Enterasys-networks XSR-3150 User Manual

X-Pedition™ Security RouterXSR-3150 Getting Started GuideVersion 3.0P/N 9033865-068.5x11-inch cover with bleed on 4 sides

viii Enterasys Networks, Inc. Firmware License AgreementBEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT,CAREFULLY READ THIS LICENSE AGREEMEN

Cable, CompactFlash and Accessory SpecificationsA-14 Grounding Shunt for E1 NIM CardsIf you connect a balun to a 75-ohm line, you will also need to a

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-15T3/E3 NIM CardThe T3/E3 full and sub-rate NIM, as shown in Figure A-17,

Cable, CompactFlash and Accessory SpecificationsA-16 1/2-Port BRI-S/T ISDB NIM Card PortsThe XSR provides a serial NIM card for 1 or 2 WAN interfaces

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-17Installing Shunt/Terminal StripTo install the shunt or terminal strip,

Cable, CompactFlash and Accessory SpecificationsA-18 1/2-Port BRI-U NIM Card PortsThe XSR provides a serial NIM card for 1 or 2 WAN interfaces over a

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-191-Port ADSL NIM Card PortThe XSR’s Asymmetric Digital Subscriber Line (

Cable, CompactFlash and Accessory SpecificationsA-20 T1/E1 Drop & Insert (D&I) NIMThe XSR’s 2-port T1/E1 D&I NIM card, as shown in Figure

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-21CompactFlash Memory CardThe optional plug-in CompactFlash (CF) memory c

Cable, CompactFlash and Accessory SpecificationsA-22 VPN ON VPN tunnel is upOFF No VPN tunnel connectedCOM(munication) Blinking Port is transmitting

Index-1IndexBBalundescription A-13Balun adapter A-3BRI S/T cardpart numbers A-3BRI S/Tpin assignments A-16BRI U cardpart numbers A-3BRI-U pin assignme

ixIftheProgramisexportedfromtheUnitedStatespursuanttotheLicenseExceptionTSRundertheU.S.ExportAdministrationRegulations,inadditio

Index-2 features 1-1GigabitEthernet port pinouts A-5hardware features 1-2hardware specifications A-1how to attach the Ethernet serial cable 2-10how t

x11. ASSIGNMENT. Youmaynotassign,transferorsublicensethisAgreementoranyofYourrightsorobligationsunderthisAgreement,exceptthatYou

xiContentsAbout This GuideContents of the Guide ...

xii PRI Configuration ...

xiiibU ...

xiv

xvAbout This GuideThisguideprovidesageneraloverviewoftheXSR‐3150hardwareandsoftwarefeaturesanddescribeshowtoquicklyinstallandconfi

xviElectrical Hazard: Warns against an action that could result in personal injury or death due to an electrical hazard.Riesgo Electrico: Advierte con

xviiGetting HelpForadditionalsupportrelatedtotheXSR,contactEnterasysNetworksusingoneofthefollowingmethods:BeforecontactingEnterasysN

xviii

XSR Getting Started Guide 1-11OverviewThis chapter introduces the key features of the XSR-3150 and briefly describes hardware installation.System Desc

System Description1-2 OverviewFigure 1-1 Typical XSR-3150 TopologyHardware FeaturesThe semi-modular XSR, shown in Figure 1-2, comes equipped with the

System DescriptionXSR Getting Started Guide 1-3Figure 1-2 XSR-3150• Two Network Interface Module (NIM) card slots for these NIMs:– 1, 2, or 4 full, f

System Description1-4 Overview• 14 diagnostic LEDs to display port and system status as well as indicate a Flash upgrade in progress.• Five system fan

System DescriptionXSR Getting Started Guide 1-5• Simple Network Time Protocol (SNTP) server•OS fallbackIP Routing• Static and multiple routes to the s

System Description1-6 OverviewSecurity• Stateful inspection firewall engine• FTP, H.323, and RPC (SUN and Microsoft) ALG support• Application commands

System DescriptionXSR Getting Started Guide 1-7• Periodic Keep-Alive messages to learn of connection problems• Multi-protocol interconnect over Frame

System Description1-8 Overview• Bandwidth optimization (BoD) & Dial on Demand (DoD)• Bandwidth Allocation Protocol (BAP)• Security: PAP/CHAP• Call

System DescriptionXSR Getting Started Guide 1-9Certificates (embedded/smart cards) – Microsoft only•Encryption• Advanced Encryption Standard (AES), T

iNoticeEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho

System Description1-10 OverviewAsynchronous Digital Subscriber Line (ADSL)• POTS and ISDN circuit support• ATM Frame UNI (FUNI) data framing format• O

Installation OverviewXSR Getting Started Guide 1-11• Switched PPP Multilink connections• Backup using ISDN & MLPPP connections• Dialer interface s

Installation Overview1-12 Overview

XSR Getting Started Guide 2-12Hardware InstallationIntroductionThis chapter provides a checklist to verify your shipment, suggestions for the installa

Installing NIM Cards and Rack Mounting2-2 Hardware Installation• Each XSR AC power supply requires a three-pronged power receptacle capable of deliver

Installing NIM Cards and Rack MountingXSR Getting Started Guide 2-34. Remove the NIM slot cover, as shown in Figure 2-2, by grasping the handle and pr

Installing NIM Cards and Rack Mounting2-4 Hardware Installation7. Attach the rack brackets to the chassis with the screws supplied, as shown in Figure

Installing a CompactFlash Memory CardXSR Getting Started Guide 2-5Installing a CompactFlash Memory CardAn optional CompactFlash (CF) memory card provi

Installing a CompactFlash Memory Card2-6 Hardware InstallationGently insert the CF into the slot, taking care that the CF’s wider grooved edge fits in

Connecting CablesXSR Getting Started Guide 2-7Connecting CablesPerform any of the following steps to connect your cabling to optional WAN or LAN NIMs,

iiRegulatory Compliance InformationFederal Communications Commission (FCC) NoticeTheXSRcomplieswithTitle47,Part15,ClassAofFCCrules.Operat

Connecting Cables2-8 Hardware InstallationFigure 2-11 Connecting High Speed Serial ConnectorFigure 2-12 Attaching T3/E3 BNC ConnectorsNIM 1NIM 2SECU

Connecting CablesXSR Getting Started Guide 2-9Figure 2-13 Connecting ADSL ConnectorA CompactFlash card is provided with the XSR ADSL NIM. It is loade

Connecting Cables2-10 Hardware Installation3. Connect the Ethernet port(s) to your LAN connectors with a cable, as shown in Figure 2-15.Figure 2-15 A

Connecting CablesXSR Getting Started Guide 2-115. Attach either the Ethernet or Fiber Ethernet LAN NIM, as shown in Figure 2-17 andFigure 2-18, respec

Connecting Cables2-12 Hardware Installation6. Attach the dual power supply cords to the connectors at the rear of the XSR, as shown in Figure 2-19, an

XSR Getting Started Guide 3-13Software ConfigurationThis chapter describes how to initialize, quickly set up and verify your configuration for the XSR

Initializing XSR Software3-2 Software Configuration• ETH 10/100/1000 LEDs turn ON and OFF a few times during initialization as the XSR proceeds from

Opening a COM (Console) SessionXSR Getting Started Guide 3-3only the first error will be reported, along with a count of the sum of errors incurred. I

Optional: Configuring Remote Auto Install3-4 Software ConfigurationNote the use of a helper-address to specify a destination address for UDP broadcast

Optional: Configuring Remote Auto InstallXSR Getting Started Guide 3-5+ TFTP transfer succeeded in copying the hostname file to the Flash: startup-con

iiiIndustry Canada NoticesThisdigitalapparatusdoesnotexceedtheclassAlimitsforradionoiseemissionsfromdigitalapparatussetoutintheRa

Optional: Configuring Remote Auto Install3-6 Software Configuration+ Creates a VPDN session group and links it to a virtual template.accept-dialinprot

Configuring the XSR Name and User InformationXSR Getting Started Guide 3-7Phase 3 - ADSL - trying to connect on 0/35 with snap PPPoE+ PVC 0/35 is foun

Configuring the LAN Ports3-8 Software ConfigurationEnter the following command to configure the XSR as an SNTP client:XSR(config)#sntp-client server [

Configuring the WAN PortsXSR Getting Started Guide 3-9This command allows multiple logical WAN interfaces to be created on a single channelized T1/E1/

Configuring the WAN Ports3-10 Software Configuration4. Enter encapsulation ppp to select PPP encoding.5. Enter no shutdown to keep the BRI interface e

Configuring the WAN PortsXSR Getting Started Guide 3-11ADSL ConfigurationADSL can be configured using three different types of encapsulation: PPPoA, P

Firewall Sample Configuration3-12 Software ConfigurationThe commands below configure the ATM interface and sub-interface with a negotiated IP address,

Firewall Sample ConfigurationXSR Getting Started Guide 3-13Figure 3-1 XSR with Firewall TopologyIn this configuration, the firewall provides protecte

Setting Up RIP Routing3-14 Software ConfigurationXSR(config)#ip firewall filter allowICMP private dmz protocol-id 1XSR(config)#ip firewall filter allo

Configure OSPF RoutingXSR Getting Started Guide 3-1510. Enter ip rip receive version <1 | 2> to allow a RIP version of updated transmissions. Ac

ivProduct SafetyThisproductcomplieswiththefollowing:UL60950,CSAC22.2No.60950,73/23/EEC,EN60950,EN60825,IEC60950.UsetheXSRwiththe

Setting Up an SNMP Community String, Traps and V3 Values3-16 Software Configuration5. Enter media-type V35 to match the correct cabling interface. The

Configuring Message Logging and Severity LevelXSR Getting Started Guide 3-175. Optional . For SNMPv3, enter snmp-server group <name> v3 {auth |

Viewing Your Configuration3-18 Software ConfigurationViewing Your Configuration1. Enter show running-config to verify your current configuration.The X

Connecting Remotely via the WebXSR Getting Started Guide 3-19Click on Product Version to bring up the Product Version window for a host of hardware, b

LAN-PPP Services Sample Configuration3-20 Software ConfigurationLAN-PPP Services Sample ConfigurationThe sample configuration below, see Figure 3-4, c

LAN-PPP Services Sample ConfigurationXSR Getting Started Guide 3-21XSR(config-controller<T1-1/0>)#no shutdown+ Enables T1 controllerXSR(config)#

Frame Relay WAN Link with PPP Backup Sample Configuration3-22 Software ConfigurationFrame Relay WAN Link with PPP Backup Sample ConfigurationThe sampl

Frame Relay WAN Link with PPP Backup Sample ConfigurationXSR Getting Started Guide 3-23XSR(config-cmap<data_class>)#match access-group 133+ Assi

Frame Relay WAN Link with PPP Backup Sample Configuration3-24 Software ConfigurationXSR(config)#interface serial 1/0.2 multipoint+ Configures FR port:

Frame Relay WAN Link with PPP Backup Sample ConfigurationXSR Getting Started Guide 3-25Configure OSPF RoutingXSR(config)#router ospf 1+ Enables OSPF w

vѻѻક䇈ᯢк䰘ӊSupplement to Product Instructions ᳝↦᳝ᆇ⠽䋼៪ܗ㋴(Hazardous Substance) 䚼ӊৡ⿄(Parts) 䪙3E∲+J䬝&G݁Ӌ䫀&U໮⒈㘨㣃3%%໮⒈Ѡ㣃䝮3%'

Frame Relay WAN Link with PPP Backup Sample Configuration3-26 Software ConfigurationXSR(config-if<D1>)#encapsulation ppp+ Enables PPP encapsulat

VPN Site-to-Site Sample ConfigurationXSR Getting Started Guide 3-27VPN Site-to-Site Sample ConfigurationThe following VPN topology, shown in Figure 3-

VPN Site-to-Site Sample Configuration3-28 Software ConfigurationXSR(config)#access-list 101 permit udp ah any anyXSR(config)#access-list 101 deny ip a

VPN Site-to-Site Sample ConfigurationXSR Getting Started Guide 3-29XSR(config)#crypto map acme 91XSR(config-crypto-m)#set transform-set esp-3des-shaXS

VPN Sample Configuration with Network Extension Mode3-30 Software ConfigurationConfiguring Authentication (AAA)Configure an AAA user and DEFAULT AAA g

VPN Sample Configuration with Network Extension ModeXSR Getting Started Guide 3-31Generate the master key. Refer to the following sample key:XSR(confi

VPN Sample Configuration with Network Extension Mode3-32 Software ConfigurationCreate user(s), specify an IP from virtual subnet, and assign a passwor

XSR Rebooting CharacteristicsXSR Getting Started Guide 3-33Create the multi-point VPN virtual port required to terminate many clients:XSR(config)#inte

XSR Rebooting Characteristics3-34 Software ConfigurationTesting S/W Integrity << PASSED >>Loading Router S/W to address 0x80020000Verifyin

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-35Reload Command from the CLIYou can reboot the XSR firmware by issuing the command reload &l

viVCCI NoticeThisisaclassAproductbasedonthestandardoftheVoluntaryControlCouncilforInterferencebyInformationTechnologyEquipment(VC

Bootrom Monitor Mode Commands3-36 Software ConfigurationAll the commands in each group can be listed by entering the command group letter. The main me

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-37bootFirst size=28992 sum=0xc2e5 compressed_size=28992 entry=0x80020000bootrom size=842656 s

Bootrom Monitor Mode Commands3-38 Software ConfigurationdfThis command shows free disk space. Sample output is shown as follows:XSR-3150:dfFree space

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-39Set working directory to flash:Using default Bootrom password. The system is not secure!!!U

Bootrom Monitor Mode Commands3-40 Software ConfigurationremoveThis command removes a file using the syntax remove <source name> <destination

Bootrom Monitor Mode CommandsXSR Getting Started Guide 3-41...siThis command displays XSR 3000 Series inventory with this sample output:XSR-3150: s

Bootrom Monitor Mode Commands3-42 Software ConfigurationsvThis command shows the bootrom version with sample output below:XSR-3150: svX-Pedition Secur

A-1ASpecificationsSystem SpecificationsThis appendix details XSR data about hardware functionality including:• Processor, system memory, chassis, powe

Cable, CompactFlash and Accessory SpecificationsA-2 Cable, CompactFlash and Accessory SpecificationsRefer to the following table for specifications o

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-31000Base-SX Mini-GBIC with connector1000Base-LX Mini-GBIC with connector

viiAustralian TelecomWARNING:Donotinstallphonelineconnectionsduringanelectricalstorm.WARNING:Donotconnectphonelineuntiltheinterface

Cable, CompactFlash and Accessory SpecificationsA-4 COM (Console) PortThe XSR comes equipped with a COM serial port useful for initial configuration

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-5GigabitEthernet PortsThe XSR comes equipped with three GigabitEthernet (

Cable, CompactFlash and Accessory SpecificationsA-6 Copper/Fiber-optic Ethernet NIMsThe single-port Copper or Fiber-optic Ethernet NIMs, shown in Fig

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-72/4-Port Serial NIM Card PortThe High Speed Serial NIM card, as shown in

Cable, CompactFlash and Accessory SpecificationsA-8 Figure A-8 EIA-232/530 DTE Pin Assignments17181927213162RxD2+RxD2-TxD 2+123115104768121315169146

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-9Figure A-9 EIA-449 DTE Pin Assignments171819272126201231151047681213151

Cable, CompactFlash and Accessory SpecificationsA-10 Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments12311510476812131516914316214419513151

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-11Figure A-11 V.35 DTE Pin Assignments171927212613115104156161213914ERTP

Cable, CompactFlash and Accessory SpecificationsA-12 T1/E1/ISDN PRI NIM Card PortsThe T1/E1/ISDN PRI NIM, as shown in Figure A-12, comes equipped wit

Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-13Balun for E1 or PRI NIM CardsSome overseas electrical systems require t