Nortel C251 Configuration Manual

Conti vity 251 ABOT D eployment Version 1.0 April 26, 20042. Deployment MethodABOT support full sets of VPN feature. But Configuring ABOT requires technical experiences andresources. The proposed deployment method uses Client Emulation feature as a first step stoneto establish a VPN connection between a C251 in branch office and a gateway in CO. ABOTconfiguration files are prepared in a CO by technicians then download to the C251 in remotebranch office over the Client Emulation VPN connections.Configuring “Client Emulation” is simple and can be done by any non-technical resources withoutrequiring on-site technical support. Therefore, C200 series can be directly shipped frommanufactures to end users using factory default configuration without requiring special stagingservices.This deployment method is covered in the following steps:• Planning your VPN network• Selecting Contivity hardware.• Obtaining network data from ISP• Preparing C251 ABOT configuration files (rom-0) for all sites• Providing remote end-users with simple instructions to setup & start C251 Client tunnel.• Downloading prepared configuration file from CO to remote C251 over client tunnel. TheC251 will auto-reboot to activate the ABOT configuration.• Testing the ABOT tunnel using PING.This method is assuming that CO technical resources have taken training classes of NortelContivity products.2.1 Planning your VPN NetworkBefore deployment, the VPN network should be planned first. Network planning includes varioustasks such as determining Network topology, network size, branch office locations, CO location,Contivity VPN device models, bandwidth requirement, encryption type, NAT, and etc.The following questions should be answered for planning deployment of ABOT connections:• How many remote branch office (BO) sites are planned?• What type of Internet access services is available in the remote BO?• What type of Contivity Gateway in CO is required to support the current VPNrequirement, e.g. number of tunnels, bandwidth, interface, and etc?• Do you consider future growing (more BOs will join in near future?)• What types of C200 are selected, C251 or C221? (Consider the types of service availablein a BO area, e.g. ADSL? Cable Modem? Satellite Internet access?)• What types of IP address scheme will be used for your VPN?• What types of “initiator ID” scheme will be used for your VPN?• Draw a Network topology prior to the deployment.2.2 Select Contivity Switches2.2.1 Select Contivity Secure IP Services GatewayThe following Contivity products can be used as Gateways in CO.• Contivity 1000 series (1010, 1050, 1100): Up to 30 VPN tunnels• Contivity 600: Up to 50 VPN tunnels