Nortel Networks 2212 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Nortel Networks 2212, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Nortel Networks 2212 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Nortel Networks 2212. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Nortel Networks 2212 should contain:
- informations concerning technical data of Nortel Networks 2212
- name of the manufacturer and a year of construction of the Nortel Networks 2212 item
- rules of operation, control and maintenance of the Nortel Networks 2212 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Nortel Networks 2212 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Nortel Networks 2212, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Nortel Networks service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Nortel Networks 2212.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Nortel Networks 2212 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    Nortel Communi cation Server 1000 Nortel Networks Communication Server 1000 Release 4.5 WLAN Handset 2212 Installation and Conf iguration for VPN Document Number: 553-3001-229 Document Release: Standard 1.00 Date: November 2005 Y ear Publish FCC TM Copyright © Nor tel Networks Limited 2005 All Rights Reserved Produced in Canada Information is subj[...]

  • Page 2

    [...]

  • Page 3

    Page 3 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 4 Revision history November 2005 Standard 1.00. This document is a new NTP issued to support Communication Server 1000 Release 4.5.[...]

  • Page 4

    Page 4 of 62 553-3001-229 Standard 1.00 November 2005[...]

  • Page 5

    Page 5 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 6 Contents List of procedures . . . . . . . . . . . . . . . . . . . . . . . . . . 7 How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 About this document . . . . . . . . . . . . . . . . . . . . . . . 11 Subject . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 6

    Page 6 of 62 Contents 553-3001-229 Standard 1.00 November 2005 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 The DHCP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Checking connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 7

    Page 7 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 8 List of procedures Procedure 1 Configuring the VPN router . . . . . . . . . . . . . . . . . . . . . . 19 Procedure 2 Installing licence keys . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Procedure 3 Disabling the DHCP server . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 8

    Page 8 of 62 List of procedures 553-3001-229 Standard 1.00 November 2005 Procedure 11 Configuring the second interface . . . . . . . . . . . . . . . . . 4 8 Procedure 12 Configuring the firewall . . . . . . . . . . . . . . . . . . . . . . . . . 52 Procedure 13 Configuring the WLAN Handset 2212 using the cradle . . . . . . . . . . . . . . . . . . . [...]

  • Page 9

    Page 9 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 10 How to get help This section explains how to get help for Nortel products and services. Getting Help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technical Support Web site: www.nortel.com/ support This site provides qu[...]

  • Page 10

    Page 10 of 62 How to get help 553-3001-229 Standard 1.00 November 2005 Outside North America, go to the followi ng Web site to obtain the phone number for your region: www.nortel.com/ callus Getting Help from a specialis t by using an E xpress Routing Code To access some Nortel T echnical Solutions Centers, you can use an Express Routing Code (ERC)[...]

  • Page 11

    Page 11 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 14 About this document This document is a global document. Co ntact your system supplier or your Nortel representative to verify that th e hardware and software described are supported in your area. Subject This document describes the installation and configuration of a WLAN H[...]

  • Page 12

    Page 12 of 62 About th is document 553-3001-229 Standard 1.00 November 2005 • Communication Server 1000M Multi Group (CS 1000M MG) • Communication Server 1000E (CS 1000E) • Meridian 1 PBX 11C Chassis • Meridian 1 PBX 11C Cabinet • Meridian 1 PBX 51C • Meridian 1 PBX 61C •M e r i d i a n 1 P B X 8 1 • Meridian 1 PBX 81C Note: When up[...]

  • Page 13

    About this document Page 13 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN • Communication Server 1 000M and Meridian 1: Large System Upgrade Procedures (553-3021-258) • Communication Server 1000S: Upg rade Procedures (553-3031-258 ) • Communication Server 1 000E: Upgrade Procedures (553-3041-258) Intended audience This docu[...]

  • Page 14

    Page 14 of 62 About th is document 553-3001-229 Standard 1.00 November 2005 • Meridian 1 PBX 61C •M e r i d i a n 1 P B X 8 1 • Meridian 1 PBX 81C Related information This section lists information so urces that relate to this document . Online To access Nortel documentation online, click the Technical Documentation link under Support & T[...]

  • Page 15

    Page 15 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 18 Overview Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Code and key code requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 16

    Page 16 of 62 Overview 553-3001-229 Standard 1.00 November 2005 Code and key code requirements Before configuring the WLAN Handset 2212, yo u must ensure the various components are using the proper versions of software. Table 2 lists the components and software versions: Scope of this document Assumptions The following assumptions are made in this [...]

  • Page 17

    Overview Page 17 of 62 WLAN Handset 2212 Installation and Configura tion for VPN The configuration in this document This document describes the configur ation of the supported architecture shown in Figure 1 . Figure 1 Thin AP – L2 Away from VPN Router[...]

  • Page 18

    Page 18 of 62 Overview 553-3001-229 Standard 1.00 November 2005 IMPORT ANT! The figures in this document are examples of the types and f ormat of the inf or mation required for a specific st ep. Substitute information for y our site accor dingly .[...]

  • Page 19

    Page 19 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 28 Getting started Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Configuring the Co ntivity VPN router . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 20

    Page 20 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 5 Click on the + beside Ports . The Ports list expands. 6 Right click Communications Ports (COM 1) and select Properties . The Communications Ports (COM 1) Properties window ap pears. 7 Select the Port Settings tab. 8 Ensure the settings are configured as shown in Figure 2. Figu[...]

  • Page 21

    Getting started Page 21 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 3 Main Menu 12 Enter 1 . The Interface Menu window appe ars, as shown in Figure 4 on page 22[...]

  • Page 22

    Page 22 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 Figure 4 Interface menu 13 Enter 0 . The Private - Trusted Interface window ap pears, as shown in Figure 5 Figure 5 Private - Trusted Interface 14 Enter the following: a. Management IP Addr ess[...]

  • Page 23

    Getting started Page 23 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN b. Interface IP Address c. Subnet Mask 15 Enter R to go back to the Main Menu . 16 Enter 3 . The Default Private Route Menu ap pears, as shown in Figure 6 Figure 6 Default Privat e Route Menu 17 Enter A . 18 Enter a static route to point all the traffic to the [...]

  • Page 24

    Page 24 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 22 Check the connectivity. a. Log back into your system. b. Open a command line window. c. Ping the gateway. If you are able to ping the gateway, th e VPN router is co nfigured properly. 23 Open Microsoft Internet Explorer. 24 Enter the Manageme nt IP address of the VPN router i[...]

  • Page 25

    Getting started Page 25 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 7 IP Services Gatewa y home page 26 Enter your login and password. You can now carry out any required admi nistrative duties. End of Procedure[...]

  • Page 26

    Page 26 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 Installing th e Licence Keys Use Procedure 2 to install licence keys. Procedure 2 Installing licence keys 1 In the Contivity Secure IP Serv ices Gateway navigator, select ADMIN > Licence Keys . 2 The Key Installation window appears, as shown in Figure 8. Figure 8 Key Instal l[...]

  • Page 27

    Getting started Page 27 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN 4 Click OK . End of Procedure[...]

  • Page 28

    Page 28 of 62 Getting started 553-3001-229 Standard 1.00 November 2005[...]

  • Page 29

    Page 29 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 32 DHCP options Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 The DHCP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 30

    Page 30 of 62 DHCP options 553-3001-229 Standard 1.00 November 2005 Figure 9 DHCP Server options 2 Clear the DHCP Enabled Server check box. 3 Click OK . End of Procedure Checking connectivity Test the connectivity for possible routing errors. Open the Console port and ping the DHCP Server, WLAN Applicat ion Gateway 2246 and the PBX.[...]

  • Page 31

    DHCP options Page 31 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN DHCP relay Use Procedure 4 to enable the DHCP Relay. Procedure 4 Enabling the DHCP relay 1 In the Contivity Secure IP Serv ices Gateway navigator, select SERVE RS > DHCP Relay . The DHCP Relay Options window appears, as shown in Figure 10. Figure 10 DHCP Relay [...]

  • Page 32

    Page 32 of 62 DHCP options 553-3001-229 Standard 1.00 November 2005[...]

  • Page 33

    Page 33 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 36 IP address pool configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 IP address pools . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Page 34

    Page 34 of 62 IP address pool configurati on 553-3001-229 Standard 1.00 November 2005 Figure 11 Add an IP address pool 2 Click Add . The Address Pool Information window appears, as shown in Figure 12. Figure 12 Address pool deta ils 3 Enter a Starting IP Address. 4 Enter an Ending IP Add ress.[...]

  • Page 35

    IP address pool configuration Page 35 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 5 Enter a Subnet Mask . 6 Select New . 7 Enter a name for the new pool in the text box. 8 Click Apply to save the details. 9 Click OK . The User IPaddr windo w appears, as shown in Figure 13. Figure 13 Address pool Proxy ARP and tunnel-to-tunnel t[...]

  • Page 36

    Page 36 of 62 IP address pool configurati on 553-3001-229 Standard 1.00 November 2005 Figure 14 Forwarding options 2 In the Proxy ARP section , select the route type you want to enabl e. 3 Select Allow End User to End User . 4 Click OK . End of Procedure[...]

  • Page 37

    Page 37 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 44 IPsec options and groups Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 IPsec global variables . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 38

    Page 38 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 15 IPsec global variables[...]

  • Page 39

    IPsec options and grou ps Page 39 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 2 Select all the options in the Authentication , Encryption, and IKE Encryption and Diffie-Hel lmann Group sections. 3 Click OK . End of Procedure WLAN Handset 2212 group definition Use Procedure 8 to create a WLAN Handset 2212 group. Procedure 8 Defin[...]

  • Page 40

    Page 40 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 17 Group detail s 4 Click Apply . 5 Click OK . End of Procedure WLAN Handset 2212 gr oup IPsec variables Use Procedure 9 to set IPsec variables for a WLAN Handset 2212 group. Procedure 9 Setting IPsec variables f or a WLAN Handset 2212 group 1 In the Contivity Se[...]

  • Page 41

    IPsec options and grou ps Page 41 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 18 Add groups 2 Click Edit next to the group for which you want to set the variables. The IPsec Variables window app ears. The Connectivity section is shown in Figu re 19 on page 42 ; the IPsec section is shown in Figure 20 on page 43 .[...]

  • Page 42

    Page 42 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 19 IPsec variables - Connectiv ity section 3 Configure the Connectivity variables. a. Click Configure in the Connectivity section. b. If you intend to use the same unit, set Number of Logins to 1. c. Enter an ID for the Address Pool Name .[...]

  • Page 43

    IPsec options and grou ps Page 43 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 20 IPsec variables - IPsec sec tion[...]

  • Page 44

    Page 44 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 4 Configure the IPsec variables. a. Click Configure in the IPsec section. b. Enable the followi ng items (indicated by ar rows in Figure 20 on page 43 ): • User name and Password • ESP - Triple DES wi th SHA1 Integrity • ESP - Triple DES with MD5 Integrity • ESP[...]

  • Page 45

    Page 45 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 56 Users, interface and firewall configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 User accounts . . . . . . . . . . . . . . . . . . . .[...]

  • Page 46

    Page 46 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 21 Adding user s 2 Click Add User, as indicated by the arrow. The Users Details window appears, as shown in Fi gure 22 on page 47[...]

  • Page 47

    Users, interface and firewall configuration Page 47 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 22 User details 3 In the General section, enter a First and Last name. 4 Select the Group to which the user will belong. 5 In the User Accounts section, enter a User ID and Password . 6 Re-enter the passw ord. 7 Click OK . End [...]

  • Page 48

    Page 48 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Second interface configuration Use Procedure 11 to config ure the second interface. Proc edure 11 Configuring the second interface 1 In the Contivity Secure IP Se rv ices Gateway navigator, select SYSTEM > Users . The Second Interface window appear[...]

  • Page 49

    Users, interface and firewall configuration Page 49 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 24 Second interface details 3 In the Configuratio n section, select Private for Interface Type . 4 In the 802.1Q section, select Disabled for State . 5 Reboot the computer for the settings to take effect. Note: The need to rebo[...]

  • Page 50

    Page 50 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 25 Cancel acquisition 7 Click Cancel acquisition . The Second Interface page reloads as shown in Figure 26 on page 51 .[...]

  • Page 51

    Users, interface and firewall configuration Page 51 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 26 Select protocol 8 Select IP in the Select Protocol list. 9 Click Apply . End of Procedure[...]

  • Page 52

    Page 52 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Firewall configuration Use Procedure 12 configure the firewall. Proc edure 12 Configuring the fire wall 1 In the Cont ivity Secure I P Serv ices Gateway navigator, select SERVICES > Firewall/N AT . The Firewall Options window appears, as shown in F[...]

  • Page 53

    Users, interface and firewall configuration Page 53 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 7 Click OK . Note: Do not lea ve this step for later a s mobile clients will be unable to get an IP address via DHCP. 8 After the wireless gateway has rebooted, click Manage Policies (as indicated by the arrow). 9 Enter the login and [...]

  • Page 54

    Page 54 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 29 New policy 11 Enter a name for the new firewall policy. 12 Click OK . The new policy is created and the Firewal l Policy-Edit window appears, as shown in “Edit firewall policy” on page 54 . Figure 30 Edit firewall policy 13 Select the Ov[...]

  • Page 55

    Users, interface and firewall configuration Page 55 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 14 Right-click in the tab and select Add New Rule . A set of default rules is created on the tab as shown in Figure 31. Figure 31 Override Rules 15 Select the Default Rules tab. 16 Right-click in the tab and select Add N ew Rule . A s[...]

  • Page 56

    Page 56 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 21 Click OK . End of Procedure[...]

  • Page 57

    Page 57 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 62 Handset configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Configuring the handset . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 58

    Page 58 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 Proc edure 13 Configuring the WLAN Hand set 2212 using the cradle 1 Before you begin, do the following: a. Remove the battery before plac ing the handset in th e cradle b. Connect the serial cable to the COM port. c. Load the latest software (0.60 or later) on the telephon[...]

  • Page 59

    Handset configuration Page 59 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 34 Config Cradle with VPN Sett ings 6 Click Save . End of Procedure Handset screen method Use Procedure 14 to configure the WLAN Handset 2212 using the screen method. Proc edure 14 Configuring the WLAN Handset 2212 using th e screen 1 Turn on the h[...]

  • Page 60

    Page 60 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 Figure 35 Configuration menu 3 Set the Licence Option. a. Select Phone Config > Licen se Option . b. Enter 010 using the keypad on the handset. c. Select Save . 4 Set the Terminal Type. a. Select Phone Config > Licen se Option . b. Select i2004 . c. Select Save . 5 S[...]

  • Page 61

    Handset configuration Page 61 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN b. Set Mode to Aggressive . c. Select OK . 8 Set your password. a. Select Network Config > Security > Static Entry > VPN > VPN Client IP > IKE Mode Config > Phase 1 - ISAKMP > Preshared Key > Alphanumeric . b. Enter your password. [...]

  • Page 62

    Page 62 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 b. Select Init Contact . c. Click OK . d. Select Nortel fe atures . e. Click OK . 13 Set the Phase 2 authen tication parameters. a. Select Network Config > Security > Static Entry > VPN > VPN Client IP > IKE Mode Config > Phase 2 - ESP . b. Select Auth. H[...]

  • Page 63

    [...]

  • Page 64

    F amily Produc t Manual Contac ts Copyright FCC not ice T rademark s Document number Pr oduct release Document rel ease Date Pub lish Nor tel Communication Ser ver 1000 WLAN Handset 2212 Installation and Conf iguration f or VPN Copyright © Nor tel Networks Limited 2005 All Rights Reserved Information is subject to change without notice. Nor tel Ne[...]