Nortel Networks BSR222 manual Security, Routing

Page 34

34 Chapter 5 User Notes

When defining a Client Termination account for another Business Secure Router that will connect using Contivity Client Emulation, the following configuration is required:

•Encryption must be Triple DES with SHA1 integrity, or Triple DES with MD5 integrity.

•IKE Encryption must be Triple DES with Diffie-Hellman Group 2.

•Perfect Forward Secrecy (PFS) must be enabled.

Security

1Exporting or Saving Self-Signed Certificate

To export or save a self-signed certificate, click details (the icon that looks like a paper note), then click 'Export' or copy the PEM text into the clipboard, and paste into a file.

Routing

1RIP Version Advertisement Control

To change the version of generated RIP advertisements, the following CLI command needs to be used

ip rip mode [enif0enif1] [inout] [0123]

where:

'enif0' is the LAN side, and 'enif1' is the WAN side

'in' affects recognition of received advertisements, and

'out' applies to generated advertisements

The number controls the operating mode:

None (disabled)

RIP-1 only

RIP-2 only

NN47922-301

Image 34

Contents Nortel Business Secure Router 222 Fundamentals Copyright Nortel TrademarksContents Chapter User Notes Page NN47922-301 Preface Before you beginRelated publications Hard-copy technical manuals How to get help AC Power Adapter Specifications Chapter Introducing the Business Secure Router Internet account information worksheetIntroducing the Business Secure Router NN47922-301 Chapter Hardware installation Front panel Label DescriptionPower Rear panelHardware installation NN47922-301 Chapter Setting up your computer IP address Static or dynamic configuration Windows 2000/NT/XPSetting up your computer IP address Command Prompt Checking your computer IP addressSetting up your computer IP address NN47922-301 Chapter Configuring your Business Secure Router Accessing your Business Secure Router via the WebGUIConfiguring your Business Secure Router Configuring your Business Secure Router Using the wizard to configure for internet access Configuring your Business Secure Router Internet connection with ethernet Internet connection with PPPoE Internet connection with Pptp WAN IP address assignment Test your internet connection System DNS serversGeneral Notes Chapter User NotesGeneral Firewall VPN Client TerminationUser Notes Security RoutingSetting up the router when the system has a server Advanced Router ConfigurationConnecting two sites to establish a virtual private network Adding IP telephony to a multi-site network Allowing remote management of a LAN-connected BCM50 Setting up the router for guest access Preventing heavy data traffic from impacting telephone callsSetting Up a Remote Office with a UNIStim IP Telephone Inter-Operability With Third-Party Routers VPN Connections With Cisco RoutersChapter Troubleshooting Problem You cannot ping any computer on the LANProblem You cannot get a WAN IP address from the ISP Problem You cannot access the Internet