Nortel Networks BSR222 manual User Notes

Page 33

Chapter 5 User Notes 33

If a VPN Client user account is de-activated, deleted, or changed, and that user is currently connected, the connection is not automatically dropped. To drop the connection, the administrator needs to disconnect the user using the 'Disconnect' function in the VPN/SA Monitor GUI. This is consistent with other Nortel Contivity products.

2User Name Restrictions

User names are limited to a maximum length of 63 characters.

3VPN Client Account Password Restrictions

The password for a VPN Client user cannot contain the single- or double-quote characters.

4IP Pool Address Overlap

When defining multiple VPN Client Termination IP pools, the router uses the IP Subnet mask, and not the pool size, to determine if the pools are overlapping. The subnet mask of each pool should be appropriate for the size of the VPN Client Termination IP pool.

5VPN Client Termination - Failure In Specific Addressing Situation

If the Client has an assigned IP address that is the same as the IP address assigned for the Client Tunnel, the connection will fail to be established.

6VPN Client Termination - Configuration Restrictions

This router has some restrictions when compared to larger Contivity Routers (1000 Series and above). In particular,

VPN Clients cannot be added to the LAN subnet. They must have addresses outside of the LAN subnet.

VPN Clients can have dynamically assigned IP addresses, or they can have a statically assigned addresses. However, the router does not support both modes at once. All addresses must either be dynamically assigned, or they must all be statically assigned.

7Establishing a Client Tunnel From One Business Secure Router to Another

Nortel Business Secure Router 222 — Fundamentals

Image 33
Contents Nortel Business Secure Router 222 Fundamentals Trademarks Copyright NortelContents Chapter User Notes Page NN47922-301 Before you begin PrefaceRelated publications Hard-copy technical manuals How to get help AC Power Adapter Specifications Internet account information worksheet Chapter Introducing the Business Secure RouterIntroducing the Business Secure Router NN47922-301 Chapter Hardware installation Label Description Front panelRear panel PowerHardware installation NN47922-301 Static or dynamic configuration Windows 2000/NT/XP Chapter Setting up your computer IP addressSetting up your computer IP address Checking your computer IP address Command PromptSetting up your computer IP address NN47922-301 Accessing your Business Secure Router via the WebGUI Chapter Configuring your Business Secure RouterConfiguring your Business Secure Router Configuring your Business Secure Router Using the wizard to configure for internet access Configuring your Business Secure Router Internet connection with ethernet Internet connection with PPPoE Internet connection with Pptp WAN IP address assignment System DNS servers Test your internet connectionChapter User Notes General NotesGeneral VPN Client Termination FirewallUser Notes Routing SecurityAdvanced Router Configuration Setting up the router when the system has a serverConnecting two sites to establish a virtual private network Adding IP telephony to a multi-site network Allowing remote management of a LAN-connected BCM50 Preventing heavy data traffic from impacting telephone calls Setting up the router for guest accessSetting Up a Remote Office with a UNIStim IP Telephone VPN Connections With Cisco Routers Inter-Operability With Third-Party RoutersProblem You cannot ping any computer on the LAN Chapter TroubleshootingProblem You cannot access the Internet Problem You cannot get a WAN IP address from the ISP