Nortel Networks 4134 User Manual

Nortel Secure Router 4134

Commissioning

NN47263-302 (323249-A).

Document status: Standard Document version: 01.02 Document date: 2 August 2007

This document is protected by copyright laws and international treaties. All information, copyrights and any other intellectual property rights contained in this document are the property of Nortel Networks. Except as expressly authorized in writing by Nortel Networks, the holder is granted no rights to use the information contained herein and this document shall not be published, copied, produced or reproduced, modiﬁed, translated, compiled, distributed, displayed or transmitted, in whole or part, in any form or media.

Sourced in Canada, the United States of America, and India.

New in this release 5

Features 5

Introduction 7

Prerequisites 7 Navigation 7

Secure Router 4134 commissioning 9

Prerequisites 9 Secure Router 4134 commissioning procedures 9 Secure Router 4134 commissioning navigation 11

Commissioning conﬁguration procedures 13

Gathering required information 13

Connecting a terminal for local access 14

Powering up the Secure Router 4134 16

Logging in to the Secure Router 4134 19

Deﬁning boot parameters 20

Enabling the management LAN port 22

Conﬁguring SSH 24 Enabling FTP, TFTP, and Telnet 25

Verifying the Telnet connection 25

Viewing Telnet server settings 26 Clearing a Telnet session 26

User names and passwords 5 System administrator account 5 Alarms and system status 5

Procedure job aid 13

Prerequisites 15

Prerequisites 16

Prerequisites 20

Viewing boot parameters and software image information 22

Prerequisites 23

Prerequisites 25

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

4 Contents

Conﬁguring the Telnet banner 27 Conﬁguring the Telnet timeout 28 Conﬁguring the host name 29 Conﬁguring the static default route 29 Verifying the next-hop connection 30

Prerequisites 30 Conﬁguring the date 30 Conﬁguring the time 31 Conﬁguring the SNTP client 32 Changing the admin user password 32 Changing the administrator account name 33 Adding users 34

Procedure job aid 35 Removing users 35 Conﬁguring FTP users 36 Pinging a device 36

Prerequisites 36 Saving a conﬁguration 37 Rebooting or resetting the Secure Router 4134 37 Viewing the Secure Router 4134 conﬁguration 38 Viewing chassis status 39 Viewing interface module conﬁguration 39 Checking the system for alarms 39 Checking the system status 40

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

New in this release

The following section details what’s new in Nortel Secure Router 4134 — Commissioning (NN47263-302) for Release 10.0.

Features

See the following sections for information about feature changes:

•

"User names and passwords" (page 5)

•

"System administrator account" (page 5)

•

"Alarms and system status" (page 5)

User names and passwords

The system administrator (the only user with level 1 access) can identify users (that is, login names) who can access the Secure Router 4134. The administrator can also assign each new user a level of access privileges (levels 2–4). The default access level is 4. For more information about adding and removing users from the system, see "Adding users" (page 34) and "Removing users" (page 35).

System administrator account

Nortel recommends that you change the default administrator user name and password for security reasons. The default administrator user name is "admin". The default password is "setup". For more information on customizing the system administrator account, see "Changing the admin

user password" (page 32) and "Changing the administrator account name" (page 33).

Alarms and system status

When commissioning the Secure Router 4134, you can check for alarms and view the status of all interface modules. See "Checking the system

status" (page 40) and "Checking the system for alarms" (page 39) for

procedures that describe how to view this type of system information

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

6 New in this release

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Introduction

This document provides information about the recommended method to commission the Secure Router 4134. For a complete list of Command Line Interface (CLI) commands that you use to monitor and conﬁgure the Secure Router 4134, see Nortel Secure Router 4134 — Command Line Reference (NN47263-507).

Prerequisites

•

Hardware installation is complete.

•

You must have a console cable to connect to the console port on the rear panel of the router.

•

You must have an Ethernet cable to connect to the management port on the rear panel of the router.

•

Be familiar with using the CLI and interpreting partial conﬁguration procedures. See Nortel Secure Router 4134 — Using the Command Line Interface (NN47263-506).

Navigation

•

"Secure Router 4134 commissioning" (page 9)

•

"Commissioning conﬁguration procedures" (page 13)

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

8 Introduction

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Secure Router 4134 commissioning

You commission the Secure Router 4134 to prepare the unit for software feature conﬁguration. Commissioning includes tasks such as establishing communication with the system, deﬁning boot parameters, conﬁguring usernames and passwords, and establishing remote access.

Prerequisites

•

Ensure the Secure Router 4134 is securely installed in an equipment rack.

Secure Router 4134 commissioning procedures

This task ﬂow shows you the sequence of procedures you perform to commission the Secure Router 4134. To link to any procedure, go to

"Secure Router 4134 commissioning navigation" (page 11).

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

10 Secure Router 4134 commissioning

Figure 1 Secure Router 4134 commissioning procedures

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Secure Router 4134 commissioning navigation 11

Figure 2 Secure Router 4134 commissioning procedures (continued)

Secure Router 4134 commissioning navigation

•

"Gathering required information" (page 13)

•

"Connecting a terminal for local access" (page 14)

Nortel Secure Router 4134

NN47263-302 01.02 Standard

Commissioning

10.0 2 August 2007

12 Secure Router 4134 commissioning

•

"Powering up the Secure Router 4134" (page 16)

•

"Logging in to the Secure Router 4134" (page 19)

•

"Deﬁning boot parameters" (page 20)

•

"Enabling the management LAN port" (page 22)

•

"Conﬁguring SSH" (page 24)

•

"Enabling FTP, TFTP, and Telnet" (page 25)

•

"Verifying the Telnet connection" (page 25)

•

"Viewing Telnet server settings" (page 26)

•

"Clearing a Telnet session" (page 26)

•

"Conﬁguring the Telnet banner" (page 27)

•

"Conﬁguring the Telnet timeout" (page 28)

•

"Conﬁguring the host name" (page 29)

•

"Conﬁguring the static default route" (page 29)

•

"Verifying the next-hop connection" (page 30)

• "Conﬁguring the date" (page 30)

•

"Conﬁguring the time" (page 31)

•

"Conﬁguring the SNTP client" (page 32)

• "Changing the admin user password" (page 32)

•

"Changing the administrator account name" (page 33)

•

"Adding users" (page 34)

• "Removing users" (page 35)

•

"Conﬁguring FTP users" (page 36)

•

"Pinging a device" (page 36)

•

"Saving a conﬁguration" (page 37)

•

"Rebooting or resetting the Secure Router 4134" (page 37)

•

"Viewing the Secure Router 4134 conﬁguration" (page 38)

•

"Viewing chassis status" (page 39)

•

"Viewing interface module conﬁguration" (page 39)

•

"Checking the system for alarms" (page 39)

•

"Checking the system status" (page 40)

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Commissioning conﬁguration procedures

This section includes the recommended method to commission the Secure Router 4134, while ensuring that you limit unauthorized access to the router.

Commissioning is the ﬁrst step following hardware installation. The commissioning task includes the initial procedures required to bring the router online, and to conﬁgure appropriate access for remote users.

Gathering required information

Before you begin, gather all the information you require to complete the commissioning steps.

Procedure steps

Step Action

Record all the required information for commissioning your Secure Router 4134 in the following table.

Procedure job aid

Table 1 Gathering required information

Required information

New password for admin user kevx Host name fremont Management IP address and

mask

Sample entries

10.11.12.13 255.255.255.0

NN47263-302 01.02 Standard

—End—

Record information here

Nortel Secure Router 4134

Commissioning

10.0 2 August 2007

14 Commissioning conﬁguration procedures

Required information

Next hop IP address for static route to hosts and servers

IP address of hosts and servers that access the Secure Router 4134

The following ﬁgure is an example of a commissioning scenario showing the basic conﬁguration requirements including host name, management interface, and terminals.

Figure 3 Commissioning scenario

Sample entries

11.12.13.14/24

a.b.c.d/32

Record information here

Connecting a terminal for local access

Connect a local terminal to the console port on the rear panel of the Secure Router 4134. This local connection provides communication with the system during commissioning.

Nortel Secure Router 4134

NN47263-302 01.02 Standard

Commissioning

10.0 2 August 2007

When powering up for the ﬁrst time, Nortel recommends that you use a direct console connection to the Secure Router 4134. After you have completed the initial conﬁguration, you can use a remote connection for router management.

Prerequisites

•

You have a PC running HyperTerminal or similar terminal emulation program with the following communication protocol settings:

— 9600 bps — 8 data bits — 1 stop bit — No ﬂow control — No parity

•

Ensure you have the supplied console cable (shipped with the chassis).

•

Ensure you have the supplied female DB-9 to RJ-45 adapter if you require it for connection to your terminal or PC.

Connecting a terminal for local access 15

ATTENTION

•

Ensure you have the Secure Router 4134 securely installed in the equipment rack.

Procedure steps

Step Action 1

Insert the male RJ-45 connector in the console port on the rear panel of the Secure Router 4134.

Connect the female DB-9 to RJ-45 adapter to the opposite end of the console cable, if necessary.

Insert the RJ-45 or female DB-9 connector (dependent on your equipment) in a terminal or PC.

—End—

Procedure job aid

The following ﬁgure shows how to connect a terminal for local access.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

16 Commissioning conﬁguration procedures

Figure 4 Connect a local terminal to the Secure Router 4134

Powering up the Secure Router 4134

Power up the Secure Router 4134 to initiate the power-on diagnostics test. The Secure Router 4134 indicates the resulting pass or fail with status LEDs, and by logging results in the event log.

Average time for the Secure Router to boot up: 5 minutes.

Prerequisites

•

The Secure Router 4134 is securely mounted and grounded. For information about installing the Secure Router 4134 chassis, see Nortel Secure Router 4134 Installation — Chassis (NN47263-300). For information about installing the power supplies, interface modules, and other hardware components, see Nortel Secure Router 4134 Installation — Hardware Components (NN47263-301).

•

Power cables for AC power supplies are connected.

•

DC power for DC power supplies is connected.

•

A local terminal is connected to the Secure Router 4134 console port (the console port is located on the rear panel of the router).

•

Ensure you have powered up the terminal or PC.

DANGER

Risk of electric shock

Ensure the Secure Router 4134 is properly grounded. For information about grounding the Secure Router 4134, see Nortel Secure Router 4134 Installation — Chassis (NN47263-300)

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Powering up the Secure Router 4134 17

ATTENTION

Procedure steps (AC power)

Step Action 1

Turn on one power switch at a time (if you installed two AC power supplies). Power switches are on the rear panel of the Secure Router 4134. The fans start immediately, and the LEDs cycle.

Verify that diagnostic testing is underway by observing the startup messages on your local terminal.

Procedure steps (DC power)

Step Action 1

Once the router completes the self-diagnostics tests, verify that the System LED and the power LEDs that correspond to the power supplies installed on your router (PS0 and PS1) are green.

Verify that the fan LED on the rear panel of the Secure Router 4134 is green, and air is ﬂowing through the unit.

—End—

Turn on the DC power source. The fans start immediately, and the LEDs cycle.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

18 Commissioning conﬁguration procedures

Verify that diagnostic testing is underway by observing the startup messages on your local terminal.

Once the router completes the self-diagnostics tests, verify that the System LED and the power LEDs that correspond to the power supplies installed on your router (PS0 and PS1) are green.

Verify that the fan LED on the rear panel of the Secure Router 4134 is green, and air is ﬂowing through the unit.

—End—

For troubleshooting information, see Nortel Secure Router 4134 — Troubleshooting (NN47263-700).

When the Secure Router 4134 begins powering up, the boot sequence displays messages on the terminal or PC that you connected to the console port. A prompt displays at the beginning of the boot sequence indicating that you can stop the auto-boot sequence by pressing any key. The Secure Router 4134 waits for 5 seconds for input from you before beginning the boot sequence. If you press a key and stop the auto-boot sequence, the Secure Router 4134 displays the bootrom command menu. The following ﬁgure shows the prompt to stop the auto-boot sequence and enter the bootrom command area.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Figure 5 Accessing the bootrom command menu

Logging in to the Secure Router 4134 19

If you accidentally enter the bootrom command menu, you can exit that command menu and restart the normal boot sequence by pressing @ on your keyboard.

For detailed information on using the bootrom command menu, see Nortel Secure Router 4134 — Troubleshooting (NN47263-700).

Logging in to the Secure Router 4134

The ﬁrst time you log on to the Secure Router 4134 CLI, you perform initial conﬁguration such as the following:

•

Conﬁgure the IP address for the management port.

•

Conﬁgure the next-hop (gateway IP address).

•

Enable remote access.

Use the procedure in this section to log on to the Secure Router 4134 for the ﬁrst time.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

20 Commissioning conﬁguration procedures

Prerequisites

•

You have securely mounted the Secure Router 4134 in an equipment rack.

•

You have connected a local terminal to the console port on the rear panel of the Secure Router 4134.

•

You have powered up the Secure Router 4134.

•

The boot sequence is complete.

Procedure steps

Step Action 1

To log on to the Secure Router 4134 CLI for the ﬁrst time, enter the default user name and password:

Deﬁning boot parameters

You can conﬁgure boot parameters for the Secure Router 4134. The Secure Router 4134 provides two bootrom images for redundancy:

•

normal bootrom—the default boot image saved in the normal boot area, and used as your working bootrom image

• golden bootrom—the backup boot image saved in the golden boot area,

and used if the normal bootrom image is corrupted

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

—End—

To deﬁne the boot parameters, enter:

boot_params

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Example of deﬁning boot parameters

Step Action

Deﬁning boot parameters 21

Access conﬁguration mode:

configure terminal

Deﬁne boot parameters:

boot_params

The router returns the following:

WARNING : Configuration changes not yet saved!

3 When prompted, enter the name of the device from which you prefer

the router boots:

Boot dev [ftp,cf0,cf1,usb0]: cf0

Enter the boot ﬁle name (the router provides this information if you have previously conﬁgured it):

Boot file name: SR4134.Z

Enter the name of the server you use (the router provides this information if you have previously conﬁgured it):

Server name: sunserver

Enter the server IP address (the router provides this information if you have previously conﬁgured it):

Server IP address: 10.10.11.12

Enter the router IP address (the router provides this information if you have previously conﬁgured it):

My IP address: 10.10.13.14

Enter the subnet mask (the router provides this information if you have previously conﬁgured it):

My subnet mask: 255.255.255.0

Enter the gateway IP address (the router provides this information if you have previously conﬁgured it):

Gateway IP address: 10.10.15.16

Enter your user name and password:

User name: kevx Password: kevx

Enter 0 to disable or 1 to enable the checksum feature:

Checksum enable [0:Disable,1:Enable]: 1

Enter 0 to disable or 1 to enable the display of the image header contents:

Show header enable [0:Disable,1:Enable]: 1

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

22 Commissioning conﬁguration procedures

Enter the number (0, 1, or 2) that corresponds to the type of bootrom image update that you prefer, or enter 3 if you prefer to not update the bootrom image:

Save bootrom image [0:AutoUpdate,1:NormalBTupd,2:GoldenBTupd,3:NoUpd]: 0

If you select 0, 1, or 2, the router returns the following:

BOOT PARAMETERS HAVE BEEN SAVED.

14 Reboot the Secure Router 4134 to activate changes, or continue

with your conﬁguration:

DO YOU WANT TO REBOOT: (Y/N) ? y

—End—

Viewing boot parameters and software image information

Use the procedures in this section to view the boot parameters conﬁguration and to display information for the normal and golden bootrom images.

Procedure steps

Step Action 1

To view the boot parameters conﬁguration, enter

show boot_params

To view bootrom image information, enter:

file show_boot

Enabling the management LAN port

Enable the management Local Area Network (LAN) port on the Secure Router 4134 for network management access. To enable the management port, you assign it an IP address.

The Secure Router 4134 management Ethernet interface (FE 0/0) on the rear panel does not support jumbo frames. Therefore, the management port Maximum Transmission Unit (MTU) can be conﬁgured with a value in the range of 64 to 1500 bytes.

The following ﬁgure shows the location of the management port on the rear panel of the Secure Router 4134.

—End—

ATTENTION

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Enabling the management LAN port 23

Figure 6 Management port on the rear panel of the Secure Router 4134

Prerequisites

•

You must be connected to the Secure Router 4134 through the console port. See "Connecting a terminal for local access" (page 14) for information about connecting a terminal to the console port.

•

You must log in as a user with sufﬁcient permissions to conﬁgure the Secure Router 4134.

•

You must have the IP address and netmask that you want to assign to the management port.

The following procedure uses Ethernet port 0/0 (on the rear of the Secure Router 4134) for the management port. You can also use port 0/1 or port 0/2 on the front panel of the Secure Router 4134 for management purposes. Ethernet port 0/0 is a 10/100 Base-T port. Ethernet ports 0/1 and 0/2 are 10/100/1000 Base-T ports.

Procedure steps

Step Action 1 To access conﬁguration mode, enter:

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

24 Commissioning conﬁguration procedures

configure terminal

To identify the management port for conﬁguration, enter:

interface ethernet 0/0

3 To conﬁgure the management port IP address, enter:

ip address <ipaddr> <netmask>

—End—

Table 2 Variable deﬁnitions

Variable Value

<ipaddr> The IP address that you assign to the

management port. For example, 10.11.12.13.

<netmask> The network mask that you assign to the

management port IP address. For example,

255.255.255.0.

Conﬁguring SSH

You can enable an SSH connection for remote access. To generate a key and enable SSH, use the procedures in this section.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To access the SSH key generation subtree, enter:

ssh_keygen

To generate the DSA key, enter:

generate dsa

To generate the RSA key, enter:

generate rsa

To exit the SSH key generation subtree, enter:

exit

To enable the SSH connection, enter:

ssh_server enable

To save the conﬁguration, enter:

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

save local

Enabling FTP, TFTP, and Telnet

The default conﬁguration for the Secure Router 4134 includes FTP, TFTP, and Telnet servers disabled. You can enable any and all of these servers to allow this type of access to the Secure Router 4134.

Prerequisites

•

You must assign an IP address to the Secure Router 4134.

Procedure steps

Step Action

Verifying the Telnet connection 25

—End—

To access conﬁguration mode, enter:

configure terminal

To enable the FTP service, enter:

ftp_server

To enable the TFTP service, enter:

tftp_server

To enable the Telnet service, enter:

telnet_server

Verifying the Telnet connection

Verify the Telnet connection to ensure that users can successfully access the Secure Router 4134 using remote access.

Prerequisites

•

The IP address of the management interface on the Secure Router 4134 must be conﬁgured.

—End—

•

You must havethe IP address of the management interfaceon the router.

•

You must have a terminal or workstation connected to the Ethernet LAN.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

26 Commissioning conﬁguration procedures

Procedure steps

Step Action 1

To start a Telnet session from your workstation, enter:

telnet <ipaddr>

To log in, enter:

Viewing Telnet server settings

View the Telnet server settings for information about the status of the Telnet server (enabled or disabled) and the Telnet session timeout value.

Procedure steps

Step Action 1

To view information about the Telnet server settings, enter:

show telnet

—End—

Clearing a Telnet session

You can disconnect a speciﬁc Telnet session, if necessary, or you can disconnect all Telnet sessions simultaneously.

Procedure steps

Step Action 1

To view the list of users currently connected using a Telnet session to ﬁnd the Telnet session sequence numbers, enter:

show users

The following ﬁgure shows an example of the Telnet session sequence numbers for users remotely connected to the router.

NN47263-302 01.02 Standard

Nortel Secure Router 4134

Commissioning

10.0 2 August 2007

Conﬁguring the Telnet banner 27

To clear a speciﬁc Telnet session, enter:

clear telnet_session <value>

—End—

Table 3 Variable deﬁnitions

Variable Value

<value> The Telnet session sequence number. Enter

a value from 1 to 16.

To quickly disconnect all Telnet sessions, use the command:

clear telnet_sessions

Conﬁguring the Telnet banner

You can customize the banner that appears when users access the router using Telnet services. When conﬁguring the Telnet banner, use \n to begin a new line.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To conﬁgure the Telnet banner, enter:

telnet_banner banner <string> [banner1] [banner2]

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

28 Commissioning conﬁguration procedures

Table 4 Variable deﬁnitions

Variable Value

[banner1] An optional parameter that you use to extend

the banner text. If you require the banner text be more than 255 characters in length, use banner1 <string> to continue the banner text.

[banner2] An optional parameter that you use to extend

the banner text.

<string> The banner text that you want to appear in

Telnet sessions. The banner text can be up to 255 characters in length. Use \n to begin a new line within the banner.

Conﬁguring the Telnet timeout

You can conﬁgure the timeout value for Telnet sessions. A Telnet session disconnects if it remains inactive for the conﬁgured session duration.

Procedure steps

Step Action 1

Table 5 Variable deﬁnitions

Variable Value

<value> Enter the time in seconds (from 0 to 3600) after

To access conﬁguration mode, enter:

configure terminal

To conﬁgure the Telnet timeout value, enter:

telnet_timeout <value>

—End—

which inactive Telnet sessions automatically disconnect. The default value is 900 seconds. If you enter a value of 0 seconds, inactive Telnet sessions do not automatically disconnect.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Conﬁguring the host name

Conﬁgure a host name for the Secure Router 4134 to uniquely identify it. Once assigned, the host name becomes the CLI prompt name.

Changing the host name later (that is, post commissioning), and committing this change, drops all Telnet and SSH connections. All active console sessions also end.

Procedure steps

Step Action

Conﬁguring the static default route 29

ATTENTION

To access conﬁguration mode, enter:

configure terminal

To conﬁgure the host name for the Secure Router 4134, enter:

hostname <WORD>

—End—

Table 6 Variable deﬁnitions

Variable Value

<WORD> The name you want to assign to the Secure

Router 4134.

Conﬁguring the static default route

Conﬁgure a static route to specify a preferred route to a destination. You can identify the gateway, or next-hop, for a static route by specifying one of the following:

•

IP address of a directly connected interface

•

name of a local interface such as ethernet0/0

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To conﬁgure the gateway route, enter:

ip route <netaddr/mask> <gateway>

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

30 Commissioning conﬁguration procedures

Table 7 Variable deﬁnitions

Variable Value

<netaddr/mask> The IP address and the subnet mask of

the destination network. For example,

11.12.13.14/24. Entering the subnet mask is optional.

The IP address or interface name of the gateway. For example, 10.11.12.16.

Verifying the next-hop connection

Use the procedure in this section to verify that the connection from the management interface successfully connects to the next-hop device.

Prerequisites

•

You must have the IP address of the next-hop device.

Procedure steps

Step Action 1

To ping the next-hop device, enter:

ping <ipaddr>

Conﬁguring the date

To conﬁgure the date, you enter the month, day, and year.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To conﬁgure the date, enter:

date <month> <day> <year>

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Conﬁguring the time 31

Table 8 Variable deﬁnitions

Variable Value

<day> The current day in relation to the month. Enter

a value from 1 to 31. <month> The current month. Enter a value from 1 to 12. <year>

The current year. Enter a value from 2000 to

2100.

Conﬁguring the time

To set the current time for the Secure Router 4134, you specify the time in relation to Coordinated Universal Time (UTC):

•

time zone offset — ahead (+) or behind (-) UTC

•

number of hours ahead or behind UTC

•

number of minutes ahead or behind UTC

Procedure steps

Step Action 1

Table 9 Variable deﬁnitions

Variable Value

<+|-> The time zone offset. Enter + to indicate that

To access conﬁguration mode, enter:

configure terminal

To conﬁgure your local time, enter:

utc <+|-> <hour offset> <minute offset>

—End—

your time zone is ahead of UTC. Enter - to

indicate that your time zone is behind UTC.

For example, if you are in New York, you enter

utc -.

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

32 Commissioning conﬁguration procedures

Variable Value

<hour offset> The number of hours that your local time is

offset from UTC. Enter a value from 0 to 23.

For example, if you are in New York, you enter

utc - 4. <minute offset> The number of minutes that your local time is

offset from UTC. Enter a value from 0 to 59.

For example, if you are in New York, you enter

utc - 4 0.

Conﬁguring the SNTP client

The Simple Network Time Protocol (SNTP) synchronizes the internal clocks of various network devices across large, diverse networks to universal standard time. Use the procedure in this section to enable the SNTP client on the Secure Router 4134.

Procedure steps

Step Action 1 To access conﬁguration mode, enter:

configure terminal

To set the location of the SNTP server, enter:

sntp server {ipaddr|hostname}

3 To set the timeout value for the response from the server, enter:

sntp timeout <value>

—End—

Table 10 Variable deﬁnitions

Variable Value

{ipaddr | hostname} The IP address or host name of the broadcast

server. The default value is any broadcast

server. <value> The timeout value in seconds. The default

timeout value is 1024 seconds.

Changing the admin user password

The system administrator login consists of two components: the account name and the password. The initial login name is always "admin". You can change this after logging in for the ﬁrst time. The default administrative

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

password is "setup". Nortel recommends you change the default password as soon as possible to ensure only authorized personnel can access the Secure Router 4134.

Procedure steps

Step Action

Changing the administrator account name 33

To access password conﬁguration mode, enter:

password

The Secure Router 4134 prompts you for the current user name.

Enter the default user name, which is the current user name:

admin

The Secure Router 4134 prompts you for the old password.

Enter the default password, which is the current password:

setup

The Secure Router 4134 prompts you for the new password.

Enter your new password. The Secure Router 4134 prompts you to verify the new password.

Re-enter your new password. A message appears that conﬁrms that the password is changed.

—End—

Changing the administrator account name

Use the procedure in this section to change the administrator login name (Level 1 access) to a user-speciﬁed name. The default login name for the Secure Router 4134 is "admin". The administrator login name can be from 3 to 39 characters in length.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To change the login name, enter:

admin_name <WORD>

The Secure Router 4134 displays a message that conﬁrms the login name is successfully changed.

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

34 Commissioning conﬁguration procedures

Adding users

You can identify users (that is, login names) who can access the Secure Router 4134, and assign each user an access privilege (levels 2–4). Only the system administrator (level 1 access) can add, modify, or remove this information from the system.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

Enter the user name and access level:

user <username> level <value>

The Secure Router 4134 prompts you to enter a password for this user.

Enter a password (from 0 to 10 characters) for the new user. The Secure Router 4134 prompts you to re-enter the password.

Re-enter the password for the new user. The Secure Router 4134 conﬁrms that the password is set and conﬁrms the name of the new user is added.

Table 11 Variable deﬁnitions

Variable Value

—End—

The user name you want to add to the Secure

Router 4134. The user name can contain up

to 39 characters. <value> The access level assigned to the user. Values

are 2–4. The lower the access level value, the

higher the access privileges. For example,

a user with an access level of 2 has more

privileges than a user with an access level 3

or 4.

Nortel Secure Router 4134

NN47263-302 01.02 Standard

Commissioning

10.0 2 August 2007

Removing users 35

Procedure job aid

The CLI supports four levels of privilege for users. The following table deﬁnes each level.

Table 12 CLI user access levels

Privilege level Privilege name Definition

1 (highest) PRIVILEGE_ADMIN Admin level can access any

command and configure any feature in the router, including user configuration and administration.

PRIVILEGE_CONFIGURE Configure level can configure

any feature. Cannot add or delete users.

PRIVILEGE_TEST Test level can only run

diagnostic tests. Cannot access configuration commands.

4 (lowest) PRIVILEGE_NORMAL Normal level can only enter

show or display commands.

Removing users

The system administrator can remove conﬁgured user names from the Secure Router 4134.

ATTENTION

To reset a user password, you must delete and then recreate the user account.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To remove a user, enter:

no user <username>

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

36 Commissioning conﬁguration procedures

Conﬁguring FTP users

Procedure steps

Step Action 1 To access conﬁguration mode, enter:

configure terminal

3 At the prompt, enter a password for the FTP user:

Pinging a device

Ping a device to verify the connection between the Secure Router 4134 and that network device. If the network device sends a ping reply, a message indicates that the speciﬁed IP address is alive and can communicate with the router. If the router does not receive a reply, the message indicates that the address is not responding.

Prerequisites

To conﬁgure an FTP user, enter a user name:

ftp_user <username>

Please enter new password: <password>

At the prompt, re-enter the password:

Please re-enter password: <password>

If you entered the password correctly, the Secure Router returns a message indicating a successful conﬁguration:

password is set

—End—

•

You must physically connect the Secure Router 4134 to the network.

•

You must physically connect the speciﬁc network device to the network.

Procedure steps

Step Action 1

Ping the network device:

ping <ipaddr>

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Saving a conﬁguration

Issue the save command to save the running conﬁguration to a ﬁle. You can save the conﬁguration to the local ﬁle system, or to a ﬁle on the network.

Procedure steps

Step Action

Rebooting or resetting the Secure Router 4134 37

To save the conﬁguration to the local ﬁle system, enter:

save local [file <filename>]

To save the conﬁguration to a network ﬁle, enter:

save network <ipaddr> <path>

—End—

Table 13 Variable deﬁnitions

Variable Value

[file <filename>] The name of the file to which the configuration

is saved. This is an optional parameter. The

configuration is saved to the system default file

(system.cfg) if you do not specify a filename. <ipaddr> TheIP address of the device on which you store

the network configuration file. <path> The full path of the remote configuration file.

Rebooting or resetting the Secure Router 4134

Reset and reboot the Secure Router 4134 properly to avoid ﬁle system corruption. Resetting the router returns it to a factory-default conﬁguration. Rebooting the router shuts down and restarts the system. The procedure in this section shows you how to reset the conﬁguration on the Secure Router 4134, reboot the router to restore the factory-default settings, and save the factory-default settings to the conﬁguration ﬁle.

Procedure steps

Step Action 1

To access conﬁguration mode, enter:

configure terminal

To reset the Secure Router 4134, enter:

system reset-to-factory {system|users}

To reboot the Secure Router 4134, enter:

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

38 Commissioning conﬁguration procedures

reboot

When the Secure Router 4134 completes the reboot, save the factory-default settings to the system.cfg ﬁle by entering:

save local

—End—

Table 14 Variable deﬁnitions

Variable Value

{system | users} Enter system to remove all information stored

in memory, which includes user information,

event logs, crash logs, command logs, and boot

parameters.

Enterusers to remove allusersandinformation

related to users.

Viewing the Secure Router 4134 conﬁguration

View the Secure Router 4134 conﬁguration to understand the current state of the system software.

For more information about using commands, see Nortel Secure Router 4134 — Using the Command Line Interface (NN47263-506). For a complete list of CLI commands, see Nortel Secure Router 4134 — Command Line Reference (NN47263-507).

Procedure steps

Step Action 1

To view the current conﬁguration, enter:

show configuration running

You can also enter show running-config to view the current conﬁguration.

To view the conﬁguration that is stored in Flash, enter:

show configuration stored

You can also enter show startup-config to view the stored conﬁguration.

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Viewing chassis status

Use the procedure in this section to view summary information about the Secure Router 4134 chassis, including its operational status. After you install interface modules, you can use the show chassis command to verify that the Secure Router 4134 recognizes the modules.

Procedure steps

Step Action

Checking the system for alarms 39

To view summary information about the Secure Router 4134, enter:

show chassis

—End—

Viewing interface module conﬁguration

Use the procedure in this section to quickly check the state and conﬁguration of installed interface modules.

Procedure steps

Step Action 1

To view the conﬁguration of interface modules installed in your Secure Router 4134, enter:

show module configuration all

To view the conﬁguration of individual interface modules, enter:

—End—

Checking the system for alarms

The Secure Router 4134 reports alarms when it detects irregular conditions in incoming signals to the interface modules. Use the show module alarms command to quickly check for any irregularities.

Procedure steps

Step Action 1 To view the current alarms for any T1 WAN link on the Secure

Router 4134, enter:

show module alarms t1 <slot/port>

Nortel Secure Router 4134

NN47263-302 01.02 Standard

Commissioning

10.0 2 August 2007

40 Commissioning conﬁguration procedures

To view the current alarms for any E1 port on the Secure Router 4134, enter:

show module alarms e1 <slot/port>

To view the current alarms for any CT3 port on the Secure Router 4134, enter:

show module alarms ct3 <slot/port>

To view the current alarms for any serial port on the Secure Router 4134, enter:

show module alarms serial <slot/port>

To view the current alarms for any HSSI port on the Secure Router 4134, enter:

show module alarms hssi <slot/port>

To view the current alarms for any T3 port on the Secure Router 4134, enter:

show module alarms t3 <slot/port>

Checking the system status

You can view the operating status and current conﬁguration of each WAN, Ethernet, or serial interface using the show module configuration command. Refer to Nortel Secure Router 4134 — Command Line Reference (NN47263-507) for a complete list of CLI commands for the Secure Router 4134.

—End—

Procedure steps

Step Action 1

View the operating status of all installed interface modules:

show module configuration all

—End—

Nortel Secure Router 4134

Commissioning

NN47263-302 01.02 Standard

10.0 2 August 2007

Nortel Secure Router 4134

Commissioning

Publication: NN47263-302 Document status: Standard Document version: 01.02 Document date: 2 August 2007

To provide feedback or report a problem in this document, go to w

Sourced in Canada, the United States of America, and India.

Nortel, the Nortel logo, and the Globemark are trademarks of Nortel Networks.

All other trademarks are the property of their respective owners.

ww.nortel.com/documentfeedback

Nortel Networks 4134 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Commissioning

Contents

New in this release

Features

User names and passwords

System administrator account

Alarms and system status

Introduction

Secure Router 4134 commissioning

Secure Router 4134 commissioning procedures

Secure Router 4134 commissioning navigation

Gathering required information

Procedure job aid

Connecting a terminal for local access

Powering up the Secure Router 4134

Logging in to the Secure Router 4134

Viewing boot parameters and software image information

Enabling the management LAN port

Enabling FTP, TFTP, and Telnet

Verifying the Telnet connection

Viewing Telnet server settings

Clearing a Telnet session

Verifying the next-hop connection

Changing the admin user password

Changing the administrator account name

Adding users

Procedure job aid

Removing users

Pinging a device

Rebooting or resetting the Secure Router 4134

Viewing chassis status

Checking the system for alarms

Checking the system status