Related Manuals for Nokia NBB0150000 - IP150 - Security Appliance
Summary of Contents for Nokia NBB0150000 - IP150 - Security Appliance
-
Page 1: Installation Guide
Nokia IP150 Security Platform Installation Guide Part No. N450000666 Rev 002 Published May 2008... - Page 2 IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
- Page 3 Singapore 119968 Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 050602 Nokia IP150 Security Platform Installation Guide...
- Page 4 Nokia IP150 Security Platform Installation Guide...
-
Page 5: Table Of Contents
About the Nokia IP150 Security Platform ....... . . 15... - Page 6 Before You Start..........51 Installing or Replacing the Nokia Encryption Accelerator Card....54 Before You Start.
- Page 7 Table 3 Appliance Status LEDs ........19 Nokia IP150 Security Platform Installation Guide...
- Page 8 Nokia IP150 Security Platform Installation Guide...
- Page 9 Figure 10 Power Switch Location ........32 Figure 11 Nokia Network Voyager Reference Access Points ....37 Figure 12 Hard-Disk Drive Location .
- Page 10 Nokia IP150 Security Platform Installation Guide...
-
Page 11: About This Guide
About this Guide This guide provides information for the installation and use of the Nokia IP150 security platform. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. This preface provides the following information: In This Guide... -
Page 12: Notices
• Emphasizes a point or denotes new terms at the Italics place where they are defined in the text. • Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name Nokia IP150 Security Platform Installation Guide... -
Page 13: Related Documentation
CLI Reference Guide for the version of Nokia IPSO you are using Getting Started Guide and Release Notes for the version of Nokia IPSO you are using Nokia IPSO Boot Manager Reference Guide, which describes how to use the Nokia IPSO... - Page 14 About this Guide Nokia IP150 Security Platform Installation Guide...
-
Page 15: Overview
Overview This chapter provides an overview of the Nokia IP150 Security Platform and the requirements for using the IP150 appliances. The following topics are covered: About the Nokia IP150 Security Platform on page 15 Nokia IP150 Security Platform Appliance Overview... -
Page 16: Built-In Ethernet Ports
Power switch Built-in Ethernet Ports Figure 3 shows the layout of the built-in Ethernet ports and LEDs. Figure 3 Built-In Ethernet Interface Front Panel Details Activity LED (yellow) Link LED (green) RJ-45 connectors 00120 Nokia IP150 Security Platform Installation Guide... -
Page 17: Console And Serial (Aux) Ports
Caution Nokia recommends that you use the console cable that was delivered with your appliance for your console connection. Otherwise, ensure that the pin assignments for your cable match those provided in this section. -
Page 18: System Status Leds
8 (CTS) 7 (RTS) 4 (RTS) System Status LEDs You can monitor the basic operation of Nokia IP150 appliances by checking their status LEDs. The system status LEDs are located on the front panel of the appliance, as Figure 5 shows. -
Page 19: Site Requirements
For information about the built-in Ethernet interface LEDs, see “Built-in Ethernet Ports” page 16. Site Requirements Before you install a Nokia IP150 appliance, ensure that your computer room or wiring closet conforms to the environmental specifications listed in Appendix A, “Technical Specifications.” Product Disposal... -
Page 20: Safety Warnings And Cautions
Managing IP150 Security Platform Appliances You can manage Nokia IP150 appliances by using one of the following interfaces: Nokia Network Voyager—an SSL-secured, Web-based element management interface to Nokia IP security platforms. Network Voyager is preinstalled on the IP150 appliance and enabled through the Nokia IPSO operating system. - Page 21 Everything that you can accomplish with Nokia Network Voyager—to manage and configure the IP150 appliance—you can also do with the CLI. For information about how to access the CLI, see the Nokia CLI Reference Guide for the version of Nokia IPSO you are using.
- Page 22 Nokia IP150 Security Platform Installation Guide...
-
Page 23: Installing A Nokia Ip150 Security Appliance
Installing a Nokia IP150 Security Appliance Body (b1_body) follows all headings including the chapter title. You can rack mount Nokia IP150 Security appliances in a one-unit space (1U) in a standard-configuration appliance rack. Rack Mounting a Nokia IP150 Appliance Before you mount the appliance on the rack, install the two side brackets with three screws on... -
Page 24: Figure 6 Installing The Mounting Brackets
Figure 6 Installing the Mounting Brackets S T A I P 1 00666 Serrated notches face up You can mount IP150 appliances in a standard 19-inch rack with three mounting screws as Figure 6 shows. Nokia IP150 Security Platform Installation Guide... -
Page 25: Figure 7 Rack-Mounted Ip150 Appliance
Figure 7 Rack-mounted IP150 Appliance I P 1 00682 Nokia IP150 Security Platform Installation Guide... - Page 26 Nokia IP150 Security Platform Installation Guide...
-
Page 27: Connecting To The Ethernet Ports
Voyager and the related reference materials, see “Using Nokia Network Voyager” on page 35. For information about how to access the CLI, see the Nokia CLI Reference Guide for the version Nokia IPSO you are using. After the power is turned on, the Ethernet link LEDs on the appliance and on the remote equipment illuminate to indicate the connection. -
Page 28: Connecting To Ethernet Ports
The following figure shows the pin assignments for the cable. The RJ-45 cable output connector is numbered from left to right, with the copper tabs facing down and toward you. Figure 8 Output Connector for the Ethernet Cable Pin# Assignment 00270.1a Nokia IP150 Security Platform Installation Guide... -
Page 29: Figure 9 Ethernet Crossover Cable Pin Connections
Built-In Four-Port 10/100/1000 Ethernet Interface The following figure shows the pin assignments for the RJ-45 crossover cable. Figure 9 Ethernet Crossover Cable Pin Connections 00017.1 Nokia IP150 Security Platform Installation Guide... - Page 30 Nokia IP150 Security Platform Installation Guide...
-
Page 31: Performing The Initial Configuration
Chapter 5, “Installing and Replacing Components.” Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP150 appliance, you must use a serial console connection (cable included). After you perform the initial configuration, the console connection is no longer required. -
Page 32: Connecting Power And Turning The Power On
A power switch and a receptacle for the power cord are located on each power supply on the back of the appliance as shown in Figure Figure 10 Power Switch Location 00663 Power plug Power switch Nokia IP150 Security Platform Installation Guide... -
Page 33: Performing The Initial Configuration
Power is turned on to the power strip or wall receptacle into which you plugged the appliance. If the fans are still not running, or if the power LED does not illuminate, contact your Nokia service provider as listed in “Nokia Contact Information”... - Page 34 Note For information about how to use the boot manager, see the Nokia IPSO Boot Manager Reference Guide for the version of Nokia IPSO that you are using. After some miscellaneous output appears, the following prompt appears: Hostname? If the Hostname? prompt does not appear on the console, check the console port and console display connections to ensure that the serial cable is completely plugged in at both ends.
-
Page 35: Connecting Network Interfaces
Connecting Network Interfaces Connecting Network Interfaces Connect at least one network interface to the network to use as the Nokia Network Voyager system-management interface. You can also connect the remaining Ethernet interface cables at this point, although you are not required to do so. -
Page 36: Viewing Nokia Ipso Documentation By Using Nokia Network Voyager
Network Voyager interface, as shown in Figure Nokia Network Voyager Reference Guide—This guide is the comprehensive reference source for Nokia Network Voyager. To access this source, look at the list in the navigation tree on the left side of the window (as shown in Figure 11).You can also access the Nokia... -
Page 37: Using The Command-Line Interface
You can now execute CLI commands from the CLI shell and the Nokia IPSO shell. The Nokia IPSO shell is what you see when you initially log on to the appliance. -
Page 38: Using Nokia Horizon Manager
The argument must be the name of a regular file. For more information about how to access and use the CLI, see the Nokia CLI Reference Guide for the version of Nokia IPSO you are using. Using Nokia Horizon Manager Nokia Horizon Manager is an extension of the Network Voyager management functionality. -
Page 39: Using Check Point Smartcenter And Provider-1
Using Check Point SmartCenter and Provider-1 Using Check Point SmartCenter and Provider-1 Nokia supports managing IP150 appliances with Check Point SmartCenter and Provider-1 Nokia IP150 Security Platform Installation Guide... - Page 40 Nokia IP150 Security Platform Installation Guide...
-
Page 41: Installing And Replacing Components
Nokia IPSO operating system and Check Point application are stored on the hard-disk drive. Use the internal compact flash to boot the system and install the Nokia IPSO operating system on the disk. The compact flash card is located on the motherboard in a slot behind the hard-disk drive location. -
Page 42: Before You Start
To use the CLI to shut the appliance down, enter halt at the prompt. 2. Remove the power cord from the IP150 appliance, and remove the appliance from the rack. 3. Turn the appliance upside down and place it on a safe and protected work surface Nokia IP150 Security Platform Installation Guide... - Page 43 Replacing the Compact Flash Memory Card 4. Remove the three bottom-cover screws, and remove the cover as shown in the following figure. 00676 Nokia IP150 Security Platform Installation Guide...
- Page 44 5. Gently remove the installed compact flash memory card. Avoid pressing down on the surface of the card as much as possible. 00678 Nokia IP150 Security Platform Installation Guide...
-
Page 45: Replacing A Hard-Disk Drive
8. Turn on the power supply at the back of the appliance. Replacing a Hard-Disk Drive You can replace the hard-disk drive to your IP150 appliance. The following figure shows the location of the hard-disk drive on the motherboard. Nokia IP150 Security Platform Installation Guide... -
Page 46: Figure 12 Hard-Disk Drive Location
You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembly to service internal components. Nokia IP150 Security Platform Installation Guide... -
Page 47: Before You Start
Replacing a Hard-Disk Drive Note Back up your files to a remote system on a regular basis. For back up and restore procedures, see the Getting Started Guide and Release Notes for the version of Nokia IPSO you are using. Before You Start... - Page 48 6. To remove the installed drive assembly from the appliance, remove the four drive bracket screws, and remove the assembly. 00674 7. Remove the retaining screws that hold the drive unit from the sides of the bracket, and remove the drive from the bracket. 00675 Nokia IP150 Security Platform Installation Guide...
- Page 49 9. Reinstall the two drive connectors. 10. Replace the top cover, reinstall the appliance in the rack, and reconnect the appliance power cord. 11. Turn on the power supply at the back of the appliance. Nokia IP150 Security Platform Installation Guide...
-
Page 50: Replacing Or Upgrading Memory
Replacing or Upgrading Memory The IP150 appliances have two dual inline memory-module (DIMM) sockets. This section explains how to upgrade or replace the memory in your appliance by using a Nokia-approved memory upgrade kit. The IP150 comes with different memory configurations. Contact Nokia customer support for more information on the supported memory configurations. -
Page 51: Before You Start
Before You Start To upgrade or replace the memory in your appliance, you need the following: Physical access to the appliance Nokia memory upgrade kit and accompanying documentation Network or console access to the appliance Caution To protect the IP150 appliance and the memory modules from electrostatic discharge (ESD), make sure you are properly grounded before you touch these components. - Page 52 4. Remove the three bottom-cover screws, and remove the cover as shown in the following figure. 00676 Nokia IP150 Security Platform Installation Guide...
- Page 53 You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins. 6. The memory DIMMs are keyed to prevent improper insertion. Press the new DIMM into the socket until it clicks into place and the retaining clips lock into position. Nokia IP150 Security Platform Installation Guide...
-
Page 54: Installing Or Replacing The Nokia Encryption Accelerator Card
The Nokia encryption accelerator card provides high-speed cryptographic processing that enhances VPN performance. You can install or replace the Nokia encryption accelerator card in your IP150 appliance. The following figure shows the location of the encryption accelerator card on the motherboard. -
Page 55: Before You Start
Access to the appliance through Network Voyager A Phillips-head screwdriver To install or replace a Nokia encryption accelerator card 1. Use Network Voyager or the CLI to halt the appliance. To use Network Voyager to shut the appliance down, select System >... - Page 56 4. Remove the three top-cover screws and slide the cover back to remove it from the appliance. 00667 5. If you need to remove an installed encryption accelerator card, pull the two retaining clips outward as shown in the following figure. I P 1 00670 Nokia IP150 Security Platform Installation Guide...
-
Page 57: Configuring And Activating Nokia Encryption Acceleration
The Nokia encryption accelerator software package is part of the Nokia IPSO operating system, so the appliance automatically detects and configures the Nokia encryption accelerator card. For the Nokia IP150 appliances, SecureXL is on by default. After you install the Nokia encryption accelerator card and reboot the appliance, SecureXL automatically uses the Nokia encryption accelerator card for encryption acceleration. -
Page 58: Replacing The Battery
The PKCS#11 token that enables IKE acceleration is registered with the Check Point software on your appliance. After you register the module, you must install the Check Point security policy on the firewall for the Nokia encryption accelerator card to perform IKE acceleration. Replacing the Battery... - Page 59 3. Turn the appliance right-side up and place it on a safe and protected work surface. 4. Remove the three top-cover screws and slide the cover back to remove it from the appliance. 00667 Nokia IP150 Security Platform Installation Guide...
- Page 60 7. With the positive side facing up, slide the new battery through the cutout in the battery holder. Caution You must place the new battery into the battery holder observing the correct polarity. The positive terminal of the battery must be facing up. Nokia IP150 Security Platform Installation Guide...
- Page 61 8. Replace the top cover, reinstall the appliance in the rack, and reconnect the appliance power cord. 9. Turn on the power supply at the back of the appliance. After you replace the battery, you need to reset the date and time using Network Voyager or the CLI. Nokia IP150 Security Platform Installation Guide...
- Page 62 Nokia IP150 Security Platform Installation Guide...
-
Page 63: Troubleshooting
This chapter provides troubleshooting tips, problems, and solutions related to Nokia IP150 appliance installations. For information about how to reinstall Nokia IPSO on to your appliance, see the Nokia IPSO Boot Manager Reference Guide for the version of Nokia IPSO that you are using. - Page 64 “Nokia Contact Information” page 3. Login Prompt Appears, But Password Not Accepted Problem Database is corrupt Solution Return to default settings or contact the Nokia customer support site listed in “Nokia Contact Information” on page 3. Problem Entered wrong password.
- Page 65 This procedure erases any configuration database on the appliance. For information about how to complete the full installation procedure, see the current release notes. The release notes are located on the Nokia customer support Web site as listed in the “Nokia Contact Information”...
- Page 66 Problem High collision rate on the hub. Solution Disconnect connections one at a time until the problem is localized to one computer and troubleshoot further. Nokia IP150 Security Platform Installation Guide...
-
Page 67: A Technical Specifications
10.50 lbs. (4.76 kg): Base system with mounting brackets Space Requirements Nokia IP150 appliances are designed for front-screw mounting in a 19-inch rack. Each IP150 appliance requires the following space in a rack: 1.60 inches (4.06 centimeters) of vertical space 16 inches (40.64 centimeters) behind the front-panel of the rack plus 6 inches (15... -
Page 68: Appliance Interfaces
100-120V/200-240V Frequency 50/60Hz AC input current maximum 4.0A Power consumption 55 watts Appliance Interfaces Interface Cable Type Cable Output Connector Ethernet IEEE 802.3 10/100 BASE-TX, 1000 BASE-T RJ-45 unshielded twisted pair, full-duplex or half-duplex Nokia IP150 Security Platform Installation Guide... -
Page 69: B Compliance Information
CSA C22.2 No. 60950-1-03 1st Ed. EMC: EN55024 1998, EN55022A 2003, EN61000-3-2, EN61000-3-3 Supplementary information: Pursuant to ISO/IEC 17050 this product complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 2004/108/EC. Nokia IP150 Security Platform Installation Guide... -
Page 70: Compliance Statements
EN55022A: 2003, CISPR 22 European Community (CE) Class A: 2003 Immunity Standards EN55024: 2003 European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 EN61000-4-6 EN61000-4-8 EN61000-4-11 Harmonics and Voltage Fluctuation EN61000-3-2 European Community (CE) EN61000-3-3 European Community (CE) Nokia IP150 Security Platform Installation Guide... -
Page 71: Fcc Notice (Us)
Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. 050316 Nokia IP150 Security Platform Installation Guide... - Page 72 Nokia IP150 Security Platform Installation Guide...
-
Page 73: Index
(RAM) connector pin assignments for Ethernet network replacing 50 interfaces 28 upgrading 50 console modem connection cable 32 pin assignments for the 17 console cable connection 32 monitoring IP150 appliances 18 Nokia IP150 Security Platform Installation Guide Index - 73... - Page 74 19 replacing RAM memory 50 RJ-45 connector 28, 29 security platform configuring 31 specifications interfaces 68 space requirements 67 technical specifications See specifications troubleshooting 63 upgrading RAM memory 50 Index - 74 Nokia IP150 Security Platform Installation Guide...