ADTRAN NetVanta 2000 Series Manuale utente

NetVanta 2000

Quick Start Guide 61200361L2-13B May 2002

Series

WAN:

SoHo CORP HQ

NetVanta 2300

NetVanta 2100

DSL/

Cable Modem

Static Addressing

10.200.1.140/16 LAN IP: 190.72.22.40/24

LAN IP: 10.10.20.7/24 WAN: Static Addressing

172.29.50.61/16

PWR STAT TD

VPN

RD TD RD TD RD

NetVanta2100

WAN LAN

PWR STAT TD

VPN

RD TD RD

NetVanta2100

WAN LAN STATUS

POWER

VPN

ACT

LNK

WAN LAN DMZ

NetVanta2300

About this guide...

Before you begin...



 

 Tools Required

• Category 5 - UTP cable for connecting the system to the existing network

• A PC with an internet browser (IE 5.0 or greater) for configuring the unit

Unpacking and Inspecting the System

Each NetVanta 2000 series unit is shipped in its own cardboard shipping carton. Open each carton carefully and

avoid deep penetration into the carton with sharp objects.

Network Diagram

STEPS 2-2f — Provide the stateful inspection firewall configuration.

STEPS 2g-3 — Configures a VPN connection between the NetVanta 2100 at the Corporate office

(for the the above network diagram).

PWR STAT TD

VPN

RD TD RD TD RD

NetVanta 2100

WAN LAN

PWR STAT TD

VPN

RD TD RD

NetVanta 2100

WAN LAN

STATUS

POWER

VPN

ACT

LNK

WAN LAN DMZ

NetVanta 2300

Power

Supply

Unit

User

Manual

Crossover

Ethernet

Cable

Power

Cable

Configuring the System

The NetVanta 2000 series products can be accessed and managed via the LAN interface using an ethernet

crossover cable (provided with the NetVanta 2100). Alternately, the NetVanta 2000 series may be accessed

using a hub and two ethernet cables (one for the PC and one for the NetVanta). Using a PC with an installed

browser (Internet Explorer 5.0 for optimal viewing), the NetVanta can be configured using the web GUI.

2Connecting to the NetVanta

1. Connect the NetVanta 2000 series LAN interface to the PC using the appropriate ethernet cable.

2. Supply power to the PC and the NetVanta unit and begin the operating system boot up process.

During the boot up process, the PC will obtain an IP address from the NetVanta 2000 series DHCP

server. Alternately, complete the process for releasing and renewing captured IP addresses to

obtain a new IP address from the NetVanta 2000 series DHCP server. Please refer to your

specific PC operating system documentation for details on that process.

3. Open your installed browser and in the URL field enter 10.10.10.1. The NetVanta 2000 series login

screen will appear.

4. Enter your username and password and click the login button. When connecting to the NetVanta

2000 series for the first time, the username is admin and there is no set password.

5. After logging in to the NetVanta 2000 series, the welcome screen will appear.

ADTRAN strongly recommends immediately changing the admin password for security

purposes. Refer to DLP-002 in the NetVanta 2000 series System Manual (PN 61200361L1-

1) for details.

POWER

WAN LAN COM 1

Ethernet Crossover Cable

Netvanta 2000 Series

POWER

WAN LAN COM 1

POWER

UPLINK 1 2 3 4

Ethernet Cable Ethernet Cable

Ethernet Hub

Netvanta 2000 Series

Direct Connection to PC

Connection through Hub

Configuring the LAN and WAN IP Parameters

The NetVanta 2000 series units come factory programmed with a LAN IP address ot 10.10.10.1 (24-bit subnet

mask) and no pre-programmed WAN IP address. The procedures outlined in this step include changing both the

LAN and WAN IP parameters.

The NetVanta 2000 series supports three types of WAN IP address: Dynamic, Static, and PPPoE (PPP over

Ethernet). The IP parameters for your WAN interface must be supplied by your Internet Service Provider (ISP). If

your ISP is performing DHCP for IP address assignment, configure the NetVanta 2000 series unit for Dynamic

addressing. Use PPP over Ethernet when your ISP has supplied you with the configuration parameters for PPPoE

(including a username and password).

Changing the LAN IP parameters through the LAN interface will result in a loss of management

connectivity. Follow the procedure in Step 2c to change the IP address of the managing PC to

match the new NetVanta LAN IP parameters.

1. Select Config

2. Select Network Interface

3. Enter the Assigned LAN IP address and associated subnet mask

4. Select the Static radio button for static addressing

Your WAN IP address scheme will be supplied by your provider. Static addressing used above

is an example only.

5. Enter the assigned WAN IP address and associated subnet mask

The WAN IP parameters are set by the service provider. Contact your ISP before configuring

the unit.

6. Click Submit to register the changes

Changing the IP address to your PC

Alternately, complete the process for releasing and renewing captured IP addresses to obtain a new IP

address from the NetVanta 2000 series DHCP server. The following screen applies to Microsoft Windows 95

to 2000. Please refer to your specific operating system documentation for details on that process.

1. Click Start on the Windows task bar

2. Choose Run, then type WINIPCFG in the text field

3. Click Release to reset all IP parameters

4. Click Renew to obtain new IP parameters

3c Configuring the DHCP Server IP Parameters - Optional

The NetVanta 2000 series will automatically populate the DHCP IP address range 1 with ten addresses based on

your assigned LAN network address.

1. Select CONFIG

2. Select DHCP Server

3. Enter an IP address range that is on the same subnet as the assigned LAN IP address of the unit

4. Enter the assigned LAN IP address of the unit

5Click Submit to register the changes

Adding a Default Route

Skip this step when configuring the NetVanta for dynamic addressing on the WAN interface.

1. Select CONFIG

2. Select Routes

3. Select AddRoute

The NetVanta is now configured for use as a Stateful inspection firewall. To configure VPN, please

proceed to Step 2f. If VPN is not desired, proceed to Step 3.

1. Select WAN to associate this default route with the WAN interface

2. Select Yes to configure this as the default

3. Enter all zeros

4. Enter the next hop IP address

This is supplied by your provider

5Click Add Route to submit this route to the route table

Saving the Settings

Defining a VPN Policy

IKE Policy Configuration







1. Select ADMIN

2. Select Save Settings

3. Select Yes to Confirm

1. Select POLICIES

2. Select VPN

3. Select IKE

4. Click the Add button

IKE Policy Configuration (continued)







1. Enter an alphanumeric string (spaces are not valid characters) used to identify this policy

2. Select BOTH DIRECTIONS to allow IKE to be initiated by either the local or remote NetVanta

3. Select MAINMODE exchange type

4. Use the Fully Qualified Domain Name (FQDN) for the local NetVanta unit and enter the identification data

5Use the FQDN for the remote users and enter the identification data

6Enter the local NetVanta unit's assigned WAN IP address

7Enter the remote NetVanta unit's assigned WAN IP address

8Select 3DES to invoke Triple DES encryption

9Select SHA to use the Secure Hash authentication Algorithm No. 1

10 Select Pre-SharedKey and enter a 12 character alphanumeric string (spaces are not a valid character)

This key MUST be the same for both the local and remote units.

11 1800 is the ADTRAN suggested value

When determining the appropriate value for your application, typical usage contains a 3:1 ratio

between the IKE and IPSec key lifetime

values. This ratio provides for key negotiation overhead.

12 Select Group 2 to invoke Diffie-Hellman Group 2

13 Click SUBMIT to register the changes

1. Select POLICIES

2. Select VPN

3. Click the Auto button

IPSec Policy Configuration







1. Enter an alphanumeric string (spaces are not valid characters) to identify this policy

2. Select ENABLE to configure this as an active policy

3. Select OTHER and enter the local NetVanta unit's assigned LAN IP address and associated subnet mask

here

4. Select OTHER and enter the remote NetVanta unit's assigned LAN IP address and associated subnet

mask here

5Select ANY to apply this policy to all data ports

6Select ALL to apply this policy to all data protocols

7Enter the remote NetVanta unit's assigned WAN IP address

If the remote NetVanta unit is configured for dynamic addressing on the WAN interface, enter

0.0.0.0 here.

8Select Group2

9Select ESP WITH AUTH

10 Select SHA1 to invoke Secure Hash Algorithm No. 1

11 Select 3DES to use Triple-DES encryption algorithm

12 600 is the ADTRAN suggested value

When determining the appropriate value for your application, typical usage contains a 3:1 ratio

between the IKE and IPSec key lifetime values. This ratio provides minimal key negotiation

overhead.

13 Select LAST TRANSFORM

14 Click the Add button to register this policy

Defining LAN Access Policies

To LAN Access Policy Configuration (Inbound Traffic)







1. Select POLICIES

2. Select Access Policies: To LAN (Incoming traffic)

3. Select Beginning to place the new access policy at the beginning of the table

4Click Submit to begin the policy configuration

Altri manuali per NetVanta 2000 Series

Indice

Altri manuali ADTRAN Hardware di rete

ADTRAN

ADTRAN Bluesocket 1700900F1 Manuale utente

ADTRAN

ADTRAN U-BR1TE Guida alla manutenzione e all'assistenza

ADTRAN

ADTRAN 3192 Manuale utente

ADTRAN

ADTRAN NIU3 Manuale di istruzioni

ADTRAN

ADTRAN DDS T200 Manuale di istruzioni

ADTRAN

ADTRAN NetVanta 2000 Series Guida utente

ADTRAN

ADTRAN DSU IV ESP Manuale utente

ADTRAN

ADTRAN TSU LT Manuale utente

ADTRAN

ADTRAN D4 TRI-C DP Manuale utente

ADTRAN

ADTRAN NetVanta 834 Manuale del proprietario

ADTRAN

ADTRAN Total Access 374 Manuale del prodotto

ADTRAN

ADTRAN 1442704PG1 Manuale utente

ADTRAN

ADTRAN BR1/10 PAU Manuale di istruzioni

ADTRAN

ADTRAN SDX 611 GPON SFU ONT Manuale utente

ADTRAN

ADTRAN EXPRESS 6503 Manuale utente

ADTRAN

ADTRAN SFP Manuale utente

ADTRAN

ADTRAN Total Access 362R Manuale utente

ADTRAN

ADTRAN TSU 100 Manuale utente

ADTRAN

ADTRAN Total Access DSLAM Octal SHDSL Manuale utente

ADTRAN

ADTRAN TSU ACE Manuale utente

ADTRAN

ADTRAN Express 3000 Manuale utente

ADTRAN

ADTRAN SHDSL NxNTU Manuale di istruzioni

ADTRAN

ADTRAN Total Access 5006 Manuale utente

ADTRAN

ADTRAN 1200630L1 Manuale utente

Manuali Hardware di rete popolari di altre marche

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuale utente

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuale utente

Yudor

Yudor YDS-16 Manuale utente

D-Link

D-Link ShareCenter DNS-320L Manuale utente

Samsung

Samsung ES1642dc Istruzioni per l’uso

Honeywell Home

Honeywell Home LTEM-PV Istruzioni per il montaggio

evertz

evertz 7700 Series Manuale utente

D-Link

D-Link ShareCenter DNS-343 Manuale utente

Asante

Asante AsanteBridge 1012 Manuale utente

FireBrick

FireBrick FB2700 Manuale utente

Audiovox Electronics

Audiovox Electronics ARWH2T Manuale utente

ADC

ADC DSX-1 Manuale

NetComm

NetComm NF2 Manuale utente

Alcatel-Lucent

Alcatel-Lucent 5620 Manuale utente

Dell EMC

Dell EMC XC6420 Series Manuale utente

Lanner

Lanner NCA-1020A Manuale utente

Allied Telesis

Allied Telesis AT-TN121-A Manuale utente

Arista

Arista CCA-ETM-Q12 Manuale utente