Download Print this page

Nokia Check Point IP150 Installation Manual

Security platform
Hide thumbs

Advertisement

Quick Links

Check Point IP150 Security
Platform Installation Guide
Part No. N450000898 Rev 001
Published April 2009

Advertisement

loading

  Also See for Nokia Check Point IP150

  Related Manuals for Nokia Check Point IP150

  Summary of Contents for Nokia Check Point IP150

  • Page 1 Check Point IP150 Security Platform Installation Guide Part No. N450000898 Rev 001 Published April 2009...
  • Page 2: Check Point Contact Information

    For additional technical information about Check Point products, and for the latest version of this document, see the Check Point Support Center at http://support.checkpoint.com/. Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments to: cp_techpub_feedback@checkpoint.com Check Point IP150 Security Platform Installation Guide...
  • Page 3: Table Of Contents

    Overview ............11 About the Check Point IP150 Security Platform......11 Check Point IP150 Security Platform Appliance Overview .
  • Page 4 Index............. 65 Check Point IP150 Security Platform Installation Guide...
  • Page 5 Table 3 Appliance Status LEDs ........15 Check Point IP150 Security Platform Installation Guide...
  • Page 6 Check Point IP150 Security Platform Installation Guide...
  • Page 7 Figure 13 DIMM Socket Locations ........42 Check Point IP150 Security Platform Installation Guide...
  • Page 8 Check Point IP150 Security Platform Installation Guide...
  • Page 9: About This Guide

    About this Guide This guide provides information for the installation and use of the Check Point IP150 security platform. Installation and maintenance should be performed by experienced technicians or Check Point-approved service providers only. This preface provides the following information:...
  • Page 10: Notices

    • Emphasizes a point or denotes new terms at the Italics place where they are defined in the text. • Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name Check Point IP150 Security Platform Installation Guide...
  • Page 11: Overview

    Overview This chapter provides an overview of the Check Point IP150 Security Platform and the requirements for using the IP150 appliances. The following topics are covered: About the Check Point IP150 Security Platform on page 11 Check Point IP150 Security Platform Appliance Overview...
  • Page 12: Built-In Ethernet Ports

    Power switch Built-in Ethernet Ports Figure 3 shows the layout of the built-in Ethernet ports and LEDs. Figure 3 Built-In Ethernet Interface Front Panel Details Activity LED (yellow) Link LED (green) RJ-45 connectors 00120 Check Point IP150 Security Platform Installation Guide...
  • Page 13: Console And Serial (Aux) Ports

    Check Point IP150 Security Platform Appliance Overview Console and Serial (AUX) Ports Use the built-in console port to supply the information that makes the appliance available on the network. Use the built-in USB (AUX) port for RS232-compliant equipment you are using with your appliance;...
  • Page 14: System Status Leds

    7 (RTS) 4 (RTS) System Status LEDs You can monitor the basic operation of Check Point IP150 appliances by checking their status LEDs. The system status LEDs are located on the front panel of the appliance, as Figure 5 shows.
  • Page 15: Site Requirements

    For information about the built-in Ethernet interface LEDs, see “Built-in Ethernet Ports” page 12. Site Requirements Before you install a Check Point IP150 appliance, ensure that your computer room or wiring closet conforms to the environmental specifications listed in Appendix A, “Technical Specifications.”...
  • Page 16: Safety Warnings And Cautions

    Managing IP150 Security Platform Appliances You can manage Check Point IP150 appliances by using one of the following interfaces: Check Point Network Voyager—an SSL-secured, Web-based element management interface to Check Point IP security platforms. Network Voyager is preinstalled on the IP150 appliance and enabled through the Check Point IPSO operating system.
  • Page 17 Managing IP150 Security Platform Appliances For information about how to obtain Check Point Horizon Manager, see the Check Point Web site at www.checkpoint.com. Check Point IP150 Security Platform Installation Guide...
  • Page 18 Check Point IP150 Security Platform Installation Guide...
  • Page 19: Installing A Check Point Ip150 Security Appliance

    Installing a Check Point IP150 Security Appliance You can rack mount Check Point IP150 Security appliances in a one-unit space (1U) in a standard-configuration appliance rack. Rack Mounting a Check Point IP150 Appliance Before you mount the appliance on the rack, install the two side brackets with three screws on...
  • Page 20: Figure 7 Rack-Mounted Ip150 Appliance

    You can mount IP150 appliances in a standard 19-inch rack with three mounting screws as Figure 6 shows. Figure 7 Rack-mounted IP150 Appliance 00682 Check Point IP150 Security Platform Installation Guide...
  • Page 21: Connecting To The Ethernet Ports

    Connecting to the Ethernet Ports This chapter describes how to connect Ethernet network cabling to your Check Point IP150 appliance. Caution To help guard against electrostatic discharge damage, make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance.
  • Page 22: Connecting To Ethernet Ports

    The following figure shows the pin assignments for the cable. The RJ-45 cable output connector is numbered from left to right, with the copper tabs facing down and toward you. Figure 8 Output Connector for the Ethernet Cable Pin# Assignment 00270.1a Check Point IP150 Security Platform Installation Guide...
  • Page 23: Figure 9 Ethernet Crossover Cable Pin Connections

    Built-In Four-Port 10/100/1000 Ethernet Interface The following figure shows the pin assignments for the RJ-45 crossover cable. Figure 9 Ethernet Crossover Cable Pin Connections 00017.1 Check Point IP150 Security Platform Installation Guide...
  • Page 24 Check Point IP150 Security Platform Installation Guide...
  • Page 25: Performing The Initial Configuration

    Performing the Initial Configuration The first time you turn on power to a Check Point IP150 appliance, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account. You can perform the initial configuration in two ways: Configure a DHCP server to provide the initial configuration information the first time the appliance is started.
  • Page 26: Connecting Power And Turning The Power On

    A power switch and a receptacle for the power cord are located on each power supply on the back of the appliance as shown in Figure Figure 10 Power Switch Location 00663 Power plug Power switch Check Point IP150 Security Platform Installation Guide...
  • Page 27: Performing The Initial Configuration

    Type any character to enter command mode. The prompt remains on the screen for about five seconds. If you type any character during this time, the system activates the Check Point IPSO boot manager. Check Point IP150 Security Platform Installation Guide...
  • Page 28 To select an interface, enter the number adjacent to the physical ID in the list of connected interfaces. 5. After you complete the initial configuration, connect the network interfaces and use Network Voyager to configure them. Check Point IP150 Security Platform Installation Guide...
  • Page 29: Connecting Network Interfaces

    Check Point Network Voyager. To access this source, look at the list in the navigation tree on the left side of the window (as shown in Figure 11).You can also access this guide and other Check Point IP150 Security Platform Installation Guide...
  • Page 30: Using The Command-Line Interface

    For information about how to administer a cluster, see the traffic management commands section in the CLI Reference Guide for the version of Check Point IPSO you are using. Check Point IP150 Security Platform Installation Guide...
  • Page 31: Using Check Point Horizon Manager

    Horizon Manager is designed to manage and configure a large number of Check Point security appliances that reside on a corporate enterprise, managed service provider (MSP), or hosted applications service provider network (ASP). Check Point IP150 Security Platform Installation Guide...
  • Page 32: Using Check Point Smartcenter And Provider-1

    For information about how to obtain Horizon Manager or to learn more about the Horizon Manager, see the Check Point Web site at www.checkpoint.com. Using Check Point SmartCenter and Provider-1 Check Point supports managing IP150 appliances with Check Point SmartCenter and Provider-1 Check Point IP150 Security Platform Installation Guide...
  • Page 33: Installing And Replacing Components

    Use the internal compact flash to boot the system and install the Check Point IPSO operating system on the disk. The compact flash card is located on the motherboard in a slot behind the hard-disk drive location. Check Point IP150 Security Platform Installation Guide...
  • Page 34: Before You Start

    2. Remove the power cord from the IP150 appliance, and remove the appliance from the rack. 3. Turn the appliance upside down and place it on a safe and protected work surface Check Point IP150 Security Platform Installation Guide...
  • Page 35 Replacing the Compact Flash Memory Card 4. Remove the three bottom-cover screws, and remove the cover as shown in the following figure. 00676 Check Point IP150 Security Platform Installation Guide...
  • Page 36 5. Gently remove the installed compact flash memory card. Avoid pressing down on the surface of the card as much as possible. 00678 Check Point IP150 Security Platform Installation Guide...
  • Page 37: Replacing A Hard-Disk Drive

    8. Turn on the power supply at the back of the appliance. Replacing a Hard-Disk Drive You can replace the hard-disk drive to your IP150 appliance. The following figure shows the location of the hard-disk drive on the motherboard. Check Point IP150 Security Platform Installation Guide...
  • Page 38: Figure 12 Hard-Disk Drive Location

    You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembly to service internal components. Check Point IP150 Security Platform Installation Guide...
  • Page 39: Before You Start

    3. Place the appliance right-side up and place it on a safe and protected work surface. 4. Remove the three top-cover screws and slide the cover back to remove it from the appliance. 00667 Check Point IP150 Security Platform Installation Guide...
  • Page 40 6. To remove the installed drive assembly from the appliance, remove the four drive bracket screws, and remove the assembly. 00674 7. Remove the retaining screws that hold the drive unit from the sides of the bracket, and remove the drive from the bracket. 00675 Check Point IP150 Security Platform Installation Guide...
  • Page 41 9. Reinstall the two drive connectors. 10. Replace the top cover, reinstall the appliance in the rack, and reconnect the appliance power cord. 11. Turn on the power supply at the back of the appliance. Check Point IP150 Security Platform Installation Guide...
  • Page 42: Replacing Or Upgrading Memory

    The DIMM sockets are located at the right of the motherboard, as you look at the appliance from the front, as Figure 13 shows. Figure 13 DIMM Socket Locations DIMMs and DIMM sockets Note: Shown here with bottom cover already removed. 00677 Check Point IP150 Security Platform Installation Guide...
  • Page 43: Before You Start

    2. Remove the power cord from the IP150 appliance, and remove the appliance from the rack. 3. Turn the appliance upside down and place it on a safe and protected work surface Check Point IP150 Security Platform Installation Guide...
  • Page 44 4. Remove the three bottom-cover screws, and remove the cover as shown in the following figure. 00676 Check Point IP150 Security Platform Installation Guide...
  • Page 45 You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins. 6. The memory DIMMs are keyed to prevent improper insertion. Press the new DIMM into the socket until it clicks into place and the retaining clips lock into position. Check Point IP150 Security Platform Installation Guide...
  • Page 46: Installing Or Replacing The Check Point Encryption Accelerator Card

    The Check Point encryption accelerator card provides high-speed cryptographic processing that enhances VPN performance. You can install or replace the Check Point encryption accelerator card in your IP150 appliance. The following figure shows the location of the encryption accelerator card on the motherboard. Check Point IP150 Security Platform Installation Guide...
  • Page 47: Before You Start

    2. Remove the power cord from the IP150 appliance, and remove the appliance from the rack. 3. Place the appliance right-side up and place it on a safe and protected work surface. Check Point IP150 Security Platform Installation Guide...
  • Page 48 4. Remove the three top-cover screws and slide the cover back to remove it from the appliance. 00667 5. If you need to remove an installed encryption accelerator card, pull the two retaining clips outward as shown in the following figure. 00670 Check Point IP150 Security Platform Installation Guide...
  • Page 49: Configuring And Activating Check Point Encryption Acceleration

    Check Point encryption accelerator card. For the Check Point IP150 appliances, SecureXL is on by default. After you install the Check Point encryption accelerator card and reboot the appliance, SecureXL automatically uses the Check Point encryption accelerator card for encryption acceleration.
  • Page 50: Replacing The Battery

    Make certain to remove the power cord from the appliance before you proceed with any of the following steps. Failure to do so could cause electric shock with burns or death resulting for the user. Check Point IP150 Security Platform Installation Guide...
  • Page 51 3. Turn the appliance right-side up and place it on a safe and protected work surface. 4. Remove the three top-cover screws and slide the cover back to remove it from the appliance. 00667 Check Point IP150 Security Platform Installation Guide...
  • Page 52 7. With the positive side facing up, slide the new battery through the cutout in the battery holder. Caution You must place the new battery into the battery holder observing the correct polarity. The positive terminal of the battery must be facing up. Check Point IP150 Security Platform Installation Guide...
  • Page 53 8. Replace the top cover, reinstall the appliance in the rack, and reconnect the appliance power cord. 9. Turn on the power supply at the back of the appliance. After you replace the battery, you need to reset the date and time using Network Voyager or the CLI. Check Point IP150 Security Platform Installation Guide...
  • Page 54 Check Point IP150 Security Platform Installation Guide...
  • Page 55: Troubleshooting

    Troubleshooting This chapter provides troubleshooting tips, problems, and solutions related to Check Point IP150 appliance installations. For information about how to reinstall Check Point IPSO on to your appliance, see the Boot Manager Reference Guide for the version of Check Point IPSO that you are using.
  • Page 56 Problem The IP150 appliance is defective, or the file system on the appliance is defective. Solution Contact Check Point customer support. For customer support information, see the Check Point Support Center at http://support.checkpoint.com/. Check Point IP150 Security Platform Installation Guide...
  • Page 57 Solution You might have set the wrong speed. Verify that the speeds match on each end of the Ethernet connection (10 or 100 Mbps). Problem Port not enabled. Solution Verify from the Interface page in Network Voyager that the interface port is configured as active. Check Point IP150 Security Platform Installation Guide...
  • Page 58 Problem High collision rate on the hub. Solution Disconnect connections one at a time until the problem is localized to one computer and troubleshoot further. Check Point IP150 Security Platform Installation Guide...
  • Page 59: A Technical Specifications

    10.50 lbs. (4.76 kg): Base system with mounting brackets Space Requirements Check Point IP150 appliances are designed for front-screw mounting in a 19-inch rack. Each IP150 appliance requires the following space in a rack: 1.60 inches (4.06 centimeters) of vertical space 16 inches (40.64 centimeters) behind the front-panel of the rack plus 6 inches (15...
  • Page 60: Appliance Interfaces

    Frequency 50/60Hz AC input current maximum 4.0A Power consumption 55 watts Appliance Interfaces Interface Cable Type Cable Output Connector Ethernet IEEE 802.3 10/100 BASE-TX, 1000 BASE-T RJ-45 unshielded twisted pair, full-duplex or half-duplex Check Point IP150 Security Platform Installation Guide...
  • Page 61: B Compliance Information

    CSA C22.2 No. 60950-1-03 1st Ed. EMC: EN55024 1998, EN55022A 2003, EN61000-3-2, EN61000-3-3 Supplementary information: Pursuant to ISO/IEC 17050 this product complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 2004/108/EC. Check Point IP150 Security Platform Installation Guide...
  • Page 62: Compliance Statements

    EN55022A: 2003, CISPR 22 European Community (CE) Class A: 2003 Immunity Standards EN55024: 2003 European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 EN61000-4-6 EN61000-4-8 EN61000-4-11 Harmonics and Voltage Fluctuation EN61000-3-2 European Community (CE) EN61000-3-3 European Community (CE) Check Point IP150 Security Platform Installation Guide...
  • Page 63: Fcc Notice (Us)

    Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. 050316 Check Point IP150 Security Platform Installation Guide...
  • Page 64 Check Point IP150 Security Platform Installation Guide...
  • Page 65: Index

    Ethernet cable output 22 Ethernet crossover-cable pin 23 Ethernet port 22 pin assignments for modem 13 memory (RAM) power 26 replacing 42 RJ-45 22, 23 upgrading 42 connector pin assignments for Ethernet network Check Point IP150 Security Platform Installation Guide Index - 65...
  • Page 66 26 replacing RAM memory 42 RJ-45 connector 22, 23 security platform configuring 25 specifications interfaces 60 space requirements 59 technical specifications See specifications troubleshooting 55 upgrading RAM memory 42 Index - 66 Check Point IP150 Security Platform Installation Guide...