Manuel d'utilisation / d'entretien du produit 2212 du fabricant Nortel Networks
Aller à la page of 64
Nortel Communi cation Server 1000 Nortel Networks Communication Server 1000 Release 4.5 WLAN Handset 2212 Installation and Conf iguration for VPN Document Number: 553-3001-229 Document Release: Standard 1.
.
Page 3 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 4 Revision history November 2005 Standard 1.00. This document is a new NTP issued to support Communication Server 1000 Release 4.
Page 4 of 62 553-3001-229 Standard 1.00 November 2005.
Page 5 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 6 Contents List of procedures . . . . . . . . . . . . . . . . . . . . . . . . . . 7 How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 About this document . .
Page 6 of 62 Contents 553-3001-229 Standard 1.00 November 2005 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 The DHCP server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 7 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 8 List of procedures Procedure 1 Configuring the VPN router . . . . . . . . . . . . . . . . . . . . . . 19 Procedure 2 Installing licence keys . . . . . . . . . . . . . . . . . . .
Page 8 of 62 List of procedures 553-3001-229 Standard 1.00 November 2005 Procedure 11 Configuring the second interface . . . . . . . . . . . . . . . . . 4 8 Procedure 12 Configuring the firewall . . . . . . . . . . . . . . . . . . . . . . . . . 52 Procedure 13 Configuring the WLAN Handset 2212 using the cradle .
Page 9 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 10 How to get help This section explains how to get help for Nortel products and services. Getting Help from the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technical Support Web site: www.
Page 10 of 62 How to get help 553-3001-229 Standard 1.00 November 2005 Outside North America, go to the followi ng Web site to obtain the phone number for your region: www.
Page 11 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 14 About this document This document is a global document. Co ntact your system supplier or your Nortel representative to verify that th e hardware and software described are supported in your area.
Page 12 of 62 About th is document 553-3001-229 Standard 1.00 November 2005 • Communication Server 1000M Multi Group (CS 1000M MG) • Communication Server 1000E (CS 1000E) • Meridian 1 PBX 11C Ch.
About this document Page 13 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN • Communication Server 1 000M and Meridian 1: Large System Upgrade Procedures (553-3021-258) • Communic.
Page 14 of 62 About th is document 553-3001-229 Standard 1.00 November 2005 • Meridian 1 PBX 61C •M e r i d i a n 1 P B X 8 1 • Meridian 1 PBX 81C Related information This section lists information so urces that relate to this document .
Page 15 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 18 Overview Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 16 of 62 Overview 553-3001-229 Standard 1.00 November 2005 Code and key code requirements Before configuring the WLAN Handset 2212, yo u must ensure the various components are using the proper versions of software.
Overview Page 17 of 62 WLAN Handset 2212 Installation and Configura tion for VPN The configuration in this document This document describes the configur ation of the supported architecture shown in Figure 1 .
Page 18 of 62 Overview 553-3001-229 Standard 1.00 November 2005 IMPORT ANT! The figures in this document are examples of the types and f ormat of the inf or mation required for a specific st ep.
Page 19 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 28 Getting started Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 20 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 5 Click on the + beside Ports . The Ports list expands. 6 Right click Communications Ports (COM 1) and select Properties . The Communications Ports (COM 1) Properties window ap pears.
Getting started Page 21 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 3 Main Menu 12 Enter 1 . The Interface Menu window appe ars, as shown in Figure 4 on page 22.
Page 22 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 Figure 4 Interface menu 13 Enter 0 . The Private - Trusted Interface window ap pears, as shown in Figure 5 Figure 5 Private - Trusted Interface 14 Enter the following: a.
Getting started Page 23 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN b. Interface IP Address c. Subnet Mask 15 Enter R to go back to the Main Menu . 16 Enter 3 . The Default Private Route Menu ap pears, as shown in Figure 6 Figure 6 Default Privat e Route Menu 17 Enter A .
Page 24 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 22 Check the connectivity. a. Log back into your system. b. Open a command line window. c. Ping the gateway. If you are able to ping the gateway, th e VPN router is co nfigured properly.
Getting started Page 25 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 7 IP Services Gatewa y home page 26 Enter your login and password.
Page 26 of 62 Getting started 553-3001-229 Standard 1.00 November 2005 Installing th e Licence Keys Use Procedure 2 to install licence keys. Procedure 2 Installing licence keys 1 In the Contivity Secure IP Serv ices Gateway navigator, select ADMIN > Licence Keys .
Getting started Page 27 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN 4 Click OK . End of Procedure.
Page 28 of 62 Getting started 553-3001-229 Standard 1.00 November 2005.
Page 29 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 32 DHCP options Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 30 of 62 DHCP options 553-3001-229 Standard 1.00 November 2005 Figure 9 DHCP Server options 2 Clear the DHCP Enabled Server check box. 3 Click OK . End of Procedure Checking connectivity Test the connectivity for possible routing errors. Open the Console port and ping the DHCP Server, WLAN Applicat ion Gateway 2246 and the PBX.
DHCP options Page 31 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN DHCP relay Use Procedure 4 to enable the DHCP Relay. Procedure 4 Enabling the DHCP relay 1 In the Contivity Secure IP Serv ices Gateway navigator, select SERVE RS > DHCP Relay .
Page 32 of 62 DHCP options 553-3001-229 Standard 1.00 November 2005.
Page 33 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 36 IP address pool configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 34 of 62 IP address pool configurati on 553-3001-229 Standard 1.00 November 2005 Figure 11 Add an IP address pool 2 Click Add . The Address Pool Information window appears, as shown in Figure 12. Figure 12 Address pool deta ils 3 Enter a Starting IP Address.
IP address pool configuration Page 35 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 5 Enter a Subnet Mask . 6 Select New . 7 Enter a name for the new pool in the text box. 8 Click Apply to save the details. 9 Click OK . The User IPaddr windo w appears, as shown in Figure 13.
Page 36 of 62 IP address pool configurati on 553-3001-229 Standard 1.00 November 2005 Figure 14 Forwarding options 2 In the Proxy ARP section , select the route type you want to enabl e.
Page 37 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 44 IPsec options and groups Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 38 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 15 IPsec global variables.
IPsec options and grou ps Page 39 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 2 Select all the options in the Authentication , Encryption, and IKE Encryption and Diffie-Hel lmann Group sections. 3 Click OK . End of Procedure WLAN Handset 2212 group definition Use Procedure 8 to create a WLAN Handset 2212 group.
Page 40 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 17 Group detail s 4 Click Apply . 5 Click OK . End of Procedure WLAN Handset 2212 gr oup IPsec variables Use Procedure 9 to set IPsec variables for a WLAN Handset 2212 group.
IPsec options and grou ps Page 41 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 18 Add groups 2 Click Edit next to the group for which you want to set the variables. The IPsec Variables window app ears. The Connectivity section is shown in Figu re 19 on page 42 ; the IPsec section is shown in Figure 20 on page 43 .
Page 42 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 Figure 19 IPsec variables - Connectiv ity section 3 Configure the Connectivity variables. a. Click Configure in the Connectivity section. b. If you intend to use the same unit, set Number of Logins to 1.
IPsec options and grou ps Page 43 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 20 IPsec variables - IPsec sec tion.
Page 44 of 62 IPsec options and groups 553-3001-229 Standard 1.00 November 2005 4 Configure the IPsec variables. a. Click Configure in the IPsec section.
Page 45 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 56 Users, interface and firewall configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . .
Page 46 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 21 Adding user s 2 Click Add User, as indicated by the arrow.
Users, interface and firewall configuration Page 47 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 22 User details 3 In the General section, enter a First and Last name. 4 Select the Group to which the user will belong. 5 In the User Accounts section, enter a User ID and Password .
Page 48 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Second interface configuration Use Procedure 11 to config ure the second interface. Proc edure 11 Configuring the second interface 1 In the Contivity Secure IP Se rv ices Gateway navigator, select SYSTEM > Users .
Users, interface and firewall configuration Page 49 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 24 Second interface details 3 In the Configuratio n section, select Private for Interface Type . 4 In the 802.1Q section, select Disabled for State .
Page 50 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 25 Cancel acquisition 7 Click Cancel acquisition .
Users, interface and firewall configuration Page 51 of 62 WLAN Handset 2212 Installation and Configura tion for VPN Figure 26 Select protocol 8 Select IP in the Select Protocol list.
Page 52 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Firewall configuration Use Procedure 12 configure the firewall. Proc edure 12 Configuring the fire wall 1 In the Cont ivity Secure I P Serv ices Gateway navigator, select SERVICES > Firewall/N AT .
Users, interface and firewall configuration Page 53 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 7 Click OK . Note: Do not lea ve this step for later a s mobile clients will be unable to get an IP address via DHCP. 8 After the wireless gateway has rebooted, click Manage Policies (as indicated by the arrow).
Page 54 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 Figure 29 New policy 11 Enter a name for the new firewall policy. 12 Click OK . The new policy is created and the Firewal l Policy-Edit window appears, as shown in “Edit firewall policy” on page 54 .
Users, interface and firewall configuration Page 55 of 62 WLAN Handset 2212 Installation and Configura tion for VPN 14 Right-click in the tab and select Add New Rule . A set of default rules is created on the tab as shown in Figure 31. Figure 31 Override Rules 15 Select the Default Rules tab.
Page 56 of 62 Users, interface and firewall configuration 553-3001-229 Standard 1.00 November 2005 21 Click OK . End of Procedure.
Page 57 o f 62 WLAN Handset 2212 Installation and Configura tion for VPN 62 Handset configuration Contents This section contains inform ation on the following topics: Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Page 58 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 Proc edure 13 Configuring the WLAN Hand set 2212 using the cradle 1 Before you begin, do the following: a. Remove the battery before plac ing the handset in th e cradle b. Connect the serial cable to the COM port.
Handset configuration Page 59 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN Figure 34 Config Cradle with VPN Sett ings 6 Click Save . End of Procedure Handset screen method Use Procedure 14 to configure the WLAN Handset 2212 using the screen method.
Page 60 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 Figure 35 Configuration menu 3 Set the Licence Option. a. Select Phone Config > Licen se Option . b. Enter 010 using the keypad on the handset. c. Select Save . 4 Set the Terminal Type.
Handset configuration Page 61 of 6 2 WLAN Handset 2212 Installation and Configura tion for VPN b. Set Mode to Aggressive . c. Select OK . 8 Set your password. a. Select Network Config > Security > Static Entry > VPN > VPN Client IP > IKE Mode Config > Phase 1 - ISAKMP > Preshared Key > Alphanumeric .
Page 62 of 62 Handset configuration 553-3001-229 Standard 1.00 November 2005 b. Select Init Contact . c. Click OK . d. Select Nortel fe atures . e. Click OK . 13 Set the Phase 2 authen tication parameters. a. Select Network Config > Security > Static Entry > VPN > VPN Client IP > IKE Mode Config > Phase 2 - ESP .
.
F amily Produc t Manual Contac ts Copyright FCC not ice T rademark s Document number Pr oduct release Document rel ease Date Pub lish Nor tel Communication Ser ver 1000 WLAN Handset 2212 Installation and Conf iguration f or VPN Copyright © Nor tel Networks Limited 2005 All Rights Reserved Information is subject to change without notice.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Nortel Networks 2212 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Nortel Networks 2212 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Nortel Networks 2212, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Nortel Networks 2212 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Nortel Networks 2212, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Nortel Networks 2212.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Nortel Networks 2212. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Nortel Networks 2212 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.