Page 1
Nokia IP561 Security Platform Installation Guide Part No. N450000612 Rev 001 *N450000612 Rev 001* Published February 2008...
Page 2
IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
Page 3
Singapore 119968 Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 050602 Nokia IP561 Security Platform Installation Guide...
Page 4
Nokia IP561 Security Platform Installation Guide...
Page 7
Monitoring the IP561 Appliance Power Supply ......79 Replacing the Battery ..........80 Troubleshooting .
Page 8
Nokia IP561 Security Platform Installation Guide...
Page 9
Figure 2 Four-Port 10/100/1000 Ethernet PMC Details ....19 Figure 3 Nokia IP561 Security Platform System Status LEDs ....24 Figure 4 Power Supply and Fan Unit Locations .
Page 10
Nokia IP561 Security Platform Installation Guide...
Chapter 3, “Performing the Initial Configuration” describes how to physically connect the Nokia IP561 security platform to a network and to a power source and how to make the security platform available on the network. Chapter 4, “Installing and Replacing Network Interface Cards”...
Notes provide information of special interest or recommendations. Command-Line Conventions This section defines the elements of commands that are available in Nokia Network Security Solutions products. You might encounter one or more of the following elements on a command-line path.
Punctuation and mathematical notations are literal symbols that you must enter exactly as shown. Single quotation marks are literal symbols that you must enter as shown. Text Conventions Table 2 describes the text conventions this guide uses. Nokia IP561 Security Platform Installation Guide...
Nokia IPSO-VN Release Notes Nokia Network Voyager inline help You can find the most up-to date version of the Nokia IP561 Security Platform Installation Guide in PDF on the Nokia support site (https://support.nokia.com). You can access inline help from Nokia Network Voyager.
Overview This chapter provides an overview of the Nokia IP561 security platform and the requirements for its use. The following topics are covered: About the Nokia IP561 Security Platform Managing the Nokia IP561 Security Platform Nokia IP561 Security Platform Overview...
For flash-based appliances, you can purchase optional 2.5-inch hard-disk drives to use for logging. The IP561 appliance is designed to meet other mid- to high-end availability requirements, including port density for connections to redundant internal, external, DMZ, and management networks.
Nokia IP561 Security Platform Overview For information about how to access the CLI, see the Nokia IPSO-VN Command-Line Interface Reference Guide for IPSO-VN v4.1 or later. Nokia IP561 Security Platform Overview Figure 1 shows the component locations for the IP561.
Cables that connect to the Ethernet card must be compliant with IEEE 802.3ab, Cat 5E, or Cat 5 cables to prevent potential data loss. PMC Expansion Slots The IP561 security platform provides two additional PMC expansion slots for NIC options, as described in Table...
Page 21
Nokia IP561 Security Platform Overview Note The cable described in this section is a rollover cable, which is required for IP561 console and auxiliary port connections. You cannot use standard Ethernet cables for IP561 console and auxiliary connections. To connect the cable, push the connector into the receptacle, as you would with other similar cables.
RJ-45 Pin DB-9 Pin Signal The console cable provided with the IP561 is comprised of two parts: a 6-foot rollover cable with RJ-45 terminations an RJ-45 to DB-9 adapter On the opposite end of the console cable, connect the RJ-45 to the DB-9 adapter, which you can then connect to the host terminal.
DB-25 Pin Signal System Status LEDs You can visually monitor the status of the IP561 security platform by checking the system status LEDs. The system status LEDs are located on the center of the front panel, as shown in Figure...
Overview Figure 3 Nokia IP561 Security Platform System Status LEDs Warning (yellow) Power indicator System OK Fault (red) (blue) (green) SLOT 2 SLOT 3 SLOT 4 00351 Table 7 shows the system status LEDs and describes their meaning. Table 7 System Status LEDs...
Hard-Disk Drive for Logging” on page 67. Power Supply and Fan Unit The power supply and fan unit are located at the rear of the IP561 appliance, as shown in Figure Figure 4 Power Supply and Fan Unit Locations Fan unit...
Fan Unit The IP561 fan is a single unit made up of four individual fans to provide the air flow required to maintain a proper operating temperature. The fan unit can provide proper airflow for a short time even if an individual fan fails.
Site Requirements, Warnings, and Cautions Site Requirements, Warnings, and Cautions Before you install a Nokia IP561 security platform, ensure that your computer room or wiring closet conforms to the environmental specifications listed in Appendix A, “Technical Specifications.” Warning Excessive electromagnetic interference (EMI) can occur if you use controls, make performance adjustments, or follow procedures that are not described in this document.
These devices contain materials and components that must be disposed of properly. Therefore, to help prevent damage to the environment, Nokia encourages you to dispose of these devices in an environmentally-friendly manner.
Installing the Nokia IP561 Appliance This chapter describes how to install the IP561 appliance. The following topic is discussed: Before You Begin Rack-Mounting the Appliance Before You Begin To rack-mount the appliance, you need: Phillips-head screwdriver Grounding wrist strap Suitable, grounded work surface on which to place the chassis tray assembly...
1. Remove the appliance from the packaging. 2. Optionally, remove the fan unit from the back of the appliance to lighten it. a. Locate the fan unit and the two retaining screws that secure it on the back of the IP561. 00353 Fan unit b.
Page 31
3. Optionally, remove the power supply from the rear of the appliance to lighten it, as shown in the illustration above. a. Locate the power supply on the back of the IP561 and the two screws that secure it. 00353...
Page 32
Slide the chassis tray assembly forward and pull it entirely out of the appliance. 00360gen d. Place the chassis tray assembly on a properly grounded surface. 5. Adjust the mounting brackets on the side of the appliance if necessary. Nokia IP561 Security Platform Installation Guide...
Page 33
00359gen 8. Reinstall the fan unit into the rear of the appliance. 9. Reinstall the power supply. After you rack-mount the appliance, you can ground it by using the grounding lugs provided. Nokia IP561 Security Platform Installation Guide...
Page 34
Installing the Nokia IP561 Appliance Nokia IP561 Security Platform Installation Guide...
Performing the Initial Configuration The first time you turn on power to a Nokia IP561 security platform, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account. You can perform the initial configuration manually by using a console connection.
One RJ-45 termination has a retractable shroud that releases or secures the RJ-45 tab. Note For information about using the cable Nokia supplies, see “Connecting to the Console or Auxiliary Port with the Supplied Cable” on page 20.
(115 VAC or 220 VAC [85 to 264]) and configures itself appropriately. 4. Check the power LED (the Nokia logo) on the front panel of the appliance to ensure that the power supply is operating correctly.
Performing the Initial Configuration If the fans are still not running, or if the power LED does not illuminate, contact your Nokia service provider or Nokia Support as listed in “Nokia Contact Information” on page 3 for technical support. Performing the Initial Configuration The initial configuration allows you to configure and manage the IPSO-VN by using the Nokia Network Voyager or CLI.
Connecting Network Interfaces Connect at least one network interface to the network to use as the Nokia Network Voyager system-management interface. You can also connect the remaining interface cables at this point, although you are not required to do so.
Viewing Nokia IPSO-VN Documentation by Using Nokia Network Voyager The following documentation is available in Nokia Network Voyager and is accessible from the Network Voyager interface, as shown in Figure Nokia Network Voyager Inline Help—You can access inline help when you use Nokia...
2. If you log in as Auditor user, you can execute only the show form of commands. That is, you can view configuration settings, but you cannot change them. For more information about how to access and use the CLI, see the Nokia IPSO-VN Command- Line Interface Reference Guide.
Page 42
Performing the Initial Configuration Nokia IP561 Security Platform Installation Guide...
Installing and Replacing Network Interface Cards Your Nokia IP561 security platform comes with any network interface cards (NICs) you ordered already installed. All NICs installed in the appliance are housed in PMC expansion slots. You should have a working knowledge of networking equipment before you attempt to service a appliance.
Installing and Replacing Network Interface Cards Installing NICs Use these instructions to install a NIC in the IP561. Some steps are not applicable to all procedures. The instructions point out steps appropriate to each procedure. Before You Begin To install a Nokia NIC, you need the following:...
Page 45
6. From underneath the chassis tray assembly, remove the bezel retaining screws. 00440 If you are installing a NIC in an unoccupied slot, remove the blank bezel that occupies the space in the appliance front panel and retain it for future use. Nokia IP561 Security Platform Installation Guide...
Page 46
Insert the NIC bezel into the front panel. 00443 b. Gently push the back of the NIC down toward the chassis tray assembly. Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly. Nokia IP561 Security Platform Installation Guide...
Page 47
9. From beneath the chassis tray assembly, screw in the bezel retaining screws. 10. Insert and close the chassis tray assembly until it clicks into place. 00519gen The IP561 appliance automatically recognizes the NIC and applies the original configuration to the new NIC. Nokia IP561 Security Platform Installation Guide...
12. Turn the power on. Activating Interfaces The IP561 appliance automatically detects any new NIC when the appliance is restarted. Monitoring Network Interface Cards You can asses the general operating condition of the NICs in your appliance by looking at the LED status indicators on the NICs.
For instructions about how to add or replace NICs, see Chapter 4, “Installing and Replacing Network Interface Cards.” The NICs supported in the Nokia IP561 security platform operate at the peripheral component interconnect (PCI) frequency listed in Table Table 9 NIC PCI Frequency...
Ethernet NICs installed in a PMC expansion slot. When you purchase a 10/100 Ethernet NIC with your IP561, the NIC is installed before the appliance is delivered to you. For information about how to add or replace a NIC, see Chapter 4, “Installing and Replacing Network Interface...
Gigabit Ethernet NICs installed on a PMC expansion slot. The IP561 can accommodate up to four Gigabit Ethernet NICs. When you purchase a copper Gigabit Ethernet NIC with your IP561, the NIC is installed before the appliance is delivered to you. For information about how to add or replace a NIC, see Chapter 4, “Installing and Replacing Network Interface Cards.”...
Note The two-port copper Gigabit Ethernet NIC you use in IP561 appliance must be the Version 2 type, as indicated on the right end of the NIC faceplate. These NICs are sold by Nokia under the order code NIF4425. After you turn on the appliance, the Ethernet link LEDs on both the appliance and on the remote equipment illuminate to indicate the connection.
5e type cable, or as required by your network configuration). Note Nokia copper Gigabit Ethernet NICs support cable autosensing. You can use a straight- through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch or to connect directly to a host.
PMC expansion slot. The IP561 can accommodate up to four Gigabit Ethernet NICs. When you purchase a Gigabit Ethernet NIC with your IP561, the NIC is installed before the appliance is delivered to you. For information about how to add or replace a NIC, see Chapter 4, “Installing and Replacing Network Interface Cards.”...
After the power is turned on and the cables are connected, the Ethernet link LEDs on both the IP561 and on the remote equipment illuminate to indicate the connection. As data is transmitted, the activity LEDs on the appliance illuminate.
Network Interface Cards.” You should have a working knowledge of networking equipment before you attempt to service an IP561 appliance. Limit service of the appliance to the procedures described in this chapter. Note To protect the IP561 appliance and the memory modules from electrostatic discharge damage, make sure you are properly grounded before you touch these components.
You risk damage to the appliance or loss of data if you do not use the following procedure when you replace the compact flash memory. 1. Use Nokia Network Voyager or the command-line interface (CLI) to perform an orderly shutdown of the IP561 appliance.
Page 59
4. Slide the chassis tray assembly forward, pressing the release tab on the right side of the assembly, and completely remove the chassis to expose the motherboard components. 00520gen 5. Place the chassis tray assembly on a table top. Nokia IP561 Security Platform Installation Guide...
10. Turn on the power supply at the back of the appliance. Installing a PC Card The IP561 has a single PC-card slot that can support a PC card with 1-GB flash memory. The slot is labeled Slot 3 and is located on the front panel of the appliance, as Figure 20 shows.
Click Save. You can also use CLI to remove the PC card. For more information about how to remove the hard-disk drive by using CLI, see the Nokia IPSO-VN User’s Guide and the Nokia IPSO-VN Command-Line Interface Reference Guide.
Logging” on page 67 for information about configure the hard-disk drive for logging on flash-based IP561 appliances. For the disk-based IP561, you do not need to configure the hard- disk drive for logging. This section describes how to install or replace a hard-disk drive.
Page 63
Click Save. You can also use CLI to remove the hard-disk drive. For more information about how to remove the hard-disk drive by using CLI, see the Nokia IPSO-VN User’s Guide and the Nokia IPSO-VN Command-Line Interface Reference Guide.
6. Place the chassis tray assembly on a table top. Figure 21 Location of Hard-Disk Drive on the Chassis Tray Assembly Slot 1 Slot 2 00352gen Note You must install the hard-disk in Slot 1. Nokia IP561 Security Platform Installation Guide...
Page 65
Installing or Replacing a Hard-Disk Drive 7. Remove the four screws from the base of the hard-disk drive and remove the hard-disk drive. 00445 Nokia IP561 Security Platform Installation Guide...
Page 66
Replacing Other Components To install or a hard-disk drive 1. Slide the new hard-disk drive onto the mounting locations. 00355 2. Replace the four screws. 00445 Nokia IP561 Security Platform Installation Guide...
4. Resecure the two chassis tray assembly retaining screws. Configuring a Hard-Disk Drive for Logging On the flash-based IP561, you can save log files locally by installing and configuring an optional hard-disk drive. The Nokia IPSO-VN User’s Guide and the Nokia IPSO-VN Command-Line Interface Reference Guide contain instructions for configuring a Nokia appliance to store Nokia IPSO-VN log messages on the disk.
Nokia-approved memory upgrade kit. The IP561 comes with 1 GB of RAM in two 512 MB DIMMs and can be upgraded to 2 GB of RAM by the addition of a pair of 512 MB DIMMs.
To replace DIMMs 1. Use Nokia Network Voyager or the command-line interface (CLI) to perform an orderly shutdown of the appliance. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
Page 70
DIMM upward. You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins. 00469gen 6. Press the new DIMM into the socket until it clicks into place. Nokia IP561 Security Platform Installation Guide...
Page 71
8. Resecure the two chassis tray assembly retaining screws. 9. Turn on the power. The IP561 appliance automatically recognizes the new memory configuration. You can verify the configuration by using Nokia Network Voyager or the CLI. Nokia IP561 Security Platform Installation Guide...
Replacing Other Components Replacing a Nokia Encryption Accelerator Card The IP561 comes with the Nokia encryption accelerator card preinstalled as part of its base bundle to further enhance VPN performance. The accelerator card provides high-speed cryptographic processing that enhances VPN performance.
Page 73
00520gen 5. Locate the PMC encryption accelerator card on the motherboard. The encryption card is located on the back left side of the motherboard. 00361gen Nokia IP561 Security Platform Installation Guide...
Page 74
The two sets of connectors should be aligned with each other. The four screw holes and four standoffs should also be aligned with each other. 8. Push down on the card until it is properly seated on the motherboard. 00518 Nokia IP561 Security Platform Installation Guide...
75. Configuring Software to Use Hardware Acceleration IF there is a optional encryption accelerator card on the IP561 appliance, IPSO-VN will use it automatically. You can also use Nokia Network Voyager or the CLI to configure virtual private network (VPN) to enable or disable hardware acceleration.
3. Use follwing command to enable or disable the card. vpn-accel on|off For more information about how to use the CLI, see the Nokia IPSO-VN Command-Line Interface Reference Guide. You can also monitor Nokia encryption accelerator card with Network Voyager. For more information about how to access Network Voyager and locating relevant reference materials, see the Nokia IPSO-VN User’s Guide.
Replacing a Power Supply 3. Locate the fan unit on the back of the IP561 appliance and the two retaining screws that secure it. 00353 Retaining screws 4. Loosen the retaining screws by turning them counterclockwise. 5. Slowly pull the fan unit out of the chassis toward the rear.
To replace a power supply 1. Use Nokia Network Voyager or command-line interface (CLI) to perform an orderly shutdown of the IP561 appliance. For information about how to access Network Voyager, see Using Nokia Network Voyager on page 40.
11. Turn on the power. Monitoring the IP561 Appliance Power Supply You can monitor the status of the IP561 appliance power supply with Nokia Network Voyager. Similarly, you can also use the command-line interface (CLI). For information about the CLI, see the Nokia IPSO-VN Command-Line Interface Reference Guide.
To install the battery, perform the following tasks: 1. Use Nokia Network Voyager or the command-line interface (CLI) to perform an orderly shutdown of the IP561. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
Page 81
To properly dispose of the battery, see “Product Disposal” on page 28. 8. With the positive side facing up, slide the new battery through the cutout in the battery holder. Nokia IP561 Security Platform Installation Guide...
Page 82
Nokia service provider. For more information, see “Nokia Contact Information” on page 3. 12. Reset the appliance date and time information by using Nokia Network Voyager or the command-line interface. The battery is required to maintain the date and time whenever you shut down the appliance.
Solution Verify terminal settings: 8 data, 1 stop, no parity, 9600 bps. Problem Terminal set for flow control. Solution The IP561 does not use flow control. The terminal should be set for no flow control. Problem Defective IP561 or file system.
Page 84
Use the full installation procedure to install a new system. The new system completely replaces the contents of the drive and might be needed to restore or reload an IP561. This procedure erases any configuration database on the appliance. For information about how to complete the full installation procedure, see the current release notes.
Page 85
Appliance Does Not Recognize New Memory Configuration Problem DIMMs are not properly seated in DIMM sockets. Solution Repeat memory installation procedures. Make sure DIMMs are fully seated in sockets. Be sure DIMMs click into place. Nokia IP561 Security Platform Installation Guide...
Page 86
Troubleshooting Nokia IP561 Security Platform Installation Guide...
IP561 requires the following space in a rack: 3.5 inches (8.89 centimeters) of vertical space 28 inches (71 centimeters) behind the front-panel of the rack 6 inches (15 centimeters) behind the IP561 to allow the back exit fan to move air through the appliances Caution Do not block the ventilation holes on the IP561 appliance.
Page 88
Technical Specifications Nokia IP561 Security Platform Installation Guide...
1 to 100,000 Date First Applied: 2007 conforms to the following standards: Safety: UL60950-1, First Edition:2003, CAN/CSA-C22.2 No 60950:2000, IEC60950-1: 2001, EN60950- 1:2001+A11 with Japanese National Deviations EMC: EN55024 1998, EN55022A 1998, EN61000-3-2, EN61000-3-3 Nokia IP561 Security Platform Installation Guide...
European Community (CE) EN61000-4-3 European Community (CE) EN61000-4-4 European Community (CE) EN61000-4-5 European Community (CE) EN61000-4-6 European Community (CE) EN61000-4-11 European Community (CE) Harmonics and Voltage Fluctuation EN61000-3-2 European Community (CE) EN61000-3-3 European Community (CE) Nokia IP561 Security Platform Installation Guide...
Consult the dealer or an experienced radio/TV technician for help. Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. Nokia IP561 Security Platform Installation Guide...
Page 92
Compliance Information Nokia IP561 Security Platform Installation Guide...