62 Chapter 3 Setting up the Nortel VPN Router 1010, 1050, and 1100NN46110-500After the VPN services are provisioned, branch office networks are logicallyconnected to a central office network or to a NOC network. Branch office endusers can rerun BOQS multiple times to restore the initial VPN configuration or tofix data errors.BOQS supports two network topologies:• Enterprise topology where the network operations center is located within thecentral office.• Service Provider topology where the network operations center is anindependent entity from the central officeEnterprise environmentBefore you deploy the Nortel VPN Router 1010, 1050, or 1100 switches at thelocal sites, you must configure routing and tunnels on the switch at the centraloffice.For routing, you must do the following:• Enable global RIP service.• Enable RIP on private interface.• Disallow importing default routes in the group where responder tunnels arecreated.For tunnels, you must do the following:• Create one responder tunnel for each branch office Nortel VPN Router 1010/1050/1100 device.• Set the Connection Type to Responder.• Be sure that the Control Tunnel option is NOT selected.• Determine the connection name for the tunnel. Nortel recommends that thename be the same as the initiator ID, but it could be the same as the centraloffice tunnel name.• Set the state to Enabled.• Set the Local Filter to permit all.• Set IPSEC Authentication to Text Pre-Shared Key.• Set the Initiator ID to the same name as the central office tunnel name.
