NetVanta 2000 Series Internet Security Appliances Hardware Installation Guide 61202361L2-34B February 2004 1202361L2 NetVanta 2100 Unit 1202362L1 NetVanta 2050 Unit, Firewall Only 1202362L2 NetVanta 2050 Unit 1202363L1 NetVanta 2054 Unit, Firewall Only 1202363L2 NetVanta 2054 Unit 1202366L2 NetVanta 2300 Unit 1202367L2 NetVanta 2400 Unit
Trademarks NetVanta 2000 Series Hardware Installation Guide Trademarks Any brand names and product names included in this manual are trademarks, registered trademarks, or trade names of their respective holders. To the Holder of this Manual The contents of this manual are current as of the date of publication. ADTRAN reserves the right to change the contents without prior notice.
NetVanta 2000 Series Hardware Installation Guide Conventions Conventions Notes provide additional useful information. Cautions signify information that could prevent service interruption. Warnings provide information that could prevent damage to the equipment or endangerment to human life. Safety Instructions When using your communications equipment, please follow these basic safety precautions to reduce the risk of fire, electrical shock, or personal injury: 1.
FCC-Required Information NetVanta 2000 Series Hardware Installation Guide FCC-Required Information Federal Communications Commission Radio Frequency Interference Statement for NetVanta 2050, NetVanta 2054, and NetVanta 2100 Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
NetVanta 2000 Series Hardware Installation Guide FCC-Required Information Canadian Emissions Requirements for NetVanta 2300 and NetVanta 2400 This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus as set out in the interference-causing equipment standard entitled “Digital Apparatus,” ICES-003 of the Department of Communications.
Warranty and Customer Service NetVanta 2000 Series Hardware Installation Guide Warranty and Customer Service ADTRAN will repair and return this product within the warranty period if it does not meet its published specifications or fails while in service. Warranty information can be found at: http://support.adtran.com (Click on Warranty and Repair Information, under Support.) Product Registration Registering your product helps ensure complete customer satisfaction.
NetVanta 2000 Series Hardware Installation Guide Product Support Information Post-Sale Support Your reseller should serve as the first point of contact for support. If additional support is needed, the ADTRAN Support web site provides a variety of support services such as a searchable knowledge base, updated firmware releases, latest product documentation, service request ticket generation and trouble-shooting tools. All of this, and more, is available at: http://support.adtran.
Product Support Information 8 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
Table of Contents Introduction ..................................................................... The NetVanta Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Protection Against Attacks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Encryption . . . . . . . . . . .
Table of Contents 10 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
List of Figures Figure 1. Figure 2. Figure 3. Figure 4. Figure 5. Figure 6. Figure 7. Figure 8. Figure 9. Figure 10. Figure 11. NetVanta 2050 Front Panel Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NetVanta 2054 Front Panel Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NetVanta 2100 Front Panel Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NetVanta 2300 Front Panel Layout . . . . . .
List of Figures 12 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
List of Tables Table 1. Table 2. Table A-1. Table A-2. The NetVanta Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 NetVanta 2000 Series LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 10/100BaseT Pinout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 DB-9 Connector Pinout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
List of Tables 14 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
NetVanta 2000 Series Hardware Installation Guide 1. Introduction INTRODUCTION This hardware installation guide describes the NetVanta 2000 Seriess, lists unit specifications, details basic functionality, and gives installation instructions. For more information on device configuration for a specific application, refer to the quick start documents provided on your ADTRAN OS Documentation CD. For details on the command line interface, refer to the AOS Command Reference Guide also included on your CD.
Introduction NetVanta 2000 Series Hardware Installation Guide Encryption The NetVanta 2000 Series encrypts data being sent out onto the network, using either the Data Encryption Standard (DES) or Triple Data Encryption Standard (3DES) encryption algorithms. Data integrity is ensured during transmission across the public infrastructure using Message Digest 5 (MD5) or Secure Hash Algorithm version 1 (SHA1).
NetVanta 2000 Series Hardware Installation Guide Introduction Features and Specifications The NetVanta 2000 Series provides granular control over network access that includes maximum security, data authenticity and privacy, and significant ease of use. The following list highlights the NetVanta 2000 Series’ major features.
Introduction NetVanta 2000 Series Hardware Installation Guide Administration • • • • Command Line Interface Web-based management - Provides a GUI for configuring the NetVanta 2000 Series Syslog logging in WELF format E-mail alerts (SMTP) - For when programmed thresholds are reached DHCP (Dynamic Host Configuration Protocol) • • Server (to manage IP addresses on local networks) – Supports multiple IP address ranges on local networks – User-defined lease duration – Real-time status of active leases Cl
NetVanta 2000 Series Hardware Installation Guide • • • • Introduction NetVanta unit with brackets attached ADTRAN OS Documentation CD Warranty Card AC power cable (ADTRAN P/N 3127009) 61202361L2-34B © 2004 ADTRAN, Inc.
Product Overview 2. NetVanta 2000 Series Hardware Installation Guide PRODUCT OVERVIEW Equipment Dimensions • • The NetVanta 2050, NetVanta 2054, and NetVanta 2100 measure 7.5” W x 5.375” D x 1.75” H. These units come equipped for tabletop and wallmount use. An optional rackmount shelf is available from ADTRAN (P/N 1200412L1). The NetVanta 2300 and NetVanta 2400 measure 17.25” W x 7.75” D x 1.75” H. These units come equipped for rackmount or wallmount use.
NetVanta 2000 Series Hardware Installation Guide Product Overview Figure 3. NetVanta 2100 Front Panel Layout The NetVanta 2300 (see Figure 4) and NetVanta 2400 (see Figure 5) front panels provide status LEDs for the public (PUB) and private (PRIV 1, PRIV 2, and PRIV 3) interfaces, as well as VPN tunnels and traffic. NetVanta 2300 Figure 4. NetVanta 2300 Front Panel Layout Figure 5. NetVanta 2400 Front Panel Layout Front Panel LEDs Table 2 describes the front panel LEDs. Table 2.
Product Overview NetVanta 2000 Series Hardware Installation Guide Table 2. NetVanta 2000 Series LEDs (Continued) For these LEDs... This activity... Indicates that... VPN STAT (2050/2054/2100) Red (slow flashing) Phase 1 IKE VPN negotiation has failed. Red (fast flashing) Phase 2 IKE VPN negotiation has failed. VPN STATUS (2300/2400) Amber (fast flashing) Phase 2 IKE VPN negotiation is in progress.
NetVanta 2000 Series Hardware Installation Guide Product Overview The NetVanta 2054 rear panel contains five Ethernet ports (a public connection and an integral four-port private Ethernet switch), a DB-9 serial connection, and a power connection (see Figure 7). ETH 0/2 ETH 0/3 ETH 0/4 ETH 0/5 Figure 7. NetVanta 2054 Rear Panel Layout The NetVanta 2300 and the Netvanta 2400 rear panels contain four Ethernet ports, a DB-9 serial connection, and a power connection (see Figure 8). Figure 8.
Product Overview NetVanta 2000 Series Hardware Installation Guide CONSOLE (Serial Interface) The NetVanta 2000 Series provides a DB-9 serial communication port (CONSOLE) for accessing the command line interface. Table A-2 in Appendix A. shows the pinout for the DB-9 connector. Power Connection NetVanta 2050, NetVanta 2054, and NetVanta 2100 NetVanta 2050, NetVanta 2054, and NetVanta 2100 include an AC adapter (which generates 12 VDC at 800 mA).
NetVanta 2000 Series Hardware Installation Guide 3. Unit Installation UNIT INSTALLATION The instructions and guidelines provided in this section cover hardware installation topics.
Unit Installation NetVanta 2000 Series Hardware Installation Guide Wallmounting NetVanta 2000 Series Internet Security Appliances NetVanta 2050, NetVanta 2054, and NetVanta 2100 Instructions for Wallmounting NetVanta 2050, NetVanta 2054, or NetVanta 2100 Step Action 1 Decide on a location for the NetVanta. Mount the unit at or below eye-level so that the LEDs are viewable. 2 Prepare the mounting surface by attaching a board (typically plywood, 3/ 4" to 1" thick) to a wall stud.
NetVanta 2000 Series Hardware Installation Guide Unit Installation NetVanta 2300 and NetVanta 2400 Instructions for Wallmounting NetVanta 2300 or NetVanta 2400 Step Action 1 Orient the brackets (mounting ears), one on each side, such that the portion of the bracket with the mounting holes is flush with the bottom of the chassis (see Figure 10 on page 28).
Unit Installation NetVanta 2000 Series Hardware Installation Guide Figure 10. Wallmounting the NetVanta 2300 or 2400 Rackmounting NetVanta 2000 Series Internet Security Appliances The NetVanta 2300 and NetVanta 2400 are 1U high, rack mountable units which can be installed into 19-inch equipment racks.
NetVanta 2000 Series Hardware Installation Guide Unit Installation Be careful not to upset the stability of the equipment mounting rack when installing this product. To avoid damaging unit, use only the screws included in shipment when attaching mounting ears to the chassis. Figure 11. Proper Mounting Bracket Orientation for Rackmounting Supplying Power to the Unit As shipped, the NetVanta 2000 Series is set to factory default conditions.
Unit Installation • • • NetVanta 2000 Series Hardware Installation Guide This unit shall be installed in accordance with Articles 300 and 400 of the NEC NFPA 70. Power to the Netvanta 2050/2054/2100 system must be from a grounded 120 VAC, 60 Hz source. Maximum recommended ambient operating temperature is 45 oC.
NetVanta 2000 Series Hardware Installation Guide 4. Installing Management Components INSTALLING MANAGEMENT COMPONENTS Configuring the NetVanta 2000 Series through the web interface requires a host computer with an Ethernet interface and a web browser. ADTRAN recommends using Internet Explorer 5.5 or greater for optimal viewing of configuration web pages. The NetVanta 2000 Series is configured with a default IP address of 10.10.10.1 and a subnet mask of 255.255.255.0 on the private interface.
Installing Management Components NetVanta 2000 Series Hardware Installation Guide Microsoft Windows 2000® or Windows XP® 1. In Windows 2000, follow the menu path START>SETTINGS>CONTROL PANEL. In Windows XP, the path may be START>CONTROL PANEL, depending on your local settings. 2. After the CONTROL PANEL opens, double-click the NETWORK AND DIALUP CONNECTIONS (NETWORK CONNECTIONS in Windows XP) icon to display the existing network connections. 3.
NetVanta 2000 Series Hardware Installation Guide Installing Management Components 6. Check the SPECIFY AN IP ADDRESS radio button. 7. Continue with one of the following options: Set the IP Address Yourself • • OR Enter the IP ADDRESS as 10.10.10.50 Enter the SUBNET MASK as 255.255.255.0. Use DHCP to Assign an IP Address • Enable the OBTAIN AN IP ADDRESS AUTOMATICALLY checkbox. 8. Click OK to close the Properties window. 9.
Installing Management Components 34 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
APPENDIX A. CONNECTOR PIN DEFINITIONS Table A-1. 10/100BaseT Pinout Pin Name Description 1 TX1 Transmit Positive 2 TX2 Transmit Negative 3 RX1 Receive Positive 4, 5 Unused — 6 RX2 Receive Negative 7, 8 Unused — Table A-2.
Appendix A. Connector Pin Definitions 36 NetVanta 2000 Series Hardware Installation Guide © 2004 ADTRAN, Inc.
Index A AC adapter 18, 24, 29 address translation 17 administration 18 C CONSOLE interface 17, 24 contents of shipment 18 D DHCP 18 dimensions 20 F features 17 firewall features 17 front panel 20 I installation of unit 25 introduction to NetVanta 2000 Series 15 IP address configuration 33 IPSec tunnel 17 L LEDs 21 M management components installing 31 mounting options rack 25 wall 26 N NetVanta 2000 Series Routers dimensions 20 features 17 installation 25 introduction to 15 LEDs 21 power requirements
Index NetVanta 2000 Series Hardware Installation Guide routing 18 U S serial interface 17, 24 Shipping Contents 18 T unpacking and inspecting the system 18 W wallmounting units 26, 27, 28 web interface 31 tools required for installation 25 38 © 2004 ADTRAN, Inc.