Product Bulletin

Nortel Networks

Contivity 1000 Series

Secure IP Services Gateways
Delivering security for the Internet The Contivity 1000 series of Secure IP
Services Gateways is the answer to enter-
The rise of the Internet provides enterprises with a unique opportunity
prises requiring low-cost connectivity
to realize cost savings in their internal and external communications.
across the Internet or managed IP
But the Internet was not designed with security in mind. Enterprises with
networks. Designed for small sites, the
mission-critical Internet applications must secure the data they transmit, Contivity 1000 portfolio provides IP
as well as protect their internal networks from outside intrusion. Legacy routing, Virtual Private Networking
routers—the traditional means of Internet connection—do not scale (VPN), stateful firewall, encryption,
to meet enterprise security needs without expensive add-ons and authentication, directory and policy
performance overhead. The Contivity 1000 series is a cost-effective solution services, Quality of Service (QoS), and
delivering secure, comprehensive IP services either in standalone mode bandwidth management services in a
or in conjunction with an existing router or Internet access device. single integrated platform.

Consisting of three separate models, the

Contivity 1000 series provides options for
small sites seeking Internet connectivity,
either for secure VPN communications or
for basic IP/Internet access. With options
that include integrated WAN port and
4-port Ethernet switch capability, the
Contivity 1010 Contivity 1000 series is a cost-effective,
all-in-one solution for small office/home
office environments. Its advanced routing
options and built-in VPN capabilities
make it ideal either for site-to-site or
remote access VPN applications, or for
simple Internet connectivity.
Contivity 1050
Serving the price-sensitive, small-user
segment of the secure IP services market,
the Contivity 1000 series can be installed

Contivity 1100
in a variety of scenarios. Medium to large Key benefits: support for LDAP, RADIUS, and X.509
businesses can deploy the Contivity 1000 • Low total cost of ownership digital certificates enables Contivity to
series as a small branch solution • Security by design interoperate with existing authentication
connecting back to their headquarters- • Flexible, secure IP services and/or directory systems.
based data center. Alternatively, the • Easy installation and management
Contivity 1000 can form the basis of a Easy installation and
site-to-site solution within an enterprise Further, as a market leader in IP Virtual management
or across enterprises in either a hub-and- Private Networking (IP VPN), Contivity Each Contivity 1000 unit has a built-in
spoke or small mesh configuration. In has been delivering on the promise of wizard allowing plug-and-play installation.
addition, the Contivity 1000 can serve secure end-to-end VPNs for years. IP The wizard automatically connects the
as an affordable headquarters solution VPN capabilities are embedded into Contivity 1000 unit to a predefined loca-
for a small business needing Internet every Contivity 1000 unit. tion for remote configuration and set-up,
access and/or secure IP services. avoiding costly technician calls to each site.
Flexible IP services With the same software and management
Low total cost of ownership As a standards-based solution, the
With its low-cost and integrated design, as higher-end Contivity devices, the
Contivity 1000 can interoperate with Contivity 1000 series offers a compre-
the Contivity 1000 is an affordable solu- existing routing, authentication, directory,
tion for enterprises. A single multi-service hensive management suite. This includes
and security systems and can bridge the Web-based and command-line based
device can address what used to require transition of new IP services. It can be
multiple discrete devices (e.g., router, configuration interfaces, SNMP, and
deployed as an Internet access device, accounting capabilities via a powerful set
VPN gateway, firewall) to solve. Further, secure VPN gateway, or firewall solution
new IP services can be added without of security and system logging tools. The
and can easily be upgraded with addi- Contivity Configuration Manager (CCM)
costly hardware upgrades. A flexible soft- tional services. Advanced routing software
ware licensing scheme allows Contivity further provides centralized configuration
enables Contivity to interoperate with solutions for up to 2,500 Contivity devices.
to be initially installed as a secure IP any existing router infrastructure. And
access device and later add more VPN
tunnel capacity, advanced routing, or
firewall services via a software license— Key Contivity 1000 series—
all while avoiding on-site visits from a
service technician. Features Benefits
Installation Wizard Plug-and-play installation out of the box for simple small
Security by design branch set-up. No technician or “truck roll” is needed.
Built on the same Secure Routing Modular WAN I/O Can act as primary WAN router either as a replacement of
existing solution or as new routing/VPN deployment.
Technology (SRT) framework found in
Dial back-up support Dial back-up if “primary” Internet (IP) connection goes
the rest of the Contivity product line, away or more bandwidth is needed.
the Contivity 1000 series is designed Advanced routing OSPF, VRR, and bandwidth management services allow
with security inherent to its operation. customers to design robust, high performance, and highly
SRT integrates the major functional available VPN networks that can scale.
components of Contivity—such as PPPoE Client, DHCP server, Allows for seamless IP VPN deployment behind broadband
DNS proxy, and NAT support services—such as DSL—with seamlessly inter-working with
management, access, routing, and dynamic ISP Internet connectivity.
policies—weaving a consistent security Extensive VPN and Broad support for both branch and remote access VPNs,
structure across these services. This security capabilities flexible internal/external authentication options, full PKI
provides scalability and high performance support, wire-speed encryption (3DES), and stateful firewall,
DoS protection.
even when running multiple IP services
4-port 10/100 Ethernet No need for an Ethernet switch or hub in small
in the same device. SRT also enables key switch option office/home office.
features, such as dynamic routing QoS and bandwidth Fine grain QoS insures mission-critical data traffic and/or
(RIP/OSPF) over secure IPSec tunnels, management delay-sensitive voice traffic gets the appropriate level of
common user security policies across service for business communications.
VPN, firewall and routing services, and Stateful Packet Firewall Low-cost, high performance firewall license allows
Contivity 1000 to provide firewall function rather than
the ability to turn up new IP services on purchasing a separate standalone box.
demand without impacting overall
performance.
Technical specifications—features and capabilities
Contivity VPN Services—1010, 1050, 1100
Routing and network • RIPv1, v2, Open Shortest Path First (OSPF), Virtual Router Redundancy Protocol (VRRP)
addressing • PPP over Ethernet (PPPoE), DHCP Client and Server, Domain Name Services (DNS) with VPN,
DNS Proxy

VPN tunneling • IPSec, including authentication header (AH), encapsulating security protocol (ESP), and
protocols Internet key exchange (IKE)
• Point-to-point tunneling protocol (PPTP), including compression and encryption
• Layer 2 Tunneling Protocol (L2TP), including L2TP/IPSec
• L2F
• 5 VPN tunnels in all base configurations, with support for management control tunnel
• Option to upgrade to 30 VPN tunnels with software license key activation

Encryption • IPSec-certified by the TruSecure (International Computer Security Association (ICSA)

• DES, 3DES, AES, RC4
• MD5 and SHA-1 authentication
• 3DES uses 3 independent 56-bit keys; 168-bit key length (effective strength of 128 bits)

WAN protocols • Point-to-Point Protocol (PPP)

and services • Frame relay
• Dial back-up via integral V.90 modem or over management/console port with external modem/ISDN
terminal adapter

Bandwidth management • Group and user-level configurable minimum bandwidth settings

• Priority levels using random early detection (RED)
• Four admission control levels; four forwarding priority levels
• Eight Differentiated Services (DiffServ) queues; code point marking; quality of service (QoS)
• Resource Reservation Protocol (RSVP)

Authentication services • User name and password and NT Domains Login

• Internal or external lightweight directory access protocol (LDAP)
• Remote authentication dial-in user services (RADIUS)
• Hard and soft token support (SecureID and AXENT)
• X.509 Digital Certificates and Smart Cards (support for all major vendors and MS-CAPI)

Data compression • Lemple-Ziv Standard (LZS) compression

Accounting • Internal and external RADIUS accounting

• Event, system, security, and configuration accounting
• Automatic archiving to external system

Management • Full Web-browser based HTML configuration

• Nortel Networks Command Line Interface (NNCLI)
• SNMP monitoring/alerts
• Four levels of administrator access; role-based management to separate service provider and end-user management
• Contivity Configuration Manager software provides multi-box configuration for up to 2,500 Contivity devices
• Configuration wizard for simple plug-and-play installation on Contivity 1000 series

Stateful Firewall • Multi-layered stateful packet inspection at wire speed with over 100 application layer gateways (ALGs),
including TCP, UDP, FTP, HTTP, H.323, RealAudio, Java, and Active X
• Defense against major “hacker” attacks, including DOS, SYN flood, Smurf, Ping, Spoofing, Fraggle,
ICMP unreachable
• Proxy authentication, extensive NAT support
• Extensive and customizable logging options

Contivity VPN Client • Microsoft Windows 95, 98, 2000, ME, NT, and XP based client (free/unlimited)
• IBM-AIX, SUN-Solaris, HP-UX, Linux, Macintosh (via software licence)
• Palm and Windows CE wireless devices also supported via third-party (MovianVPN) license
Technical specifications—physical and operational
Contivity 1010 Contivity 1050 Contivity 1100
Up to 30 tunnels Up to 30 tunnels Up to 30 tunnels
Components • Memory: 128 MB RAM; 32MB Flash • Memory: 128 MB RAM; 32MB Flash • Memory: 128 MB RAM; 32MB Flash
• 300 MHz processor • 300 MHz processor • 300 MHz processor
• LAN/WAN interfaces: • LAN/WAN interfaces: • Two PCI expansion slots
- 2 10/100BaseT Ethernet ports (RJ-45) - 1 10/100BaseT Ethernet (RJ-45) • LAN/WAN interfaces:
- Management/console port (DB-9) - 4-port 10/100 Ethernet switch (RJ-45) Standard
• Software: - Management/console port (DB-9) - 1 10/100BaseT Ethernet (RJ-45)
Standard • Software: - 4-port 10/100 Ethernet switch (RJ-45)
- Contivity O/S with 5 tunnels and Standard - Management/console port (DB-9)
RIPv2 routing - Contivity O/S with 5 tunnels and Optional
- Contivity VPN Client software RIPv2 routing - Additional 10/100BaseT Ethernet
for MS-Windows with unlimited - Contivity VPN Client software - Single-port V.35/X.21
distribution license for MS-Windows with unlimited - T1 with integrated CSU/DSU
Optional licenses distribution license - V.90 dial modem
- Contivity VPN upgrade to Optional licenses • Software:
30 VPN tunnels - Contivity VPN upgrade to Standard
- Contivity Stateful Firewall 30 VPN tunnels - Contivity O/S with 5 tunnels and
- Contivity Advanced Routing (OSPF, - Contivity Stateful Firewall RIPv2 routing
VRRP, bandwidth management) - Contivity Advanced Routing (OSPF, - Contivity VPN Client software
- Contivity Multi-OS VPN Client VRRP, bandwidth management) for MS-Windows with unlimited
for MAC and UNIX - Contivity Multi-OS VPN Client distribution license
• CD and on-line HTML documentation for MAC and UNIX Optional licenses
• CD and on-line HTML documentation - Contivity VPN upgrade to
30 VPN tunnels
- Contivity Stateful Firewall
- Contivity Advanced Routing (OSPF,
VRRP, bandwidth management)
- Contivity Multi-OS VPN Client for
MAC and UNIX
• CD and on-line HTML documentation
Physical Length: 8 in. (20.3 cm) Length: 8 in. (20.3 cm) Length: 10.5 in. (26.7 cm)
Width: 8.5 in. (21.6 cm) Width: 8.5 in. (21.6 cm) Width: 8.5 in. (21.6 cm)
Height: 1.75 in. (4.4 cm) Height: 1.75 in. (4.4 cm) Height: 1.75 in. (4.4 cm)
Weight: 2.65 lb (1.2 kg) Weight: 2.75 lb (1.25 kg) Weight: 3.8 lb (1.7 kg)
Operating Electrical: 10-240 VAC, 1.5A, 50-60 Hz Electrical: 10-240 VAC, 1.5A, 50-60 Hz Electrical: 10-240 VAC, 1.5A, 50-60 Hz
environment Temperature: 32-122o Fahrenheit Temperature: 32-122o Fahrenheit Temperature: 32-122o Fahrenheit
(0-50o Celsius) (0-50o Celsius) (0-50o Celsius)
Relative humidity: 10%-90% Relative humidity: 10%-90% Relative humidity: 10%-90%
non-condensing non-condensing non-condensing

In the United States:

Nortel Networks
35 Davis Drive
Research Triangle Park, NC 27709
USA

In Canada:
Nortel Networks
8200 Dixie Road, Nortel Networks is an industry leader and innovator focused on transforming how the world
Suite 100
Brampton, Ontario L6T 5P6
communicates and exchanges information. The company is supplying its service provider and
Canada enterprise customers with communications technology and infrastructure to enable value-added
IP data, voice and multimedia services spanning Metro and Enterprise Networks, Wireless Networks,
In Caribbean and Latin America: and Optical Long Haul Networks. As a global company, Nortel Networks does business in more than
Nortel Networks
150 countries. More information about Nortel Networks can be found on the web at:
1500 Concorde Terrace
Sunrise, FL 33323
USA www.nortelnetworks.com
In Europe: For more information, contact your Nortel Networks representative, or
Nortel Networks
call 1-800-4 NORTEL or 1-800-466-7835 from anywhere in North America.
Maidenhead Office Park
Westacott Way
Maidenhead Berkshire SL6 3QH GSA Schedule GS-35F-0140L
UK 1-888-GSA-NTEL

In Asia: Nortel Networks, the Nortel Networks logo, the globemark design, and Contivity are trademarks of Nortel Networks.
Nortel Networks Asia All other trademarks are the property of their owners
6/F Cityplaza 4, Copyright © 2002 Nortel Networks. All rights reserved. Information in this document is subject to change
Taikooshing, without notice. Nortel Networks assumes no responsibility for any errors that may appear in this document.
12 Taikoo Wan Road,
Hong Kong NN100124-0902