ADTRAN NetVanta 2000 Series Manuel utilisateur

NetVanta 2000

Quick Start Guide 61200361L2-13B May 2002

Series

WAN:

SoHo CORP HQ

NetVanta 2300

NetVanta 2100

DSL/

Cable Modem

Static Addressing

10.200.1.140/16 LAN IP: 190.72.22.40/24

LAN IP: 10.10.20.7/24 WAN: Static Addressing

172.29.50.61/16

PWR STAT TD

VPN

RD TD RD TD RD

NetVanta2100

WAN LAN

PWR STAT TD

VPN

RD TD RD

NetVanta2100

WAN LAN STATUS

POWER

VPN

ACT

LNK

WAN LAN DMZ

NetVanta2300

About this guide...

Before you begin...



 

 Tools Required

• Category 5 - UTP cable for connecting the system to the existing network

• A PC with an internet browser (IE 5.0 or greater) for configuring the unit

Unpacking and Inspecting the System

Each NetVanta 2000 series unit is shipped in its own cardboard shipping carton. Open each carton carefully and

avoid deep penetration into the carton with sharp objects.

Network Diagram

STEPS 2-2f — Provide the stateful inspection firewall configuration.

STEPS 2g-3 — Configures a VPN connection between the NetVanta 2100 at the Corporate office

(for the the above network diagram).

PWR STAT TD

VPN

RD TD RD TD RD

NetVanta 2100

WAN LAN

PWR STAT TD

VPN

RD TD RD

NetVanta 2100

WAN LAN

STATUS

POWER

VPN

ACT

LNK

WAN LAN DMZ

NetVanta 2300

Power

Supply

Unit

User

Manual

Crossover

Ethernet

Cable

Power

Cable

Configuring the System

The NetVanta 2000 series products can be accessed and managed via the LAN interface using an ethernet

crossover cable (provided with the NetVanta 2100). Alternately, the NetVanta 2000 series may be accessed

using a hub and two ethernet cables (one for the PC and one for the NetVanta). Using a PC with an installed

browser (Internet Explorer 5.0 for optimal viewing), the NetVanta can be configured using the web GUI.

2Connecting to the NetVanta

1. Connect the NetVanta 2000 series LAN interface to the PC using the appropriate ethernet cable.

2. Supply power to the PC and the NetVanta unit and begin the operating system boot up process.

During the boot up process, the PC will obtain an IP address from the NetVanta 2000 series DHCP

server. Alternately, complete the process for releasing and renewing captured IP addresses to

obtain a new IP address from the NetVanta 2000 series DHCP server. Please refer to your

specific PC operating system documentation for details on that process.

3. Open your installed browser and in the URL field enter 10.10.10.1. The NetVanta 2000 series login

screen will appear.

4. Enter your username and password and click the login button. When connecting to the NetVanta

2000 series for the first time, the username is admin and there is no set password.

5. After logging in to the NetVanta 2000 series, the welcome screen will appear.

ADTRAN strongly recommends immediately changing the admin password for security

purposes. Refer to DLP-002 in the NetVanta 2000 series System Manual (PN 61200361L1-

1) for details.

POWER

WAN LAN COM 1

Ethernet Crossover Cable

Netvanta 2000 Series

POWER

WAN LAN COM 1

POWER

UPLINK 1 2 3 4

Ethernet Cable Ethernet Cable

Ethernet Hub

Netvanta 2000 Series

Direct Connection to PC

Connection through Hub

Configuring the LAN and WAN IP Parameters

The NetVanta 2000 series units come factory programmed with a LAN IP address ot 10.10.10.1 (24-bit subnet

mask) and no pre-programmed WAN IP address. The procedures outlined in this step include changing both the

LAN and WAN IP parameters.

The NetVanta 2000 series supports three types of WAN IP address: Dynamic, Static, and PPPoE (PPP over

Ethernet). The IP parameters for your WAN interface must be supplied by your Internet Service Provider (ISP). If

your ISP is performing DHCP for IP address assignment, configure the NetVanta 2000 series unit for Dynamic

addressing. Use PPP over Ethernet when your ISP has supplied you with the configuration parameters for PPPoE

(including a username and password).

Changing the LAN IP parameters through the LAN interface will result in a loss of management

connectivity. Follow the procedure in Step 2c to change the IP address of the managing PC to

match the new NetVanta LAN IP parameters.

1. Select Config

2. Select Network Interface

3. Enter the Assigned LAN IP address and associated subnet mask

4. Select the Static radio button for static addressing

Your WAN IP address scheme will be supplied by your provider. Static addressing used above

is an example only.

5. Enter the assigned WAN IP address and associated subnet mask

The WAN IP parameters are set by the service provider. Contact your ISP before configuring

the unit.

6. Click Submit to register the changes

Changing the IP address to your PC

Alternately, complete the process for releasing and renewing captured IP addresses to obtain a new IP

address from the NetVanta 2000 series DHCP server. The following screen applies to Microsoft Windows 95

to 2000. Please refer to your specific operating system documentation for details on that process.

1. Click Start on the Windows task bar

2. Choose Run, then type WINIPCFG in the text field

3. Click Release to reset all IP parameters

4. Click Renew to obtain new IP parameters

3c Configuring the DHCP Server IP Parameters - Optional

The NetVanta 2000 series will automatically populate the DHCP IP address range 1 with ten addresses based on

your assigned LAN network address.

1. Select CONFIG

2. Select DHCP Server

3. Enter an IP address range that is on the same subnet as the assigned LAN IP address of the unit

4. Enter the assigned LAN IP address of the unit

5Click Submit to register the changes

Adding a Default Route

Skip this step when configuring the NetVanta for dynamic addressing on the WAN interface.

1. Select CONFIG

2. Select Routes

3. Select AddRoute

The NetVanta is now configured for use as a Stateful inspection firewall. To configure VPN, please

proceed to Step 2f. If VPN is not desired, proceed to Step 3.

1. Select WAN to associate this default route with the WAN interface

2. Select Yes to configure this as the default

3. Enter all zeros

4. Enter the next hop IP address

This is supplied by your provider

5Click Add Route to submit this route to the route table

Saving the Settings

Defining a VPN Policy

IKE Policy Configuration







1. Select ADMIN

2. Select Save Settings

3. Select Yes to Confirm

1. Select POLICIES

2. Select VPN

3. Select IKE

4. Click the Add button

IKE Policy Configuration (continued)







1. Enter an alphanumeric string (spaces are not valid characters) used to identify this policy

2. Select BOTH DIRECTIONS to allow IKE to be initiated by either the local or remote NetVanta

3. Select MAINMODE exchange type

4. Use the Fully Qualified Domain Name (FQDN) for the local NetVanta unit and enter the identification data

5Use the FQDN for the remote users and enter the identification data

6Enter the local NetVanta unit's assigned WAN IP address

7Enter the remote NetVanta unit's assigned WAN IP address

8Select 3DES to invoke Triple DES encryption

9Select SHA to use the Secure Hash authentication Algorithm No. 1

10 Select Pre-SharedKey and enter a 12 character alphanumeric string (spaces are not a valid character)

This key MUST be the same for both the local and remote units.

11 1800 is the ADTRAN suggested value

When determining the appropriate value for your application, typical usage contains a 3:1 ratio

between the IKE and IPSec key lifetime

values. This ratio provides for key negotiation overhead.

12 Select Group 2 to invoke Diffie-Hellman Group 2

13 Click SUBMIT to register the changes

1. Select POLICIES

2. Select VPN

3. Click the Auto button

IPSec Policy Configuration







1. Enter an alphanumeric string (spaces are not valid characters) to identify this policy

2. Select ENABLE to configure this as an active policy

3. Select OTHER and enter the local NetVanta unit's assigned LAN IP address and associated subnet mask

here

4. Select OTHER and enter the remote NetVanta unit's assigned LAN IP address and associated subnet

mask here

5Select ANY to apply this policy to all data ports

6Select ALL to apply this policy to all data protocols

7Enter the remote NetVanta unit's assigned WAN IP address

If the remote NetVanta unit is configured for dynamic addressing on the WAN interface, enter

0.0.0.0 here.

8Select Group2

9Select ESP WITH AUTH

10 Select SHA1 to invoke Secure Hash Algorithm No. 1

11 Select 3DES to use Triple-DES encryption algorithm

12 600 is the ADTRAN suggested value

When determining the appropriate value for your application, typical usage contains a 3:1 ratio

between the IKE and IPSec key lifetime values. This ratio provides minimal key negotiation

overhead.

13 Select LAST TRANSFORM

14 Click the Add button to register this policy

Defining LAN Access Policies

To LAN Access Policy Configuration (Inbound Traffic)







1. Select POLICIES

2. Select Access Policies: To LAN (Incoming traffic)

3. Select Beginning to place the new access policy at the beginning of the table

4Click Submit to begin the policy configuration

Autres manuels pour NetVanta 2000 Series

Table des matières

Autres manuels ADTRAN Matériel réseau

ADTRAN

ADTRAN Express 3100 Manuel utilisateur

ADTRAN

ADTRAN 1442823F1 Manuel utilisateur

ADTRAN

ADTRAN ISU 512 Manuel utilisateur

ADTRAN

ADTRAN Total Access 832 Manuel utilisateur

ADTRAN

ADTRAN DSU III ARdc Manuel utilisateur

ADTRAN

ADTRAN Total Access 604 Guide de l'utilisateur

ADTRAN

ADTRAN Total Reach DDS-DP 5 Series Mode d’emploi

ADTRAN

ADTRAN NetVanta 1531 Series Manuel

ADTRAN

ADTRAN Total Access 372 Manuel du produit

ADTRAN

ADTRAN IQ 710 Guide de l'utilisateur

ADTRAN

ADTRAN Total Reach TRDDB Mode d’emploi

ADTRAN

ADTRAN HDSL4 Manuel utilisateur

ADTRAN

ADTRAN NetVanta 838 Manuel utilisateur

ADTRAN

ADTRAN Cable T1 ESF CSU ACE Manuel utilisateur

ADTRAN

ADTRAN NetVanta 4660 Manuel utilisateur

ADTRAN

ADTRAN 414 RG Manuel utilisateur

ADTRAN

ADTRAN OSU 300 Manuel utilisateur

ADTRAN

ADTRAN TRACER 5045 Guide de l'utilisateur

ADTRAN

ADTRAN Ethernet Over Bonded Copper MX3112 Manuel utilisateur

ADTRAN

ADTRAN D4 FT1 DP Manuel utilisateur

ADTRAN

ADTRAN Total Access 300 Series Manuel utilisateur

ADTRAN

ADTRAN E1 Manuel utilisateur

ADTRAN

ADTRAN Total Access Octal ADSL Manuel utilisateur

ADTRAN

ADTRAN NetVanta 1700801G1 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur