Download Print this page

Advertisement

Quick Links

ISG 2000 Field Upgrade Guide
October 2005
Part No.
093-1444-000,
Revision C
With increased memory and one or more security modules, an ISG 2000 security
system running ScreenOS 5.0.0-IDP1 can support Intrusion Detection and
Prevention (IDP). To enable IDP, the device must also have both an Advanced
license key and an IDP license key installed. To configure IDP, you must use
NetScreen-Security Manager 2004 FP3-IDP or later.
NOTE:
Installing the IDP license key disables Deep Inspection (DI).
With this upgrade kit, you can expand memory capacity and install up to three
security modules (purchased separately) in an ISG 2000 device. If you have not
already purchased one or more security modules, contact your value added reseller
(VAR) or contact Juniper Networks Customer Care directly.
The kit includes these instructions and the following items:
1-GB SIMM DRAM modules (2)
Phillips-head screwdriver (1)
Antistatic mat (1)
Antistatic wrist strap (1)
You also need the OS loader upgrade and ScreenOS 5.0.0-IDP1 image (or
NOTE:
later), both of which are available for download from www.juniper.net/support.
The procedure for upgrading the ISG 2000 to support IDP involves the following
steps:
1. Registering the ISG 2000
2. Upgrading the OS Loader
3. Upgrading to ScreenOS 5.0.0-IDP1
4. Installing License Keys
5. Opening the Chassis
6. Replacing Memory Modules
7. Adding Security Modules
8. Closing the Chassis
NOTE:
If your ISG 2000 is already running ScreenOS 5.0.0-IDP1 or later and you
simply want to add more security modules, refer just to steps 4, 6, and 7.
1

Advertisement

loading
Need help?

Need help?

Do you have a question about the ISG 2000 and is the answer not in the manual?

Questions and answers

Summary of Contents for NetScreen Technologies ISG 2000

  • Page 1 ISG 2000 Field Upgrade Guide October 2005 With increased memory and one or more security modules, an ISG 2000 security system running ScreenOS 5.0.0-IDP1 can support Intrusion Detection and Part No. Prevention (IDP). To enable IDP, the device must also have both an Advanced 093-1444-000, license key and an IDP license key installed.
  • Page 2 2. If necessary, start the TFTP server. 3. Make an Ethernet connection from the device hosting the TFTP server to the MGT port on the ISG 2000 and a serial connection from your workstation to the console port on the ISG 2000.
  • Page 3 TFTP server. 2. If necessary, start the TFTP server. 3. Make a console, Telnet, or SSH connection to the ISG 2000, and then log in. 4. Enter the following CLI command: save software from tftp ip_addr filename to flash in which ip_addr is the address of the TFTP server and filename is the name of the firmware file.
  • Page 4 IDP license keys. Juniper Networks generates the license keys and sends them to you through e-mail. 3. Load the license keys on the ISG 2000 device. You can load a license key by copying the alphanumeric license key sent in the e-mail, entering the following...
  • Page 5: Opening The Chassis

    … Opening the Chassis 1. Turn off the power for the ISG 2000 and disconnect the power cable. Spread out the antistatic mat and ground it. Set the ISG 2000 on the mat. Then connect the grounding wire from the antistatic wrist strap to the terminal on the antistatic mat, and put the strap on your wrist.
  • Page 6 ISG 2000 Field Upgrade Guide 2. Use the Phillips-head screwdriver to remove three screws from the top panel of the chassis. The screws are located near the rear of the panel. (Keep the screws nearby for use when closing the chassis later.) Remove screws from top panel.
  • Page 7: Replacing Memory Modules

    ISG 2000 Field Upgrade Guide Replacing Memory Modules Before adding one or more security modules, you must first replace the two 512-MB SIMM DRAM memory modules with two 1-GB modules. 1. Use the Phillips-head screwdriver to remove the two retaining screws from the left and right top edges of the management module.
  • Page 8 ISG 2000 Field Upgrade Guide 2. Swivel the release levers at each end of the management module up and then slide the module up and out of the chassis. Swivel release levers up. Management Module Slide management module up and out of chassis.
  • Page 9 ISG 2000 Field Upgrade Guide 4. Release the uppermost 512-MB SIMM DRAM memory module by pressing your left and right thumbs downward on the locking tabs on each side of the module so that the tabs swivel away from it.
  • Page 10 ISG 2000 Field Upgrade Guide 7. Insert a 1-GB SIMM DRAM memory module in the lowermost slot. Exerting even pressure with both thumbs upon the upper edge of the module, press the it downward until the locking tabs click into position.
  • Page 11 Tighten retaining screws. Adding Security Modules You can add one, two, or three security modules to the ISG 2000. For optimum performance, Juniper Networks recommends putting the security modules in the numbered slots—indicated on the backplane—as explained below:...
  • Page 12 3. If you are adding more than one security module, repeat steps 1 and 2, putting the second security module in slot 2 and the third in slot 1. ISG 2000 with three Security Modules Installed Slot 4: Management Module...
  • Page 13: Closing The Chassis

    ISG 2000 Field Upgrade Guide Closing the Chassis After you have replaced the memory modules and added one or more security modules, you can replace the top panel on the chassis. 1. Set the front edge of the top panel into the groove that runs along the top front edge of the chassis.
  • Page 14 ISG 2000 Field Upgrade Guide At this point the ISG 2000 is able to support Intrusion Detection and Prevention (IDP). NOTE: To configure IDP, you must use NetScreen-Security Manager 2004 FP3-IDP or later. Juniper Networks Documentation To obtain technical documentation for any Juniper Networks NetScreen product, visit www.juniper.net/techpubs/.