Nortel Secure Router 4134 manuals
Secure Router 4134
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- precautions
- Cautions and warnings for the Secure Router 2330/4134
- Foreign Exchange Station (FXS) Interface Modules
- Personal safety and equipment protection
- Electrostatic discharge
- New in this release
- Introduction
- Nortel Secure Router 2330/4134 hardware components fundamentals
- Secure Router 4134 Fan tray
- Interface modules for the Secure Router 2330/4134
- T1/E1 Small Module
- ISDN BRI S/T and ISDN BRI U Small Modules
- Serial Small Module
- FXS Small Module
- FXO Small Module
- T1/E1 Medium Module (supported on Secure Router 4134 only)
- HSSI Medium Module (supported on Secure Router 4134 only)
- Installation — Hardware Components NN47263-301 03.01 7 September
- GbE Medium Module (supported on Secure Router 4134 only)
- FE and FE/PoE Medium Module (supported on Secure Router 4134 only)
- Mediation Server Module for OCS (supported on Secure Router 4134 only)
- Voice Carrier Medium Module (supported on Secure Router 4134 only)
- GbE Large Module (supported on Secure Router 4134 only)
- ADSL2+ Small Module
- Secure Router 4134 Internal hardware components
- DDR SO-DIMM
- VPN/IPSec module
- Hot swapping Secure Router 4134 hardware components
- Compatible internal modules for Secure Router 2330
- Replaceable parts for Secure Router 2330
- Installing Secure Router 2330/4134 hardware components
- Installing the interface modules
- Prerequisites
- Installing a Small Module
- Installing a Large Module on the Secure Router 4134
- Installing a Small Module in the Secure Router 4134 Voice Carrier Medium Module
- Hot swapping interface modules
- Connecting Secure Router 2330/4134 power cables
- Connecting DC power
- Connecting the console port cable
- Replacing a Secure Router 4134 fan tray module
- Installing the internal VPN/IPSec module
- Removing the internal VPN/IPSec module
- Installing or removing an internal PVM on the Secure Router 4134
- Installing the internal PVM
- Removing the internal PVM
- Replacing the DIMM in the Secure Router 4134
- Installing a DIMM on the Mediation Server Module
- Removing a DIMM from the Mediation Server Module
- Replacing the Secure Router 4134 internal Compact Flash
- Removing the Secure Router 2330 top cover
- Installing or removing the internal SCIM module on the Secure Router 2330
- Installing the internal SCIM module
- Removing the internal SCIM module
- Installing the internal PVIM module
- Removing the internal PVIM module
- Replacing the Secure Router 2330 DIMM
- Replacing the Secure Router 2330 internal Compact Flash
- Environmental requirements
- Interface connector pin assignments
- Serial cable descriptions
- DCE V.35 serial cable
- DTE X.21 serial cable
- DCE X.21 serial cable
- DTE RS-449 serial cable
- DCE RS-449 serial cable
- DTE RS-232 serial cable
- DCE RS-232 serial cable
- DTE RS-530 serial cable
- DTE RS-530A serial cable
- Hardware reliability
- Battery life expectancy on the Mediation Server Module for OCS
- Translations of safety messages
- Overcurrent warning statement
- Cover plate warning statement
- Power cord warning statement
Secure Router 4134
Table of contents
- quick start
- Table Of Contents
- Table Of Contents
- precautions
- TIA-968-A
- European Union and European Free Trade Association (EFTA) notice
- VCCI statement (Japan/Nippon only)
- National Safety Statements of Compliance
- Denan statement (Japan/Nippon only)
- WEEE Directive Compliance Statement
- Cautions and warnings for the Secure Router 4134
- Foreign Exchange Station (FXS) Interface Modules
- Foreign Exchange Office (FXO) Interface Modules
- Cables and connectors protection
- Antistatic material
- New in this release
- Nortel Secure Router
- Introduction
- Secure Router 4134 installation and initial configuration
- Secure Router 4134 installation and initial configuration navigation
- Installing the Secure Router 4134 chassis and hardware components
- Installing a power supply module
- Prerequisites
- Installing the chassis
- Grounding the chassis
- Installing the interface modules
- Installing a Small Module
- Installing a Medium Module
- Installing a Small Module in the Voice Carrier Medium Module
- Connecting power cables
- Connecting DC power
- Powering up the router
- Configuring the Secure Router 4134 for remote access
- Establishing remote access
- Using SSH for remote access
- Changing the default administrator password
- Environmental requirements
- Translations of safety messages
- Qualified service personnel warning statement
- Overcurrent warning statement
- Cover plate warning statement
- NN47263-100 02.01 Standard 18 February
- nortel secure router
Secure Router 4134
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- New in this release
- Packet filter
- GRE and IPIP tunneling
- Authentication, Authorization, and Accounting
- SSH2
- Introduction
- Firewall and NAT Fundamentals
- Stateful inspection elements
- Transit policies on trusted zones only
- Default firewall
- Firewall network protection features
- Policy-based controls
- ALG Overview
- NAT Overview
- Static NAT
- NAT failover for firewalls
- Nortel Secure Router
- NAT Hairpinning
- Standards compliance
- Packet filter fundamentals
- Maximum allowable filter rules on Ethernet modules
- IPv6 packet filters
- MAC packet filters
- Configuration considerations
- IPsec VPN fundamentals
- Site-to-Site VPN
- Remote access VPN
- Remote access VPN with L2TP server
- Supported IPsec security protocols
- IKE modes
- Peer authentication methods for IKE
- User authentication for remote access VPN
- Internet X.509 PKI certificate and CRL profile
- Certificate enrollment using SCEP client
- Manual certificate enrollment
- Multiple IPsec proposals
- Identifying traffic to be encrypted with VPN
- Firewall considerations for trusted and untrusted VPN interfaces
- Dead peer detection
- Security Policy Database
- QoS over VPN
- Logging and Statistics
- GRE and IPIP tunneling fundamentals
- IPIP
- IPv6 over IPv4 GRE tunnels
- PPPoE client fundamentals
- Authentication, Authorization, and Accounting fundamentals
- CHAP authentication
- EAP IEEE 802.1X
- Authorization
- SSH2 fundamentals
- SSH ciphers
- SSH key exchange methods
- SSH public key file formats
- Firewall and NAT configuration
- Configuring global bypass trusted
- Configuring global DOS protection
- Configuring global NAT hairpinning
- Configuring global IP reassembly
- Configuring global logging
- Configuring global maximum connection limits for the firewall
- Configuring NAT failover
- Configuring proxy NAT
- Configuring global URL key filters
- procedure steps
- Configuring policy-specific properties
- Configuring connection reservations
- Configuring stealth mode
- Applying an object to a policy
- Configuring bandwidth for the policy
- Configuring the maximum connections for the policy within a configured timeframe
- Configuring policing for the policy
- Enabling the policy
- Displaying firewall information
- Clearing firewall connections
- Packet filter configuration
- Configuring IPv6 packet filters
- Configuring MAC packet filters
- Applying a packet filter to an interface
- Deleting a packet filter
- IPsec VPN configuration
- Configuring IKE for site-to-site VPN
- Configuring the IKE policy local ID
- Configuring the IKE policy remote ID
- Configuring the IKE exchange type
- Configuring the pre-shared key for IKE
- Enabling or disabling PFS
- Configuring OCSP for the IKE policy
- Configuring IPsec for site-to-site VPN
- Enabling or disabling the IPsec policy entry
- Configuring DH prime modulus group for PFS
- Configuring IPsec proposal
- Configuring remote access IKE policies
- Configuring an IKE proposal for remote access VPN
- Configuring remote access IPsec policies
- Specifying the IP stream on which to apply IPsec for remote access VPN
- Configuring IPsec proposal template for remote access VPN
- Enabling the dynamic IPsec policy
- Configuring L2TP server for L2TP remote access
- Configuring IPsec protection for the L2TP access interface
- Configuring client parameters for L2TP remote access
- Shutting down the L2TP access interface
- Configuring the keepalive retry interval
- Configuring the MTU threshold value
- Configuring CA trustpoint
- Configuring parameters for the certificate request
- Configuring certificate password
- Generating a certificate request for enrollment
- Manually importing a self certificate
- Configuring LDAP parameters
- Requesting a CRL from the CA
- Displaying IPsec VPN configurations
- Displaying IKE policies
- Displaying remote access IKE policies
- Displaying dead peer detection configuration
- Clearing IPsec configurations
- Clearing IPsec SA information
- GRE and IPIP tunnel configuration
- Configuring tunnel encapsulation mode
- Configuring tunnel source
- Configuring GRE tunnel parameters
- Configuring checksum for GRE tunnels
- Configuring tunnel sequencing
- Configuring the tunnel as an untrusted interface for IPsec protection
- Configuring tunnel ToS
- Configuring tunnel TTL
- Displaying tunnel information
- PPPoE client configuration
- Configuring PPPoE tunneling protocol
- Configuring PPPoE Ethernet interface
- Configuring PPPoE access concentrator
- Displaying PPPoE client information
- Authentication, Authorization, and Accounting configuration
- Configuring AAA authentication protocol
- Applying AAA authentication to an interface
- Applying AAA authorization to an interface
- Configuring AAA accounting update
- Applying AAA accounting to an interface
- Configuring RADIUS server port for authentication
- Configuring RADIUS client retries
- Configure RADIUS shared secret key
- Configuring RADIUS client source address
- Configuring TACACS+ retries
- Configuring TACACS+ shared encryption key
- Configuring 802.1x
- Configuring the maximum failed requests
- Configuring quiet period
- Configuring reauthorization period
- Configuring supplicant response timeout
- Displaying AAA information
- Displaying AAA status
- Clearing 802.1x statistcs
- SSH2 configuration
- Encrypting a private key file
- Converting public key files to SSH format
- Generating a public key digest of a key file
- Configuring SSH2 server parameters
- Configuring SSH encryption algorithms
- Enabling and disabling SSH server
- Enabling and disabling log events
- Configuring MAC algorithms
- Restoring default SSH parameter values
- Configuring SSH session timeout
- Displaying SSH server sessions
- Configuration examples
- Configuring a MAC packet filter
- Configuring a simple firewall policy with DMZ
- Configuring a simple PAT policy
- Configuring a PAT policy with an inbound forwarding policy
- Configuring SIP ALG line-side
- Configuring SIP ALG trunk-side
- Configuring a Site-to-site IPsec VPN
- Configuring SR4134 2
- Configuring a trust point for PKI
- Configuring a remote access IPsec VPN
- Configuring a remote access VPN with L2TP server
- Configuring an IPv4 tunnel
- SR4134 1
- SR4134 2
- Configuring an auto 6to4 tunnel
- Configuring the firewall for NAT and IPsec tunnels
- Firewall configuration for SR4134 1
- Firewall configuration for SR4134 2
- Configuring a PPPoE client
- SR4134 configuration for dynamic route exchange over IPsec tunnel interoperability with VPN Router
- Secure router configuration for BGP
- Secure router configuration for OSPF
Secure Router 4134
Table of contents
- restricted rights legend
- canadian department of communications radio interference regulations
- national environmental statements of compliance
- getting help through a nortel distributor or reseller
- personal safety and equipment protection
- electrostatic discharge
- Table Of Contents
- Table Of Contents
- Contents
- New in this release
- Introduction
- Nortel Secure Router 4134 hardware components fundamentals
- Fan tray
- Interface modules for the Secure Router 4134
- T1/E1 Small Module
- ISDN BRI S/T and ISDN BRI U Small Modules
- Serial Small Module
- T1/E1 Medium Module
- HSSI Medium Module
- CT3 Medium Module
- DS3 Medium Module
- GbE Medium Module
- FE and FE/PoE Medium Module
- GbE Large Module
- Internal hardware components
- DDR SO-DIMM
- VPN/IPSec module
- Installing Secure Router 4134 hardware components
- Prerequisites
- Nortel Secure Router
- Hot swapping interface modules
- Connecting power cables
- Connecting DC power
- Connecting the console port cable
- Installing or replacing a power supply module
- Replacing a fan tray module
- Installing or removing the internal VPN/IPSec module
- Installing the internal VPN/IPSec module
- Removing the internal VPN/IPSec module
- Replacing the DIMM
- Replacing the internal Compact Flash
- Environmental requirements
- Interface connector pin assignments
- Serial cable descriptions
- DCE V.35 serial cable
- DTE X.21 serial cable
- DCE X.21 serial cable
- DTE RS-449 serial cable
- DCE RS-449 serial cable
- DTE RS-232 serial cable
- DCE RS-232 serial cable
- DTE RS-530 serial cable
- DTE RS-530A serial cable
- Hardware reliability
- Translations of safety messages
- Qualified service personnel warning statement
- Overcurrent warning statement
- Cover plate warning statement
- Power cord warning statement
Secure Router 4134
Table of contents
- quick start
- restricted rights legend
- canadian department of communications radio interference regulations
- national environmental statements of compliance
- getting help through a nortel distributor or reseller
- personal safety and equipment protection
- electrostatic discharge
- Table Of Contents
- Table Of Contents
- New in this release
- AC and DC power supplies
- Introduction
- Secure Router 4134 installation and initial configuration
- Secure Router 4134 installation and initial configuration navigation
- Installing the Secure Router 4134 chassis and hardware components
- Installing a power supply module
- Prerequisites
- Installing the chassis
- Grounding the chassis
- Installing the interface modules
- Installing a Small Module
- Installing a Large Module
- Installing or removing an internal VPN/IPSec module
- Removing the internal VPN/IPSec module
- Connecting power cables
- Nortel Secure Router
- Connecting DC power
- Powering up the router
- Configuring the Secure Router 4134 for remote access
- Establishing remote access
- Using SSH for remote access
- Changing the default administrator password
- Environmental requirements
- Translations of safety messages
- Qualified service personnel warning statement
- Overcurrent warning statement
- Cover plate warning statement
- Power cord warning statement
Secure Router 4134
Table of contents
- documentation roadmap
- Table Of Contents
- Table Of Contents
- Table Of Contents
- software license agreement
- Applicability
- Customer documentation packaging
- Product Fundamentals
- Installation and Commissioning
- Administration and Security
- Fault and Performance Management
- Information quality
- Text conventions
- Modular, task-based information
- Purpose statements
- Procedure steps
- Navigation
- Getting help from a specialist by using an Express Routing Code
Secure Router 4134
Table of contents
- Table Of Contents
- Table Of Contents
- precautions
- TIA-968-A
- European Union and European Free Trade Association (EFTA) notice
- BSMI statement (Taiwan only)
- NOM statement (Mexico only)
- Denan statement (Japan/Nippon only)
- WEEE Directive Compliance Statement
- Cautions and warnings for the Secure Router 4134
- Personal safety and equipment protection
- Cables and connectors protection
- Antistatic material
- New in this release
- Introduction
- Nortel Secure Router
- Nortel Secure Router 4134 chassis fundamentals
- Important information about the Secure Router 4134
- Compatible external interface modules for the Secure Router 4134
- Slot numbering
- Secure Router 4134 replaceable parts
- Secure Router 4134 service access panel
- Secure Router 4134 chassis installation
- Secure Router 4134 chassis installation navigation
- Prepare and install the Secure Router 4134 chassis
- Installing the mounting brackets on the Secure Router 4134
- Prerequisites
- Installing the Secure Router 4134 chassis in an equipment rack
- Opening the rear access panel
- Chassis dimensions
- Hardware specifications
- Mounting rack requirements
- Power and grounding
- Grounding
- Translations of safety messages
- Overcurrent warning statement
- Cover plate warning statement
- Electric shock danger statement
manualsdatabase
Your AI-powered manual search engine