Download Print this page

Nokia IP1220 Installation Manual

Security platform, ip01200/ip1200 series.
Hide thumbs

Advertisement

IP01200 Series
Security Platform
Installation Guide
Part No. N450897005 Rev A
Published May 2005

Advertisement

Chapters

   Also See for Nokia IP1220

   Related Manuals for Nokia IP1220

   Summary of Contents for Nokia IP1220

  • Page 1

    IP01200 Series Security Platform Installation Guide Part No. N450897005 Rev A Published May 2005...

  • Page 2

    Rights clause at FAR 52.227-19. IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...

  • Page 3

    Singapore 119968 Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 050113 Nokia IP01200 Series Security Platform Installation Guide...

  • Page 4

    IP1220 IP1260 www.anatel.gov.br Nokia IP1200 Series Security Platform Installation Guide...

  • Page 5: Table Of Contents

    Overview ......... . . 19 About the Nokia IP01200 Series Security Platform ... . 19 About the Nokia IP01200 Series Diskless Security Platforms .

  • Page 6

    Your Security Platform ........50 Using Nokia Horizon Manager ......51 Installing the Nokia IP1200 Series Security Platform .

  • Page 7

    Booting the System ........94 Using the Boot Manager to Install Nokia IPSO ....95 Protecting the Boot Manager with a Password .

  • Page 8

    Before You Begin ........122 Installing a Nokia Encryption Accelerator Card ....126 Before You Begin .

  • Page 9

    Index ..........155 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 10

    Nokia IP1200 Series Security Platform Installation Guide...

  • Page 11

    Figure 4 Pin Assignments for Modem Connection ... 28 Figure 5 Nokia IP1200 Series Security Platform System Status LEDs ........29 Figure 6 Hard-Disk Drive Front Panel .

  • Page 12

    Figure 20 Location of Hard Disk Drives ....108 Figure 21 DIMM Socket Locations ..... . 121 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 13

    Table 1 Text Conventions ......17 Table 2 Nokia IP1200 Series Security Platform Specifics ..20 Table 3 PMC Expansion Slots .

  • Page 14

    Nokia IP1200 Series Security Platform Installation Guide...

  • Page 15: About This Guide

    About this Guide This manual provides information for the installation and use of the Nokia IP1200 Series Security Platforms. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. This preface provides the following information: In This Guide...

  • Page 16: Conventions This Guide Uses

    Caution Cautions indicate potential equipment damage, equipment malfunction, loss of performance, loss of data, or interruption of service. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 17: Text Conventions

    • Emphasizes a point or denotes new terms at the place where Italics they are defined in the text. • Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name Nokia IP1200 Series Security Platform Installation Guide...

  • Page 18: Related Documentation

    About this Guide Related Documentation You can find this guide in PDF on the Nokia support Web site (https:// support.nokia.com/) and on the Nokia IPSO Operating System CD-ROM issued with your Nokia IP1200 Series Security Platform. In addition to this guide, documentation for this product includes the...

  • Page 19: Overview

    Software Requirements About the Nokia IP1200 Series Security Platform The Nokia IP1200 Series Security Platform combines the power of the Nokia IPSO operating system with the Nokia Secure Access System and firewall applications. The Nokia IP1260 Security Platform is a high-end, multi port security platform that is ideally suited for the enterprise data center.

  • Page 20

    I/O slots. Each PMC carrier supports two PMC network interface cards (NICs) for a total of four NICs. These network interfaces provide exceptional data forwarding and monitoring performance when used with Nokia and partner applications. The front panel of the IP1200 Series also contains: two storage device slots...

  • Page 21: About The Nokia Ip01200 Series Diskless Security Platforms

    1 GB or 2 GB 512 MB, 1 GB Nokia IP1260 1 GB or 2 GB 512 MB, 1 GB Note The IP1220 and IP1260 model numbers are used for both disk-based IPSO and diskless IPSO. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 22: Managing The Nokia Ip1200 Series Security Platform

    Nokia IP1200 Security Platform Diskless Configuration Guide. Managing the Nokia IP1200 Series Security Platform You can manage the Nokia IP1200 Series Security Platform by using the following interfaces: Nokia Network Voyager—an SSL-secured, Web-based element management interface to Nokia IP security platforms. Network Voyager is preinstalled on the IP1200 Series and enabled through the IPSO operating system.

  • Page 23

    Managing the Nokia IP1200 Series Security Platform 2,500 Nokia IP security platforms, offering administrators the most rapid and dependable upgrade to Check Point NG. For information about how to obtain Horizon Manager, contact your Nokia solution provider or see the “Nokia Contact Information”...

  • Page 24: Nokia Ip1200 Series Security Platform Overview

    Overview Nokia IP1200 Series Security Platform Overview Figure 1 shows the component locations for the Nokia IP1200 Series Security Platform. Figure 1 Component Locations Front View System status LEDs Dual 6U PMC carrier expansion slots 1 and 2 Hard disk drive A Hard disk drive B 00307a.2...

  • Page 25: Ethernet Management Ports

    PMC Expansion Slots The IP1200 Series uses two 6U dual PMC carriers in slot 1 and slot 2 to provide up to four expansion subslots for the NICs listed in Table Nokia IP1200 Series Security Platform Installation Guide...

  • Page 26: Console Port

    Nokia products only support NICs purchased from Nokia or Nokia- approved resellers. The Nokia Global Support Services group can only provide support for Nokia products that use Nokia-approved accessories. For sales or reseller information, contact a Nokia service provider listed in “Nokia Contact Information” on page 3.

  • Page 27: Serial (aux) Port

    Serial (AUX) Port Use the built-in serial (AUX) port, shown in Figure 1, to establish a modem connection for managing the appliance remotely or out-of-Band. Figure 4 provides pin assignment information for modem connections. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 28: System Status Leds

    4 (DTR) System Status LEDs You can visually monitor the status of the Nokia IP1200 Series Security Platform by checking the system status LEDs. The system status LEDs are located on the center of the front panel, as shown in...

  • Page 29: Figure 5 Nokia Ip1200 Series Security Platform System Status

    Nokia IP1200 Series Security Platform Overview Figure 5 Nokia IP1200 Series Security Platform System Status LEDs Power/Status Warning Fault 00307d Table 5 shows the system status LEDs and describes their meaning. Table 5 System Status LEDs Status Indicator Meaning Symbol...

  • Page 30: Hard Disk Drives

    The Nokia IP1200 Series Security Platform supports up to two hard disk drives. The IP1260 comes with two hard disk drives as the standard package. The IP1220 comes with one hard disk drive; a second one is optional. The hard disk drives support hot swapping, and an optional disk-mirroring feature, described in the following section.

  • Page 31: Hard-disk Drive Hot Swap Feature

    Nokia IP1200 Series Security Platform Overview For more information about disk mirroring, including configuration details, see the Nokia Network Voyager Reference Guide and the IPSO Release Notes and Getting Started Guide for the version of IPSO you are running. Hard-Disk Drive Hot Swap Feature...

  • Page 32: Power Supplies And Fan Unit

    Do not remove the hard disk drive if the Status LED is blinking green. Power Supplies and Fan Unit The power supplies and fan unit are located at the rear of the IP1200 Series, as shown in Figure Nokia IP1200 Series Security Platform Installation Guide...

  • Page 33: Power Supplies

    The Nokia IP1200 Series Security Platform supports up to two power supplies for power sharing and redundancy. The IP1260 comes with two power supplies as the standard package. The IP1220 comes with power supply; a second one is optional. The power supplies are hot swappable and perform load sharing while two active power supplies are installed, increasing the life of the power supplies.

  • Page 34: Figure 8 Power Supply, Cooling Fan, And Power Switch Locations

    Overview Caution The Nokia IP1200 Series power supply might be hot to the touch when the power supply unit is plugged in to an AC power source and the power supply is not turned on. This is because the internal...

  • Page 35: Fan Unit

    The system status LEDs on the front panel of the appliance show the status of the fan unit. For more information about the system status LEDs, see “System Status LEDs” on page 28. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 36: Site Requirements, Warnings, And Cautions

    Replace the battery only with the same or equivalent type battery recommended by the manufacturer. Dispose of used batteries according to the manufacturer's instructions. Caution Do not block any of the ventilation holes on the appliance. The components might overheat and become damaged. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 37: Software Requirements

    Firewall and VPN software requirements—Check Point NG FP3 (hf2) VPN-1/FireWall-1 or later. Nokia Secure Access System v1.02 or later The Nokia IP1220 Security Platform supports the following operating system and applications as of the publication date for this guide: Nokia operating system software requirements—IPSO v3.8 or later.

  • Page 38

    Overview Nokia IP1200 Series Security Platform Installation Guide...

  • Page 39: Performing The Initial Configuration

    Performing the Initial Configuration The first time you turn on power to a Nokia IP1200 Series Security Platform, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account. You can perform the initial configuration in two ways: Configure a DHCP server to provide the initial configuration information the first time the appliance is started.

  • Page 40: Using A Console Connection

    Replacing Other Components.” Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series Security Platform, you must use a serial console connection (cable included). After you perform the initial configuration, you no longer need the console connection.

  • Page 41

    For cable pin assignments for the console connection, see “Console Port” on page 26. 2. Connect the other end of the cable to the VT100 console or to a system running a terminal-emulation program. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 42: Connecting Power And Turning The Power On

    Caution To avoid potential service interruptions from momentary facility power interruptions and potential power spikes that might damage your equipment, Nokia strongly recommends that you use an uninterruptible power supply (UPS) with surge protection with your IP1200 Series. To connect the power supply 1.

  • Page 43

    (115 VAC or 220 VAC [85 to 264]) and configures itself appropriately. 4. Check the power LED (the Nokia logo) on the front panel of the appliance to ensure that the power supply is operating correctly. The power LED should be illuminated. For more information about the system status LEDs, see “System Status LEDs”...

  • Page 44: Performing The Initial Configuration

    Performing the Initial Configuration Performing the Initial Configuration If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series Security Platform, you must use a serial console connection (cable included). After you perform the initial configuration, you no longer need the console connection.

  • Page 45

    Nokia software release you are running. 4. When you are prompted to select an interface, Nokia recommends that you select one of the Ethernet management interface ports. To select an interface, enter the number adjacent to the physical ID in the list of connected interfaces.

  • Page 46: Connecting Network Interfaces

    Voyager to configure the remaining network ports. Connecting Network Interfaces Connect at least one network interface to the network to use as the Nokia Network Voyager system-management interface. This interface is configured during the initial configuration process, which is described in Chapter 2, “Performing the Initial Configuration.”...

  • Page 47: Using Nokia Network Voyager To Manage Your Security Platform

    80. Using Nokia Network Voyager to Manage Your Security Platform Use Nokia Network Voyager to configure and monitor your IP1200 Series. For additional information about how to use Network Voyager, see “Accessing Nokia Network Voyager Reference Information” “Nokia Network Voyager Inline Help”...

  • Page 48: Accessing Nokia Network Voyager Reference Information

    Accessing Nokia Network Voyager Reference Information As you use Nokia Network Voyager, the Nokia Network Voyager Reference Guide and Voyager inline help are available for you to use. You can access both information sources from the Network Voyager interface, Figure 10 shows.

  • Page 49: Nokia Network Voyager Reference Guide

    CD that was delivered with your appliance (see the doc folder). Nokia Network Voyager Inline Help You can access inline help when you use Nokia Network Voyager. Inline help is the context-sensitive information source for Network Voyager. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 50: Using Nokia Network Voyager To Monitor A Nokia Ip1200 Series Security Platform

    CLI. clish For further information about establishing a connection with and invoking the CLI, see the Nokia CLI Reference Guide for IPSO-SX for the version of IPSO-SX you are using. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 51: Using Nokia Horizon Manager

    Using Nokia Horizon Manager Using Nokia Horizon Manager You can use Horizon Manager to install and upgrade the Nokia proprietary Nokia IPSO operating system. For information about how to obtain Horizon Manager, see the “Nokia Contact Information” on page 3.

  • Page 52

    Performing the Initial Configuration Nokia IP1200 Series Security Platform Installation Guide...

  • Page 53: Installing The Nokia Ip1200 Series Security Platform

    Installing the Nokia IP1200 Series Security Platform This chapter describes how to install the Nokia IP1200 Series Security Platform. The following topic is discussed: Rack Mounting the Security Platform Before You Begin Caution To help guard against electrostatic discharge damage, make sure...

  • Page 54: Before You Begin

    Installing the Nokia IP1200 Series Security Platform Note To avoid damaging your equipment, Nokia recommends that you use all four rack-mounting bolts when you install your appliance on the rack. Figure 11 Rack-Mounting Screw Locations 00307a.2 Rack-mounting screw locations Two rack-mounting positions allow you to mount the security platform either flush with the rack, or four inches forward of the equipment rack.

  • Page 55

    Do not over tighten the nuts. 6. Attach the grounding cable to an earth ground or other grounding point to meet the specifications of your installation site. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 56

    Installing the Nokia IP1200 Series Security Platform To rack mount the security platform Caution The security platform is heavy. Use care when you remove it from the packaging. 1. Remove the appliance from the packaging. 2. Optionally, remove the fan unit from the back of the appliance.

  • Page 57

    Locate the power supply on the back of the IP1200 Series and the two screws that secure it. 00308a Power supplies b. Remove the two retaining screws. c. Remove the grounding lugs. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 58

    Installing the Nokia IP1200 Series Security Platform d. Use the handles to gently pull the power supply out of the chassis. 00317.1 4. Optionally, remove the chassis assembly from the appliance. Caution To help guard against electrostatic discharge damage, make sure...

  • Page 59

    Slide the chassis assembly forward and pull it entirely out of the appliance. 00326a.2 c. Place the chassis assembly on a properly grounded surface. 5. Adjust the mounting brackets on the side of the appliance if necessary. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 60

    Installing the Nokia IP1200 Series Security Platform 6. Mount the appliance into a standard 19-inch rack by using the mounting screws located on the mounting brackets. 7. Slide the chassis assembly back into the appliance until it clicks into place, and resecure the four chassis assembly retaining screws.

  • Page 61: Installing And Replacing Network Interface Cards

    Installing and Replacing Network Interface Cards The Nokia IP1200 Series Security Platform may come with one of the network interface cards (NICs) you ordered already installed. All NICs installed in the IP1200 Series are housed in a 6U PMC carrier. Network interface cards in the 6U PMC carrier are hot swappable.

  • Page 62: Removing, Installing, And Replacing Nics

    To remove, install, or replace a NIC you need the following: Phillips-head screwdriver Suitable, grounded work surface on which to place the PMC carrier Replacement or new NIC Nokia IP1200 Series Security Platform Installation Guide...

  • Page 63

    Pressing both red buttons on the front of the ejection or locking levers disengages the lock and removes power from the PMC carrier. The power LED on the front of the PMC carrier is extinguished when the power is removed. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 64

    I L O Release or lock into place 00310b.2 5. Continue to press or push the levers outward until the PMC carrier is released and extends slightly beyond the front panel of the IP1200 Series. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 65

    00310a.2 7. Locate the bezel retaining screws, used to keep the NIC attached, on the underside of the PMC carrier. 8. Remove the two bezel retaining screws with a Phillips screwdriver. 00311 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 66

    Proceed to step 9. Locate and remove the two card retaining screws from the back of the NIC. 00312 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 67

    Insert the NIC front bezel into the PMC carrier and gently push the back of the NIC down toward the chassis assembly. Make sure that the NIC edge is completely seated into the connectors on the chassis assembly. 00314 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 68

    NIC you have removed. 12. From the top of the PMC carrier, screw the NIC retaining screws into the standoffs on the back of the NIC. 00312 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 69

    14. Insert the PMC carrier back into its original slot on the front of the IP1200 Series until it clicks into place. 15. Press both levers to make sure that they are locked into place and power is restored to the card carrier. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 70: Configuring And Activating Interfaces

    The power indicator LED on the PMC carrier illuminates green. 00315.2 If you are replacing a NIC with a new NIC of the same type, the Nokia IPSO operating system automatically recognizes the NIC and applies the original configuration to the new NIC.

  • Page 71: Monitoring Network Interface Cards

    LED status indicators on each NIC. The status indicators for each NIC are explained in Chapter 5, “Connecting PMC Network Interface Cards.” Use Nokia Network Voyager to access detailed port information. For information about how to access Network Voyager, see “Accessing Nokia Network Voyager Reference Information”...

  • Page 72

    Installing and Replacing Network Interface Cards Nokia IP1200 Series Security Platform Installation Guide...

  • Page 73: Connecting Pmc Network Interface Cards

    Connecting PMC Network Interface Cards This chapter describes the network interface cards available for the Nokia IP1200 Series Security Platform and how to connect those NICs to your network. The following NICs are described: Four-Port and Dual-Port 10/100 Ethernet NICs...

  • Page 74

    (shown in Figure 1 page 24) provides a chassis grounding point. If you do not have a grounding wrist strap, make sure you are properly grounded before you touch any electronic component. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 75: Four-port And Dual-port 10/100 Ethernet Nics

    PCI operation at 33 MHz and 66 MHz Compliance with IEEE 802.3z Gigabit Ethernet specification You can configure and monitor Ethernet NIC interfaces by using Nokia Network Voyager. Specifically, you set the port speed and full-duplex or half-duplex mode with Network Voyager.

  • Page 76: Figure 12 Four-port 10/100 Ethernet Nic Front Panel Details

    After the power is turned on and the cables are connected, the Ethernet link LEDs on both the IP1200 Series and on the remote equipment illuminate to indicate the connection. As data is transmitted, the activity LEDs on the appliance illuminate. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 77: Ethernet Nic Connectors And Cables

    RJ-45 cable. The connector is numbered from right to left, with the copper tabs facing up and toward you. Figure 14 Output Connector for the Ethernet Cable Assignment TX + TX - 00270 RX + RX - Nokia IP1200 Series Security Platform Installation Guide...

  • Page 78: Dual-port Fiber-optic Gigabit Ethernet Nic

    Figure 15 Ethernet Crossover-Cable Pin Connections 00017.1 Dual-Port Fiber-Optic Gigabit Ethernet NIC The IP1200 Series supports Nokia-approved, dual-port fiber-optic Gigabit Ethernet NICs installed on a 6U PMC carrier. The IP1200 Series can accommodate up to four Gigabit Ethernet NICs. When you purchase a Gigabit Ethernet NIC with your IP1200 Series, the NIC is installed before the appliance is delivered to you.

  • Page 79: Fiber-optic Gigabit Ethernet Nic Features

    Link speed auto advertising Hot swapping tracing through tcpdump Compliance with IEEE 802.3z Gigabit Ethernet specification You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you set the port speed and full-duplex mode with Network Voyager.

  • Page 80: Fiber-optic Gigabit Ethernet Nic Connectors And Cables

    You can order appropriate adapter cables separately from a cable vendor of your choice. Dual-Port Copper Gigabit Ethernet NIC The Nokia IP1200 Series Security Platform supports Nokia-approved, dual-port copper Gigabit Ethernet NICs installed on a 6U PMC carrier. The IP1200 Series can accommodate up to four Gigabit Ethernet NICs.

  • Page 81: Performance Considerations

    Compliance with IEEE 802.3z and 802.3ab Gigabit Ethernet specifications Cable autosensing You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you can use Network Voyager to set the port speed and full-duplex mode to 1000, 100, or 10 Mbps.

  • Page 82: Figure 17 Dual-port Copper Gigabit Ethernet Nic Front Panel

    The Link LED on the NIC is bicolored. A green LED indicates a 1 Gbps link speed, and a yellow LED indicates a 10/100 Mbps link speed. As the NIC transmits data, the activity LEDs on the appliance illuminate. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 83: Dual-port Copper Gigabit Ethernet Nic Connectors And Cables

    Class B emissions requirements. Note Nokia copper Gigabit Ethernet NICs support cable autosensing. You can use a straight-through or crossover cable to connect the NIC to a gigabit hub or switch or to connect directly to a host.

  • Page 84: Figure 18 Ethernet Cable Connector Output Pin Assignments

    Connecting PMC Network Interface Cards Figure 18 Ethernet Cable Connector Output Pin Assignments Gigabit Ethernet 10/100 Mbps Pin# Assignment Assignment BI_DA+ 00270 BI_DA- BI_DB+ BI_DC+ BI_DC- BI_DB- BI_DD+ BI_DD- Nokia IP1200 Series Security Platform Installation Guide...

  • Page 85

    As data is transmitted or received, the activity LEDs on the appliance illuminate. To connect the IP1200 Series to other network components, you can order appropriate adapter cables separately from a cable vendor of your choice. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 86

    Connecting PMC Network Interface Cards Nokia IP1200 Series Security Platform Installation Guide...

  • Page 87: Using The Boot Manager

    Installing the Boot Manager Upgrading the Boot Manager When you first receive your Nokia IP1200 Series Security Platform, the boot manager uses factory-default parameters (such as kernel, and boot device) for the boot process. The factory defaults cause the appliance to bypass the boot manager prompt after a three-second wait.

  • Page 88: Variables

    Default is three seconds. boot-file Name of the operating system kernel file. Default is /image/current/kernel. boot-flags String of flags passed to the kernel. Default is -x. boot-device Device from which the boot-file loads. Default is wd0. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 89: Viewing The Variables And Other System Parameters

    The command has the following syntax: printenv For example: BOOTMGR[93]> printenv NOKIA IPSO BOOTMGR VERSION=3.7 07.05.2003-130000 autoboot: YES testboot: NO bootwait: 3 boot-file: /image/current/kernel boot-flags: boot-device: wd0 vendor: Nokia model: IP bmslice: 4 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 90: Sysinfo

    0:30:30:0:20:10 speed 10M full duplex eth-s3p2: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:30:30:0:20:11 speed 10M full duplex eth-s3p3: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:30:30:0:20:12 speed 10M full duplex eth-s3p4: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:30:30:0:20:13 speed 10M full duplex loop0: flags=10b<UP,LINK,LOOPBACK,PRESENT> soverf0: flags=2923<UP,LINK,MULTICAST,PRESENT,IPV6ONLY> stof0: flags=2903<UP,LINK,PRESENT,IPV6ONLY> tun0: flags=107<UP,LINK,POINTOPOINT,PRESENT> Nokia IP1200 Series Security Platform Installation Guide...

  • Page 91: Setting The Variables

    For example: BOOTMGR[2]> setenv autoboot YES sets the value of autoboot to YES. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 92: Unsetenv

    The command has the following syntax: set-defaults name where name is the name of the variable to be set to its factory default. If name is not specified, all variables are set to their factory defaults. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 93: Setalias

    Use the unsetalias command to clear an alias. The command has the following syntax: unsetalias name where name is the name of the alias to be cleared. For example, the following command deletes the alias from the list of disk aliases: BOOTMGR[2]> unsetalias disk Nokia IP1200 Series Security Platform Installation Guide...

  • Page 94: Other Commands

    Booting the System The boot command lets you boot up the Nokia IPSO operating system. It allows you to set the boot device, boot file, and boot flags from the command line. The command has the following syntax:...

  • Page 95: Using The Boot Manager To Install Nokia Ipso

    (the hard disk drive) boot-file /image/current/kernel boot-flags Using the Boot Manager to Install Nokia IPSO Use the install command to install Nokia IPSO. The syntax of the command install For complete installation procedures, see the appropriate version of release notes. Note Using the install command to perform a full installation deletes the existing IPSO image on the IP1200 Series.

  • Page 96: Protecting The Boot Manager With A Password

    Using the Boot Manager Protecting the Boot Manager with a Password To prevent accidental or unauthorized access to the hard disk on your Nokia IP1200 Series Security Platform, you can require that the user enter a password to access the boot manager install command. Use the password command to set the password.

  • Page 97: Installing The Boot Manager

    Nokia IPSO (the operating system), not from the boot manager. To install the new boot manager, at the Nokia IPSO command prompt enter: /etc/install_bootmgr wd1 /image/current/bootmgr/nkipflash The command installs the new boot manager image (nkipflash) into the flash device (wd1).

  • Page 98

    Nokia Customer Support site as listed in “Nokia Contact Information” page 3. 2. At the Nokia IPSO command prompt, enter: /etc/upgrade_bootmgr wd1 /etc/nkipflash The command upgrades the boot manager with the new image (nkipflash), writing it into the hard disk drive (wd0). The upgrade takes some time to complete.

  • Page 99: Troubleshooting

    Troubleshooting This chapter provides troubleshooting tips, problems, and solutions related to Nokia IP1200 Series Security Platform installations. For information about how to reinstall the Nokia IPSO operating system onto your appliance, see Chapter 6, “Using the Boot Manager.” General Troubleshooting Information The information in this section relates to problems you might encounter during the IP1200 Series installation.

  • Page 100

    Problem Database is corrupt. Solution Return to default settings as described in “To reset the default database settings” on page 102, or contact the Nokia customer support site listed in “Nokia Contact Information” on page 3. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 101

    5. Enter the following command to reset the password from the command line by using a blank password: dbpasswd admin newpassword "" The two double quotation marks at the end of the command properly indicate a blank password. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 102

    Chapter 2, “Performing the Initial Configuration.” To reset the default database settings 1. Log in to the IP1200 Series as admin by using Nokia Network Voyager. For information about how to access Network Voyager and the related reference materials, see “To open Nokia Network Voyager”...

  • Page 103

    General Troubleshooting Information complete the full installation procedure, see the current release notes. The release notes are located on the Nokia customer support Web site as “Nokia Contact Information” listed in the on page 3. Not Able to Connect to Nokia Network Voyager Using the Ethernet Port, But Console Access Works Problem Using the wrong Ethernet cable.

  • Page 104

    Ethernet connection (10 Mbps, 100 Mbps, or 1000 Mbps). Problem Port not enabled. Solution Verify from the Interface page in Nokia Network Voyager that the interface port is configured as active. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 105

    Problem The DIMMs are not properly seated in DIMM sockets. Solution Repeat memory installation procedures. Make sure DIMMs are fully seated in sockets. Be sure DIMMs click into place. Make sure DIMMs are seated in adjacent slots J5/J6 and/or J7/J8. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 106

    Troubleshooting Nokia IP1200 Series Security Platform Installation Guide...

  • Page 107: Installing And Replacing Other Components

    This chapter provides information about how to add or replace field- replaceable units (FRUs) other than network interface cards (NICs) in your Nokia IP1200 Series Security Platform. The following topics are covered: Replacing a Hard Disk Drive Replacing the Compact Flash Memory Card...

  • Page 108: Replacing A Hard Disk Drive

    The Nokia IP1200 Series Security Platform supports up to two hard disk drives with the disk mirroring feature in the Nokia IPSO operating system. If the appliance has only one hard disk drive installed, it is in the top slot (slot A).

  • Page 109: Disk Mirroring

    If your IP1200 Series contains two hard disk drives when you receive it, the disk-mirroring feature is already enabled. For more information about disk mirroring, including configuration details, see the Nokia Network Voyager Reference Guide and the IPSO Release Notes and Getting Started Guide. Hard Disk Drive Hot Swap Feature A hot swap button is located on the front panel of each hard disk drive.

  • Page 110: Before You Begin

    • Disk mirroring is not enabled. • You press the hot swap button on the source hard disk drive. Before You Begin To upgrade or replace a Nokia IP1200 Series Security Platform hard disk drive, you need: Physical access to the appliance...

  • Page 111: Removing And Replacing A Hard Disk Drive

    Replacing a Hard Disk Drive Removing and Replacing a Hard Disk Drive If you have disk mirroring configured on your Nokia IP1200 Series Security Platform, you can remove a failed hard disk drive without shutting down the system. You must replace the hard disk drive with a drive that has a capacity equal to or larger than the drive you are replacing.

  • Page 112

    4. When the status LED stops blinking, use your thumb or forefinger to press the ejector and locking lever to eject the hard disk drive from the chassis. Push red button to disengage lock Release or lock into place 00320 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 113

    9. Press the recessed hot swap button again to restore power to the hard disk drive. The IP1200 Series recognizes the new hard disk drive. 10. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 114

    2. Loosen the retaining screws on both sides of the hard disk drive. Caution To avoid damage to the ejection lever, loosen the retaining screw behind each ejection lever before you remove the hard disk drive. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 115

    3. Use your thumb or forefinger to press the ejector and locking lever on the hard disk drive that you are removing to eject the hard disk drive from the chassis. Push red button to disengage lock Release or lock into place 00320 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 116: Replacing The Compact Flash Memory Card

    7. Press the hot swap button to restore power to the hard disk drive. The IP1200 Series recognizes the new hard disk drive. 8. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. Replacing the Compact Flash Memory Card The compact flash memory is located in a slot on the motherboard near the front of the chassis.

  • Page 117

    Replacing the Compact Flash Memory Card 00505 To replace the Nokia IP1200 Series compact flash memory card, you need: Physical access to the appliance Access to the appliance by using Nokia Network Voyager or the CLI A Phillips-head screwdriver Replacement compact flash card and accompanying documentation You must perform an orderly shutdown of the appliance and turn the power off whenever you open the chassis assembly to service internal components.

  • Page 118

    IP1200 Series security platform. For information about how to access Network Voyager and the related reference materials, see “Using Nokia Network Voyager to Manage Your Appliance” on page 46. 2. Press the on-off switch, located on each power supply at the back of the appliance, to turn off power to the IP1200 Series security platform.

  • Page 119

    5. Loosen the chassis assembly retaining screws on the front panel of the appliance. 00507 6. Slide the chassis assembly forward to expose the compact flash memory slot on the IP1200 Series security platform motherboard. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 120: Replacing Or Upgrading Memory

    Make sure you turn on both power supplies. Replacing or Upgrading Memory The Nokia IP1200 Series Security Platform has four dual inline memory- module (DIMM) sockets. This section describes how to upgrade or replace the memory by using a Nokia-approved memory upgrade kit.

  • Page 121

    DIMMs and can be upgraded to a maximum of 2 GB of RAM. The IP1220 security platform comes with 512 MB of memory in two 256 MB DIMMs and can be upgraded to a maximum of 2 GB of RAM.

  • Page 122: Before You Begin

    To add or replace DIMMs 1. Use Nokia Network Voyager or Lynx to perform an orderly shutdown of the IP1200 Series. For information about how to access Network Voyager and the related reference materials, see “To open Nokia Network Voyager”...

  • Page 123

    2. Loosen the four front panel retaining screws. 00307a.2 Chassis assembly retaining screws 3. Slide the chassis assembly forward to expose the DIMM sockets on the IP1200 Series motherboard. 4. Pull the chassis assembly entirely out of the appliance. 00326a.2 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 124

    The top of the DIMM is smooth. The bottom edge has two different- length sets of contacts, which mate with the slots on the socket. Be sure the contacts and slots are properly aligned before you insert the DIMM. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 125

    The retaining clips move into the lock position as you press the DIMM into place. 7. Slide the chassis assembly back into the appliance until it clicks into place. 00326b.2 8. Resecure the four chassis assembly retaining screws. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 126: Installing A Nokia Encryption Accelerator Card

    Installing and Replacing Other Components The IP1200 Series automatically recognizes the new memory configuration. You can verify the configuration by using Nokia Network Voyager or Lynx. Installing a Nokia Encryption Accelerator Card The Nokia IP1200 Series Security Platform supports a Nokia encryption accelerator card to further enhance VPN performance.

  • Page 127: Before You Begin

    To install the accelerator card 1. Use Nokia Network Voyager or Lynx to shut down the IP1200 Series. For information about how to access Network Voyager and the related reference materials, see “To open Nokia Network Voyager”...

  • Page 128

    Installing and Replacing Other Components 2. Loosen the four front-panel retaining screws. 00307a.2 Chassis assembly retaining screws 3. Slide the chassis assembly forward to expose the motherboard components. 00326a.2 4. Locate the PMC connectors on the motherboard. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 129

    Do not use the PMC connectors located at the front of the motherboard for the acceleration card. Those connectors are for the management card. 5. Position the three male PMC connectors on the card over the three female PMC connectors on the motherboard. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 130

    Reseating the chassis assembly automatically restores power to the appliance. 11. Configure your software to use hardware acceleration by following the instructions in “Configuring Software to Use Hardware Acceleration” page 131. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 131: Configuring Software To Use Hardware Acceleration

    Installing a Nokia Encryption Accelerator Card Configuring Software to Use Hardware Acceleration Use Nokia Network Voyager to configure virtual private network (VPN) tunnels to use hardware acceleration. This step is necessary for the optional encryption accelerator card on the IP1200 Series.

  • Page 132: Installing A Fan Unit

    To replace a fan unit 1. Locate the fan unit on the back of the IP1200 Series and the four retaining screws that secure it. 00308a Fan unit 2. Loosen the retaining screws by turning them counterclockwise. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 133: Installing Or Replacing A Power Supply

    5. Tighten the four retaining screws on the new fan unit. Installing or Replacing a Power Supply The power supplies in the Nokia IP1200 Series Security Platform are hot swappable, and perform load sharing while two active power supplies are connected in parallel.

  • Page 134

    In this situation, the power supply still meets all safety standards.This condition is normal and does not affect the performance of the Nokia IP1200 Series. To cool the power supply down, use the power supply switch to turn on power and activate the integrated cooling fan.

  • Page 135: Before You Begin

    5. Use the handles to gently pull the power supply out of the chassis. 00317.1 6. Insert the new power supply into the empty bay. 7. Replace the grounding lugs. 8. Reinstall the two retaining screws. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 136: Monitoring The Nokia Ip1200 Series Security Platform Power Supply

    Monitoring the Nokia IP1200 Series Security Platform Power Supply You can monitor the status of the Nokia IP1200 Series Security Platform power supply with Nokia Network Voyager. Similarly, you can also use the command-line interface (CLI). For information about the CLI, see the CLI Reference Guide.

  • Page 137

    Replacing the Compact Flash Memory Card Access to the appliance by using Nokia Network Voyager or the CLI A Phillips-head screwdriver Replacement compact flash card and accompanying documentation You must perform an orderly shutdown of the appliance and turn the power off whenever you open the chassis assembly to service internal components.

  • Page 138: Replacing Motherboard Batteries

    Before you replace the battery, you need the following: The appropriate Nokia battery replacement kit for your appliance The Nokia IP security platform installation guide for information about how to access the motherboard and battery Physical access to the appliance...

  • Page 139

    To install the battery, perform the following tasks 1. Shut down the Nokia IP1200 Series security platform before accessing the motherboard. 2. Locate the battery on the motherboard. The battery is in a black battery holder secured with a battery retaining pin.

  • Page 140

    4. With the positive side facing up, slide the new battery through the cutout in the battery holder. 5. Make sure that the battery is securely installed in the battery holder with the positive side of the battery facing up. 6. Reassemble the appliance. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 141

    The appliance should start up normally with the new battery installed. If it does not, repeat Step 1 through Step 6. If the appliance does not start up normally after that, contact your Nokia service provider. 7. Reset the appliance date and time information using Voyager or the...

  • Page 142

    Installing and Replacing Other Components Nokia IP1200 Series Security Platform Installation Guide...

  • Page 143: Installing Pc Cards

    1 GB flash-memory PC card. Before You Begin To install a PC card, you need: Physical access to the security platform Access to the security platform by using Nokia Network Voyager or the command-line interface (CLI) Replacement PC card and accompanying documentation Caution To avoid potential equipment malfunction, Nokia recommends that you obtain PC cards only from Nokia or authorized resellers.

  • Page 144: Installing A Flash-memory Pc Card

    If the card is blank or is unformatted, use the ipso disklabel command to format the flash card. You can use only one of the slots at a time, and Nokia recommends that you use only the top PC-card slot for optimum ESD protection.

  • Page 145

    To use Nokia Network Voyager to disable a PC card 1. Click System Logging under System Configuration and check the Unselect check box. 2. Click Apply. 3. Click Up. 4. Click Optional Disks under System Configuration and click the Off radio button under Local Logging.

  • Page 146: Transferring Files With The Flash-memory Pc Card

    Transferring Files with the Flash-Memory PC Card You can copy configuration files between the internal compact flash memory and the flash-memory PC card. If you do not use Nokia Network Voyager to configure the flash-memory PC card as an optional disk, you must mount the PC card when you insert it in the PC-card slot, and you must unmount the PC card before you remove it.

  • Page 147: A Technical Specifications

    -5° C to +40° C (23° F to 104° F) Temperature Humidity 5% to 85% Short Term Operational -5° C to 50° C (23° F to 122° F) Temperature (not to Humidity 5% to 90% exceed 96 consecutive hours) Nokia IP1200 Series Security Platform Installation Guide...

  • Page 148: Space Requirements

    Technical Specifications Space Requirements The Nokia IP1200 Series Security Platform is designed for front-screw mounting in a 19-inch rack. Each IP1200 Series requires the following space in a rack: 3.5 inches (8.89 centimeters) of vertical space 18 inches (46 centimeters) behind the front-panel of the rack...

  • Page 149: B Compliance Information

    This appendix contains the following compliance information: Declaration of Conformity Compliance Statements FCC Notice (US) Declaration of Conformity According to ISO/IEC Guide 22 and EN 45014: Manufacturer’s Name: Nokia Inc. Manufacturer’s Address: 313 Fairchild Drive Mountain View, CA 94043-2215 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 150

    EMC: EN55024 1998, EN55022A 1998, EN61000-3-2, EN61000-3-3 Supplementary information: Pursuant to directive 1999/5/EC this product complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 89/336/EEC with Amendment 93/68/EEC. Nokia IP1200 Series Security Platform Installation Guide...

  • Page 151: Compliance Statements

    Mountain View, CA Compliance Statements This hardware complies with the standards listed in this section. Emissions Standards FCC Part 15 Subpart B Class A US/Canada EN55022 (CISPR 22 Class A) European Community (CE) Nokia IP1200 Series Security Platform Installation Guide...

  • Page 152: Fcc Notice (us)

    This device generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction, may cause harmful interference to radio communications. However, there is no Nokia IP1200 Series Security Platform Installation Guide...

  • Page 153

    Consult the dealer or an experienced radio/TV technician for help. Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. 050324 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 154

    Compliance Information Nokia IP1200 Series Security Platform Installation Guide...

  • Page 155

    96 modem 27 upgrading 97 power 42 variables used by 88, 94 connector pin assignments, Ethernet network boot manager revision variable 88 interface cards 77 boot-device variable 88 Nokia IP1200 Series Security Platform Installation Guide Index - 155...

  • Page 156

    Ethernet management ports 25 IPSO command-line interface 22 Ethernet network interface cards IPSO, booting 94 cable pin assignments 77 IPSO-SX 50 connecting to 77, 80, 83 connectors 77 expansion slots, PMC 25 Index - 156 Nokia IP1200 Series Security Platform Installation Guide...

  • Page 157

    91 output connector, Ethernet cable 77 site requirements 36 slot identification 46 slot numbering 46 software requirements 37 PCMCIA slots 20 space requirements 148 pin assignments specifications, technical 147 Nokia IP1200 Series Security Platform Installation Guide Index - 157...

  • Page 158

    88 boot flag 88 boot manager 88 boot-device 88 boot-file 88 bootwait 88 setting 91 viewing 89 virtual private network 131 Voyager opening 47 VT100-compatible terminal 40 warning notices 16 Index - 158 Nokia IP1200 Series Security Platform Installation Guide...

This manual also for:

Ip1260

Comments to this Manuals

Symbols: 0
Latest comments: