Enterasys ANG-3000 Specifikace

XSR-1850Getting Started GuideVersion 7.5 X-Pedition™ Security Router 9033838-07

viiiIftheProgramisexportedfromtheUnitedStatespursuanttotheLicenseExceptionTSRundertheU.S.ExportAdministrationRegulations,inaddi

Cable, CompactFlash and Accessory SpecificationsA-12 Figure A-11 V.35 DTE Pin Assignments171927212613115104156161213914ERTPSCDYAAVXBHADSR0RD0+RD0 -S

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-13T1/E1/ISDN PRI NIM Card PortsThe T1/E1/ISDN PRI NIM, as shown in Figure

Cable, CompactFlash and Accessory SpecificationsA-14 Balun for E1 or PRI NIM CardsSome overseas electrical systems require that you use a balun and g

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-15Grounding Shunt for E1 NIM CardsIf you connect a balun to a 75-ohm line

Cable, CompactFlash and Accessory SpecificationsA-16 T3/E3 NIM CardThe T3/E3 full and sub-rate NIM, as shown in Figure A-17, is equipped with 1 Ether

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-171/2-Port ISDN BRI-S/T NIM Card PortsThe XSR offers a serial NIM card fo

Cable, CompactFlash and Accessory SpecificationsA-18 Termination Shunt for the ISDN BRI-S/T NIM CardISDN BRI-S/T terminal equipment devices may be co

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-191/2-Port BRI-U NIM Card PortsThe XSR provides a serial NIM card for 1 o

Cable, CompactFlash and Accessory SpecificationsA-20 1-Port ADSL NIM Card PortThe XSR’s Asymmetric Digital Subscriber Line (ADSL) NIM card, as shown

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-21T1/E1 Drop & Insert (D&I) NIMThe XSR’s 2-port T1/E1 D&I NIM

ix11. ASSIGNMENT. Youmaynotassign,transferorsublicensethisAgreementoranyofYourrightsorobligationsunderthisAgreement,exceptthatYou

Cable, CompactFlash and Accessory SpecificationsA-22 XSR-1850 Redundant Power SystemThe optional XSR-1850 Redundant Power System, as shown in Figure

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-23Figure A-29 Passive Power Chassis DC Output PinoutsFor instructions on

Cable, CompactFlash and Accessory SpecificationsA-24 Table A-3 LED DescriptionLED State FunctionPOWER ON 3.3V power is presentSYS(tem Status) ON/OFF

Index-1IndexBBalundescription A-14Balun adapter A-3BRI S/T cardpart numbers A-3BRI S/Tpin assignments A-17BRI U cardpart numbers A-3BRI-U pin assignme

Index-2 how to install NIM cards 2-2how to install the hardware 2-1how to rack mount the XSR-1850 2-2how to set LAN ports 3-8how to set up message lo

x

xiContentsPrefaceContents of the Guide ...

xii PRI Configuration ...

xiiibu ...

xiv

xvPrefaceThis guide provides a general overview of the XSR-1850 hardware and software features and describes how to quickly install and configure the

xviElectrical Hazard: Warns against an action that could result in personal injury or death due to an electrical hazard.Riesgo Electrico: Advierte con

xviiGetting HelpFor additional support related to the XSR, contact Enterasys Networks by one of these methods:Before contacting Enterasys Networks for

xviii

XSR Getting Started Guide 1-11OverviewThis chapter introduces key features of the XSR-1850 and briefly describes hardware installation.System Descript

System Description1-2 OverviewHardware FeaturesThe semi-modular XSR, shown in Figure 1-2, comes equipped with the following features:• Standard 1.5U c

System DescriptionXSR Getting Started Guide 1-3• Two 10/100BaseT FastEthernet LAN connectors.• Console interface including modem control signals for r

System Description1-4 Overview• Telnet & TFTP for device management and configuration• Debugging tools Ping & TraceRoute• Secondary IP address

System DescriptionXSR Getting Started Guide 1-5• Service Level Agreement (SLA) agents•SNMP-TFTP on-the-fly running configuration• Hostname in the Sysl

System Description1-6 Overview• Rate enforcement (CIR) with automatic rate fallback via traffic/adaptive shaping when the network is congested. Automa

System DescriptionXSR Getting Started Guide 1-7• BRI: TEI auto-negotiated• Q.921/Q.931 (Layer 2/Layer 3) configuration is set automatically by selecti

System Description1-8 OverviewSecurID (third-party plug-in)Certificates (embedded/smart cards) – Microsoft only– PPTP protocolMS-ChapV2, EAP user auth

System DescriptionXSR Getting Started Guide 1-9GRE over IPSec• ToS bit preservation•IP helper on VPN interfaces• IETF/Microsoft-compatible NAT travers

iNoticeEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho

Installation Overview1-10 OverviewDial Backup•IP Interfaces backupDial-on-Demand/Bandwidth-on-Demand (DoD/BoD)• PPP Point-to-Multipoint & Multi-to

XSR Getting Started Guide 2-12Hardware InstallationIntroductionThis chapter provides a checklist to verify your shipment, suggestions for the installa

Installing NIM Cards and Rack Mounting2-2 Hardware Installation• If installing the XSR chassis in an equipment rack, ensure that the rack can support

Installing NIM Cards and Rack MountingXSR Getting Started Guide 2-34. Unfasten the screws securing the NIM blank/grounding plates and remove them as s

Installing NIM Cards and Rack Mounting2-4 Hardware Installation5. Fasten the NIM to the NIM brace and screws supplied in the shipping box, as shown in

Installing NIM Cards and Rack MountingXSR Getting Started Guide 2-56. Position the NIM atop the open slot (NIM 2) pin holding assembly on the chassis

Installing NIM Cards and Rack Mounting2-6 Hardware InstallationFigure 2-5 Fastening Rack Brackets9. Mount the bracketed XSR to your rack, as shown in

Connecting XSR CablesXSR Getting Started Guide 2-7Connecting XSR CablesPerform the following steps to connect your cabling:1. Connect the serial Conso

Connecting XSR Cables2-8 Hardware InstallationFigure 2-9 Connecting High Speed Serial Connector3. Optionally, you can connect WAN cables to a T3/E3 N

Connecting XSR CablesXSR Getting Started Guide 2-9Figure 2-12 Connecting T1 Drop & Insert Connector4. Connect the FastEthernet port(s) to your LA

iiAplugandjackusedtoconnecttheXSRtothepremiseswiringandtelephonenetworkmustcomplywiththeapplicableFCCPart68rulesandrequireme

Installing a CompactFlash Memory Card2-10 Hardware InstallationFigure 2-14 Connecting Internal Power Supply CordYou are now ready to configure the so

Installing a CompactFlash Memory CardXSR Getting Started Guide 2-11CompactFlash Card InstallationFollow the steps below to install the CompactFlash ca

Installing the Redundant Power System2-12 Hardware InstallationBe sure the CF’s wider grooved edge fits into the wider groove of the PCMCIA interface

Installing the Redundant Power SystemXSR Getting Started Guide 2-13Figure 2-18 Redundant Power SystemUp to four power systems can be installed in the

Installing the Redundant Power System2-14 Hardware InstallationFigure 2-20 Inserting Power System in Passive Power Chassis2. Mount the power chassis

Installing the Redundant Power SystemXSR Getting Started Guide 2-15Figure 2-22 Connecting DC Cable Harness4. When connecting cable harnesses, be care

Installing the Redundant Power System2-16 Hardware InstallationFigure 2-23 Fully Attached Cable Harnesses5. Connect one end of the power cord into th

XSR Getting Started Guide 3-13Software ConfigurationThis chapter describes how to initialize, quickly set up and verify your configuration for the XSR

Powering On and Initializing XSR Software3-2 Software Configuration• ETH 10/100 LEDs turn ON and OFF a few times during initialization as the XSR pro

Opening a Console SessionXSR Getting Started Guide 3-3only the first error will be reported, along with a count of the sum of errors incurred. In the

iiiUsersshouldensurefortheirownprotectionthattheelectricalgroundconnectionsofthepowerutility,telephonelinesandinternalmetallicwat

Optional: Configuring Remote Auto Install3-4 Software Configurationto IP addresses 133.133.1.2 and 133.133.1.3. If the DLCI will onnect to a remote XS

Optional: Configuring Remote Auto InstallXSR Getting Started Guide 3-5Phase 6 - getting hostname xsrnode-confg from tftp server into flash: startup-co

Optional: Configuring Remote Auto Install3-6 Software ConfigurationThe following is a CISCO configuration at the the central site:vpdn enable+ Enables

Configuring the XSR Name and User InformationXSR Getting Started Guide 3-7Phase 2 - ADSL - searching for pvc's ...vpi/vci (0/0)+ The XSR looks fo

Setting the Clock3-8 Software ConfigurationSetting the ClockXSR 1800 and 3000 Series routers have an on-board Real Time Clock (RTC) chip with which to

Configuring the WAN PortsXSR Getting Started Guide 3-9This command allows multiple logical WAN interfaces to be created on a single channelized T1/E1/

Configuring the WAN Ports3-10 Software Configuration4. Enter encapsulation ppp to select PPP encoding.5. Enter no shutdown to keep the BRI interface e

Configuring the WAN PortsXSR Getting Started Guide 3-11ADSL ConfigurationADSL can be configured using three different types of encapsulation: PPPoA, P

Firewall Sample Configuration3-12 Software ConfigurationThe commands below configure the ATM interface and sub-interface with a negotiated IP address,

Firewall Sample ConfigurationXSR Getting Started Guide 3-13Figure 3-1 XSR with Firewall TopologyIn this configuration, the firewall provides protecte

ivEuropean Waste Electrical and Electronic Equipment (WEEE) NoticeInaccordancewithDirective2002/96/ECoftheEuropeanParliamentonwasteelectric

Setting Up RIP Routing3-14 Software ConfigurationTrial load the completed configuration into the firewall engine, and if successful, load the configur

Configure OSPF RoutingXSR Getting Started Guide 3-1512. Enter network <xxx.xxx.xxx.xxx> (IP address) of the network to be advertised. Repeat the

Setting Up the Backup Line3-16 Software Configuration7. Enter map-class frame-relay <name> to designate this map-class and acquire Map-Class mod

Setting Up SNMP Community String, Traps and V3 ValuesXSR Getting Started Guide 3-1710. To set up the Console port as a dial-in port, perform the follo

Configuring Message Logging and Severity Level3-18 Software Configuration7. Optional. For SNMPv3, enter snmp-server user <username> <group na

Connecting Remotely via the WebXSR Getting Started Guide 3-19Connecting Remotely via the Web1. Enter configure to acquire Configuration mode.2. Enter

Connecting Remotely via the Web3-20 Software ConfigurationClick on Product Version to bring up the Product Version window for a host of hardware, boot

LAN-PPP Services Sample ConfigurationXSR Getting Started Guide 3-21LAN-PPP Services Sample ConfigurationThe sample configuration below, see Figure 3-4

Frame Relay WAN Link with PPP Backup Sample Configuration3-22 Software ConfigurationXSR(config-controller<T1-1/0>)#no shutdown+ Enables T1 contr

Frame Relay WAN Link with PPP Backup Sample ConfigurationXSR Getting Started Guide 3-23Configure Users and PasswordsXSR>enable+ Acquires Privileged

vDeclaration of ConformityApplicationofCouncilDirective(s): 89/336/EEC73/23/EECManufacturer’sName: Enterasys Networks, Inc.Manufacturer’sAddress:

Frame Relay WAN Link with PPP Backup Sample Configuration3-24 Software ConfigurationXSR(config-pmap-c<priority-policy>)#set ip dscp ef+ Configur

Frame Relay WAN Link with PPP Backup Sample ConfigurationXSR Getting Started Guide 3-25XSR(config-if<S1/0.2-16>)#no shutdown+ Enables DLCI 16 in

Frame Relay WAN Link with PPP Backup Sample Configuration3-26 Software ConfigurationConfigure More Access ListsThe following ACLs deny any packets to

VPN Site-to-Site Sample ConfigurationXSR Getting Started Guide 3-27XSR(config-if<D1>)#di pool 1+ Specifies the dial pool from which calls origin

VPN Site-to-Site Sample Configuration3-28 Software ConfigurationGenerate Master Encryption KeyIf you have not already generated a master encryption ke

VPN Site-to-Site Sample ConfigurationXSR Getting Started Guide 3-29Create a Transform SetThe following transform-set specifies the specified encryptio

VPN Sample Configuration with Network Extension Mode3-30 Software ConfigurationXSR(config)#interface vpn 57 multi-pointXSR(config-int-vpn)#ip address

VPN Sample Configuration with Network Extension ModeXSR Getting Started Guide 3-31Figure 3-6 VPN Topology with NEM, EZ-IPSec and Internet AccessIf yo

VPN Sample Configuration with Network Extension Mode3-32 Software ConfigurationConfigure AAA authentication by assigning a virtual subnet to the DEFAU

XSR Rebooting CharacteristicsXSR Getting Started Guide 3-33XSR(config)#access-list 103 permit ip any 10.10.10.0 0.0.0.255Create crypto maps for each A

viIndependent Communications Authority of South AfricaThisproductcomplieswiththetermsoftheprovisionsofsection54(1)oftheTelecommunication

XSR Rebooting Characteristics3-34 Software ConfigurationCreation date: Oct 19 2002, 12:39:02Cold Start : SystemReset watchdog ChipReset from pwrauto-b

XSR Rebooting CharacteristicsXSR Getting Started Guide 3-35Creation date: Oct 19 2002, 12:39:02Cold Start : SystemReset from power upauto-booting...Un

Bootrom Monitor Mode Commands3-36 Software ConfigurationPower-Up RebootIf you power cycle the XSR by flipping the switch on the back panel, the XSR wi

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-37s Statust Time and DateD For Development OnlyAll the commands in each group can be listed

Bootrom Monitor Mode Commands3-38 Software ConfigurationUpdating bootrom with file, "cflash:bootrom1_18.fls".Proceed with erasing current Bo

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-39dfThis command shows free disk space. Sample output is shown as follows:XSR-1800: dfFree sp

Bootrom Monitor Mode Commands3-40 Software ConfigurationFormatting flashrom file system... Done.Set

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-41removeThis command removes a file using the syntax remove <source name> <destinati

Bootrom Monitor Mode Commands3-42 Software ConfigurationsnThis command shows network values with the following sample output:XSR-1800: snwLocal IP add

A-1ASpecificationsSystem SpecificationsThis appendix details XSR data about hardware functionality including:• Processor, system memory, chassis, powe

viiEnterasys Networks, Inc.Firmware License AgreementBEFOREOPENINGORUTILIZINGTHEENCLOSEDPRODUCT,CAREFULLYREADTHISLICENSEAGREEMENT.Thisdocum

System SpecificationsA-2 Redundant Power System & Power ChassisDimensions Power System: 5” long by 4” wide by 1.4” highPower Chassis: 1.72” high

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-3Cable, CompactFlash and Accessory SpecificationsRefer to the following t

Cable, CompactFlash and Accessory SpecificationsA-4 Auxiliary Flash RAM: 1.4”L x 1.6” W-8, 16, 32 MByte cardFront panel slot N/A from Enterasys Compa

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-5Console PortThe XSR comes equipped with a serial port useful for initial

Cable, CompactFlash and Accessory SpecificationsA-6 Ethernet PortsThe XSR comes equipped with two Ethernet (LAN) 10/100Base-T ports that support full

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-7Copper/Fiber-optic Ethernet NIMsThe single-port Copper or Fiber-optic Et

Cable, CompactFlash and Accessory SpecificationsA-8 2/4-Port Serial NIM Card PortThe High Speed Serial NIM card, as shown in Figure A-6, provides a W

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-9Figure A-8 EIA-232/530 DTE Pin Assignments17181927213162RxD2+RxD2-TxD 2

Cable, CompactFlash and Accessory SpecificationsA-10 Figure A-9 EIA-449 DTE Pin Assignments171819272126201231151047681213151691411296244227259275238

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-11Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments1231151047681