Manuel d'utilisation / d'entretien du produit 5100 du fabricant Nortel Networks
Aller à la page of 160
4655 Great America Parkwa y Santa Clara, CA 95054 Phone 1-800-4Nor tel http://www .nor tel.com Nor tel Switched Fire wall 5100 Series Release 2.3.3 Br o wser -Based Interface User’ s Guide par t num.
2 216383-D Copyright © Nortel Networks 2002– 2005. All rig hts reserved. This document is protected by c opyright and distributed under licen se s restricting it s use, copying, distribution, and deco mpilation. No part of this document may be reproduced in any form by any means without prior written author ization of Nortel Networ ks, Inc.
216383-D October 20 05 3 Content s Preface 7 Who should use this book 7 How this book is organized 7 Typographic conv entions 8 How to get help 9 Getting help from the Nortel web site 9 Getting help o.
Nortel Switched Firewall Browse r-Based Interface Users Guide 4 Contents 216383-D October 2005 Basic operation 22 Pending change exceptio ns 22 Lost changes 22 Creating a config uration 2 3 Viewin.
Nortel Switched Firewall Browser-Based Interface Users Guide Contents 5 216383-D October 20 05 License Management form 91 Installed License(s) form 93 Synchronization form 94 SMART Clients form 95.
Nortel Switched Firewall Browse r-Based Interface Users Guide 6 Contents 216383-D October 2005.
216383-D October 20 05 7 Preface This Quick Guide describes the Nortel Switched Firewa ll Browser -Based Interface (BBI). The components and features of the BBI can be used as an alternative to the Nortel Switched Firewall Command Line Interf ace (CLI) documented in the Nortel Switched Fir ewall 2.
Nortel Switched Firewall Browse r-Based Interface Users Guide 8 Preface 216383-D October 2005 T ypographic conventions The following table describes th e typographic styles used in this book.
Nortel Switched Firewall Browser-Based Interface Users Guide Preface 9 216383-D October 20 05 How to get help This section explains how to get help for Nortel p roducts and services. Getting help from the Nortel web site The best way to get technical support for Nortel products is from the N ortel T echnical Support web site at: www .
Nortel Switched Firewall Browse r-Based Interface Users Guide 10 Preface 216383-D October 2005 Using an Express Rout ing Code to get help from a specialist Y ou can find Express Routing Co des (ERC) for many Nortel products and services on the Nortel T echnical Support web site.
216383-D October 20 05 11 C HAPTER 1 Introduction This chapter explains how to enable the Br owser -Based Interface (BBI), set up your web browser , and launch the BBI to access the Nortel Switched Fi rewall (NSF) system- management f eatures from y our web brows er .
Nortel Switched Firewall Browse r-Based Interface Users Guide 12 Introduction 216383-D October 2005 Getting st arted Requirement s Following are the requirem ents to enable the BBI: An install.
Nortel Switched Firewall Browser-Based Interface Users Guide Introduction 13 216383-D October 20 05 Enabling the BBI Y ou can enable the BBI for HTTP , HTTP and HTTPS, or you can fully disable the BBI. TIP : The default setting for the BBI is enabled for HTTP access an d disabled for HTTPS access.
Nortel Switched Firewall Browse r-Based Interface Users Guide 14 Introduction 216383-D October 2005 Applying the changes. Using the access list to permit re mote access to trusted clie nts If you already configured the acce ss list for T elnet or SSH, you need not repeat the process.
Nortel Switched Firewall Browser-Based Interface Users Guide Introduction 15 216383-D October 20 05 c) MIP address d) virtual IP address (see Using the VRRP virtual IP address to access the NSF BBI ) The NSF login window opens. 3. Log in (see Logging in ).
Nortel Switched Firewall Browse r-Based Interface Users Guide 16 Introduction 216383-D October 2005 Figure 1 NSF Login window Loading the main page When the valid account name an d password combination is ente red on the login window , the BBI default page appears in your browser viewing win dow (see Figure 2 ).
216383-D October 20 05 17 C HAPTER 2 Basics of the Browser-Based Interface Interface component s The Nortel Switched Firewall (NSF) Browser- Based Interface (BBI) main page has eight component areas (see Figure 3 ).
Nortel Switched Firewall Browse r-Based Interface Users Guide 18 Basics of the Browser-Based Interface 216383-D October 2005 Main page tabs The two main page tabs ar e W izards and Config (see Figure 3 on page 17 ).
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 19 216383-D October 20 05 W i zards menu shows the selections available on the W izards menu tree.
Nortel Switched Firewall Browse r-Based Interface Users Guide 20 Basics of the Browser-Based Interface 216383-D October 2005 NSF Config main menu tree Each of the selections on th e Config main menu tree repr ese nts a page, called a form, which provides a method to monitor or configure the NSF (see Figure 3 on page 17 and Figure 6 ).
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 21 216383-D October 20 05 History list The History list displays the path to the cu rrent page. Up to nine of the most recently visited pages are listed, most recent first.
Nortel Switched Firewall Browse r-Based Interface Users Guide 22 Basics of the Browser-Based Interface 216383-D October 2005 Basic operation The Browser-Based Interface for th e Nortel Switched Firewall prov ides a variety of levels of control.
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 23 216383-D October 20 05 Pending changes are also discarded if you do not submi t them before the inactivity timeout value on BBI sessions elapses.
Nortel Switched Firewall Browse r-Based Interface Users Guide 24 Basics of the Browser-Based Interface 216383-D October 2005 2) Click Submit . See Global command forms for details on using Apply , Diff, Revert, and Logout. Global command forms The global command buttons are always available at the top of each form.
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 25 216383-D October 20 05 When selected, this command up dates the Nortel Switched Firewall with any pending configuration changes. Pending changes are first validated for correctness (see V alidate Configuratio n on page 25 ).
Nortel Switched Firewall Browse r-Based Interface Users Guide 26 Basics of the Browser-Based Interface 216383-D October 2005 Diff The global Diff command displays the Pending Updates form. Pendin g Updates provides a list of the pending configuration changes for the current sessio n (see Figure 9 ).
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 27 216383-D October 20 05 Revert The global Revert command displays the Revert Chang es form. Use Revert to cancel pending configuration changes (see Figure 10 ).
Nortel Switched Firewall Browse r-Based Interface Users Guide 28 Basics of the Browser-Based Interface 216383-D October 2005 Logout Use the global Logout form to terminate the current user session (see Figure 11 ).
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 29 216383-D October 20 05 Help The global Help form provides assistance wit h forms and tasks in the BBI. T wo kinds of Help are available: context-sensitiv e Help and task-based Help.
Nortel Switched Firewall Browse r-Based Interface Users Guide 30 Basics of the Browser-Based Interface 216383-D October 2005 Forms area: This area displays detailed information about th e selected topic. Close button: Click Close to close the context-sensitive Help windo w .
Nortel Switched Firewall Browser-Based Interface Users Guide Basics of the Browser-Based Interface 31 216383-D October 20 05 Load Page link: Click Load Page to display the form referenced on the task topic menu . If the subtask has more than one step, the s teps are listed on the form.
Nortel Switched Firewall Browse r-Based Interface Users Guide 32 Basics of the Browser-Based Interface 216383-D October 2005.
216383-D October 20 05 33 C HAPTER 3 Browser-Based Interface forms reference BBI main menu selections The following eight selections are available on the Nortel Switched Firewall (NSF) Browser- Based .
Nortel Switched Firewall Browse r-Based Interface Users Guide 34 Browser-Based Interface for ms reference 216383-D October 2005 System form When you select System, the Main page, also kno wn as the Moni tor System form, is displayed as shown in Monitor System form.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 35 216383-D October 20 05 status of the following remote accesses: HTTP HTTPS Te l n e t SSH SNMP Use the NSF 5100 T icker launch form to launch the Ti cker .
Nortel Switched Firewall Browse r-Based Interface Users Guide 36 Browser-Based Interface for ms reference 216383-D October 2005 The NSF 5100 T icker report form displays thr ee tabs (see NSF 5100 Ti cker results form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 37 216383-D October 20 05 The Properties page displays properties for NSF 5100 T ick er parameters (see NSF 5100 T icker/Properties f orm).
Nortel Switched Firewall Browse r-Based Interface Users Guide 38 Browser-Based Interface for ms reference 216383-D October 2005 Cluster forms The Cluster menu includes the following categories of .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 39 216383-D October 20 05 The Cluster/Director(s) form is divided into the following two secti.
Nortel Switched Firewall Browse r-Based Interface Users Guide 40 Browser-Based Interface for ms reference 216383-D October 2005 T ime forms The two Cluster/Time forms are as follows: Cluster/T.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 41 216383-D October 20 05 Hour provides a list to se lect the current hour . Minute provides a list to select the current minute. Click Save to submit the date an d time changes and to put the changes into immediate effect.
Nortel Switched Firewall Browse r-Based Interface Users Guide 42 Browser-Based Interface for ms reference 216383-D October 2005 Fields and buttons on the Cluster/Ti me/NTP Servers form are as follows: IP Address displays the IP address of an NTP server .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 43 216383-D October 20 05 Fields and buttons on the Cluster/Logs/Sy slog form are as follows: System Log Debug Messages displays a list with two choices.
Nortel Switched Firewall Browse r-Based Interface Users Guide 44 Browser-Based Interface for ms reference 216383-D October 2005 crit err warning notice info debug New S.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 45 216383-D October 20 05 Cluster/Lo gs/ELA form Use the Cluster/Logs/ELA form to co nfigure Event Logg ing API (ELA) (see Cluster/Logs/ELA form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 46 Browser-Based Interface for ms reference 216383-D October 2005 Management Station IP provides an entry fi eld to specify the IP address of the Check Point SmartCenter Server where the Firewall log messages are sent.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 47 216383-D October 20 05 Cluster/Logs/Archive form Use the Cluster/Logs/Archive fo rm to specify system log rotation an d system log archiving parameters (see Cluster/Logs/Archive form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 48 Browser-Based Interface for ms reference 216383-D October 2005 If the log file rotate size is set to >0, log rotation occurs when one of the following condit ions is met: The log file surpasses the rotate size.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 49 216383-D October 20 05 Wa r n i n g s f o r m Use the Cluster/W arnings form to enable or disable confi guration warning messages (see Cluster/W arnings form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 50 Browser-Based Interface for ms reference 216383-D October 2005 Network forms The Network menu includes the follo wing categories of.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 51 216383-D October 20 05 N OTE – The NSF provides administrators w ith the option to con figure Layer 2 and Layer 3 firewalls. The Layer 2 and Layer 3 fi rewall c onfiguration procedures differ only in the configuration of the IP addresses.
Nortel Switched Firewall Browse r-Based Interface Users Guide 52 Browser-Based Interface for ms reference 216383-D October 2005 Ports form Use the Network/Ports form to configu re network port settings (see Network/Ports form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 53 216383-D October 20 05 Network/Ports Modify Port form Use the Network/Ports Mod ify Port form to modify the settings for a selected port.
Nortel Switched Firewall Browse r-Based Interface Users Guide 54 Browser-Based Interface for ms reference 216383-D October 2005 Mode provides for following two selections: Half (duplex) Full (duplex) Update submits the port change s to the pending configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 55 216383-D October 20 05 Fields and buttons on the Network/ Routes/Static form are as follows: Destination IP specifies the IP a ddress of the route destination.
Nortel Switched Firewall Browse r-Based Interface Users Guide 56 Browser-Based Interface for ms reference 216383-D October 2005 Back returns to the Network/ Routes/Static form without submitting changes to th e pending configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 57 216383-D October 20 05 Network/Routes/Proxy ARP form Use the Network/Routes/Proxy ARP (Addr.
Nortel Switched Firewall Browse r-Based Interface Users Guide 58 Browser-Based Interface for ms reference 216383-D October 2005 New Proxy ARP IP pro vides an entr y field to specify an IP address. TIP : Use dotted decimal format. VRRP Group provides a list for VRRP group 1 or 2 selection.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 59 216383-D October 20 05 Network/Routes/OSPF forms Following are the categories of Network/Ro.
Nortel Switched Firewall Browse r-Based Interface Users Guide 60 Browser-Based Interface for ms reference 216383-D October 2005 Router Id 1 provides an entry field to set the OSPF R outer ID for the first Firewall host. TIP : OSPF uses the router ID to identify the rout ing devi ce.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 61 216383-D October 20 05 Network/Routes/OSPF/Area Indexes Add New form Use the Network/Routes/OSPF/ Area Indexes Add New form to configure a new Area Index.
Nortel Switched Firewall Browse r-Based Interface Users Guide 62 Browser-Based Interface for ms reference 216383-D October 2005 Network/Routes/OSPF/Interfaces form Use the Network/Routes/OSPF/In t.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 63 216383-D October 20 05 Network/Routes/OSPF/Interfaces Modify form Use the Network/Routes/OSPF/Interfaces Modify form to modify a selected interface.
Nortel Switched Firewall Browse r-Based Interface Users Guide 64 Browser-Based Interface for ms reference 216383-D October 2005 Authentication provides a list to set the auth entication type f.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 65 216383-D October 20 05 Area Index sets the OSPF area index to attach to the network for the current GRE Tunnel. Action provides the followi ng two options: Delete deletes a selected GRE tunnel .
Nortel Switched Firewall Browse r-Based Interface Users Guide 66 Browser-Based Interface for ms reference 216383-D October 2005 Priority provides a list to set the GRE Tunnel priority used to elect a Designated Router (DR) and Backup Designated Router (BDR) for the area.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 67 216383-D October 20 05 Network/Routes/OSPF/Redistribute form Use the Network/Rou tes/OSPF/Redistribute form to display and modify the OSPF Redistribution settings (see Network/ Routes/OSPF/Redistribute form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 68 Browser-Based Interface for ms reference 216383-D October 2005 Network/Routes/OSPF/Redi stribute Modify form Use the Network/Routes/OSPF/Redistribu te M odify form to modify the connected rou te redistribution.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 69 216383-D October 20 05 DHCP Relay forms The three DHCP Relay forms are: General Int.
Nortel Switched Firewall Browse r-Based Interface Users Guide 70 Browser-Based Interface for ms reference 216383-D October 2005 DHCP Relay S tatistics DHCP Relay Statistics provides a list.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 71 216383-D October 20 05 Network/DHCP Relay/Interfaces Modify form Use the Network/DHCP Relay/Interfaces Modify form to modify a selected DHCP Relay Interface.
Nortel Switched Firewall Browse r-Based Interface Users Guide 72 Browser-Based Interface for ms reference 216383-D October 2005 Network/DHCP Relay/Servers form Use the Network/DHCP Relay/Servers fo rm to display and modify the information about the DHCP Relay Servers (see Network/DHCP Relay/Servers form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 73 216383-D October 20 05 Network/DHCP Relay/Servers Add New Server form Use the Network/DHCP Relay/Servers Add New Server form to add a new DHCP server .
Nortel Switched Firewall Browse r-Based Interface Users Guide 74 Browser-Based Interface for ms reference 216383-D October 2005 Interfaces form Use the Network/Interfaces form to view and configure the setti ngs for individual interfaces (see Network/Interfaces form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 75 216383-D October 20 05 Modify (only visible if interfaces are present) is used to modify a displayed interface (see Network/Interfaces Modi fy form on page 75 ).
Nortel Switched Firewall Browse r-Based Interface Users Guide 76 Browser-Based Interface for ms reference 216383-D October 2005 Subnet Mask provides an entry field to specify the subnet mask of the interface. Vlan Id provides a list to select the numerical ID, between 0 and 4094, for the VLAN.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 77 216383-D October 20 05 Network/Interfaces Add Interface form Use the Network/Interfaces Add Inte rface form to add a new interface.
Nortel Switched Firewall Browse r-Based Interface Users Guide 78 Browser-Based Interface for ms reference 216383-D October 2005 Ip2 provides an entry field to specify the second virtual IP ad dress for the interface (applied for VRRP Active-Active).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 79 216383-D October 20 05 VRRP specifies the virtual router ID and IP a ddress of the IP interf ace configured for high availability or active–active.
Nortel Switched Firewall Browse r-Based Interface Users Guide 80 Browser-Based Interface for ms reference 216383-D October 2005 Ports specifies the port number a ssociated with the bridge ID. VRRP Settings V rid provides a list to select the numerical ID, between 1 and 255, for the virtual router on the bridge.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 81 216383-D October 20 05 Enabled indicates that high av ailability VRRP is enabled. TIP : T wo Firewall hosts must be in the cluster to apply high availability VRRP .
Nortel Switched Firewall Browse r-Based Interface Users Guide 82 Browser-Based Interface for ms reference 216383-D October 2005 GRE T un nels form Use the Network/GRE Tunnels form to view and modify GRE T unnels setti ngs (see Network/GRE T unnels form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 83 216383-D October 20 05 Actions provides the followi ng two options: Delete deletes the selected GRE tunnel. Modify provides a form to modify th e settings for the selected GRE tunnel.
Nortel Switched Firewall Browse r-Based Interface Users Guide 84 Browser-Based Interface for ms reference 216383-D October 2005 Host 1 T unnel Source IP provides an entry field for the tunnel source IP address for host 1. Destination IP provides an en try field for the tunnel destination IP address for host 1.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 85 216383-D October 20 05 S tatus forms Following are fo ur Network/S tatus forms: Interfa.
Nortel Switched Firewall Browse r-Based Interface Users Guide 86 Browser-Based Interface for ms reference 216383-D October 2005 Network/S tatus/Link form Use the Network/Status/Link form to obtain information about all network interface ports (see Network/Status/Link form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 87 216383-D October 20 05 Network/S tatus/Bridge S tatistics form Use the Network/Status/Bridge Statistics form to view the brid ge statistics for the selected firewall (see Network/Status/Bridge S tatistics form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 88 Browser-Based Interface for ms reference 216383-D October 2005 Network/S tatus/Bridge Mac Entries form Use the Network/Status/Bridge Mac Entries form to display the bridge MAC ent ries for the selected Firewall Director (see Netw ork/S tatus/Bridge Mac Entries form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 89 216383-D October 20 05 Firewall forms The Firewall menu includes the fo llowing five catego.
Nortel Switched Firewall Browse r-Based Interface Users Guide 90 Browser-Based Interface for ms reference 216383-D October 2005 Fields and buttons on th e form are as follows: General Status provides a list with thes e selections: o Enabled indicates that Check Point FireW all-1 NGX is processing on the Firewall.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 91 216383-D October 20 05 License Management form Use the Firewall/Licenses form to modify or install additional Check Point licenses on the Firewall (see Firewall/License Managem ent form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 92 Browser-Based Interface for ms reference 216383-D October 2005 Firewall/License Management/Add New License Ent ry form Use the Firewall/License Management/Ad d Ne w License Entry form to add Check Point licenses.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 93 216383-D October 20 05 Add New Licenses Expiration Date provides an entry field to specify the Check Point License expiration date. Feature String provides an entry field to specify the Check poi nt License feature string.
Nortel Switched Firewall Browse r-Based Interface Users Guide 94 Browser-Based Interface for ms reference 216383-D October 2005 Features provides the Check Point license features.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 95 216383-D October 20 05 SMART Client s form The Firewall/SMAR T Clients form displays, and allows m odification to, SMAR T Clients addresses. This form also provides a field to add a new SMAR T Client (see Firewall/SMA R T Clients form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 96 Browser-Based Interface for ms reference 216383-D October 2005 SecurID form The SecurID form provides access to a two-factor form method for central ized authentication and management (see Firewall/S ecurID form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 97 216383-D October 20 05 Operation forms The Operation menu includes the fo llowing three cat.
Nortel Switched Firewall Browse r-Based Interface Users Guide 98 Browser-Based Interface for ms reference 216383-D October 2005 Configuration form Use the Operation/Configuration form to export or import configuration files (see Operation/Configuration form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms re ference 99 216383-D October 20 05 Import causes the BBI to restart immediat ely , using the replacem ent configuration. TIP : No Apply comm and is required in conjunction with Import.
Nortel Switched Firewall Browse r-Based Interface Users Guide 100 Browser-Bas ed Interface forms reference 216383-D October 2005 Fields and buttons on the Operation/Imag e Update/Packages fo rm are as follows: Installed Packages V ersio n provides the NSF software ver sion running on th e cluster .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 101 216383-D October 20 05 N OTE – Activating the software using the browser di sables remote access to the Firewall.
Nortel Switched Firewall Browse r-Based Interface Users Guide 102 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration forms The Administration form s provide access to administering and monitoring aspects of the Firewall, such as user information, web settings, and SNMP activ ity .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 103 216383-D October 20 05 Administration/Monitor/Director(s) form The Administration/Monitor/Directo r(s) form disp lays Firewall director details and application status (see Administration/Monitor /Director(s) form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 104 Browser-Bas ed Interface forms reference 216383-D October 2005 Uptime provides the time, in Hours:Minute s:Seconds, since the applications started.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 105 216383-D October 20 05 Administration/Monitor/Syslog form The Administration/ Monitor/Syslog form displays t he system logs for the Firewall based on selected search criteria (see Ad ministration/Monitor/Syslog form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 106 Browser-Bas ed Interface forms reference 216383-D October 2005 All info messages (INFO) All notice messages (NOTICE) All warning messages (W ARNING) Messages Per Page provides the maximum number of messages displayed for each request.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 107 216383-D October 20 05 Administration/Monitor/GUI Lock form The Administration/Moni tor/GU.
Nortel Switched Firewall Browse r-Based Interface Users Guide 108 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/Monitor/CLI Logins form The Administration/ Monitor/CLI Logins form pr o vides information about CLI Login sessions on the Firewall (see Administration/Monito r/CLI Logins form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 109 216383-D October 20 05 Administration/Monitor/About form The Administration/Moni tor/About form displays general product information abo ut the Firewall (see Administrati on/Monitor/About form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 110 Browser-Bas ed Interface forms reference 216383-D October 2005 Users forms Administration/Users provi des the following two catego.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 111 216383-D October 20 05 Group(s) displays the group to which the user belongs.
Nortel Switched Firewall Browse r-Based Interface Users Guide 112 Browser-Bas ed Interface forms reference 216383-D October 2005 Current Login Password provides an entry fi eld to record the curr ent active password for the named user (for example, oper user or admin user).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 113 216383-D October 20 05 Password (again) provides an entry field to confirm the new password. Save User saves the user information and return s to the Adm inistration/users/General form.
Nortel Switched Firewall Browse r-Based Interface Users Guide 114 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/Users/SSH Users Add New SSH User form Use the Administration/Users/SSH Users Add Ne w SSH User form to add a ne w SSH user to the configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 115 216383-D October 20 05 Access List form Use the Administration Access List form to speci fy which clients are permitted to administer the system (see Administration/Access List form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 116 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/Acces s List Add New Client Access form Use the Administration/Access List Add New Client Access form to add a new client access to the configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 117 216383-D October 20 05 T elnet-SSH form Use the Administration/T elnet-SSH form to enable or disable T elnet/SSH administration (see Administrati on/T elnet-SSH f orm).
Nortel Switched Firewall Browse r-Based Interface Users Guide 118 Browser-Bas ed Interface forms reference 216383-D October 2005 Web forms The Administration/W eb forms provide the following: .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 119 216383-D October 20 05 The Administration/ W eb/Gen eral form is divided into the fol lowi.
Nortel Switched Firewall Browse r-Based Interface Users Guide 120 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/Web/Create Cert form The Administration/W eb/Create .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 121 216383-D October 20 05 Administration/Web/Server Cert s form Use the Administration/W eb/Server Certs form to administer server certificates on the Firewall (see Administration/W eb/Serv er Certs form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 122 Browser-Bas ed Interface forms reference 216383-D October 2005 Add New Server Certificate opens a form to add a new server certificate (see Administrati on/W eb/Server Certs Add Server Cer tificate form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 123 216383-D October 20 05 Administration/Web/Server Cert s/Generate Certificate Request form .
Nortel Switched Firewall Browse r-Based Interface Users Guide 124 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/Web/CA Cert s form Use the Administration/W eb/CA Certs form to administer Certificate Authorit y (CA) certificates on the Firewall (see Administrati on/W eb/CA Certs form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 125 216383-D October 20 05 Administration/Web/CA Cert s Add Server Certificate form Use the Administration/W eb/CA Certs Add Server Certificate form to ad d a server certificate.
Nortel Switched Firewall Browse r-Based Interface Users Guide 126 Browser-Bas ed Interface forms reference 216383-D October 2005 SNMP forms Use the Administration/SNMP forms to enable or disable S.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 127 216383-D October 20 05 SNMPv3 (USM) Options Fields and buttons on the form are as follows: SNMP Settings Status provides a list with the following selections: o Enabled enables the SNMP agent.
Nortel Switched Firewall Browse r-Based Interface Users Guide 128 Browser-Bas ed Interface forms reference 216383-D October 2005 Update submits the form changes to the pending configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 129 216383-D October 20 05 Administration/SNMP/T rap Hosts form The Administration/SNMP/T rap Hosts form lists configured trap hosts receiving SNMP event or alarm messages from the Firewall (see Administration/ SNMP/T rap Hosts form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 130 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/SNMP/T rap Hosts Add T rap Host form Use the Administration/SNMP/Trap Hosts Ad d Tr ap Host form to add a trap host.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 131 216383-D October 20 05 Administration/SNMP/USM Users form Use the Administration/SNMP/USM Users form to administer US M users employed in SNMP v3 (usm) authentication and en cryption (see Administration/SNMP/U SM Users form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 132 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/SNMP/USM Us ers Add SNMP User form Use the Administration/SNMP/ USM Users Add SN MP User form to add a new SNMP user .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 133 216383-D October 20 05 Back returns to the Admini stration/SNMP/USM /Users form without submit ting changes to the pending configuration.
Nortel Switched Firewall Browse r-Based Interface Users Guide 134 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/SNMP/Advanced form Use the Administration/SNMP/Adva nced form to configure the so urce IP address used with SNMP traps generated from the Firewall (see Administration/SNMP/Advanced form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 135 216383-D October 20 05 SSH Keys form Use the Administration/SSH keys form to display the current Host Keys and generate new SSH keys for the cluster (see Adm inistration/SSH keys form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 136 Browser-Bas ed Interface forms reference 216383-D October 2005 Import SSH Key imports an SSH key from a remote host (see Administ ration/SSH Keys Import SSH Key form on page 137 ).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 137 216383-D October 20 05 Administration/SSH Keys Import SSH key form Use the Administration/SSH Keys Import SSH Key form to import SSH keys (see Administrati on/SSH Keys Import SSH Key form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 138 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/SSH Keys Show SSH keys form Use the Administration/SSH Keys Show SSH keys form to vi ew resident SSH key inform ation (see Administration/SSH Keys Show SSH keys form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 139 216383-D October 20 05 The Administration/RADIUS form is divided in to the following two s.
Nortel Switched Firewall Browse r-Based Interface Users Guide 140 Browser-Bas ed Interface forms reference 216383-D October 2005 Administration/RADIUS Add RADIUS Authentication Serve r form Use the Administration/RADIUS Add RAD IUS Au thentication Server fo rm to add a RADIUS Authentication server .
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 141 216383-D October 20 05 APC UPS form Use the Administration/APC UPS fo rm to configure settings for Ameri can Power Corporation Uninterrupted Power Supply (APC UPS) (see Administrat ion/APC UPS form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 142 Browser-Bas ed Interface forms reference 216383-D October 2005 Update submits the UPS Monito r changes to the pending configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 143 216383-D October 20 05 RADIUS Servers IP Address provides the addres s of a configured RADIUS server or an entry field to change or specify the IP A ddress of a RADIUS server .
Nortel Switched Firewall Browse r-Based Interface Users Guide 144 Browser-Bas ed Interface forms reference 216383-D October 2005 Update submits the change s to the pending configuration. Back returns to the Administrati on/Audit form without submitt ing changes to the pending configuration.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 145 216383-D October 20 05 Diagnostics forms The Diagnostics forms provide informati on about logs, forms to check configuration and Check Point Logs, system commands, an d OSPF Debug settings.
Nortel Switched Firewall Browse r-Based Interface Users Guide 146 Browser-Bas ed Interface forms reference 216383-D October 2005 The Diagnostics/Logs form is divided into the fo llowing two sectio.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 147 216383-D October 20 05 Events form The Diagnostics/Events form displays the contents of the event log file (see Diagnostics/Events fo rm).
Nortel Switched Firewall Browse r-Based Interface Users Guide 148 Browser-Bas ed Interface forms reference 216383-D October 2005 Audit Log form Use the Diagnostics/Audit Log fo rm to display the latest 64 K of the device audit log (see Diagnostics/Audit Log fo rm).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 149 216383-D October 20 05 Maintenance forms Use the Diagnostics/Maintenance/Check Conf iguration form to check the applied configuration (see Diagnostics/Maint enance/Check Configuration form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 150 Browser-Bas ed Interface forms reference 216383-D October 2005 Applied Configuratio n displays configuration i nformation.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 151 216383-D October 20 05 System Commands form Use the Diagnostics/System Commands/System Commands form to execute Check Point system commands normally entered in a command window (see Diagnostics/System Commands/System Commands form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 152 Browser-Bas ed Interface forms reference 216383-D October 2005 Unload Check Point Policy (fw unloadlocal) Current interfac.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 153 216383-D October 20 05 Packets turns on debuggi ng for OSPF packets. Enabled displays the foll owing OSPF Debug operational settings: Y es indicates OSPF Debug is enabled.
Nortel Switched Firewall Browse r-Based Interface Users Guide 154 Browser-Bas ed Interface forms reference 216383-D October 2005 Wizards forms The W izards guid e the user through configuration processes.
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 155 216383-D October 20 05 The figures in this section represent the first page of each NSF BBI W izard.
Nortel Switched Firewall Browse r-Based Interface Users Guide 156 Browser-Bas ed Interface forms reference 216383-D October 2005 Add Wizard forms Use the Add forms to add or modify interfaces and bridges. Add Interface Use the Add Interface wizard to add a new inte rface or modify a n existing interface (see Add Interface W izard form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 157 216383-D October 20 05 Add GRE T unnel Use the Add GRE T unnel wizard to add a GRE tunnel to the configuration (see Add GRE T unnel W izard form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 158 Browser-Bas ed Interface forms reference 216383-D October 2005 Routes/Gateways Use the Routes/Gateways form to confi gure static routes and default gatew ays (Configure Routes/Gateways W izard form).
Nortel Switched Firewall Browser-Based Interface Users Guide Browser-Based Interface forms refer ence 159 216383-D October 20 05 OSPF Use the OSPF form to configur e use of the Open Shortest Path First (OSPF) protocol (see Configure OSPF Wizard form).
Nortel Switched Firewall Browse r-Based Interface Users Guide 160 Browser-Bas ed Interface forms reference 216383-D October 2005 Users Use the User Administration W izard to perform user administration tasks and configuratio n, such as add, modify , or delete a us er (see Us er Administration W izard form).
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté Nortel Networks 5100 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du Nortel Networks 5100 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation Nortel Networks 5100, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le Nortel Networks 5100 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le Nortel Networks 5100, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du Nortel Networks 5100.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le Nortel Networks 5100. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei Nortel Networks 5100 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.