Enterasys Networks XSR-3150 manual

X-Pedition™ Security Router

XSR-3150 Getting Started Guide

Version 3.0

P/N 9033865-06

8.5x11-inch cover with bleed on 4 sides

Contents

Main Page Notice Regulatory Compliance Information Federal Communications Commission (FCC) Notice Industry Canada Notices R & TTE Directive Declaration Class A ITE Notice Clase A. Aviso de ITE Klasse A ITE Anmerkung Page Supplement to Product Instructions 50 VCCI Notice BSMI EMC Statement Taiwan Declaration of Conformity Australian Telecom Federal Information Processing Standard (FIPS) Certification N826 TE-2002/190 APPROVED TE-2002/195 TE-2003/112 TE-2003/113 Enterasys Networks, Inc. Firmware License Agreement BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. Page Page Contents About This Guide Chapter 1: Overview Chapter 2: Hardware Installation Chapter 3: Software Configuration Page Appendix A: Specifications Index Page About This Guide Contents of the Guide Conventions Used in This Guide + Getting Help Page Overview System Description Hardware Features Page Software Features Operating System Industry-common CLI IP Protocol IP Routing SNMP and Statistics Gathering Security PPP Frame Relay Dynamic Host Configuration Protocol (DHCP) Integrated Services Digital Network (ISDN) - BRI/PRI Quality of Service (QoS) Virtual Private Network (VPN) GRE over IPSec Asynchronous Digital Subscriber Line (ADSL) Dial Service Dial Backup Dial-on-Demand/Bandwidth-on-Demand (DoD/BoD) Installation Overview Page Hardware Installation Introduction Verifying Your Shipment Installation Site Suggestions Installing NIM Cards and Rack Mounting Page Installing NIM Cards and Rack Mounting 2-4 Hardware Installation 8. Mount the bracketed XSR to your rack, as shown in Figure 2-5. Figure 2-5 Attaching XSR to Rack XSR-3150 Installing a CompactFlash Memory Card CompactFlash Card Installation CompactFlash Card for the ADSL NIM Formatting the CompactFlash Card Connecting Cables Page Page Page Page Page Software Configuration Initializing XSR Software Page Opening a COM (Console) Session Optional: Configuring Remote Auto Install Configuring RAI for Frame Relay Page Configuring RAI for DHCP over LAN Configuring RAI over ADSL When the RAI process begins, the remote XSR displays the following messages: Configuring the XSR Name and User Information Setting User Name, Privilege and Password Setting the Clock Configuring the LAN Ports Configuring the WAN Ports PRI Configuration BRI Configuration BRI Leased Line BRI Leased Frame Relay BRI Switched Line ADSL Configuration PPPoE PPPoA IPoA Firewall Sample Configuration XSR Internal DMZ Setting Up RIP Routing Configure OSPF Routing Configuring Frame Relay Point to Point Networks Setting Up an SNMP Community String, Traps and V3 Values Configuring Message Logging and Severity Level Viewing Your Configuration Connecting Remotely via the Web Page LAN-PPP Services Sample Configuration PSTN The following script configures the LAN-PPP services topology shown above. Server 1-800-555-1111 Username: Password: branch2 Ontario Page Frame Relay WAN Link with PPP Backup Sample Configuration Configure Users and Passwords Configure LAN Interface Configure Quality of Service Configure WAN/Frame Relay Port Apply QoS Configure OSPF Routing Configure More Access Lists Configure DHCP/BOOTP Relay Configure the Dial Backup Connection Configure SNMP VPN Site-to-Site Sample Configuration The following script configures the VPN topology shown in Figure 3-5. Generate Master Encryption Key Generate the master key: Configure Access Control Lists Set Up IKE Phase I Security Configure IKE Policy for Remote Peer Create a Transform Set Configure Crypto Maps Configuring VPN at Interface Mode and Setting Up RIP Configuring Authentication (AAA) VPN Sample Configuration with Network Extension Mode Page Create user(s), specify an IP from virtual subnet, and assign a password: Check to make sure the transforms and proposals were created properly: Create the ISAKMP IKE global peer: Create the ACL for trusted subnet of the XSR and virtual subnet of XSR: Create the multi-point VPN virtual port required to terminate many clients: XSR Rebooting Characteristics Initialization Output The XSR displays the following output when it initializes (cold reboot): Reboot Triggers Power-Up Reboot If you power cycle the XSR by flipping the switch on the back panel, the XSR will cold reboot. The Tabl e 1 Reboot Triggers Cause Boot Type Bootrom Monitor Mode Commands bc bw bp bu bU This command updates the bootrom through a network transfer to a local file. Be sure to enter the other files. cd This command changes the current directory in the file system to flash: or cflash:. df del dir ds dt ffc ng np ns remove This command removes a file using the syntax rename This command renames a file using the syntax sb si sn This command shows network values with the following sample output: sv This command shows the bootrom version with sample output below: A Specifications System Specifications Cable, CompactFlash and Accessory Specifications Table A-1 XSR Hardware Specifications (continued) Category Parameters Table A-2 XSR Cabling/Accessory Guide Part Description Connector Part # Function XSR Getting Started Guide A-3 Table A-2 XSR Cabling/Accessory Guide (continued) Part Description Connector Part # Function COM (Console) Port GigabitEthernet Ports Mini-GBIC Fiber, Copper Port Copper/Fiber-optic Ethernet NIMs XSR Getting Started Guide A-7 2/4-Port Serial NIM Card Port J2 - J5: DB-15 type male connector DTE 21 X Figure A-8 EIA-232/530 DTE Pin Assignments J2 - J5: DB-25 type male connector XSR Getting Started Guide A-9 Figure A-9 EIA-449 DTE Pin Assignments J2 - J5: DB-37 type male connector A-10 Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments J1 J2 J3 PORT 2 (V.35) PORT 3 (EIA-232/530) Figure A-11 V.35 DTE Pin Assignments J2 - J5: V.35 type male connector T1/E1/ISDN PRI NIM Card Ports Balun for E1 or PRI NIM Cards Grounding Shunt for E1 NIM Cards Installing Shunt/Terminal Strip T3/E3 NIM Card 1/2-Port BRI-S/T ISDB NIM Card Ports Termination Shunt for the ISDN BRI-S/T NIM Card Installing Shunt/Terminal Strip 1/2-Port BRI-U NIM Card Ports 1-Port ADSL NIM Card Port T1/E1 Drop & Insert (D&I) NIM CompactFlash Memory Card LED Behavior Table A-3 LED Description (continued) LED State Function Index B C D E