Nortel Networks BSR222 manual Security, Routing

Models: BSR222

1 42
Download 42 pages 53.14 Kb
Page 34
Image 34

34 Chapter 5 User Notes

When defining a Client Termination account for another Business Secure Router that will connect using Contivity Client Emulation, the following configuration is required:

Encryption must be Triple DES with SHA1 integrity, or Triple DES with MD5 integrity.

IKE Encryption must be Triple DES with Diffie-Hellman Group 2.

Perfect Forward Secrecy (PFS) must be enabled.

Security

1Exporting or Saving Self-Signed Certificate

To export or save a self-signed certificate, click details (the icon that looks like a paper note), then click 'Export' or copy the PEM text into the clipboard, and paste into a file.

Routing

1RIP Version Advertisement Control

To change the version of generated RIP advertisements, the following CLI command needs to be used

ip rip mode [enif0enif1] [inout] [0123]

where:

'enif0' is the LAN side, and 'enif1' is the WAN side

'in' affects recognition of received advertisements, and

'out' applies to generated advertisements

The number controls the operating mode:

None (disabled)

RIP-1 only

RIP-2 only

NN47922-301

Page 34
Image 34
Nortel Networks BSR222 manual Security, Routing