152 Figure 58 Flowchart for option card installation in the Nortel VPN Router 5000.. 163 Figure 65 Location of the Nortel VPN Router 5000 and Nortel VPN Router 5000E power supplies rear
Trang 1NN46110-317 02.01 302283-R Rev 01 November 2007 Standard
600 Technology Park Drive Billerica, MA 01821-4130
Nortel VPN Router Installation
— Hardware Options
Trang 2Copyright © 2007 Nortel Networks All rights reserved
.The information in this document is subject to change without notice The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express or implied warranty Users must take full responsibility for their applications of any products specified in this document The information in this document is proprietary to Nortel Networks Inc.
Trademarks
Nortel, the Nortel logo, the Globemark, and Contivity are trademarks of Nortel Networks.
Adobe and Acrobat Reader are trademarks of Adobe Systems Incorporated.
Hifn is a trademark of Hi/fn, Inc.
Intel is a trademark of Intel Corporation.
All other trademarks are the property of their respective owners.
USA requirements only
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice (Class A)
Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to
Part 15 of the FCC rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates, uses, and can radiate radio frequency energy If it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to take whatever measures may be necessary to correct the interference at their own expense.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice (Class B)
This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications However, there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
Trang 3• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
European requirements only
EN 55 022 statement (Class A)
This is to certify that the Nortel VPN Router 600, 1700, 1740, 1750, 2600, 2700, 4500, 4600, and 5000 are shielded against the generation of radio interference in accordance with the application of Council Directive
89/336/EEC, Article 4a Conformity is declared by the application of EN 55 022 Class A (CISPR 22).
Warning: This is a Class A product In a domestic environment, this product may cause radio interference, in which
case, the user may be required to take appropriate measures.
Achtung: Dieses ist ein Gerät der Funkstörgrenzwertklasse A In Wohnbereichen können bei Betrieb dieses Gerätes
Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenmaßnahmen verantwortlich ist.
Attention: Ceci est un produit de Classe A Dans un environnement domestique, ce produit risque de créer des
interférences radioélectriques, il appartiendra alors à l’utilisateur de prendre les mesures spécifiques appropriées.
EN 55 022 statement (Class B)
This is to certify that the Nortel VPN Router 1010/1050/1100 and Nortel VPN Router 1600 are shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a Conformity is declared by the application of EN 55 022 Class B (CISPR 22).
EC Declaration of Conformity
These products conform to the provisions of the R&TTE Directive 1999/5/EC.
Japan/Nippon requirements only
Voluntary Control Council for Interference (VCCI) statement (Class A)
Voluntary Control Council for Interference (VCCI) statement (Class B)
Trang 4Denan statement
Canada requirements only
Canadian Department of Communications Radio Interference Regulations (Class A)
This digital apparatus (VPN Router 600, 1700, 1740, 1750, 2600, 2700, 4500, 4600, or 5000) does not exceed the Class
A limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Règlement sur le brouillage radioélectrique du ministère des Communications (Classe A)
Cet appareil numérique (VPN Router 600, 1700, 1740, 1750, 2600, 2700, 2750, 4500, 4600, ou 5000) respecte les limites de bruits radioélectriques visant les appareils numériques de classe A prescrites dans le Règlement sur le brouillage radioélectrique du ministère des Communications du Canada.
Canadian Department of Communications Radio Interference Regulations (Class B)
This digital apparatus (VPN Router 1010/1050/1100 or VPN Router 1600) does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian
Department of Communications.
Règlement sur le brouillage radioélectrique du ministère des Communications (Classe B)
Cet appareil numérique (VPN Router 1010/1050/1100 ou VPN Router 1600) respecte les limites de bruits
radioélectriques visant les appareils numériques de classe B prescrites dans le Règlement sur le brouillage
radioélectrique du ministère des Communications du Canada.
Nortel Networks Inc software license agreement
This Software License Agreement (“License Agreement”) is between you, the end-user (“Customer”) and Nortel Networks Corporation and its subsidiaries and affiliates (“Nortel Networks”) PLEASE READ THE FOLLOWING CAREFULLY YOU MUST ACCEPT THESE LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE SOFTWARE USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE
AGREEMENT If you do not accept these terms and conditions, return the Software, unused and in the original shipping container, within 30 days of purchase to obtain a credit for the full purchase price.
“Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or affiliates, and is copyrighted and licensed, not sold Software consists of machine-readable instructions, its components, data, audio-visual content (such as images, text, recordings or pictures) and related licensed materials including all whole or partial copies Nortel Networks grants you a license to use the Software only in the country where you acquired the Software You obtain no
Trang 5rights other than those granted to you under this License Agreement You are responsible for the selection of the Software and for the installation of, use of, and results obtained from the Software.
1 Licensed Use of Software Nortel Networks grants Customer a nonexclusive license to use a copy of the Software
on only one machine at any one time or to the extent of the activation or authorized usage level, whichever is applicable
To the extent Software is furnished for use with designated hardware or Customer furnished equipment (“CFE”), Customer is granted a nonexclusive license to use Software only on such hardware or CFE, as applicable Software contains trade secrets and Customer agrees to treat Software as confidential information using the same care and discretion Customer uses with its own similar information that it does not wish to disclose, publish or disseminate Customer will ensure that anyone who uses the Software does so only in compliance with the terms of this Agreement Customer shall not a) use, copy, modify, transfer or distribute the Software except as expressly authorized; b) reverse assemble, reverse compile, reverse engineer or otherwise translate the Software; c) create derivative works or
modifications unless expressly authorized; or d) sublicense, rent or lease the Software Licensors of intellectual property
to Nortel Networks are beneficiaries of this provision Upon termination or breach of the license by Customer or in the event designated hardware or CFE is no longer in use, Customer will promptly return the Software to Nortel Networks or certify its destruction Nortel Networks may audit by remote polling or other reasonable means to determine Customer’s Software activation or usage levels If suppliers of third party software included in Software require Nortel Networks to include additional or different terms, Customer agrees to abide by such terms provided by Nortel Networks with respect
to such third party software.
2 Warranty Except as may be otherwise expressly agreed to in writing between Nortel Networks and Customer,
Software is provided “AS IS” without any warranties (conditions) of any kind NORTEL NETWORKS DISCLAIMS ALL WARRANTIES (CONDITIONS) FOR THE SOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT Nortel Networks is not obligated to provide support of any kind for the Software Some jurisdictions do not allow exclusion of implied warranties, and, in such event, the above exclusions may not apply
3 Limitation of Remedies IN NO EVENT SHALL NORTEL NETWORKS OR ITS AGENTS OR SUPPLIERS BE
LIABLE FOR ANY OF THE FOLLOWING: a) DAMAGES BASED ON ANY THIRD PARTY CLAIM; b) LOSS OF,
OR DAMAGE TO, CUSTOMER’S RECORDS, FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL,
INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS), WHETHER IN CONTRACT, TORT OR OTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OF YOUR USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS, ITS AGENTS OR SUPPLIERS HAVE BEEN ADVISED OF THEIR POSSIBILITY The forgoing limitations of remedies also apply to any developer and/or supplier
of the Software Such developer and/or supplier is an intended beneficiary of this Section Some jurisdictions do not allow these limitations or exclusions and, in such event, they may not apply.
4 General
a If Customer is the United States Government, the following paragraph shall apply: All Nortel Networks Software available under this License Agreement is commercial computer software and commercial computer software documentation and, in the event Software is licensed for or on behalf of the United States
Government, the respective rights to the software and software documentation are governed by Nortel Networks standard commercial license in accordance with U.S Federal Regulations at 48 C.F.R Sections 12.212 (for non-DoD entities) and 48 C.F.R 227.7202 (for DoD entities).
b Customer may terminate the license at any time Nortel Networks may terminate the license if Customer fails
to comply with the terms and conditions of this license In either event, upon termination, Customer must either return the Software to Nortel Networks or certify its destruction
c Customer is responsible for payment of any taxes, including personal property taxes, resulting from
Customer’s use of the Software Customer agrees to comply with all applicable laws including all applicable
Trang 6e The terms and conditions of this License Agreement form the complete and exclusive agreement between Customer and Nortel Networks.
f This License Agreement is governed by the laws of the country in which Customer acquires the Software If the Software is acquired in the United States, then this License Agreement is governed by the laws of the state
of New York.
Trang 7New in this release 17
Features 17
1000BASE-T (1000 GT) Ethernet interface card 17
How to get help 19
Finding the latest updates on the Nortel Web site 19
Getting help from the Nortel Web site 19
Getting help over the phone from a Nortel Solutions Center 20
Getting help from a specialist by using an Express Routing Code 20
Getting help through a Nortel distributor or reseller 21
Preface 23
Before you begin 24
Text conventions 24
Acronyms 24
Related publications 25
Printed technical manuals 27
Chapter 1 Nortel VPN Router 600 option installation 29
Shutting down the system to add or replace hardware 30
Opening the Nortel VPN Router 600 30
Installing or replacing an option card 34
Replacing a DIMM 39
Trang 8Chapter 2
Nortel VPN Router 1100 option installation 43
Installing or replacing option cards 44
Chapter 3 Nortel VPN Router 1700 and 1600 option installation 49
Shutting down the system to add or replace hardware 50
Removing the front bezel and top cover 51
Attaching the antistatic wrist strap 55
Installing or replacing option cards 56
Installing or replacing DIMMs 61
Chapter 4 Nortel VPN Router 1740 option installation 65
Shutting down the system to add or replace hardware 66
Removing the front bezel and top cover 67
Attaching the antistatic wrist strap 70
Installing or replacing option cards 71
Installing the SSL VPN Module 1000 with other option cards 72
Installing or replacing an option card 72
Installing or replacing DIMMs 76
Chapter 5 Nortel VPN Router 1750 option installation 81
Shutting down the system to add or replace hardware 82
Removing the front bezel and top cover 83
Attaching the antistatic wrist strap 87
Installing or replacing option cards 88
Installing the SSL VPN Module 1000 with other option cards 89
Installing or replacing an option card 90
Installing or replacing DIMMs 92
Chapter 6 Nortel VPN Router 2700 and 2600 option installation 97
Shutting down the system to add or replace hardware 98
Trang 9Removing the front bezel and top cover 99
Attaching the antistatic wrist strap 102
Installing or replacing option cards 103
Installing or replacing DIMMs 109
Chapter 7 Nortel VPN Router 2750 option installation 113
Shutting down the system to add or replace hardware 114
Removing the front bezel and top cover 115
Attaching the antistatic wrist strap 119
Installing or replacing option cards 120
Installing or replacing an option card 122
Installing or replacing DIMMs 124
Chapter 8 Nortel VPN Router 4600 option installation 129
Opening the VPN Router 4600 130
Nortel VPN Router 4600 system board layout 133
Installing or replacing option cards 134
Installing or replacing DIMMs 137
Replacing a power supply 138
Replacing a hard disk drive 140
Chapter 9 Nortel VPN Router 5000 option installation 143
Preparing to install hardware options 145
Option cards, DIMMs, and fan trays 145
Power supplies 145
Hard disk drives 145
Shutting down the system to add or replace hardware 146
Removing the front bezel and top cover 147
Attaching the antistatic wrist strap 151
Installing or replacing option cards 152
Trang 10Installing or replacing an option card 157
Installing or replacing DIMMs 160
Considerations for installing DIMMs 160
Installing DIMMs 162
Replacing a power supply 164
Replacing a hard disk drive 168
Replacing a fan tray 173
Appendix A Technical specifications 179
VPN Router Security Accelerator 181
SSL VPN Module 1000 182
10/100BASE-TX Ethernet interface card 183
1000BASE-T (1000 GT) Ethernet interface card 185
1000BASE-T (1000 MT) Ethernet interface card 188
1000BASE-SX Ethernet interface card 189
56/64K CSU/DSU WAN interface card 190
ADSL WAN interface card 192
ISDN BRI interface card 194
T1/E1 CSU/DSU WAN interface card 196
Quad T1/E1 CSU/DSU WAN interface card 198
V.90 modem interface card 199
Single V.35/X.21 WAN interface card 200
HSSI WAN interface card 208
External modem adapter for the Nortel VPN Router 1010/1050/1100 210
Index 213
Trang 11Figure 1 Removing the screws from the bottom of the VPN Router 600 31
Figure 2 Removing the chassis from the steel enclosure 32
Figure 3 Nortel VPN Router 600 system board 33
Figure 4 Removing the blank bracket from the option card slot 36
Figure 5 Inserting the option card 37
Figure 6 Securing the option card in the slot 38
Figure 7 Replacing the chassis in the steel enclosure 38
Figure 8 Installing a DIMM 41
Figure 9 Nortel VPN Router 1100 system board 45
Figure 10 Removing the front bezel 51
Figure 11 Removing the top cover 53
Figure 12 Location of option card slots and DIMMs on the system board 54
Figure 13 Location of the grounding jack for the antistatic wrist strap 55
Figure 14 Removing an option card or a filler panel 59
Figure 15 Installing an option card 60
Figure 16 Replacing the front bezel 61
Figure 17 Installing or removing a DIMM in a Nortel VPN Router 1700 or 1600 63
Figure 18 Removing the front bezel 67
Figure 19 Removing the top cover 68
Figure 20 Location of option card and DIMM slots on the system board 69
Figure 21 Location of the grounding jack for the antistatic wrist strap 70
Figure 22 Installing or removing an option card 74
Figure 23 Replacing the front bezel 75
Figure 24 Installing or removing a DIMM 78
Figure 25 Removing the front bezel 83
Figure 26 Removing the top cover 85
Trang 12Figure 30 Replacing the front bezel 92
Figure 31 Installing or removing a DIMM 94
Figure 32 Removing the front bezel 99
Figure 33 Removing the top cover 100
Figure 34 Location of option card slots and DIMMs on the system board 101
Figure 35 Location of the grounding jack for the antistatic wrist strap 102
Figure 36 Installing or removing an option card 107
Figure 37 Replacing the front bezel 108
Figure 38 Installing or removing a DIMM 111
Figure 39 Removing the front bezel 115
Figure 40 Removing the top cover 117
Figure 41 Location of option card and DIMM slots on the system board 118
Figure 42 Location of the grounding jack for the antistatic wrist strap 119
Figure 43 Installing or removing an option card 123
Figure 44 Replacing the front bezel 124
Figure 45 Installing or removing a DIMM 126
Figure 46 Removing the Nortel VPN Router 4600 front bezel 131
Figure 47 Nortel VPN Router 4600 front components 132
Figure 48 Sample Nortel VPN Router 4600 system board 133
Figure 49 Installing Nortel VPN Router 4600 option cards 136
Figure 50 Installing Nortel VPN Router 4600 DIMMs 138
Figure 51 Removing a Nortel VPN Router 4600 power supply 139
Figure 52 Removing a Nortel VPN Router 4600 hard disk drive 141
Figure 53 Removing the front bezel 148
Figure 54 Removing the top cover 149
Figure 55 Location of option cards, DIMMs, and fan trays on the system board 150
Figure 56 Location of the grounding jack for the antistatic wrist strap 151
Figure 57 Nortel VPN Router 5000 option card slots and buses 152
Figure 58 Flowchart for option card installation in the Nortel VPN Router 5000 156
Figure 59 Installing or removing an option card 158
Figure 60 Replacing the front bezel 159
Figure 61 DIMM memory banks on the Nortel VPN Router 5000 motherboard 160
Trang 13Figure 62 DIMM label: Example 1 161
Figure 63 DIMM label: Example 2 161
Figure 64 Installing or removing a DIMM 163
Figure 65 Location of the Nortel VPN Router 5000 and Nortel VPN Router 5000E power supplies (rear of the chassis) 166 Figure 66 Removing a power supply 167
Figure 67 Inserting a power supply 168
Figure 68 Location of the Nortel VPN Router 5000 hard disk drives 169
Figure 69 Removing a hard disk drive 171
Figure 70 Inserting a hard disk drive 172
Figure 71 Location of the Nortel VPN Router 5000 fan trays 173
Figure 72 Removing a fan tray 175
Figure 73 Installing a fan tray 176
Figure 74 VPN Router Security Accelerator card 181
Figure 75 SSL VPN Module 1000 182
Figure 76 10/100BASE-TX Ethernet interface card (all models except VPN Router 1100) 183 Figure 77 10/100BASE-TX Ethernet interface card (for the VPN Router 1100 only) 183 Figure 78 1000BASE-T (1000 GT) Ethernet interface card (all models except VPN Router 1100) 186 Figure 79 VPN Router 1100 full-height 1000BASE-T (1000 GT) 186
Figure 80 VPN Router 1100 half-height 1000BASE-T (1000 GT) 187
Figure 81 1000BASE-T (1000 MT) Ethernet interface card 188
Figure 82 1000BASE-SX Ethernet interface card 189
Figure 83 56/64K CSU/DSU WAN interface card 190
Figure 84 56/64K CSU/DSU WAN interface card (for the VPN Router 1100 only) 190 Figure 85 ADSL WAN interface card 192
Figure 86 ADSL WAN interface card (for the VPN Router 1100 only) 193
Figure 87 ISDN BRI S/T interface card or ISDN BRI U interface card 194
Figure 88 ISDN BRI S/T interface card (for the VPN Router 1100 only) 194
Trang 14Figure 92 T1/E1 CSU/DSU WAN interface card (for the VPN Router 1100) 196
Figure 93 Quad T1/E1 CSU/DSU WAN interface card 198
Figure 94 V.90 modem interface card 200
Figure 95 V.90 modem interface card (for the VPN Router 1100 only) 200
Figure 96 Single V.35/X.21 WAN interface card (full-height card) 201
Figure 97 Single V.35/X.21 WAN interface card (half-height card) 201
Figure 98 Single V.35/X.21 WAN interface card (half-height card for the VPN Router 1100 only) 201
Figure 99 HSSI WAN interface card 208
Figure 100 Serial cable adapter for connection to modem (DB9-to-DB25) 210
Trang 15Table 1 Supported option cards for the Nortel VPN Router 600 34
Table 2 Supported option cards for the Nortel VPN Router 1100 43
Table 3 Supported option cards for the Nortel VPN Router 1600 and 1700 56
Table 4 Supported option cards for the Nortel VPN Router 1600 58
Table 5 Supported option cards for the Nortel VPN Router 1740 71
Table 6 Supported option cards for the Nortel VPN Router 1750 88
Table 7 Supported option cards for the Nortel VPN Router 2600 and 2700 103
Table 8 Installing other option cards with the SSL VPN Module 1000 104
Table 9 Supported option cards for the Nortel VPN Router 2600 105
Table 10 Base and maximum memory for the Nortel VPN Router 2600 and 2700 109 Table 11 Supported option cards for the Nortel VPN Router 2750 120
Table 12 Installing other option cards with the SSL VPN Module 1000 121
Table 13 Supported option cards for the Nortel VPN Router 4600 134
Table 14 Supported option cards for the Nortel VPN Router 5000 153
Table 15 Optimal placement of option cards in the Nortel VPN Router 5000 154
Table 16 Model number for each chassis that supports either the 350-watt or 500-watt power supply 165 Table 17 10/100BASE-TX Ethernet port pinouts (all models except VPN Router 1100) 184 Table 18 10/100BASE-TX Ethernet port pinouts (VPN Router 1100 only) 184
Table 19 1000BASE-T (1000 GT) Ethernet pinouts 187
Table 20 1000BASE-T Ethernet port pinouts 189
Table 21 56/64K CSU/DSU cable pinouts for crossover connection 191
Table 22 56/64K CSU/DSU cable pinouts for straight-through connection 192
Table 23 ADSL Annex A cable pinouts 193
Table 24 ADSL Annex B cable pinouts 193
Table 25 ISDN BRI S/T cable pinouts 195
Trang 16Table 28 T1/E1 CSU/DSU cable pinouts for straight-through connection 198
Table 29 V.90 modem cable pinouts 200
Table 30 V.35 cable pinouts 202
Table 31 X.21 cable pinouts 203
Table 32 RS-232 DTE cable pinout 204
Table 33 RS-232 SDLC cable pinouts 205
Table 34 V.35 SDLC cable pinouts 207
Table 35 T3 cable pinouts 208
Table 36 Null modem adapter cable pinouts 211
Trang 17New in this release
The following sections detail what’s new in Nortel VPN Router Installation —
Hardware Options (NN46110-317) for Release 7.05.300
Features
See the following section for information about feature changes
1000BASE-T (1000 GT) Ethernet interface card
Release 7.05.300 supports the 1000BASE-T (1000 GT) Ethernet card For specifications, see “1000BASE-T (1000 GT) Ethernet interface card” on page 185
The list of option cards that can be installed in the various VPN Router models is updated to include the 1000BASE-T (1000 GT) Ethernet card
Trang 19How to get help
This chapter explains how to get help for Nortel products and services
Finding the latest updates on the Nortel Web site
The content of this documentation was current at the time the product was released To check for updates to the latest documentation and software for the VPN Router, go to:
www.nortel.com/supportSelect Security & VPN and then, in the section called Virtual Private Networking (VPN), IPSEC, and SSL, click the appropriate VPN Router product
Getting help from the Nortel Web site
The best way to get technical support for Nortel products is from the Nortel Technical Support Web site:
www.nortel.com/support
Trang 20This site provides quick access to software, documentation, bulletins, and tools to address issues with Nortel products From this site you can:
• download software, documentation, and product bulletins
• search the Technical Support site and the Nortel Knowledge Base for answers
to technical issues
• sign up for automatic notification of new software and documentation for Nortel equipment
• open and manage technical support cases
Getting help over the phone from a Nortel Solutions
Center
If you do not find the information you require on the Nortel Technical Support web site, and you have a Nortel support contract, you can also get help over the phone from a Nortel Solutions Center
In North America, call 1-800-4NORTEL (1-800-466-7835)
Outside North America, go to the following web site to obtain the phone number for your region:
www.nortel.com/erc
Trang 21Getting help through a Nortel distributor or reseller
If you purchased a service contract for your Nortel product from a distributor or authorized reseller, contact the technical support staff for that distributor or reseller
Trang 23The Nortel VPN Router product family supports secure, reliable IP VPNs in a single, integrated hardware device In this guide, all Nortel VPN Router models
are referred to generically as the gateway This guide provides instructions about
how to install or replace the following field-replaceable units (FRU) in the VPN Router gateway:
• LAN, WAN, and serial interface cards
• VPN accelerator cards (VPN Router Security Accelerator card and Hardware Accelerator card)
• Secure Sockets Layer (SSL) VPN Module 1000
• dual inline memory modules (DIMM)
• power supplies (VPN Router 5000, 4600, and 4500)
• hard disk drives (VPN Router 5000, 4600, and 4500)
• fan trays (VPN Router 5000)
Warning: Some VPN Router models must be returned to Nortel
Manufacturing via your Customer Service Representative for repair Do
not attempt to make any changes to these models; if you are untrained,
you can cause personal injury, you can invalidate your warranty, or you can cause irreparable damage to the equipment
Trang 24Before you begin
This guide is intended for qualified service personnel who need to install or replace a field-replaceable unit (FRU) in the gateway chassis A qualified service person must have appropriate technical training and experience and be aware of the hazards involved in installing or replacing FRUs
Text conventions
This guide uses the following text conventions:
Acronyms
This guide uses the following acronyms:
Warning: If you improperly handle internal components or assemblies,
with the power connected, you can cause severe personal injury
bold Courier text Indicates command names and options and text that
you need to enter
Example: Use the show health command
Example: Enter terminal paging {off | on}
italic text Indicates new terms and book titles
plain Courier text
Indicates system output, for example, prompts and system messages
Example: File not found.
separator ( > ) Shows menu paths
Example: Choose Status > Health Check
CSU/DSU channel service unit/digital service unit
Trang 25• Nortel VPN Router Configuration — Basic Features (NN46110-500)
introduces the product and provides information about initial setup and configuration
• Nortel VPN Router Security — Servers, Authentication, and Certificates
Trang 26• Nortel VPN Router Security — Firewalls, Filters, NAT, and QoS
(NN46110-601) provides instructions for configuring the Nortel VPN Router Stateful Firewall, NAT, and Nortel VPN Router interface and tunnel filters
• Nortel VPN Router Configuration — Tunneling Protocols (NN46110-503)
provides instructions for configuring the tunneling protocols IPsec, L2TP, PPTP, and L2F
• Nortel VPN Router Configuration — Advanced Features (NN46110-502)
provides instructions for configuring 802.1Q VLANs, circuitless IP, advanced WAN settings, PPP, PPPoE, frame relay, ADSL and ATM, T1/E1 CSU/DSU interfaces, dial services and BIS, DLSw, IPX, and hardware accelerator cards
• Nortel VPN Router Configuration — SSL VPN Services (NN46110-501)
provides instructions for configuring services on the SSL VPN Module 1000, including authentication, networks, user groups, and portal links
• Nortel VPN Router Configuration — Routing (NN46110-504) provides
instructions for configuring RIP, OSPF, and VRRP, as well as instructions for configuring ECMP, routing policy services, and client address redistribution
• Nortel VPN Router Using the Command Line Interface (NN46110-507)
provides syntax, descriptions, and examples for the commands that you can use to configure, manage, and monitor the gateway
• Nortel VPN Router Troubleshooting (NN46110-602) provides information
about backup and recovery, file management, upgrading software, and troubleshooting This guide also provides instructions for monitoring gateway status and performance
Trang 27Printed technical manuals
You can print selected technical manuals and release notes free, directly from the Internet Go to www.nortel.com/support, find the product for which you need documentation, then locate the specific category and model or version for your hardware or software product Use Adobe Reader to open the manuals and release notes, search for the sections you need, and print them on most standard printers
Go to Adobe Systems at www.adobe.com to download a free copy of the Adobe Reader
Note: If you need instructions for an older Contivity model that is not in
this guide, go to www.nortel.com/support From the Product Categories menu, choose Security & VPN, then select Virtual Private Networking (VPN), IPsec, and SSL From the list of products, choose the older product, for example, Contivity 2500, and then find an older version of this book (for example, part number 302283-F Rev 00)
Trang 29Chapter 1
Nortel VPN Router 600 option installation
This chapter provides instructions on how to install and replace the following field replaceable units (FRU) in the Nortel VPN Router 600:
• LAN, WAN, and serial interface cards
• dual inline memory module (DIMM)
To install an interface card or DIMM, you must remove the VPN Router 600 chassis from its steel enclosure
This chapter contains the following topics:
Shutting down the system to add or replace hardware 30 Opening the Nortel VPN Router 600 30 Installing or replacing an option card 34
Trang 30Shutting down the system to add or replace hardware
Shut down the VPN Router 600, and unplug it to install or replace an option card
or to replace the DIMM
To shut down the VPN Router 600:
1 Use the Web graphical user interface (GUI) or the command line interface (CLI) to shut down the gateway
• Web GUI: Choose Admin > Shutdown Select the option to power off the gateway after shutdown
• CLI: Use the reload command to shut down the system For example, enter reload power-off disable-logins “Upgrade hardware”
[for the complete syntax of the reload command, see the Nortel VPN
Router Using the Command Line Interface (NN46110-507)].
2 Wait for the system to shut down You need to wait several minutes
3 Remove all interface cables from the rear of the chassis
4 Disconnect the power cord from the power outlet
5 Disconnect the power supply cable from the VPN Router 600 DC input port
Opening the Nortel VPN Router 600
To install an interface card or to replace the DIMM, you must remove the VPN Router 600 chassis from the steel enclosure
To access the chassis:
Caution: Risk of equipment damage or data loss
Shut down the gateway as described in this section before you attempt to add or replace an option card or DIMM
Trang 311 Shut down the VPN Router 600, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 30.
2 Turn the VPN Router 600 over to see the bottom of the gateway
3 Use a Phillips screwdriver to remove the four screws that secure the bottom to the chassis (Figure 1)
Figure 1 Removing the screws from the bottom of the VPN Router 600
Warning: Risk of electric shock
Turn off the VPN Router 600 and unplug it before you attempt to
remove or install an option card or DIMM
2
4 3
1
CS60003A
Trang 324 Grasp the rear of the chassis, and firmly pull the chassis toward you to loosen
it from the steel enclosure (Figure 2) You can gently shake the chassis so that it slips outward and into your hand,
or you can pull gently on the I/O expansion bay
Figure 2 Removing the chassis from the steel enclosure
The system board is exposed Figure 3 on page 33 shows the location of the option card slot and the DIMM slot on the VPN Router 600 system board
CS60004A
I/O EXPANSION BAY
CONSOLE LAN 1 LAN 0 FD
RC DC INPUT-12V-0.1A +5V-10A 75W MAX
Trang 33Figure 3 Nortel VPN Router 600 system board
Warning: Risk of injury
Beware of danger if you incorrectly replace the battery Replace the battery with the same type or an equivalent battery only, as
recommended by the manufacturer’s instructions In spite of this
warning, which is mandated for regulatory approval, you must not change the battery If you suspect a dead battery, contact Nortel
Customer Support
CS60005A
Option card slot
DIMM slot
Trang 34Installing or replacing an option card
The VPN Router 600 has one expansion slot for option cards (Figure 3 on page 33) This section provides instructions on installing a LAN, WAN, or serial option card in the VPN Router 600 or, if necessary, replacing the installed card.You can install the following option cards in the VPN Router 600:
Note: The 1000BASE-T (1000 GT) Ethernet interface card only
operates at 10/100 Mbit/s on the VPN Router 600
Table 1 Supported option cards for the Nortel VPN Router 600
1000BASE-T (1000 GT) Ethernet interface 1
1 The VPN Router 600 must be running Version 5.05.330, 6.05.140 and later, 7.00.062, 7.05.100 and later, or 7.05.300 and later The VPN Router 600 supports 10/100 Mbps operation only.
1 56/64K channel service unit/digital service unit (CSU/DSU) WAN
interface 2
2 The VPN Router 600 must be running Version 5.0 or later.
1 Asymmetric digital subscriber line (ADSL) WAN interface 3
3 The VPN Router 600 must be running Version 4.90 or later.
1 Integrated Services Digital Network (ISDN) BRI S/T or U interface 4
4 The VPN Router 600 must be running Version 4.80 or later.
1
V.90 modem interface 5
5 The VPN Router 600 must be running Version 4.80 or later.
1 Single V.35/X.21 WAN interface (full-height) 1 Single V.35/X.21 WAN interface (half-height) 6
6 The VPN Router 600 must be running Version 4.80 or later.
1
Trang 35To install or replace a LAN, WAN, or serial interface card:
1 Shut down the VPN Router 600 using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace
hardware” on page 30
2 Remove the chassis from the steel enclosure (see “Opening the Nortel VPN Router 600” on page 30)
3 Attach an antistatic wrist strap
4 Remove the blank peripheral component interconnect (PCI) bracket by inserting a Phillips screwdriver into the slot at the right of the blank PCI bracket and rotating the screw counterclockwise (Figure 4)
Warning: Risk of electric shock
Turn off the VPN Router 600 and unplug it before you attempt to
remove or install an option card or DIMM
Caution: Electrostatic discharge can damage VPN Router 600
components
Trang 36Figure 4 Removing the blank bracket from the option card slot
5 Slide the option card into the option card slot (Figure 5 on page 37)
Be careful not to bend the copper fingers in the slot
CS60010A
Option card slot
Motherboard
Screwdriver slot Blank PCI bracket
Phillips screwdriver
Trang 37Figure 5 Inserting the option card
Seat the option card firmly and evenly in the card slot with the left tabbed end
of the card in the slot If you do not properly seat the card, it does not work
6 Replace the screw at the right end of the PCI bracket (Figure 6 on page 38)
CS60006A
Option card
Option card slot
Motherboard
Trang 38Figure 6 Securing the option card in the slot
7 Slide the chassis into the steel enclosure (Figure 7)
Figure 7 Replacing the chassis in the steel enclosure
CS60009A
I/O EXPANSION BAY
CONSOLE LAN 1 LAN 0 FD
RC DC INPUT-12V-0.1A +5V-10A 75W MAX
Trang 398 Replace the four Phillips screws that secure the bottom panel to the chassis (Figure 1 on page 31).
9 Connect the cables to the system ports and to the option card port
10 Plug the cable attached to the external power supply into the receptacle
labeled “DC Input” on the rear of the VPN Router 600
11 If necessary, plug the female end of the power cord into the external power
supply pack
12 Plug the male end of the power cord into a surge protector.
13 Plug the surge protector (or the power cord) into the power outlet.
The VPN Router 600 begins to boot
Replacing a DIMM
The VPN Router 600 has one slot for a dual inline memory module (DIMM) If you have a VPN Router 600 with a 64 MB DIMM, you can upgrade system memory by replacing the installed DIMM with a 128 MB DIMM
Note: The VPN Router 600 has no power switch When you connect the
VPN Router 600 to a power supply, the gateway turns on
Caution: Use of a memory module not purchased from Nortel can void
your warranty or your service contract
Note: Nortel ships newer VPN Router 600 gateways with 128 MB of
memory installed If you purchased your VPN Router 600 after January
2002, your gateway most likely has 128 MB of memory
Trang 40To replace the DIMM in the VPN Router 600:
1 Shut down the VPN Router 600 using the Web GUI or the CLI, and then unplug it as described in “Shutting down the system to add or replace hardware” on page 30
2 Remove the chassis from the steel enclosure (see “Opening the Nortel VPN Router 600” on page 30)
3 Attach an antistatic wrist strap
4 Locate the DIMM slot on the system board (Figure 3 on page 33)
5 Pull the locking levers back to release the DIMM It snaps up from the circuit board
6 Pull the DIMM out of the slot
7 Insert the new DIMM into the slot at a 45 degree angle (Figure 8 on page 41).Use the alignment keys on the DIMM to properly position the DIMM in the connector
Warning: Risk of electric shock
Turn off the VPN Router 600 and unplug it before you attempt to remove or install a DIMM
Caution: Risk of equipment damage
Electrostatic discharge can damage VPN Router 600 components