Download Print this page

Nokia IP391 Installation Manual

Security platform
Hide thumbs

Advertisement

Quick Links

Nokia IP391 Security Platform
Installation Guide
Part No. N450000611 Rev 001
*N450000611 Rev 001*
Published February 2008

Advertisement

loading

  Related Manuals for Nokia IP391

  Summary of Contents for Nokia IP391

  • Page 1 Nokia IP391 Security Platform Installation Guide Part No. N450000611 Rev 001 *N450000611 Rev 001* Published February 2008...
  • Page 2 IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
  • Page 3 Singapore 119968 Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 050602 Nokia IP391 Security Platform Installation Guide...
  • Page 4 Nokia IP391 Security Platform Installation Guide...
  • Page 5: Table Of Contents

    Installing the Nokia IP391 Appliance ........23...
  • Page 6 Index............. 79 Nokia IP391 Security Platform Installation Guide...
  • Page 7 Figure 7 Back Panel Power Switch and Socket ......25 Figure 8 Nokia Network Voyager Inline Help Access Points ....34 Figure 9 Four-Port Ethernet NIC Front Panel Details .
  • Page 8 Nokia IP391 Security Platform Installation Guide...
  • Page 9 Table 2 Text Conventions ......... . . 13 Table 3 Specifications for the IP391 Security Platform ..... 15 Table 4 PMC Network Interface Card Slots .
  • Page 10 Nokia IP391 Security Platform Installation Guide...
  • Page 11: About This Guide

    About this Guide This guide describes how to install and use Nokia IP391 security appliances. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. This preface provides the following information: In this Guide Conventions this Guide Uses...
  • Page 12: Conventions This Guide Uses

    This required element is usually the product name or other short word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product. It might appear alone or precede one or more options. You must spell a command exactly as shown and use lowercase letters.
  • Page 13: Text Conventions

    Indicates text you enter or type, for example: bold monospace font # configure nat Key names Keys that you press simultaneously are linked by a plus sign (+): Press Ctrl + Alt + Del. Nokia IP391 Security Platform Installation Guide...
  • Page 14: Related Documentation

    Nokia IPSO-VN Release Notes Nokia Network Voyager inline help You can find the most up-to date version of the Nokia IP391 Security Platform Installation Guide in PDF on the Nokia support site (https://support.nokia.com). You can access inline help from Nokia Network Voyager.
  • Page 15: Overview

    VPN applications. These appliances are ideally suited for growing companies and satellite offices that want high-performance integrated firewall and VPN security appliances. The small size of the IP391 appliance makes it ideal for installations that need to conserve space.
  • Page 16: Built-In Gigabit Ethernet Ports

    Link LED (solid yellow for 10/100 Mbps, solid green for 1000 Mbps) RJ-45 connectors 00547 Caution Cables that connect to the Gigabit Ethernet ports must be IEEE 802.3 compliant to prevent potential data loss. Nokia IP391 Security Platform Installation Guide...
  • Page 17: Pmc Expansion Slots

    Nokia recommends the use of shielded twisted-pair cables and connectors for best Electromagnetic Interference and Immunity performance. PMC Expansion Slots The IP391 appliance provides two additional PMC network interface card (NIC) slots, as described in Table Table 4 PMC Network Interface Card Slots Interface For details, see...
  • Page 18: System Status Leds

    Overview System Status LEDs You can monitor the basic operation of the IP391 appliance and NICs by checking their status LEDs. The system status LEDs are located on the front panel of the appliance, as Figure 4 shows. Figure 4 Appliance Status LEDs...
  • Page 19: Managing The Ip391 Appliance

    For information about how to access the CLI, see the Nokia IPSO-VN Command-Line Interface Reference Guide. Site Requirements, Warnings, and Cautions Before you install a Nokia IP391 appliance, ensure that your computer room or wiring closet conforms to the environmental specifications listed in Chapter A, “Technical Specifications.”...
  • Page 20: Software Requirements

    Caution For IP391 appliances intended for shipment outside of the United States, the cord might be optional. If a cord is not provided, use a power cord rated at 6A, 250V, maximum 15 feet long, made of HAR cordage and IEC fittings approved by the country of end use.
  • Page 21 Product Disposal Nokia IP391 Security Platform Installation Guide...
  • Page 22 Overview Nokia IP391 Security Platform Installation Guide...
  • Page 23: Installing The Nokia Ip391 Appliance

    Installing the Nokia IP391 Appliance This chapter describes how to install the Nokia IP391 appliance. The following topics are covered: Before You Begin Rack Mounting the Appliance Connecting Power Connecting to the Console or Auxiliary Port Connecting to Network Interfaces...
  • Page 24: Connecting Power

    00539gen Caution Blocking ventilation openings during installation may result in damage to the appliance. Connecting Power The power plug and power switch for the IP391 appliance is located on the back of the appliance, as Figure 7 shows. Note The IP391 appliance power supply automatically detects the input voltage (115VAC/60Hz [90 to 132] or 220VAC/50Hz [180 to 264]) and configures itself appropriately.
  • Page 25: Connecting To The Console Or Auxiliary Port

    1. Connect the supplied null-modem console cable to the console port on the front panel of the IP391. Note The supplied console cable is Cisco compatible. Use only the RJ-45 port labeled Console on the front panel; the serial (AUX) port is an auxiliary modem port. Nokia IP391 Security Platform Installation Guide...
  • Page 26 Information” on page 3. Note The cable described in this section is a rollover cable, which is required for IP391 console and auxiliary port connections. You cannot use standard Ethernet cables for IP391 console and auxiliary connections. Nokia IP391 Security Platform Installation Guide...
  • Page 27: Console Port

    DB-9 female adaptor) or to a DB-25 modem connection (using the appliance auxiliary port and the DB-25 male adaptor). The DB-9 adapter is provided with the cable. The DB-25 adaptor is provided with Nokia modem cable kits for the IP391. 00552...
  • Page 28: Auxiliary Port

    RJ-45 Pin DB-9 Pin Signal The console cable provided with the IP391 is comprised of two parts: 6-foot rollover cable with RJ-45 terminations RJ-45 to DB-9 adapter On the opposite end of the console cable, connect the RJ-45 to the DB-9 adapter, which you can then connect to the host terminal.
  • Page 29: Connecting To Network Interfaces

    1000-Mbps hub or directly to a host. Note All Nokia copper Gigabit Ethernet NICs support cable auto-sensing. You can use a straight-through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch, or to connect directly to a host.
  • Page 30 Installing the Nokia IP391 Appliance After you connect the network interfaces, continue with Chapter 3, “Performing the Initial Configuration.” Nokia IP391 Security Platform Installation Guide...
  • Page 31: Performing The Initial Configuration

    Performing the Initial Configuration The first time you turn power on to a Nokia IP391 appliance, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account. You can perform the initial configuration manually by using a console connection.
  • Page 32 Check the power LED on the front panel of the appliance (the Nokia logo) to ensure that the power supply is operating correctly. The power LED should be illuminated. For more information about the system status LEDs, see “System Status LEDs”...
  • Page 33: Using Nokia Network Voyager

    For more information about how to respond to the prompts during the initial configuration process, see the Nokia IPSO-VN User’s Guide. 4. After you complete the initial configuration, you can use Nokia Network Voyager or CLI to configure the remaining network interfaces.
  • Page 34: Using The Command-Line Interface

    2. If you log in as a Auditor user, you can execute only the show form of commands. That is, you can view configuration settings, but you cannot change them. For more information about how to access and use the CLI, see the Nokia IPSO-VN Command- Line Interface Reference Guide.
  • Page 35 Note Enable TELNET, and add services (optional). If this step is not performed, you cannot continue the firewall configuration through TELNET. For the network security, use the TELNET configuration carefully. Nokia IP391 Security Platform Installation Guide...
  • Page 36 Performing the Initial Configuration Nokia IP391 Security Platform Installation Guide...
  • Page 37: Installing And Replacing Network Interface Cards

    Removing, Installing, and Replacing NICs Use these instructions to remove, install, or replace a NIC in the IP391 appliance. Some steps are not applicable to all procedures. The instructions point out steps appropriate to each procedure. Before You Start...
  • Page 38 To remove, install, or replace a NIC Note Because power to the IP391 appliance is automatically disconnected when the chassis tray assembly is opened, you do not need to manually disconnect the power for this procedure. Any servicing of the unit, however, should be completed with the chassis tray assembly fully removed from the appliance.
  • Page 39 6. Remove the NIC by lifting the back of the NIC away from the chassis tray assembly and pulling the NIC gently away from the front panel. 00533 7. Insert the new NIC or blank bezel. Nokia IP391 Security Platform Installation Guide...
  • Page 40 Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly. 8. From the top of the chassis tray assembly, screw the NIC retaining screws into the standoffs on the back of the NIC. 00531 Nokia IP391 Security Platform Installation Guide...
  • Page 41: Activating Interfaces

    The appliance automatically restarts when the chassis tray assembly clicks into place. 11. Tighten the retaining screws that hold the chassis tray assembly. 00525gen Chassis tray assembly retaining screws Activating Interfaces The IP391 appliance automatically detects any new NIC when the appliance is restarted. Nokia IP391 Security Platform Installation Guide...
  • Page 42: Monitoring Network Interface Cards

    For status indicator information for the two-port fiber-optic Gigabit Ethernet NIC, see “Two- Port Fiber-Optic Gigabit Ethernet Network Interface Card” on page 48. Use Network Voyager to access detailed port information. For information about accessing Network Voyager, see “Using Nokia Network Voyager” on page Nokia IP391 Security Platform Installation Guide...
  • Page 43: Connecting Pmc Network Interface Cards

    The IP391 appliance supports Nokia-approved, four-port UTP5 dual-mode 10-Mbps and 100- Mbps Ethernet NICs. When you purchase an Ethernet NIC with your IP391 appliance, the NIC is installed before the appliance is delivered to you. For information on how to add or replace a NIC later, see Chapter 4, “Installing and Replacing Network Interface Cards.”...
  • Page 44: Ethernet Nic Connectors And Cables

    Figure 10 shows the pin assignments for the cable. The RJ-45 cable output connector is numbered from right to left, with the copper tabs facing up and toward you. Nokia IP391 Security Platform Installation Guide...
  • Page 45: Figure 10 Output Connector For The Ethernet Cable

    RJ-45 cross-over cable. Figure 11 Ethernet Crossover-Cable Pin Connections 00017.1 You can also use cables intended for Gigabit Ethernet NIC connections for your Ethernet NIC connections, as shown in Figure Nokia IP391 Security Platform Installation Guide...
  • Page 46: Two-Port Copper Gigabit Ethernet Network Interface Card

    NICs do not occupy. Note Copper Gigabit Ethernet NICs you use in IP391 appliances need to be the Version 2 type, as indicated on the right end of the NIC faceplate. These NICs are sold by Nokia under the order code NIF4425.
  • Page 47: Copper Gigabit Ethernet Connectors And Cables

    Note All Nokia copper Gigabit Ethernet NICs support cable auto-sensing. You can use a straight- through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch, or to connect directly to a host.
  • Page 48: Two-Port Fiber-Optic Gigabit Ethernet Network Interface Card

    Two-Port Fiber-Optic Gigabit Ethernet Network Interface Card All NICs installed in an IP391 are installed into slots on the appliance. Gigabit Ethernet NICs can occupy any of the slots or subslots in an appliance that other NICs do not occupy.
  • Page 49: Fiber-Optic Gigabit Ethernet Nic Features

    Compliance with IEEE 802.3z Gigabit Ethernet specification You can configure and monitor Ethernet interfaces with Nokia Network Voyager, the Web- based element management interface to Nokia IP appliances. Specifically, you set the port speed and full-duplex mode with Network Voyager.
  • Page 50 Connecting PMC Network Interface Cards Nokia IP391 Security Platform Installation Guide...
  • Page 51: Installing And Replacing Other Components

    In flash-based IP391 appliances, the compact flash card stores the Nokia IPSO-VN, boot manager and the local system logs. In disk-based IP391 appliances, the compact flash card stores the boot manager and the Nokia IPSO-VN, local system logs are stored on the hard-disk drive.
  • Page 52: Figure 17 Compact Flash Memory Card Slot

    Note Because power to an IP391 appliance is automatically disconnected when the chassis tray assembly is opened, you do not need to manually disconnect the power for this procedure. Any servicing of the unit, however, should be completed with the chassis tray assembly fully removed from the appliance.
  • Page 53 5. Locate and remove the existing compact flash memory card from the slot by gently sliding it out of the slot. 6. Gently insert the new compact flash memory card into the slot. 7. Slide the chassis tray assembly back into the appliance until it clicks into place. 00538gen Nokia IP391 Security Platform Installation Guide...
  • Page 54: Installing A Flash-Memory Pc Card

    Installing a Flash-Memory PC Card You can use the flash-memory PC card to store local system logs and configuration files.The IP391 appliance has two PCMCIA slots that can support a flash-memory PC card having a capacity of 1 GB or higher.
  • Page 55: Transferring Files With The Flash-Memory Pc Card

    Installing a Flash-Memory PC Card Transferring Files with the Flash-Memory PC Card You can copy configuration files and local system log files from the Nokia IP391 appliances the flash-memory PC card. If you do not use Nokia Network Voyager to configure the flash-memory PC card as an optional disk, you must mount the flash-memory PC card when you insert it in the PC-card slot, and you must unmount the flash-memory PC card before you remove it.
  • Page 56: Installing Or Replacing A Hard-Disk Drive

    Nokia IPSO-VN User’s Guide and the Nokia IPSO-VN Command-Line Interface Reference Guide. Installing or Replacing a Hard-Disk Drive You can add a single hard-disk drive to your flash-based IP391 appliance. The following figure shows the location of the hard-disk drive on the motherboard. Figure 18 Hard-Disk Drive Location Hard-disk drive **-,+/.0...
  • Page 57 00537gen Note Because power to an IP391 appliance is automatically disconnected when the chassis tray assembly is opened, you do not need to manually disconnect the power for this procedure. Any servicing of the unit, however, should be completed with the chassis tray assembly fully removed from the appliance.
  • Page 58 Gently remove the hard-disk drive from the motherboard, taking care not to damage the connector. 5. Insert the hard-disk drive unit. 00536 Note Push the hard-disk drive gently into place. Take care to align the connectors correctly as the connectors are not keyed. Nokia IP391 Security Platform Installation Guide...
  • Page 59: Configuring A Hard-Disk Drive For Logging

    Chassis tray assembly retaining screws Configuring a Hard-Disk Drive for Logging On the flash-based IP391, you can save log files locally by installing and configuring an optional hard-disk drive. The Nokia IPSO-VN User’s Guide and the Nokia IPSO-VN Command-Line Interface Reference Guide contain instructions for configuring a Nokia appliance to store Nokia...
  • Page 60: Replacing Or Upgrading Memory

    Replacing or Upgrading Memory The IP391 appliances have two dual inline memory-module (DIMM) sockets. This section explains how to upgrade or replace the memory in your appliance by using a Nokia-approved memory upgrade kit. The IP391 comes with different memory configurations. Contact Nokia customer support for more information on the supported memory configurations.
  • Page 61: Before You Start

    Nokia memory upgrade kit and accompanying documentation Network or console access to the appliance Caution To protect the IP391 appliance and the memory modules from electrostatic discharge (ESD), make sure you are properly grounded before you touch these components. To add or replace DIMMs 1.
  • Page 62 00537gen Note Because power to an IP391 appliance is automatically disconnected when the chassis tray assembly is opened, you do not need to manually disconnect the power for this procedure. Any servicing of the unit, however, should be completed with the chassis tray assembly fully removed from the appliance.
  • Page 63 You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins. 5. The memory DIMMs are keyed to prevent improper insertion. Press the new DIMM into the socket until it clicks into place. Nokia IP391 Security Platform Installation Guide...
  • Page 64 The retaining clips move into the lock position as you press the DIMM into place. 6. Slide the chassis tray assembly back into the appliance until it clicks into place. 00538gen The appliance automatically restarts when the chassis tray assembly clicks into place. Nokia IP391 Security Platform Installation Guide...
  • Page 65: Replacing The Battery

    The appliance automatically recognizes the new memory configuration. You can verify this from the Network Voyager and the CLI. Replacing the Battery To replace the battery, you need the following: The appropriate Nokia battery replacement kit for your appliance Physical access to the appliance A Phillips-head screwdriver A grounding wrist strap...
  • Page 66 00537gen Note Because power to an IP391 appliance is automatically disconnected when the chassis tray assembly is opened, you do not need to manually disconnect the power for this procedure. Any servicing of the unit, however, should be completed with the chassis tray assembly fully removed from the appliance.
  • Page 67 7. With the positive side facing up, slide the new battery through the cutout in the battery holder. Caution You must place the new battery into the battery holder observing the correct polarity. The positive terminal of the battery must be facing up. Nokia IP391 Security Platform Installation Guide...
  • Page 68 The appliance automatically restarts when the chassis tray assembly clicks into place. 9. Resecure the two retaining screws. 00525gen Chassis tray assembly retaining screws After you replace the battery, you need to reset the date and time using Network Voyager or the CLI. Nokia IP391 Security Platform Installation Guide...
  • Page 69: Troubleshooting

    Solution Verify terminal settings: 8 data, 1 stop, no parity, 9600 bps. Problem Terminal set for flow control. Solution The IP391 appliance does not use flow control. The terminal should be set for no flow control. Problem Defective IP391 appliance or file system.
  • Page 70 Troubleshooting Do Not Get a Login Prompt—Error Messages Appear Problem The IP391 appliance is defective, or the file system on the IP391 appliance is defective. Solution Contact the Nokia customer support site listed in “Nokia Contact Information” page 3. Unable to Connect to Network Voyager Using the Ethernet Port, But Console Access Works Problem Using the wrong Ethernet cable.
  • Page 71 Appliance Does Not Recognize New Memory Configuration Problem DIMMs are not properly seated in DIMM sockets. Solution Repeat memory installation procedures. Make sure DIMMs are fully seated in sockets. Be sure DIMMs click into place. Nokia IP391 Security Platform Installation Guide...
  • Page 72 Troubleshooting Nokia IP391 Security Platform Installation Guide...
  • Page 73: A Technical Specifications

    Do not place objects over the ventilation holes on the appliance. The appliance might overheat and become damaged. Operating Temperature The operating temperature range for the Nokia IP391 appliance is 0° C to 45° C (32° F to 113° Nokia IP391 Security Platform Installation Guide...
  • Page 74: Nic Interfaces

    IEEE 802.32 Gigabit Gigabit Ethernet Ethernet multi-mode Fiber Two-port copper Gigabit Straight-through RJ-45 RJ-45 Ethernet cable (Cat 5 type) or crossover cable; in some cases, shielded Cat 5 Ethernet cable to meet Class B emissions standards Nokia IP391 Security Platform Installation Guide...
  • Page 75: B Compliance Information

    Model Number: EM7500 Product Options: Serial Number: 1 to 100,000 Date First Applied: 2007 conforms to the following standards: Safety: EN60950-1:2001+A11; IEC60950-1:2001; UL60950, Third Edition:2000; CAN/CSA-C22.2 No.60950:2000. EMC: EN55024 1998, EN55022A 1998, EN61000-3-2, EN61000-3-3 Nokia IP391 Security Platform Installation Guide...
  • Page 76: Compliance Statements

    This hardware complies with the standards listed in this section. Emissions Standards FCC Part 15 Subpart B Class A US/Canada EN55022 (CISPR 22 Class A) European Community (CE) Immunity Standards EN55024 European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 EN61000-4-6 EN61000-4-11 Nokia IP391 Security Platform Installation Guide...
  • Page 77: Fcc Notice (Us)

    Consult the dealer or an experienced radio/TV technician for help. Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. Nokia IP391 Security Platform Installation Guide...
  • Page 78 Compliance Information Nokia IP391 Security Platform Installation Guide...
  • Page 79: Index

    47 power 24 Gigabit Ethernet NICs, fiber optic connector pin assignments connecting to 49 auxiliary connection 28 Gigabit Ethernet NICs, fiber-optic console connection 28 connecting to 47 Ethernet crossover cable 45 Nokia IP391 Security Platform Installation Guide Index - 79...
  • Page 80 20 technical specifications 73 transferring images 55 transferring files with flash-memory PC cards 55 Nokia Network Voyager transferring Nokia IPSO images 55 opening 33 troubleshooting 69 overview 19 using 33 Index - 80 Nokia IP391 Security Platform Installation Guide...
  • Page 81 RAM memory 60 ventilation requirements 19 weight specification 73 width specification 73 Nokia IP391 Security Platform Installation Guide Index - 81...
  • Page 82 Index - 82 Nokia IP391 Security Platform Installation Guide...