100 Mb/s.

Orange The LAN port operates at 1000 Mb/s.

1000BASE-SX Ethernet interface card LED

The following figure shows the LED on the 1000BASE-SX Ethernet interface
card.

Figure 7 LED on the 1000BASE-SX Ethernet interface card

R

Intel PRO

ACT/LNK

ACT/LNK

11288EA

The following table describes the LED on the 1000BASE-SX Ethernet interface
card.

Table 8 LED indicator on the 1000BASE-SX Ethernet interface card

LED Indicator Description

ACT/LNK Steady green The port connects to a valid link partner.

Flashing green The LAN port is sending or receiving network data.

Off The port does not link to a valid partner.

NN46110-316 03.01