Nokia IP1220 - Security Appliance Installation Manual

Security platforms.
Hide thumbs
IP1220 and IP1260 Security
Platforms Installation Guide
Part No. N450000536 Rev 001
Published June 2008

   Related Manuals for Nokia IP1220 - Security Appliance

   Summary of Contents for Nokia IP1220 - Security Appliance

  • Page 1

    IP1220 and IP1260 Security Platforms Installation Guide Part No. N450000536 Rev 001 Published June 2008...

  • Page 2

    IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...

  • Page 3

    313 Fairchild Drive Outside USA and Canada: +1 512-437-7089 Mountain View, CA 94043-2215 email: info.ipnetworking_americas@nokia.com Europe, Mid- Nokia House, Summit Avenue Tel: UK: +44 161 601 8908 dle East, and Southwood, Farnborough Tel: France: +33 170 708 166 Africa Hampshire GU14 ONG UK email: info.ipnetworking_emea@nokia.com...

  • Page 4

    IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 5: Table Of Contents

    Overview ............17 About the Nokia IP1200 Series Security Platform ......17 About the Nokia IP1200 Series Flash-Based Security Platforms.

  • Page 6: Table Of Contents

    Before You Begin ..........68 Nokia ADP Card LED Reference Information ......71 Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces .

  • Page 7: Table Of Contents

    Before You Begin ..........99 Installing a Nokia Encryption Accelerator Card ......102 Before You Begin .

  • Page 8

    IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 9

    Figure 3 Pin Assignments for Console and AUX Connections ....22 Figure 4 Nokia IP1200 Series Appliance System Status LEDs ....23 Figure 5 Hard-Disk Drive Front Pane .

  • Page 10

    IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 11

    Table 1 Text Conventions ......... . . 14 Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics ..17 Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics .

  • Page 12

    IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 13: About This Guide, In This Guide

    About this Guide This manual provides information for the installation and use of the Nokia IP1200 Series security platforms. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. This preface provides the following information: In this Guide...

  • Page 14: Conventions This Guide Uses, Notices, Text Conventions

    Appendix B, “Compliance Information” provides compliance and regulatory information. Conventions this Guide Uses The following sections describe the conventions this guide uses, including notices, text conventions, and command-line conventions. Notices Warning Warnings advise the user that either bodily injury might occur because of a physical hazard, or that damage to a structure, such as a room or equipment closet, might occur because of equipment damage.

  • Page 15: Related Documentation

    CLI Reference Guide for the version of Nokia IPSO you are using Getting Started Guide and Release Notes for the version of Nokia IPSO you are using Nokia IPSO Boot Manager Reference Guide, which describes how to use the Nokia IPSO...

  • Page 16

    IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 17: Overview, About The Nokia Ip1200 Series Security Platform

    Overview This chapter provides an overview of the Nokia IP1200 Series security platform and the requirements for its use. The following topics are covered: About the Nokia IP1200 Series Security Platform About the Nokia IP1200 Series Flash-Based Security Platforms Managing the Nokia IP1200 Series Security Platform...

  • Page 18: About The Nokia Ip1200 Series Flash-based Security Platforms

    PMC network interface cards (NICs) for a total of four NICs. These network interfaces provide exceptional data forwarding and monitoring performance when used with Nokia and partner applications. In addition, the IP1200 Series allows you to boost performance as needed through next-generation, high-end Nokia Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades.

  • Page 19: Managing The Nokia Ip1200 Series Security Platform, Nokia Ip1200 Series Security Platform Overview

    Everything that you can accomplish with Network Voyager—manage, monitor, and configure the IP1200 Series security platform —you can also do with the CLI. For information about how to access the CLI, see the Nokia CLI Reference Guide for Nokia IPSO v3.6 or later.

  • Page 20: Ethernet Management Ports

    Overview Figure 1 Component Locations Front View Dual 6U PMC carrier or System status LEDs ADP module expansion slots 1 and 2 hard-disk drive A hard-disk drive B 00307a.3 Grounding plug Console port Serial (AUX) port PCMCIA slots Ethernet management ports (slot 3) Ethernet Management Ports The Ethernet management ports are located in slot 3.

  • Page 21: Pmc Expansion Slots, Console Port

    Chapter 6, “About IP1200 Appliance ADP Services Modules.” Note Nokia products only support NICs and ADP modules purchased from Nokia or Nokia- approved resellers. The Nokia Global Support Services group can only provide support for Nokia products that use Nokia-approved accessories. For sales or reseller information, contact a Nokia service provider listed in the “Nokia Contact Information”...

  • Page 22

    Overview Figure 3 Pin Assignments for Console and AUX Connections Input or Pin# Assignment output Input (AUX port only; not used 00460 by the console port) Input Output Output Input Output Input not used Table 5 shows how to match pins at the console or serial connector with output pins on DB9 or DB25 cables you are using with terminal devices or other appropriate equipment.

  • Page 23: System Status Leds

    Nokia IP1200 Series Security Platform Overview System Status LEDs You can visually monitor the status of the Nokia IP1200 Series appliance by checking the system status LEDs. The system status LEDs are located on the center of the front panel, as shown in...

  • Page 24: Hard-disk Drives, Disk Mirroring, Hard-disk Drive Hot Swap Feature, Hard-disk Drive Leds

    The IP1200 Series appliance continues to operate normally, and the switchover to the secondary mirror drive should be transparent to your data connections. You can use Nokia Network Voyager, the command-line interface (CLI), or Lynx to create and delete mirror sets.

  • Page 25: Power Supplies And Fan Unit

    Nokia IP1200 Series Security Platform Overview Caution To avoid damage to the ejector and locking lever, loosen the two retaining screws before you remove the hard-disk drive. Once screw is located behind the ejector and locking lever, and the other screw is on the opposite side.

  • Page 26: Power Supplies

    Fan unit Power Supplies The Nokia IP1200 Series appliance supports up to two power supplies for power sharing and redundancy. The IP1260 comes with two power supplies as the standard package. The IP1220 comes with power supply; a second one is optional. The power supplies are hot swappable and perform load sharing while two active power supplies are installed, increasing the life of the power supplies.

  • Page 27

    Nokia IP1200 Series Security Platform Overview Figure 7 AC Power Supply, Cooling Fan, and Power Switch AC power receptacle Power supply A Power supply B 00308a Cooling fan Power supply switch Figure 8 Power Supply and Fan Unit Locations (DC version)

  • Page 28: Fan Unit, Site Requirements, Safety Warnings And Cautions

    Overview Power Supply Status LEDs The power supply status LEDs provide the status of the power supplies as described in Table Table 8 Power Supply Status LEDs LED status Meaning Fault Power supply has a voltage problem and power was turned off.

  • Page 29

    Safety Warnings and Cautions Warning To reduce the risk of fire, electric shock, and injury when you use telephone equipment, follow basic safety precautions. Do not use the product near water. Warning On IP1200 Series intended for shipment outside of the United States, the cord set might be optional.

  • Page 30: Software Requirements, Product Disposal

    Check Point VPN-1 versions compatible with the version of Nokia IPSO you are using For information about updates to the software requirements or additional applications that have become available since this guide was published, contact your Nokia service provider, as listed “Nokia Contact Information” on page 3.

  • Page 31

    Product Disposal Contact your local waste management agencies for guidelines specific to your area. The crossed-out wheeled bin means that within the European Union the product must be taken to separate collection at the product end-of-life. This applies to your device but also to any enhancements marked with this symbol.

  • Page 32

    Overview IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 33: Installing The Nokia Ip1200 Series Appliance, Rack Mounting The Appliance

    Installing the Nokia IP1200 Series Appliance This chapter describes how to install the Nokia IP1200 Series appliance. The following topics are discussed: Rack Mounting the Appliance Before You Begin Caution To help guard against electrostatic discharge damage, make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance.

  • Page 34: Before You Begin

    Installing the Nokia IP1200 Series Appliance Figure 9 Rack-Mounting Screw Locations 00307a.3 Rack-mounting screw locations Two rack-mounting positions allow you to mount the appliance either flush with the rack, or four inches forward of the equipment rack. If the space behind the rack is insufficient, the rack mounting brackets can be attached further back on the side of the appliance.

  • Page 35

    Before You Begin To rack mount the appliance Caution The appliance is heavy. Carefully remove it from the packaging. 1. Remove the appliance from the packaging. 2. Optionally, remove the fan unit from the back of the appliance. a. Locate the fan unit and the four retaining screws that secure it on the back of the IP1200 Series.

  • Page 36

    Installing the Nokia IP1200 Series Appliance 3. Optionally, remove the power supplies from the rear of the appliance. a. Locate the power supply on the back of the IP1200 Series and the two screws that secure 00308a Power supplies b. Remove the two retaining screws.

  • Page 37

    Before You Begin chassis grounding point. If you do not have a grounding wrist strap, make sure you are properly grounded before you touch any electronic component. a. Loosen the four chassis tray assembly retaining screws from the front panel of the appliance.

  • Page 38

    Installing the Nokia IP1200 Series Appliance IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 39: Performing The Initial Configuration

    Performing the Initial Configuration The first time you turn on power to a Nokia IP1200 Series appliance, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account. You can perform the initial configuration in two ways: Configure a DHCP server to provide the initial configuration information the first time the appliance is started.

  • Page 40: Using A Console Connection, Connecting Power And Turning The Power On

    Performing the Initial Configuration Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series appliance, you must use a serial console connection (cable included). After you perform the initial configuration, you no longer need the console connection.

  • Page 41

    The IP1200 Series appliance power supply automatically detects the input voltage (115 VAC or 220 VAC [85 to 264]) and configures itself appropriately. 4. Check the power LED (the Nokia logo) on the front panel of the appliance to ensure that the power supply is operating correctly.

  • Page 42

    That power is turned on to the power strip or wall receptacle into which you plugged the appliance. If the fans are still not running, or if the power LED does not illuminate, contact your Nokia service provider or Nokia Support as listed in “Nokia Contact Information”...

  • Page 43

    For more information about how to respond to the prompts during the initial configuration process, see the release notes for the Nokia software release you are running. 4. When you are prompted to select an interface, Nokia recommends that you select one of the Ethernet management interface ports.

  • Page 44: Connecting Network Interfaces, Using Nokia Network Voyager

    Performing the Initial Configuration Connecting Network Interfaces Connect at least one network interface to the network to use as the Nokia Network Voyager system-management interface. This interface is configured during the initial configuration process, which is described in Chapter 3, “Performing the Initial Configuration.”...

  • Page 45: Nokia Network Voyager

    Network Voyager interface, as shown in Figure Nokia Network Voyager Reference Guide—This guide is the comprehensive reference source for Nokia Network Voyager. To access this source, look at the list in the navigation tree on the left side of the window (as shown in Figure 11).You can also access the Nokia...

  • Page 46: Using The Command-line Interface, Using Nokia Horizon Manager

    You can now execute CLI commands from the CLI shell and the Nokia IPSO shell. The Nokia IPSO shell is what you see when you initially log on to the platform.

  • Page 47

    Horizon Manager is designed to manage and configure a large number of Nokia security appliances that reside on a corporate enterprise, managed service provider (MSP), or hosted applications service provider network (ASP).

  • Page 48

    Performing the Initial Configuration IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 49: Adp) Services Modules

    Interface Cards and Accelerated Data Path (ADP) Services Modules The Nokia IP1200 Series appliance may come with network interface cards (NICs) in a PMC carrier or an ADP module you ordered already installed. All NICs installed in the IP1200 Series are housed in a 6U PMC carrier.

  • Page 50: Removing, Installing, And Replacing Nics Or The Adp Module, Before You Begin

    To replace a network interface card (NIC) or ADP module Note If you are servicing the slot 1 carrier, Nokia recommends that you disconnect interface cables from the PMC cards after you remove the carrier, as it is more difficult to remove cables from a carrier installed in that location.

  • Page 51

    Removing, Installing, and Replacing NICs or the ADP Module Caution To avoid damage to the ejector and locking lever, loosen the retaining screw behind each ejector and locking lever before you remove the PMC carrier or ADP module. 3. Press the red buttons on the ejector and locking levers on the PMC carrier or ADP module. The lock is released.

  • Page 52

    Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules 6. Gently pull the PMC carrier or ADP module out from the slot and place it on a suitable, grounded work surface. 00310a.2 Note You need to follow step 7 through step 13...

  • Page 53

    Removing, Installing, and Replacing NICs or the ADP Module 9. Locate and remove the two NIC retaining screws from the back of the NIC. 00312 10. Remove the NIC by lifting the back of the NIC away from the chassis tray assembly and pulling it gently away from the front panel.

  • Page 54

    Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules 11. Insert the new NIC or a blank bezel by doing one of the following: a. Insert the NIC front bezel into the PMC carrier and gently push the back of the NIC down toward the chassis tray assembly.

  • Page 55

    Removing, Installing, and Replacing NICs or the ADP Module 12. From the top of the PMC carrier, screw the NIC retaining screws into the standoffs on the back of the NIC. 00312 13. From the underside of the PMC carrier, screw in the bezel retaining screws. 00311 14.

  • Page 56: Configuring And Activating Interfaces, Monitoring Network Interface Cards

    The power indicator LED on the PMC carrier or ADP module illuminates green. 00315.2 If you are replacing a NIC or ADP module with a one of the same type, the Nokia IPSO operating system automatically recognizes the device and applies the original configuration.

  • Page 57: About Ip1200 Series Appliance Network Interface Cards

    About IP1200 Series Appliance Network Interface Cards This chapter describes the network interface cards available for the Nokia IP1200 Series appliance and how to connect those NICs to your network. The following NICs are described: Four-Port 10/100 Ethernet NICs Two-Port and Four-Port Copper Gigabit Ethernet NICs...

  • Page 58: Four-port 10/100 Ethernet Nics, Ethernet Nic Features

    Network Interface Cards and Accelerated Data Path (ADP) Services Modules.” 10/100 Ethernet NIC Features The four-port 10/100 Ethernet NIC supports PCI operation at 100 MHz and runs on Nokia IPSO v3.8 or higher. Both the four-port and two-port Ethernet NICs support the following features:...

  • Page 59: Ethernet Nic Connectors And Cables

    Four-Port 10/100 Ethernet NICs Figure 12 Four-Port 10/100 Ethernet NIC Front Panel Details Ports RJ-45 connectors 00641 Link LED (solid green) Activity LED (blinking green) After the power is turned on and the cables are connected, the Ethernet link LEDs on both the IP1200 Series and on the remote equipment illuminate to indicate the connection.

  • Page 60: Two-port And Four-port Copper Gigabit Ethernet Nics

    Figure 14 Ethernet Crossover-Cable Pin Connections 00017.1 Two-Port and Four-Port Copper Gigabit Ethernet NICs The Nokia IP1200 Series appliance supports Nokia-approved, two-port and four-port copper Gigabit Ethernet NICs installed on a 6U PMC carrier. The IP1200 Series can accommodate up to four Gigabit Ethernet NICs.

  • Page 61: Copper Gigabit Ethernet Nic Features

    PCI operation at 33 MHz, 66 MHz, and 100 Mhz Compliance with IEEE 802.3z and 802.3ab Gigabit Ethernet specifications You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you can use Network Voyager to set the port speed and full-duplex mode to 1000, 100, or 10 Mbps.

  • Page 62: Performance Considerations, Copper Gigabit Ethernet Nic Connectors And Cables

    About IP1200 Series Appliance Network Interface Cards After the power is turned on and the cables are connected, the Ethernet link LEDs on both the IP1200 Series and on the remote equipment illuminate to indicate the connection. Note The Link LED on the NIC is bicolored. A green LED indicates a 1 Gbps link speed, and a yellow LED indicates a 10/100 Mbps link speed.

  • Page 63

    Two-Port and Four-Port Copper Gigabit Ethernet NICs Figure 17 Ethernet Cable Connector Output Pin Assignments Gigabit Ethernet 10/100 Mbps Pin# Assignment Assignment BI_DA+ 00270 BI_DA- BI_DB+ BI_DC+ BI_DC- BI_DB- BI_DD+ BI_DD- To connect directly to a host, use an RJ-45 crossover cable wired as Figure 18 shows.

  • Page 64: Two-port Fiber-optic Gigabit Ethernet Nics, Fiber-optic Gigabit Ethernet Nic Features

    The long-range single-mode fiber (SMF) fiber-optic Gigabit Ethernet NICs in the IP1200 run on Nokia IPSO v4.2 or higher. You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you set the port speed and full-duplex mode with Network Voyager.

  • Page 65: Fiber-optic Gigabit Ethernet Nic Connectors And Cables, Performance Considerations

    Two-Port Fiber-Optic Gigabit Ethernet NICs Figure 20 shows the front panel details for the two-port long-range (1000 BASE-LX) fiber-optic Gigabit Ethernet NIC you can use in your IP1200. Figure 20 PMC Two-Port Long-Range Gigabit Ethernet NIC Link LEDs (solid green) Activity LEDs (blinking amber) LINK 00555...

  • Page 66

    About IP1200 Series Appliance Network Interface Cards For the IP1200 Series appliance, any two NICs installed on a single PMC carrier both operate at the PCI frequency of the least capable NIC installed. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 67: About Ip1200 Appliance Adp Services Modules

    About IP1200 Appliance ADP Services Modules This chapter describes the Accelerated Data Path (ADP) services modules available for the Nokia IP1200 Series appliance and how to connect those modules to your network. It includes the following sections: Installing and Replacing ADP Modules...

  • Page 68: Installing And Replacing Adp Modules, Before You Begin

    Before you begin this procedure, you should review all ADP module information in the Nokia Getting Started Guide and Release Notes for the version of Nokia IPSO you are using and refer to both of these documents as needed as you complete the installation and configuration process.

  • Page 69

    To install or remove ADP transceivers in a Nokia ADP module Refer to the following figure, which shows how to install or remove Nokia ADP module transceivers. The transceivers are hot swappable as are the interface cables you use with them.

  • Page 70

    Release the transceiver by rotating the latch lever. Pull out the transceiver. Note that if you install any ADP transceivers that are not supported by Nokia, they are not recognized by Nokia IPSO; the system rejects the transceivers and includes them in a list of...

  • Page 71: Nokia Adp Card Led Reference Information, Configuring Nokia Ipso For Ip1220 And Ip1260 Adp Interfaces

    Nokia. Nokia ADP Card LED Reference Information All Nokia IP1220 and IP1260 ADP modules provide a single LED for each port. The LED illuminates solid green for Link status and blinks green to indicate Activity.

  • Page 72: Nokia Adp Card Interface Names For Ip1220 And Ip1260 Appliances

    ADP interfaces. Reassign IP addresses from the removed interfaces to the ADP interfaces as appropriate. Nokia ADP Card Interface Names for IP1220 and IP1260 Appliances ADP module interface naming conventions differ from those for PMC NICs IP1220 and IP1260 appliances support one ADP module, which you install in slots 1 and 2.

  • Page 73: Configuration Example With Vrrp

    Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Configuration Example with VRRP This example describes the steps required to install an ADP module in an IP1220 or IP1260 appliance with VRRP configured. The following figure shows the Interface Configuration page of the platform before an ADP module is installed.

  • Page 74: Deleting Vrrp Configurations

    About IP1200 Appliance ADP Services Modules The following figure shows the VRRP configuration: The rest of this section describes how to reconfigure the interfaces and VRRP to accommodate the ADP interfaces. Deleting VRRP Configurations After you physically remove PMC NIC card carriers that you are replacing with an ADP module, you need to delete the configuration information for the NIC interfaces.

  • Page 75: Reconfiguring Interfaces

    Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Reconfiguring Interfaces After you install the ADP module, you need to reconfigure interface information as described below. To reconfigure interfaces for an ADP module 1. Log into the appliance using Nokia Network Voyager.

  • Page 76

    About IP1200 Appliance ADP Services Modules Also notice that the ADP logical interfaces are named eth-s2p1c0 through eth-s2p8c0: 3. Delete the interface names and configuration information for each interface you removed by following the remaining steps in this procedure. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 77

    Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Note To delete an interface used by VRRP or IP clustering, you must first disable the feature that uses the interface. This is why you deleted the VRRP configuration before you installed the ADP module.

  • Page 78: Reconfiguring Vrrp

    About IP1200 Appliance ADP Services Modules The following figure shows the example system after the configuration information for all of the removed interfaces has been deleted: 9. If appropriate, configure the ADP interfaces to use the IP addresses previously assigned to the removed interfaces.

  • Page 79

    Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces In this example, you need to recreate the VRRP configuration using the new interfaces eth-s2p1c0 and eth-s2p2c0. The following figure shows the example system after you recreate the VRRP configuration using the new interfaces:...

  • Page 80

    About IP1200 Appliance ADP Services Modules IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 81: And Accelerated Data Path (adp) Services Modules

    This chapter provides information about how to install or replace components other than network interface cards (NICs) and Accelerated Data Path (ADP) services modules in your Nokia IP1200 Series appliance. The following topics are covered: Replacing a Hard-Disk Drive Installing a PC Card...

  • Page 82: Replacing A Hard-disk Drive, Disk Mirroring

    Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path Replacing a Hard-Disk Drive The Nokia IP1200 Series appliance supports up to two hard-disk drives with the disk mirroring feature in the Nokia IPSO operating system. If the appliance has only one hard-disk drive installed, it is in the top slot (slot A).

  • Page 83: Hard-disk Drive Hot Swap Feature, Before You Begin, Removing And Replacing A Hard-disk Drive

    Nokia hard-disk drive kit and accompanying documentation Phillips-head screwdriver Removing and Replacing a Hard-Disk Drive If you have disk mirroring configured on your Nokia IP1200 Series appliance, you can remove a failed hard-disk drive without shutting down the appliance. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 84

    Back up your hard-disk drive files to a remote system on a regular basis. For backup and restore procedures, see the Getting Started Guide and Release Notes for the version of Nokia IPSO you are using, or the Nokia Horizon Manager User Guide and online help.

  • Page 85

    9. Press the recessed hot swap button again to restore power to the hard-disk drive. The IP1200 Series recognizes the new hard-disk drive. 10. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 86

    Access Network Voyager. For information about how to access Network Voyager and the related reference materials, see “Using Nokia Network Voyager” on page 44. b. On the Network Voyager home page, click Config. c. Scroll to the bottom and click Reboot, Shut Down System.

  • Page 87

    7. Press the hot swap button to restore power to the hard-disk drive. The IP1200 Series recognizes the new hard-disk drive. 8. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 88: Installing A Pc Card

    After you install a single-slot PCMCIA carrier card, which you can purchase from Nokia, the IP1200 Series appliance supports a PC card with 1-GB flash memory that Nokia offers with or without system software included. You can use the carrier card in slot 3, which is located on the...

  • Page 89

    Any servicing of the appliance, however, should be completed with the chassis tray assembly fully removed from the appliance. 1. Use Nokia Network Voyager or the CLI to perform an orderly shutdown of the IP1200 Series appliance. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...

  • Page 90

    Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path 3. Slide the chassis tray assembly forward, press and tray release lever, and completely remove the tray from the appliance. 00049 4. Remove the six screw that secure the metal shield above the two PMC carriers or ADP module and remove the shield.

  • Page 91

    Installing a PC Card 5. Remove any installed PMC carriers or ADP module so that both slot 1 and slot 2 are not occupied. Remove six screws and PMC carrier and ADP module shield IV E ST AT AC TI VI TY IV E W ER...

  • Page 92

    Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path 7. Raise the back end of the PCMCIA carrier card approximately 45 degrees as you insert the front end into slot 3 in the front panel. IV E ST A T U S...

  • Page 93

    Installing a PC Card 8. Being careful to push down only where the motherboard connectors are located, press the back end of the carrier card down into the connectors until it is fully seated. Secure the two rear carrier card screws L I N IV E A C T...

  • Page 94: Storing System Logs On The Flash-memory Pc Card, Disabling Flash-memory Pc Cards

    You can use the flash-memory PC card to store system log messages. Use Nokia Network Voyager to configure the flash-memory PC card as an optional disk. After you reboot the Nokia IP1200 Series appliance, use Network Voyager to configure system logging options. For more information, see the Nokia Network Voyager Reference Guide for the version of Nokia IPSO you are using.

  • Page 95: Transferring Files With The Flash-memory Pc Card

    /dev/wd1 /cdrom The /cdrom directory is a default directory in Nokia IPSO for mounting media. 4. Use the cp command to transfer Nokia IPSO images or configuration files to and from the flash-memory PC card. For example, to copy the current Nokia IPSO image from the compact flash to the flash- memory PC card, use the following command: cp /image/current/ipso.tgz /cdrom/...

  • Page 96: Replacing The Compact Flash Memory Card

    You cannot see the compact flash memory unless you remove the hard-disk drives. To replace the compact flash memory card, you need: Physical access to the appliance Access to the appliance by using Nokia Network Voyager or the CLI A Phillips-head screwdriver Replacement compact flash memory card and accompanying documentation You must perform an orderly shutdown of the appliance and turn the power off whenever you open the chassis tray assembly to service internal components.

  • Page 97

    Replacing the Compact Flash Memory Card 5. Loosen the chassis tray assembly retaining screws on the front panel of the appliance. IP1200 00507.2 6. Slide the chassis tray assembly forward, pressing the release tab on the right side of the assembly, and completely remove the chassis to expose the compact flash memory slot on the motherboard.

  • Page 98

    12. Press the power switch, located on each power supply at the back of the appliance, to turn on the power to the appliance. Note Make sure you turn on both power supplies. Note Disk-mirroring is disabled for the Nokia IP1200 Series flash-based appliance in the Nokia IPSO v3.9 release. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 99: Replacing Or Upgrading Memory, Before You Begin

    Replacing or Upgrading Memory The Nokia IP1200 Series appliance has four dual inline memory-module (DIMM) sockets. This section describes how to upgrade or replace the memory by using a Nokia-approved memory upgrade kit. The IP1200 Series appliances come with different memory configurations. Contact Nokia customer support for more information on the supported memory configurations.

  • Page 100

    To add or replace DIMMs 1. Use Nokia Network Voyager or Lynx to perform an orderly shutdown of the IP1200 Series. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...

  • Page 101

    Replacing or Upgrading Memory 4. Slide the chassis tray assembly forward, pressing the release tab on the right side of the assembly, and completely remove the chassis to expose the compact flash memory slot on the motherboard. 00049a 5. Remove the DIMM by pressing the two retaining clips outward and carefully pulling each DIMM upward.

  • Page 102: Installing A Nokia Encryption Accelerator Card

    The IP1260 appliance comes with the Nokia encryption accelerator card preinstalled as part of its base bundle. If you ordered the Nokia encryption accelerator card as an option before purchasing the IP1220, then the Nokia encryption accelerator card is installed before the appliance is delivered.

  • Page 103

    To install the encryption accelerator card 1. Use Nokia Network Voyager or Lynx to shut down the IP1200 Series. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...

  • Page 104

    Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path 2. Loosen the four front-panel retaining screws. IP1200 00507.2 3. Slide the chassis tray assembly forward to expose the motherboard components. 00326a.2 4. Locate the PMC connectors on the motherboard. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 105

    Installing a Nokia Encryption Accelerator Card The connectors are located near the back of the motherboard near the DIMM sockets. Standoffs Insert the card into connectors Screw card into standoffs 00324.1 Caution Do not use the PMC connectors located at the front of the motherboard for the encryption acceleration card.

  • Page 106: Configuring Software To Use Hardware Acceleration

    The Nokia encryption accelerator software package is part of the Nokia IPSO operating system, so the appliance automatically detects and configures the Nokia encryption accelerator card. For the Nokia IP1200 appliances, SecureXL is on by default. After you install the Nokia encryption accelerator card and reboot the appliance, SecureXL automatically uses the Nokia encryption accelerator card for encryption acceleration.

  • Page 107: Installing A Fan Unit, Before You Begin

    The PKCS#11 token that enables IKE acceleration is registered with the Check Point software on your appliance. After you register the module, you must install the Check Point security policy on the firewall for the Nokia encryption accelerator card to perform IKE acceleration. Installing a Fan Unit The fan unit is hot swappable.

  • Page 108: Installing Or Replacing A Power Supply

    In this situation, the power supply still meets all safety standards.This condition is normal and does not affect the performance of the Nokia IP1200 Series. To cool the power supply down, use the power supply switch to turn on power and activate the integrated cooling fan.

  • Page 109

    Installing or Replacing a Power Supply Caution The Nokia IP1200 Series appliance power supply might be hot to the touch when the power supply unit is plugged in to an AC power source and the power supply is not turned on.

  • Page 110: Monitoring The Power Supply, Replacing Motherboard Batteries

    9. Turn on power to the power supply. Monitoring the Power Supply You can monitor the status of the Nokia IP1200 Series appliance power supply with Nokia Network Voyager. Similarly, you can also use the command-line interface (CLI). For information about the CLI, see the CLI Reference Guide.

  • Page 111

    Replacing Motherboard Batteries Before You Begin Before you replace the battery, you need the following: The appropriate Nokia battery replacement kit for your appliance Physical access to the appliance A Phillips-head screwdriver A wrist grounding strap (Optional) Safety glasses Warning Risk of explosion if battery is replaced by an incorrect type.

  • Page 112

    Step 1 through Step 6. If the appliance does not start up normally after that, contact your Nokia service provider. 6. Reset the appliance date and time information using Nokia Network Voyager or the command-line interface. You need to do this because the battery is required to maintain the date and time whenever you shut down the appliance.

  • Page 113: Troubleshooting, General Troubleshooting Information

    This chapter provides troubleshooting tips, problems, and solutions related to Nokia IP1200 Series appliance installations. For information about how to reinstall the Nokia IPSO operating system onto your appliance, see the Nokia IPSO Boot Manager Reference Guide. General Troubleshooting Information The information in this section relates to problems you might encounter during the IP1200 Series installation.

  • Page 114

    Problem Database is corrupt. Solution Return to default settings as described in “To reset the default database settings” page 115, or contact the Nokia customer support site listed in “Nokia Contact Information” page 3. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 115

    Chapter 3, “Performing the Initial Configuration.” To reset the default database settings 1. Log in to the IP1200 Series as admin by using Nokia Network Voyager. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...

  • Page 116

    Series. This procedure erases any configuration database on the appliance. For information about how to complete the full installation procedure, see the current release notes. The “Nokia release notes are located on the Nokia customer support Web site as listed in the Contact Information” on page 3.

  • Page 117

    Solution You might have set the wrong speed. Verify that the speeds match on each end of the Ethernet connection (10 Mbps, 100 Mbps, or 1000 Mbps). Problem Port not enabled. Solution Verify from the Interface page in Nokia Network Voyager that the interface port is configured as active. Problem High collision rate on the hub.

  • Page 118

    Troubleshooting IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 119: A Technical Specifications, Space Requirements

    (not to exceed 96 consecutive hours) Humidity 5% to 90% Space Requirements The Nokia IP1200 Series Security Platform is designed for front-screw mounting in a 19-inch rack. Each IP1200 Series requires the following space in a rack: 3.5 inches (8.89 centimeters) of vertical space...

  • Page 120

    Technical Specifications IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 121: B Compliance Information, Declaration Of Conformity

    Compliance Information This appendix contains declaration of conformity, compliance, and related regulatory information. Declaration of Conformity According to ISO/IEC 17050: Manufacturer’s Name: Nokia Inc. Manufacturer’s Address: 313 Fairchild Drive Mountain View, CA 94043-2215 declares that the product: Product Name: IP1260, IP1220, 500s...

  • Page 122: Compliance Statements

    Compliance Information Christopher Saleem Compliance & Reliability Engineering Manager Security & Mobile Connectivity, Enterprise Solutions Mountain View, California January 2005 Compliance Statements This hardware complies with the standards listed in this section. Emissions Standards FCC Part 15 Subpart B Class A US/Canada EN55022 (CISPR 22 Class A) European Community (CE)

  • Page 123: Fcc Notice (us)

    FCC Notice (US) Safety Standards UL60950/EN60950 US/European Community(CE) CAN/CSA-C22.2 No.60950 Canada FCC Notice (US) This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

  • Page 124

    Compliance Information IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 125: Index

    Index DC power supplies 27 Numerics DIMMs 10/100 Ethernet NIC features 58 accessing and removing 100 adding 100 socket locations 99 disk mirroring 18, 24, 82 Accelerated Data Path services modules document structure 13 see ADP services modules dual inline memory-module sockets (DIMMs) 99 accessing and removing DIMMs 100 activating interfaces 56 ADP services modules 67...

  • Page 126

    40 hard-disk drives overview 24 removing 84 opening Nokia Network Voyager 44 replacing 82 output connector, Ethernet cable 60 status LEDs 24 hot swap button 83 hot swapping 18 PC card removing 94 PCMCIA slots 18 IEEE 802.3z 64...

  • Page 127

    troubleshooting 113 two-port Ethernet network interface card 64, 65 upgrading memory 99 UTP5 dual-mode Ethernet 58 VT100-compatible terminal 40 warning notices 14 IP1220 and IP1260 Security Platforms Installation Guide Index - 127...

  • Page 128

    Index - 128 IP1220 and IP1260 Security Platforms Installation Guide...

This manual also for:

Ip1260

Comments to this Manuals

Symbols: 0
Latest comments: