Chapter 3 Setting up the Nortel VPN Router 1010, 1050, and 1100 61Nortel VPN Router Configuration — Basic FeaturesBranch office quick start utilityThe branch office quick start utility (BOQS) simplifies deployment of the NortelVPN Router in the branch office environment. BOQS converts the Nortel VPNRouter 1010, 1050, or 1100 device from an Internet access VPN Router into asecure access VPN Router by provisioning a VPN connection to a central office oroptionally, to a network operation center (NOC). BOQS allows a NOC or centraloffice management to access the Nortel VPN Router 1010, 1050, or 1100 so thatnetwork administrators can further configure the these units without going to theremote site.Network administrators and service providers can use the branch office quick startfor provisioning IP-based VPN services on a large scale. It provides VPN servicesusing Nortel VPN Router 1010, 1050, or 1100 devices as branch office VPNswitches and other Nortel VPN Routers as central office switches.In addition to connectivity, the central office switch must be able to accept newlycreated secure connections from the Nortel VPN Router 1010, 1050, or 1100.Therefore, the BOQS must be used with the knowledge and approval of a networkadministrator. It can only be initiated after IP addressing has been planned and thecentral office switch has been configured. Then you can send the provisioningparameters to the remote branch office locations.The Nortel VPN Router 1010, 1050, and 1100 must be connected to a publicnetwork and have access to the Internet before local users can use BOQS. Theunique default configuration allows easy deployment of Nortel VPN Router 1010,1050, and 1100 switches in DHCP configurations (where a DHCP server is usedon the public network). However, if you use static IP addressing or PPPoE on thepublic side, the Nortel VPN Router 1010, 1050, or 1100 must be configuredmanually before local users can use BOQS.All users on the private network must renew their IP addresses. For furtherinformation, see your Microsoft documentation. When the branch office tunnelsare established, public access to the Internet is replaced with access to the centraloffice.Note: The BOQS will remain accessible after the information is entered.The network administrator must change the admin account (username/password) to restrict access.