ANUAL VERVIEW Chapter 1 - Getting Started OTES Please Read the Manuals Warranty and Service Getting Help with the IntraPort Carrier-8 EED TO TARTED Supplied with the IntraPort Carrier-8 Additional Items Needed for Installation Chapter 2 - Mounting Instructions LACEMENT...
Page 4
Table of Contents Chapter 6 - Functionality and Configuration Overview -8 F NTRA ARRIER UNCTIONALITY Routing From/To the Public Internet Routing To/From a Corporate Intranet Routing in General AMPLE ONFIGURATION Configuration Details Frame Relay Routing Clients Chapter 7 - Test Switch Settings Appendix A - Connector and Cable Pin Outs DB-25 M DB-25 F...
Page 5
Figure 8.1. Placing the Unit in a Telco Rack Figure 9. Securing the Unit to the Rack Figure 10. Detail of Power Units Figure 11. IntraPort Carrier-8 Configuration Example Figure 12. Removing and Replacing an RIOP Card or Cover Plate Figure 13. Removing the Filter Cover Plate...
Introduction to the IntraPort Carrier-8 Introduction to the IntraPort Carrier-8 The IntraPort Carrier-8 (IPC) is a Layer 3 to Layer 2 gateway designed to let Network Service Providers (NSPs) sell services that provide secure access to traditional networks such as Frame Relay via IPSec-based Virtual Private Network (VPN) client sessions.
Appendix Getting Help with the IntraPort Carrier-8 If you have a question about the IntraPort Carrier-8 and can’t find the answer in one of the manuals included with the product, please visit the technical support section of our Web site (http://www.compatible.com).
Chapter 1 - Getting Started What You Will Need to Get Started Before connecting the IntraPort Carrier-8 VPN Access Server, please check the list below to make sure that you have received all of the items that are supplied with the shipping package(s).
Chapter 2 - Mounting Instructions Chapter 2 - Mounting Instructions The IntraPort Carrier-8 VPN Access Server is designed to be mounted in a 19-inch equipment rack or in a Telco rack. Compatible Systems provides all the parts necessary for securing the supplied mounting brackets and ears to the device;...
• 14 mounting screws (10-32 undercut flat head) • Phillip’s head screwdriver In addition to the above items, the following items are needed to install the IntraPort Carrier-8 VPN Access Server in an equipment rack. • One left rack-mount bracket •...
If you are not going to rack-mount the IntraPort Carrier-8, it is recommended that you install the mounting ears and handles using the Standard Equipment Rack position (as shown in Figure 2).
Rack-Mount Brackets Figure 3. Rack-Mount Brackets Brackets (shown in Figure 3) are provided for mounting the IntraPort Carrier-8 in a standard 19-inch equipment rack or a Telco rack. Note that the left bracket features a fold-down shelf which maintains the proper alignment of the brackets in the rack, but does not bear the weight of the unit.
Chapter 2 - Mounting Instructions Right Bracket Installation Figure 4. Fastening the Right Bracket to the Rack It is recommended that you mark on the equipment rack exactly where you want the top of the two mounting brackets to go on the device in order to make sure that they are level with each other (using a level if necessary).
Chapter 2 - Mounting Instructions Left Bracket Installation Figure 5. Fastening the Left Bracket to the Rack It is recommended that you mark on the equipment rack exactly where you want the top of the two mounting brackets to go on the device in order to make sure that they are level with each other.
Chapter 2 - Mounting Instructions Securing the Shelf Figure 6. Lowering the Shelf Lower the shelf onto the tabs protruding from the right bracket as shown in Figure 6 and use the thumb screws to fasten the shelf to the bracket. The brackets and shelf should look like Figure 6.1 when fully installed.
Chapter 2 - Mounting Instructions Moving the Unit into the Rack Never attempt to move the server using the RIOP card handles or the filter cover opening. They will not support the weight of the device. Use the built-in side handles and either the large mounting handles, if you have installed them, or the very bottom of the chassis to move Figure 7.
Chapter 2 - Mounting Instructions Placing the Unit in an Equipment Rack Figure 8. Placing the Unit in a Standard Equipment Rack Figure 8.1. Placing the Unit in a Telco Rack Slide the unit back into the rack until the mounting ears are flush with the sides of the rack.
Chapter 2 - Mounting Instructions Securing the Unit to the Rack Figure 9. Securing the Unit to the Rack Using your own screws or clips, secure the mounting ears to the rack as shown in Figure 9, using two screws at the top of each mounting ear and two screws at the bottom of each mounting ear.
Changing the Power Supply Voltage Settings). The IntraPort Carrier-8 VPN Access Server features dual redundant 400 Watt power supplies. Operation using both power supplies is recommended, but not required. Make sure the power switches are set to the “Off” position.
All of the products in Compatible Systems’ internetworking and VPN families, including the IntraPort Carrier-8, can be managed from a single GUI management platform called Compati- View. CompatiView for Windows is included on the CD-ROM which was shipped with your IntraPort Carrier-8 VPN Access Server.
The IP protocol does not provide a method for CompatiView to automatically discover the IntraPort Carrier-8 VPN Access Server. To initially contact the server over IP using Compati- View, you must first enter a valid IP address into the server in one of two ways: Use a console directly connected to the server.
Chapter 5 - Command Line Preparation Chapter 5 - Command Line Preparation The command line interface allows you to configure and monitor the IntraPort Carrier-8 VPN Access Server in-band via Telnet or out-of-band with a terminal connected to the server’s Console interface.
Telnet is a remote terminal communications protocol based on TCP/IP. With Telnet you can log into and manage the IntraPort Carrier-8 from anywhere on your IP internetwork, including across the Internet if your security setup allows it. To manage the server with Telnet, you must: Run Telnet client software on your local computer, which will communicate with the Telnet server built into the IntraPort Carrier-8.
Chapter 6 - Functionality and Configuration Overview IntraPort Carrier-8 Functionality This is a brief description of the IntraPort Carrier-8 functionality in terms of packet flows. Routing From/To the Public Internet VPN packets from the public Internet will be forwarded to and from the IPC via one or more PVCs.
Chapter 6 - Functionality and Configuration Overview Sample Configuration Figure 11. IntraPort Carrier-8 Configuration Example The following text-based configuration would be for the IPC shown in Figure 11. Some sections include a detailed text description to help explain the VPN features. For details on the syntax or command line configuration reference, see the Text-Based Configuration and Command Line Reference Guide.
Page 26
Chapter 6 - Functionality and Configuration Overview corpbuser Config="Corporate B" SharedKey="corporateb" # This is a sample user configuration for each of the corporations. # This is the IPCs internal authentication database. These users # may be stored in a RADIUS database and are only show here for # for the example.
Page 27
Chapter 6 - Functionality and Configuration Overview A more complicated configuration, showing two different VPN groups for Company A, and requiring all of Company B’s VPN clients to tunnel all traffic back through the company intranet (and by extension through the company firewall for traffic which is bound for outside destinations) is shown below.
Chapter 6 - Functionality and Configuration Overview # tunnel traffic to a PVC. [ VPN Group "Corporate A-SFrancisco" ] ipnet = 38.3.3.0/24 bindto = "Wan 0" maxconnections = 32 transform = ESP(MD5,DES) localipnet = 38.0.0.200/27 vpngroupdlci = 17 # This is the VPN configuration for the San Francisco office of Corporate A. # It requires the same features configured as for the Denver office but # the values will be different since it is has a different geographic # location.
Chapter 7 - Test Switch Settings Chapter 7 - Test Switch Settings The switch for Slot 0 controls the entire device. For example, if you set the switch for Slot 0 to “3” and download new software to the device, all the other interfaces will automatically receive the software update from Slot 0 via the backplane.
Appendix A - Connector and Cable Pin Outs Pin Outs for DB-25 Male to DB-25 Female Console Cable The cable supplied with the IntraPort Carrier-8 is twenty-five conductors, straight through. Connections on the console interface follow the standard RS-232C pin outs.
To the Device Depending on which I/O cards are installed in your IntraPort Carrier-8 VPN Access Server, it may not have a LAN-accessible interface (i.e., Ethernet.) If this is the case, then new software versions must be downloaded to the device either through a WAN interface or through the RS-232 Console port.
Appendix C - Adding or Replacing RIOP Cards The modular design of the IntraPort Carrier-8 VPN Access Server allows you to add, remove or replace the RIOP cards without disconnecting the device. Be sure to keep a cover plate over any empty slots to maintain proper air ventilation and minimize dust accumulation.
Appendix D - When the “Over Temp” Light Comes On Appendix D - When the “Over Temp” Light Comes On The Intraport Carrier-8 is designed to operate reliably in a normal computer room, and requires no special environmental control. If operating within its published temperature and humidity specifications (0°...
Appendix E - Terms and Conditions Appendix E - Terms and Conditions Compatible Systems Corporation (Compatible Systems) offers to sell only on the condition that Customer’s acceptance is expressly limited to Compatible Systems’ terms and conditions of sale. Compatible Systems’ acceptance of any order from Customer is expressly made conditional on assent to these terms and conditions of sale unless otherwise specifically agreed to in writing by Compatible Systems.
Page 35
Appendix E - Terms and Conditions 3. Payment Terms. Payment shall be made prior to shipment or upon delivery, unless otherwise agreed to in writing. Payment shall not constitute acceptance of the goods. 4. Force Majeure. All orders accepted by Compatible Systems are subject to postponement or cancellation for any cause beyond the reasonable control of Compatible Systems, including without limitation: inability to obtain necessary materials and components;...