Nokia IP350 Installation Manual

Fips 140-2 kit and nokia ipso 3.7.99.
Hide thumbs
for FIPS 140-2 Kit
and Nokia IPSO 3.7.99
Part No. N451317003 Rev A
Published August 2004

   Also See for Nokia IP350

   Summary of Contents for Nokia IP350

  • Page 1: Installation Guide

    Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99 Part No. N451317003 Rev A Published August 2004...

  • Page 2

    IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...

  • Page 3

    Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 031014 Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 4

    Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 5: Table Of Contents

    Using an SSH Client..........21 Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 6

    Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 7: About This Guide

    About This Guide In This Guide This guide is for resellers and users of the Nokia FIPS 140-2 solution. The document is organized into the following chapters: Chapter 1, “Applying the Tamper-Evident Seal” describes how to install the required tamper-evident seal.

  • Page 8

    Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 9: Applying The Tamper-evident Seal

    Applying the Tamper-Evident Seal This chapter provides instructions for installing a tamper-evident seal on your Nokia IP350 or IP380 appliance. Solution Components The appliance is shipped in a carton. Within the carton, the appliance is placed inside an ESD bag, and a foam end cap is placed on each side of the chassis to protect the appliance during shipping.

  • Page 10: Applying The Seal

    To satisfy that the appliance meets Level 2 physical security requirements, you must install one tamper-evident seal. Caution Before you install the tamper-evident seal, be sure to install any appropriate hardware components such as network interface cards or memory upgrades. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 11

    N431174001 (1x) 00449 2. Record the serial number of the applied seal in a security log. 3. Allow 24 hours for the adhesive in the tamper-evident seal to completely cure. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 12

    Applying the Tamper-Evident Seal Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 13: Installing Ipso 3.7.99 And Check Point Vpn-1 Ngai (r54)

    Check Point VPN-1 NGAI (R54) This chapter explains how install IPSO 3.7.99 and Check Point VPN-1 NGAI (R54) on a Nokia appliance. It assumes that the IPSO image file ( ipso.tgz) and the Check Point VPN-1 NGAI (R54) wrapper (.tgz file) are on an FTP server that is reachable from the Nokia appliance.

  • Page 14: Performing The Initial Configuration

    RS-232 data terminal equipment (DTE) 9600 bps 8 data bits No parity 1 stop bit You can also use a data communications equipment (DCE) device. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 15

    If this happens, follow these steps. c. Enter rm /config/active mv /config/active /config/active.old d. Reboot the appliance. e. Respond to the configuration prompts in a timely manner. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 16

    8. When prompted, log into the system using the password you just created. 9. Install IPSO 3.7.99 and the Check Point VPN-1 NGAI (R54) package, as explained in “Installing IPSO and VPN-1 NGAI (R54).” Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 17: Installing Ipso And Vpn-1 Ngai (r54)

    4. At the prompt, re-enter the new password for verification. 5. At the boot manager prompt, enter install 6. Enter the boot manager password when prompted. 7. The installation script runs. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 18

    8). Retrieve the Check Point VPN-1 NGAI (R54) wrapper (.tgz) file. 10. Type Y when you see the following: Checking if bootmgr upgrade is needed... No need to upgrade bootmgr. Do you want to upgrade bootmgr anyway? [n] Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 19

    11. At the end of the installation procedure, enter reboot 12. After your appliance reboots, follow the prompts to configure basic settings and install the packages. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 20: Running Cpconfig

    IPSO shell (over a console or network connection). You can do this before or after you perform the rest of the procedures described in this chapter. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 21: Enabling Fips Mode

    At a minimum, you should use a host key as explained under “Using a Host Key.” For even better security, use authorized keys as well. Installation Guide for FIPS 140-2 Kit and Nokia IPSO 3.7.99...

  • Page 22

    For maximum security, you can install the public part of this key on the workstations that you will use to connect to the Nokia system. Having the host public key installed allows the SSH client program to verify that it really is communicating with the Nokia system and not a system that is falsely purporting to be the Nokia system.

This manual also for:

Ip380

Comments to this Manuals

Symbols: 0
Latest comments: