52Initial Setup

Joining a VPN Gateway to an Existing Cluster

After having installed the first VPN Gateway in a cluster, additional NVGs may be added to the same cluster by specifying the Management IP address (MIP) that identifies the cluster. When you are installing the VPN Gateway to join an existing cluster, less information is needed because the new VPN Gateway will fetch most of the configuration from the other NVG(s) in the cluster.

The following applies when joining a new VPN Gateway to an existing cluster:

If the VPN Gateway you are about to join is installed on a different subnet than existing NVGs, this new device must be configured as a slave. Master NVGs cannot exist on different subnets.

If the Access list consists of entries (for example, IP addresses for control of Telnet and SSH access), also add the cluster’s MIP, the existing VPN Gateway’s host IP address on Interface 1, and the host IP address you have in mind for the new NVG to the Access list. This must be done before joining the new VPN Gateway, otherwise the devices will not be able to communicate. Use the /cfg/sys/accesslist command. If the Access list is empty, this step is not required.

If the VPN Gateway you are about to join has a different software version than existing NVGs, install the preferred software version on the new VPN Gateway before joining it (see “Reinstalling the Software” (page 70)) or upgrade the whole cluster to the same software version as the new VPN Gateway (see “Performing Minor/Major Release Upgrades” (page 74)). Use the /boot/software/cur command to check the currently installed software version.

Setting up a One-Armed Configuration

If the currently installed VPN Gateway(s) in the cluster are set up for a one-armed configuration you probably want the new VPN Gateway to be set up similarly.

When you log in after having started the VPN Gateway the first time, you will enter the Setup menu.

Step Action

1Choose join from the Setup menu to add a VPN Gateway to an existing cluster.

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

Page 52
Image 52
Nortel Networks NN46120-104 manual Joining a VPN Gateway to an Existing Cluster, Setting up a One-Armed Configuration

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.