beautypg.com

Security, Routing – Nortel Networks BSR222 User Manual

Page 34

background image

34 Chapter 5 User Notes

NN47922-301

When defining a Client Termination account for another Business Secure Router
that will connect using Contivity Client Emulation, the following configuration is
required:

Encryption must be Triple DES with SHA1 integrity, or Triple DES with
MD5 integrity.

IKE Encryption must be Triple DES with Diffie-Hellman Group 2.

Perfect Forward Secrecy (PFS) must be enabled.

Security

1

Exporting or Saving Self-Signed Certificate

To export or save a self-signed certificate, click details (the icon that looks like a
paper note), then click 'Export' or copy the PEM text into the clipboard, and paste
into a file.

Routing

1

RIP Version Advertisement Control

To change the version of generated RIP advertisements, the following CLI
command needs to be used

ip rip mode [enif0|enif1] [in|out] [0|1|2|3]

where:

'enif0' is the LAN side, and 'enif1' is the WAN side

'in' affects recognition of received advertisements, and

'out' applies to generated advertisements

The number controls the operating mode:

None (disabled)

RIP-1 only

RIP-2 only