Nortel 1750 DM1401149E5 用户手册

• RIPv1, v2, Open Shortest Path First (OSPFv2), Border Gateway Protocol (BGP-4)
• 802.1Q VLAN routing
• Policy-based routing (next hop traffic filters)
• Virtual Router Redundancy Protocol (VRRP)
• Data Link Switching (DLSw); SNA encapsulation within IP
• Dynamic Routing over IPSec (RFC 3884)

• IPSec, including authentication header (AH), encapsulating security protocol (ES) and Internet key exchange (IKE)
• Point-to-point tunneling protocol (PPTP), including compression and encryption
• Layer 2 Tunneling Protocol (L2TP), including L2TP/IPSec
• Secure Sockets Layer (SSL) v2.0, 3.0 and Transport Layer Security (TLS) with SSL VPN Module

• Data Encryption Standard (DES)
• Triple DES (3DES) using 3 independent 56-bit keys; 168-bit key length (effective strength of 128 bits)
• Advanced Encryption Standard (AES); 128-bit and 256-bit versions 
• RC4

• X.509 Digital Certificates and Smart Cards (support for all major vendors and MS-CAPI)
• Remote authentication dial-in user services (RADIUS)
• Hard and soft token support (e.g., SecureID and AXENT)
• User name and password and NT Domain Login
• Internal or external lightweight directory access protocol (LDAP)

• Point-to-Point Protocol (PPP); including PPP over Ethernet (PPPoE)
• Frame Relay (including FRF.9 compression and FRF.12 fragmentation)
• ADSL (G.DMT, G.Lite, ANSI T1.413) with support for PPP and PPPoE over ATM
• Dial-on-demand and dial back-up services via integral V.90 modem or ISDN

• User and group-level configurable minimum bandwidth settings
• Eight forwarding priority queues 
• DiffServ (Differentiated Services) with code point marking
• 802.1p/DSCP (Differentiated Services Code Point) mapping
• Multi-level Random Early Detection (MRED)
• Resource Reservation Protocol (RSVP)

• IPComp (RFC 3173) for encrypted and non-encrypted traffic
• FRF.9 Frame Relay compression

• Event, system, security and configuration logging
• Internal and external RADIUS accounting
• Automatic archiving to external system

• Nortel VPN Router Multi-Element Manager provides multi-box provisioning for up to 2,500 VPN Router devices
• Full Web browser-based HTML configuration
• Nortel Command Line Interface 
• Easy Install utility for simple remote VPN Router set-up
• SNMP monitoring and alerts
• Three levels of administrator access; role-based management to separate service provider and end-user 

• Multi-layers stateful packet inspection supporting over 100 network application protocols, including TCP, UDP, FTP,

HTTP, H.323, RealAudio, Java and ActiveX

• Defense against major “hacker” attacks, including DOS, SYN flood, Smurf, Ping, Spoofing, Fraggle and ICMP unreachable
• Extensive and customizable logging options
• NAT, Proxy and end-user authentication
• Unlimited firewall users and policies for tunneled and non-tunneled traffic

• IPSec (with DES, 3DES and AES encryption) 
• Microsoft Windows 95, 98, 2000, ME, NT and XP-based clients (free/unlimited)
• Macintosh, IBM-AIX, SUN-Solaris, HP-UX, Linux and Windows Mobile (Pocket PC) via optional license

• Tunnel Guard enforces corporate security policies on endpoint PCs by checking for anti-virus, personal firewall or any

application software (e.g., patches) before allowing VPN connection

• Support for up to 1000 secure Web browser sessions (with SSL VPN Module)
• Access from Microsoft Internet Explorer, Netscape Navigator and Mozilla browsers
• Universal Access Portal provides transparent IPSec or SSL single sign-on by end-users
• Authentication via RADIUS, LDAP, X.509 certificates
• Auto-logoff and cache-cleaning of files and history

• ICSA (International Computer Security Association) 1.0d  certification (IPSec)  
• FIPS 140-2 (Federal Information Processing Standard for Security)
• Virtual Private Network Consortium (VPNC) Basic Conformance Testing (IPSec)

Technical specifications

Nortel VPN Routers

Model 1750

3