Nokia IP1220 - Security Appliance User Manual Download

Page: 1 / 128

Part No. N450000536 Rev 001

Published June 2008

IP1220 and IP1260 Security

Platforms Installation Guide

All manuals and user guides at all-guides.com

all-guides.com

Summary of Contents for IP1220 - Security Appliance

Page 1: ...Part No N450000536 Rev 001 Published June 2008 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 2: ...and any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or services loss of use da...

Page 3: ...37 7089 email info ipnetworking_americas nokia com Europe Mid dle East and Africa Nokia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 email info ipnetworking_emea nokia com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 65 6588 3364 email info ipnetworking_apac nokia com Web Site https support noki...

Page 4: ...4 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 5: ...ity Platform 19 Nokia IP1200 Series Security Platform Overview 19 Ethernet Management Ports 20 PMC Expansion Slots 21 Console Port 21 System Status LEDs 23 Hard Disk Drives 24 Disk Mirroring 24 Hard Disk Drive Hot Swap Feature 24 Hard Disk Drive LEDs 24 Power Supplies and Fan Unit 25 Power Supplies 26 Fan Unit 28 Site Requirements 28 Safety Warnings and Cautions 28 Software Requirements 30 Product...

Page 6: ...10 100 Ethernet NICs 58 10 100 Ethernet NIC Features 58 Ethernet NIC Connectors and Cables 59 Two Port and Four Port Copper Gigabit Ethernet NICs 60 Copper Gigabit Ethernet NIC Features 61 Performance Considerations 62 Copper Gigabit Ethernet NIC Connectors and Cables 62 Two Port Fiber Optic Gigabit Ethernet NICs 64 Fiber Optic Gigabit Ethernet NIC Features 64 Fiber Optic Gigabit Ethernet NIC Conn...

Page 7: ... Replacing the Compact Flash Memory Card 96 Replacing or Upgrading Memory 99 Before You Begin 99 Installing a Nokia Encryption Accelerator Card 102 Before You Begin 103 Configuring Software to Use Hardware Acceleration 106 Installing a Fan Unit 107 Before You Begin 107 Installing or Replacing a Power Supply 108 Before You Begin 109 Monitoring the Power Supply 110 Replacing Motherboard Batteries 11...

Page 8: ...8 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 9: ...gure 11 Nokia Network Voyager Reference Access Points 45 Figure 12 Four Port 10 100 Ethernet NIC Front Panel Details 59 Figure 13 Output Connector for the Ethernet Cable 60 Figure 14 Ethernet Crossover Cable Pin Connections 60 Figure 15 Two Port Copper Gigabit Ethernet NIC Front Panel Details 61 Figure 16 Four Port Copper Gigabit Ethernet NIC Front Panel Details 61 Figure 17 Ethernet Cable Connect...

Page 10: ...10 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 11: ...Table 4 PMC Expansion Slots 21 Table 5 Pin Assignments for DB9 and DB25 Interface Cables 22 Table 6 System Status LEDs 23 Table 7 Hard Disk Drive LEDs 25 Table 8 Power Supply Status LEDs 28 Table 9 Nokia IP1200 Series Disk Based Platform Software Requirements 30 Table 10 Nokia IP1200 Series Flash Based Platform Software Requirements 30 Table 11 NIC PCI Frequency 57 All manuals and user guides at a...

Page 12: ...12 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 13: ...nd how to make the appliance available on the network Chapter 4 Installing and Replacing Network Interface Cards and Accelerated Data Path ADP Services Modules describes how to install monitor and replace network interface cards NICs and Accelerated Data Path ADP services modules Chapter 5 About IP1200 Series Appliance Network Interface Cards describes how to connect to and use each of the support...

Page 14: ...autions indicate potential equipment damage equipment malfunction loss of performance loss of data or interruption of service Note Notes provide information of special interest or recommendations Text Conventions Table 1 describes the text conventions this guide uses Table 1 Text Conventions Convention Description monospace font Indicates command syntax or represents computer or screen output for ...

Page 15: ...ng Configuration Guide for the version of Nokia IPSO you are using Nokia Network Voyager inline help You can find the most up to date version of the Nokia IP1200 Series Security Platform Installation Guide in PDF on the Nokia support site https support nokia com You can access inline help the Nokia Network Voyager Reference Guide and the CLI Reference Guide from Nokia Network Voyager Check Point d...

Page 16: ...3 16 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 17: ...he Nokia IP1260 security platform is a high end multi port security platform that is ideally suited for the enterprise data center The Nokia IP1220 security platform is a mid range security platform that is ideally suited for a smaller data center Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance Table 2 presents specifics about the Nok...

Page 18: ...ication and operating system storage is provided on mirrored hard disk drives in the two storage device slots The IP1200 Series security platform is designed to meet other mid to high end availability requirements including port density for connections to redundant internal external DMZ and management networks In addition the IP1200 Series security platform provides redundant power supplies N 1 co...

Page 19: ...the related reference materials see Using Nokia Network Voyager on page 44 The Nokia IPSO command line interface CLI an SSHv2 secured interface that enables you to easily configure Nokia IP security platforms from the command line Everything that you can accomplish with Network Voyager manage monitor and configure the IP1200 Series security platform you can also do with the CLI For information abo...

Page 20: ...net management ports are intended for management purposes These ports do not provide the same performance as Ethernet cards in the PMC slots Figure 2 Ethernet Management Ports Details Caution Cables that connect to the Ethernet NIC must be IEEE 802 3 compliant to prevent potential data loss 00307a 3 Dual 6U PMC carrier or ADP module expansion slots 1 and 2 Console port System status LEDs PCMCIA sl...

Page 21: ... reseller information contact a Nokia service provider listed in the Nokia Contact Information on page 3 Console Port Use the built in console port shown in Figure 1 to supply information that makes the appliance available on the network Figure 3 provides pin assignment information for console connections If you need to access the devices locally you must use the console port Table 4 PMC Expansion...

Page 22: ...r DB9 and DB25 Interface Cables Console or serial pin and assignment DB9 cable output pin and assignment DB25 cable output pin and assignment Shield FG Shield FG 1 FG 2 RXD 3 TXD 2 TXD 3 TXD 2 RXD 3 RXD 4 DTR 6 DSR 6 DSR 5 SG 5 SG 7 SG 6 DSR 4 DTR 20 DTR 7 RTS 8 CTS 5 CTS 8 CTS 7 RTS 4 RTS 00460 6 9 5 1 Pin Assignment Input or output 1 DCD AUX port only not used by the console port Input 2 RXD Inp...

Page 23: ...nce Network Interface Cards The location and meaning of the status LEDs for the installed Accelerated Data Path ADP services modules described in Chapter 6 About IP1200 Appliance ADP Services Modules Note The symbols in Table 3 are visibly only if there is an alarm condition as specified Table 6 shows the system status LEDs and describes their meaning Table 6 System Status LEDs Status Indicator Me...

Page 24: ...hould be transparent to your data connections You can use Nokia Network Voyager the command line interface CLI or Lynx to create and delete mirror sets Note The IP1200 series flash based appliances do not support disk mirroring For more information about disk mirroring including configuration details see the Nokia Network Voyager Reference Guide and the Nokia IPSO Getting Started Guide and Release...

Page 25: ...hown in Figure 6 Table 7 Hard Disk Drive LEDs LED LED State Meaning Activity Off No current disk activity Blinking green Current disk activity Status Solid red hard disk drive is turned on but is malfunctioning Solid green hard disk drive is turned on and is functioning Off One of the following hard disk drive failed its test and was powered off hard disk drive is ready to be removed using the hot...

Page 26: ...haring and redundancy If both power supplies are not turned on the Fault LED illuminates For more information about the power supply status LEDs see Power Supply Status LEDs on page 28 The power supplies are autosensing and can accept input voltages between 85 VAC and 264 VAC The power supply output is regulated to a tolerance of 5 percent of the specified output voltage Caution The Nokia IP1200 S...

Page 27: ... on page 108 DC Power Supplies For IP1200 Series appliances that use DC power supplies the following specifications apply for Nokia approved components Input voltage 48 volts DC nominal 40 to 60 volts DC auto ranging capable Input current 10 amps maximum at 40 volts DC 00308a Power supply switch Cooling fan AC power receptacle Power supply A Power supply B 00624 700W AC FAULT OVER TEMP PWR OK 700W...

Page 28: ...about the system status LEDs see System Status LEDs on page 23 Site Requirements Before you install an IP1200 Series appliance ensure that your computer room or wiring closet conforms to the environmental specifications listed in Appendix A Technical Specifications Safety Warnings and Cautions Warning Hazardous radiation exposure can occur if you use controls make performance adjustments or follow...

Page 29: ... approved by the country of end use Warning Replacement of fuses replaceable only by service personnel Caution Replace the battery only with the same or equivalent type battery recommended by the manufacturer Dispose of used batteries according to the manufacturer s instructions Caution Do not block any of the ventilation holes on the appliance The components might overheat and become damaged Note...

Page 30: ...formation about the materials used in their manufacture that can help those who will process equipment after you have disposed of it The Nokia web site http www nokia com provides information about our environmental programs and practices which includes details about materials used in manufacturing and end of life practices You can also find your product s Eco Declaration which provides basic info...

Page 31: ...rea The crossed out wheeled bin means that within the European Union the product must be taken to separate collection at the product end of life This applies to your device but also to any enhancements marked with this symbol Do not dispose of these products as unsorted municipal waste All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 32: ...1 Overview 32 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 33: ... wrist strap before you handle the components or open the appliance The grounding plug on the front of the appliance shown in Figure 1 on page 20 provides a chassis grounding point If you do not have a grounding wrist strap make sure you are properly grounded before you touch any electronic component Rack Mounting the Appliance The Nokia IP1200 Series appliance mounts in a standard 19 inch equipme...

Page 34: ...ich to place the chassis tray assembly Before you rack mount the appliance you can ground it by using the grounding lugs provided To ground the IP1200 Series 1 Locate and remove from the package the 6 ring tongue lugs and kep nuts 2 Attach a 10 or 12 AWG insulated grounding cable to the lugs 3 Locate the two threaded grounding studs protruding from the rear panel of the appliance as shown in Figur...

Page 35: ...nce from the packaging 2 Optionally remove the fan unit from the back of the appliance a Locate the fan unit and the four retaining screws that secure it on the back of the IP1200 Series b Loosen the retaining screws by turning them counterclockwise c Slowly pull the fan unit out of the chassis tray assembly toward the rear 00308a Fan unit 00318 1 All manuals and user guides at all guides com ...

Page 36: ...ly pull the power supply out of the chassis tray assembly 4 Optionally remove the chassis tray assembly from the appliance Caution To help guard against electrostatic discharge damage make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance The grounding plug on the front...

Page 37: ...pliance c Place the chassis tray assembly on a properly grounded surface 5 Adjust the mounting brackets on the side of the appliance if necessary 6 Mount the appliance into a standard 19 inch rack by using the mounting screws located on the mounting brackets 7 Slide the chassis tray assembly back into the appliance until it clicks into place and resecure the four chassis tray assembly retaining sc...

Page 38: ...2 Installing the Nokia IP1200 Series Appliance 38 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 39: ... Turning the Power On Performing the Initial Configuration Connecting Network Interfaces Using Nokia Network Voyager Using the Command Line Interface Using Nokia Horizon Manager For information about how to use the DHCP client for initial configuration see the Read Me First document Using DHCP to Configure Your Appliance included with the appliance Note Nokia recommends that you physically install...

Page 40: ... 1 Connect the supplied null modem cable console cable to the console port on the front panel of the IP1200 Series appliance Note The supplied console cable is Cisco compatible Use only the DB9 port labeled Console on the front panel the serial AUX port is an auxiliary modem port If you connect the console port to a data communications equipment DCE device use a straight through cable For cable pi...

Page 41: ... appliance The fan unit on the power supply turns on when you press the power switch Verify that the power supply fans are running after you press the switch Note The IP1200 Series appliance power supply automatically detects the input voltage 115 VAC or 220 VAC 85 to 264 and configures itself appropriately 4 Check the power LED the Nokia logo on the front panel of the appliance to ensure that the...

Page 42: ...erform the initial configuration 1 Turn on the appliance At the console a series of startup messages appears then the following prompt appears Type any character to enter command mode The prompt remains on the screen for about five seconds If you type any character during this time the system activates the Nokia IPSO boot manager Note For information about how to use the boot manager see the Nokia...

Page 43: ...spond to the prompts during the initial configuration process see the release notes for the Nokia software release you are running 4 When you are prompted to select an interface Nokia recommends that you select one of the Ethernet management interface ports To select an interface enter the number adjacent to the physical ID in the list of connected interfaces Note A physical ID identifies the inte...

Page 44: ...uired for the destination Gigabit Ethernet device For details see Fiber Optic Gigabit Ethernet NIC Connectors and Cables on page 65 Using Nokia Network Voyager Use Nokia Network Voyager to configure and monitor your appliance For additional information about how to use Network Voyager see Viewing Nokia IPSO Documentation by Using Nokia Network Voyager later in this section To open Nokia Network Vo...

Page 45: ...Figure 11 You can also access the Nokia Network Voyager Reference Guide and other Nokia IPSO documentation at the Nokia support site https support nokia com or on the software CD that was delivered with your appliance Nokia Network Voyager Inline Help You can access inline help when you use Nokia Network Voyager Inline help is the context sensitive information source for Network Voyager To access ...

Page 46: ...n you initially log on to the platform For more information about how to access and use the CLI see the Nokia CLI Reference Guide for the version of Nokia IPSO you are using Using Nokia Horizon Manager Nokia Horizon Manager is an extension of the Network Voyager management functionality While Network Voyager provides the device administrator access to network configuration tasks such as interface ...

Page 47: ...zon Manager a network security professional can manage multiple devices simultaneously perform parallel software upgrades device verifications device configuration file backups and more Horizon Manager is designed to manage and configure a large number of Nokia security appliances that reside on a corporate enterprise managed service provider MSP or hosted applications service provider network ASP...

Page 48: ...3 Performing the Initial Configuration 48 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 49: ...faces Monitoring Network Interface Cards For detailed information about specific network interface cards see Chapter 5 About IP1200 Series Appliance Network Interface Cards For information about Accelerated Data Path ADP services modules see Chapter 6 About IP1200 Appliance ADP Services Modules Caution You should have a working knowledge of networking equipment before you attempt to service an IP1...

Page 50: ...r are not hot swappable Before You Begin Before you install a NIC make sure that the rubber gasket around the front of the NIC is installed properly To remove install or replace a NIC or ADP module you need the following Phillips head screwdriver Suitable grounded work surface on which to place the PMC carrier or ADP module Replacement or new NIC or ADP module To replace a network interface card N...

Page 51: ...front of the ejector and locking levers disengages the lock and removes power from the PMC carrier or ADP module The power LED on the front of the PMC carrier or ADP module is no longer illuminated when the power is removed 4 Press or push the levers toward the outer edges of the IP1200 Series 5 Continue to press or push the levers outward until the PMC carrier or ADP module is released and extend...

Page 52: ...ugh step 13 only for NICs and not for ADP modules as the ADP module and the carrier are provided as one unit 7 Locate the bezel retaining screws used to keep the NIC attached on the underside of the PMC carrier 8 Remove the two bezel retaining screws with a Phillips screwdriver Note If you are installing a NIC in an unoccupied slot on the PMC carrier remove the blank bezel that covers the slot and...

Page 53: ...orms Installation Guide 53 9 Locate and remove the two NIC retaining screws from the back of the NIC 10 Remove the NIC by lifting the back of the NIC away from the chassis tray assembly and pulling it gently away from the front panel 00312 00313 All manuals and user guides at all guides com ...

Page 54: ... is completely seated into the connectors on the chassis tray assembly b If you are not replacing a NIC you are removing insert a blank bezel into the location formerly occupied by the NIC Make sure that the bezel is completely seated onto the slot on the front of the PMC carrier and that the screw holes on the bottom of the bezel align with those on the bottom of the PMC carrier Proceed to step 1...

Page 55: ...n the back of the NIC 13 From the underside of the PMC carrier screw in the bezel retaining screws 14 Insert the PMC carrier or ADP module back into its original slot on the front of the IP1200 Series appliance until it clicks into place 15 Press both levers to make sure that they are locked into place and power is restored to the card carrier 00312 00311 All manuals and user guides at all guides ...

Page 56: ...led Use Nokia Network Voyager to configure and activate the logical and physical interfaces on the NIC or ADP module For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 44 Monitoring Network Interface Cards You can assess the general operating condition of the NICs or the ADP module in your appliance by looking at the LED ...

Page 57: ...s supported in the IP1200 Series operate at the peripheral component interconnect PCI frequency listed in Table 11 Note Any two NICs installed on a single PMC carrier will both operate at the PCI frequency of the least capable NIC installed For example if a two port Ethernet NIC and a two port fiber optic Gigabit Ethernet NIC are installed on the same PMC card carrier they both operate at 66 Mhz U...

Page 58: ...a 6U PMC carrier When you purchase a 10 100 Ethernet NIC with your IP1200 Series the NIC is installed before the appliance is delivered to you For information about how to add or replace a NIC see Chapter 4 Installing and Replacing Network Interface Cards and Accelerated Data Path ADP Services Modules 10 100 Ethernet NIC Features The four port 10 100 Ethernet NIC supports PCI operation at 100 MHz ...

Page 59: ...Use a straight through cable to connect the NIC to a 10 Mbps or 100 Mbps hub or switch or a crossover cable to connect directly to a host Use IEEE 802 3 10 100 BASE TX Cat 5 unshielded twisted pair full duplex or half duplex cable You can order appropriate adapter cables separately from a cable vendor of your choice Caution Cables that connect to the Ethernet card must be IEEE 802 3 compliant to p...

Page 60: ...proved two port and four port copper Gigabit Ethernet NICs installed on a 6U PMC carrier The IP1200 Series can accommodate up to four Gigabit Ethernet NICs When you purchase a copper Gigabit Ethernet NIC with your IP1200 Series the NIC is installed before the appliance is delivered to you For information about how to add or replace a NIC see Chapter 4 Installing and Replacing Network Interface Car...

Page 61: ...or 10 Mbps For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 44 Figure 15 shows the front panel details for the PMC two port copper Gigabit Ethernet NIC you can use in Nokia IP1200 Series appliances Figure 15 Two Port Copper Gigabit Ethernet NIC Front Panel Details Figure 16 shows the front panel details for the PMC four...

Page 62: ...arate PCI bus connection to the main system motherboard In the configuration described here each of the two copper Gigabit Ethernet NICs access a separate PCI bus For the IP1200 Series appliance any two NICs installed on a single PMC carrier both operate at the PCI frequency of the least capable NIC installed Copper Gigabit Ethernet NIC Connectors and Cables The IP1200 Series receptacles are RJ45 ...

Page 63: ...et link LEDs on both the appliance and on the remote equipment illuminate to indicate the connection As data is transmitted or received the activity LEDs on the appliance illuminate To connect the IP1200 Series to other network components you can order appropriate adapter cables separately from a cable vendor of your choice 00270 8 1 Pin Gigabit Ethernet Assignment 10 100 Mbps Assignment 1 BI_DA T...

Page 64: ... half duplex support Link speed auto advertising Tracing through tcpdump Compliance with IEEE 802 3z Gigabit Ethernet specification The short range multi mode fiber MMF fiber optic Gigabit Ethernet NICs in the IP1200 run on Nokia IPSO v4 0 1 or higher The long range single mode fiber SMF fiber optic Gigabit Ethernet NICs in the IP1200 run on Nokia IPSO v4 2 or higher You can configure and monitor ...

Page 65: ...or each NIC interface The destination end of the cable can be either LC or SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port LC and SC define the fiber optic connector types LC connectors are smaller than SC connectors Caution Depending on the p...

Page 66: ... and IP1260 Security Platforms Installation Guide For the IP1200 Series appliance any two NICs installed on a single PMC carrier both operate at the PCI frequency of the least capable NIC installed All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 67: ...the CPU to network processors Nokia IP1220 and IP1260 ADP modules help to accelerate firewall and VPN throughput ADP is a technology designed to forward packets at the highest possible rate Nokia ADP modules provide this technology by offloading processing from the CPU to network processors For IP1220 and IP1260 appliances ADP is implemented with a single module installed in a two slot card carrie...

Page 68: ...ences between the procedures for installing and replacing IP1200 PMC NIC card carriers and the ADP module other than the following steps and considerations Before you remove your PMC NIC card carriers and replace them with your ADP module do the following You cannot preserve the configuration for slots 1 and 2 of your appliance when you replace your PMC NIC card carriers with an ADP module or conv...

Page 69: ... transceivers in a Nokia ADP module Refer to the following figure which shows how to install or remove Nokia ADP module transceivers The transceivers are hot swappable as are the interface cables you use with them Rotate the latch levers up or down to secure transceivers or to release them for removal You do not need to change the interface type in Network Voyager or the CLI as the system makes th...

Page 70: ...elease the device Insert an appropriate interface cable into the transceiver To remove an ADP transceiver Remove the cable Release the transceiver by rotating the latch lever Pull out the transceiver Note that if you install any ADP transceivers that are not supported by Nokia they are not recognized by Nokia IPSO the system rejects the transceivers and includes them in a list of Type Latch lever ...

Page 71: ...es This section includes information about configuring Nokia IPSO to use the interfaces on a Nokia ADP module To help you understand the implications of installing an ADP module it provides an example of the steps you might perform to install an ADP module in an IP1220 or IP1260 appliance running the Virtual Router Redundancy Protocol VRRP Effect on Interfaces When you install an ADP module Nokia ...

Page 72: ...es to use the ADP interfaces Reassign IP addresses from the removed interfaces to the ADP interfaces as appropriate Nokia ADP Card Interface Names for IP1220 and IP1260 Appliances ADP module interface naming conventions differ from those for PMC NICs IP1220 and IP1260 appliances support one ADP module which you install in slots 1 and 2 The eight ports on your ADP module are named as follows eth s2...

Page 73: ...red The following figure shows the Interface Configuration page of the platform before an ADP module is installed Interfaces are installed in slots 1 2 and 3 For this example legacy monitored circuit VRRP is enabled and configured with these settings Interface eth s1 s1p1c0 is assigned the IP address 10 1 1 1 not shown and uses 10 1 1 99 as the VRRP backup address Interface eth s1 s1p2c0 backs up ...

Page 74: ...u are replacing with an ADP module you need to delete the configuration information for the NIC interfaces If VRRP is active at that time you will not be able to delete the configuration information for the interfaces used by VRRP Therefore you should begin by deleting the existing VRRP configuration Note It is best to perform the procedures in this section on the VRRP backup system first When the...

Page 75: ...e you need to reconfigure interface information as described below To reconfigure interfaces for an ADP module 1 Log into the appliance using Nokia Network Voyager 2 Navigate to the Interface Configuration page The removed interfaces are still listed on this page and you see a blue indicator next to each of them in the Up column All manuals and user guides at all guides com ...

Page 76: ...Guide Also notice that the ADP logical interfaces are named eth s2p1c0 through eth s2p8c0 3 Delete the interface names and configuration information for each interface you removed by following the remaining steps in this procedure All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 77: ...fore you installed the ADP module 4 Click a physical interface name Network Voyager displays the Physical Configuration page for that interface 5 In the Physical Status area click the Delete check box 6 Click Apply 7 Delete the configuration information for the rest of interfaces that you removed by restarting this procedure at step 2 8 When you have deleted the configuration information for all t...

Page 78: ...n deleted 9 If appropriate configure the ADP interfaces to use the IP addresses previously assigned to the removed interfaces In this example you need to assign the address 10 1 1 1 to the new interface eth s2p1c0 Reconfiguring VRRP After you finish reconfiguring interfaces you need to reconfigure any protocols and features that used the removed interfaces to use the ADP interfaces All manuals and...

Page 79: ...rms Installation Guide 79 In this example you need to recreate the VRRP configuration using the new interfaces eth s2p1c0 and eth s2p2c0 The following figure shows the example system after you recreate the VRRP configuration using the new interfaces All manuals and user guides at all guides com ...

Page 80: ...6 About IP1200 Appliance ADP Services Modules 80 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 81: ...rds and Accelerated Data Path ADP Services Modules For information about how to add or replace Accelerated Data Path ADP services modules see Chapter 6 About IP1200 Appliance ADP Services Modules You should have a working knowledge of networking equipment before you attempt to service an IP1200 Series Limit service of the appliance to the procedures described in this chapter Caution To protect the...

Page 82: ...ult tolerance by letting the Nokia IP1200 Series appliance continue working in the event of a disk failure You can create mirror sets that consist of a source hard disk drive which holds the active copy of the operating system and mirror hard disk drive The mirror hard disk drive contains a copy of all of the files on the source hard disk drive and if the source hard disk drive fails the mirror ha...

Page 83: ...20 provides a chassis grounding point If you do not have a grounding wrist strap make sure you are properly grounded before you touch any electronic component Caution If you fail to use the following procedure when you remove the hard disk drive the drive might become damaged or you might lose data Caution The operating system is disabled if all of the following occurs Both hard disk drive slots a...

Page 84: ... Nokia IPSO you are using or the Nokia Horizon Manager User Guide and online help To replace a hard disk drive by using the hot swap feature Note You must have disk mirroring implemented to use the hot swap feature 1 Locate the hard disk drive to remove 2 Loosen the retaining screws on both sides of the hard disk drive Caution To avoid damage to the ejector and locking lever loosen the retaining s...

Page 85: ...cement hard disk drive into the empty hard disk drive bay 7 Lock the hard disk drive in place by pressing the ejector and locking lever 8 Tighten the screws on both sides of the hard disk drive 9 Press the recessed hot swap button again to restore power to the hard disk drive The IP1200 Series recognizes the new hard disk drive 10 Use Nokia Network Voyager Lynx or the CLI to implement disk mirrori...

Page 86: ... proceed to step 3 a Access Network Voyager For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 44 b On the Network Voyager home page click Config c Scroll to the bottom and click Reboot Shut Down System d Click Halt e Wait until the activity LED for the hard disk drive is not illuminated f Use power switch on the back pan...

Page 87: ...liance 5 Insert the new hard disk drive until it locks into place The ejector and locking lever clicks into the locked position 6 Tighten the retaining screws on both sides of the hard disk drive 7 Press the hot swap button to restore power to the hard disk drive The IP1200 Series recognizes the new hard disk drive 8 Use Nokia Network Voyager Lynx or the CLI to implement disk mirroring 00320 Push ...

Page 88: ...approved resellers For more information contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 Figure 22 Slot 3 PC Card Location To install the single slot PCMCIA carrier card To install a single slot PCMCIA carrier card you need Physical access to the appliance A Nokia single slot PCMCIA carrier card Access to the appliance by using Nokia Network Voyager...

Page 89: ...ure Any servicing of the appliance however should be completed with the chassis tray assembly fully removed from the appliance 1 Use Nokia Network Voyager or the CLI to perform an orderly shutdown of the IP1200 Series appliance For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 44 2 Loosen the four front panel retaining s...

Page 90: ... Security Platforms Installation Guide 3 Slide the chassis tray assembly forward press and tray release lever and completely remove the tray from the appliance 4 Remove the six screw that secure the metal shield above the two PMC carriers or ADP module and remove the shield 00049 All manuals and user guides at all guides com ...

Page 91: ... remove the slot 3 filler panel or installed NIC IP1260 RESET CONSOLE AUX AUX2 HD DB SLOT 3 SLOT 2 HD DA HOT SW AP HO TSW AP PO WE R ACT IVI TY HA RD DR IVE STA TUS HOT SW AP HO TSW AP PO WE R ACT IVI TY HA RD DR IVE STA TUS SLOT 4 00654b 1 1000BaseT 1 2 3 4 Remove PMC carriers or ADP module Remove six screws and PMC carrier and ADP module shield All manuals and user guides at all guides com a l l...

Page 92: ...ard approximately 45 degrees as you insert the front end into slot 3 in the front panel 00657b 1 IP1260 RESET CONSOLE AUX AUX2 HDDB SLOT3 SLOT2 SLOT1 HDDA HO TSW AP HO TSW AP PO WER ACTIVITY HA RD DR IVE STATUS HO TSW AP HO TSW AP PO WER ACTIVITY HA RD DR IVE STATUS SLOT4 1000BaseT 1 2 3 4 LIN K ACT V2 LIN K ACT 10 00 Ba seT LIN K ACT V2 LIN K ACT 10 00 Ba seT All manuals and user guides at all gu...

Page 93: ...of the appliance to turn on the power to the appliance Note Make sure that you turn on both power supplies To install the PC card 1 Insert the PC card into the PC card slot until it snaps in place 2 Press gently on the card until it is firmly seated in the slot The eject button to the left of the slot should be flush with the card 00644b 1 IP1260 RESET CONSOLE AUX AUX2 HDDB SLOT3 SLOT2 SLOT1 HDDA ...

Page 94: ...yager to configure system logging options For more information see the Nokia Network Voyager Reference Guide for the version of Nokia IPSO you are using Disabling Flash Memory PC Cards If you configure the flash memory PC card as an optional disk you must disable the card before you remove it You can disable the card by using Network Voyager or the CLI To use Nokia Network Voyager to disable a fla...

Page 95: ... system if you manually mount and unmount the flash memory PC card To transfer Nokia IPSO images or configuration files to the flash memory PC card 1 Insert the flash memory PC card into the IP1200 Series appliance 2 Connect to the IP1200 Series appliance by using a console or terminal connection 3 Mount the flash memory PC card by using the following command mount dev wd1 cdrom The cdrom director...

Page 96: ...iance and turn the power off whenever you open the chassis tray assembly to service internal components Caution You risk damage to the appliance or loss of data if you do not use the following procedure when you replace the compact flash memory To replace the compact flash memory card 1 Use Network Voyager or the CLI halt command to perform an orderly shutdown of the IP1200 Series appliance For in...

Page 97: ...y assembly retaining screws on the front panel of the appliance 6 Slide the chassis tray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the compact flash memory slot on the motherboard 00507 2 IP1200 00049 All manuals and user guides at all guides com ...

Page 98: ...d into the slot 9 Slide the chassis tray assembly back into the appliance until it clicks into place 10 Resecure the chassis tray assembly retaining screws 11 Replace the hard disk drives 12 Press the power switch located on each power supply at the back of the appliance to turn on the power to the appliance Note Make sure you turn on both power supplies Note Disk mirroring is disabled for the Nok...

Page 99: ...n contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 The DIMM sockets are located on the left rear of the IP1200 Series mother board as you look at the appliance from the front as Figure 23 shows Figure 23 DIMM Socket Locations Note You must install DIMMs in pairs starting from the left Insert a pair of DIMMS into adjacent slots J5 J6 and or J7 J8 oth...

Page 100: ...trap make sure you are properly grounded before you touch any electronic component Note Because power to an IP1200 Series is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the appliance however should be completed with the chassis tray assembly fully removed from the appliance To add or replac...

Page 101: ... two retaining clips outward and carefully pulling each DIMM upward You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins 6 Press the new DIMM into the socket until it clicks into place Note You must install DIMMs in pairs starting from the left Insert a pair of DIMMS into adjacent slots J5 J6 and or J7 J8 otherwise the DIMMS will not work You can ...

Page 102: ...e VPN performance The encryption accelerator card provides high speed cryptographic processing that enhances VPN performance The IP1260 appliance comes with the Nokia encryption accelerator card preinstalled as part of its base bundle If you ordered the Nokia encryption accelerator card as an option before purchasing the IP1220 then the Nokia encryption accelerator card is installed before the app...

Page 103: ...ounding plug on the front of the appliance shown in Figure 1 on page 20 provides a chassis grounding point If you do not have a grounding wrist strap make sure you are properly grounded before you touch any electronic component Note Because power to an IP1200 Series is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this proc...

Page 104: ...h 104 IP1220 and IP1260 Security Platforms Installation Guide 2 Loosen the four front panel retaining screws 3 Slide the chassis tray assembly forward to expose the motherboard components 4 Locate the PMC connectors on the motherboard 00507 2 IP1200 00326a 2 All manuals and user guides at all guides com ...

Page 105: ...card Those connectors are meant for the management NIC 5 Position the three male PMC connectors on the card over the three female PMC connectors on the motherboard The two sets of connectors should be aligned with each other The four screw holes and four standoffs should also be aligned with each other 6 Push down on the card until it is properly seated on the motherboard 00324 1 Insert the card i...

Page 106: ...ting system so the appliance automatically detects and configures the Nokia encryption accelerator card For the Nokia IP1200 appliances SecureXL is on by default After you install the Nokia encryption accelerator card and reboot the appliance SecureXL automatically uses the Nokia encryption accelerator card for encryption acceleration If you do not want to use SecureXL for encryption acceleration ...

Page 107: ... appliance down Before You Begin To replace a fan unit you need Physical access to the IP1200 Series appliance Replacement fan unit kit and appropriate documentation Caution Components inside the appliance can overheat if they are not cooled even for a short period of time If you are replacing a failed fan unit and do not completely remove power to the appliance do not allow the appliance to run w...

Page 108: ...ancy If both power supplies are not turned on the Fault LED illuminates For more information about the Fault LED see Power Supply Status LEDs on page 28 The power supplies are autosensing and can accept input voltages between 85 VAC and 264 VAC The power supply output is regulated to a tolerance of 5 percent of the specified output voltage Under certain circumstances the power supplies feel hot to...

Page 109: ...Physical access to the IP1200 Series appliance Phillips head screwdriver Replacement power supply and appropriate documentation To replace a power supply 1 Locate the power supply and the two screws that secure it on the back of the IP1200 Series appliance 2 Turn off the power to the power supply to be removed 3 Loosen the two retaining screws 4 Remove the grounding lugs 00308a Power supply switch...

Page 110: ... the command line interface CLI For information about the CLI see the CLI Reference Guide To monitor the power supply by using Nokia Voyager 1 Log on to the appliance by using Network Voyager 2 Click Monitor 3 Click Hardware Monitoring System Status To the right of the Power Supply link the status indicator is green for normal and red for fault 4 For more detailed information about the power suppl...

Page 111: ...r equivalent type that the manufacturer recommends Dispose of used batteries according to the manufacturer s instructions Warning Make certain that you removed the power cord from the appliance before you proceed with any of the following steps Failure to do so could cause electric shock with burns or death resulting for the user Caution Make certain that you are properly grounded when you handle ...

Page 112: ...battery holder observing the correct polarity The positive terminal of the battery must be facing up 4 With the positive side facing up slide the new battery through the cutout into the battery holder Make sure that the battery is securely installed in the battery holder 5 Reassemble the appliance The appliance should start up normally with the new battery installed If it does not repeat Step 1 th...

Page 113: ... not configured for the same VC and VP value Solution Set remote and local devices to the same VC and VP values Consult your 1483 device documentation Problem Remote and local devices are not in the supported VC range of the network interface card Solution Use ipsctl to determine the VC range Enter the following command ipsctl ifphys logical interface max_rxlabel Problem Encapsulation is not set t...

Page 114: ...on to the IP1200 Series Solution For information about how to create a console connection see To connect to the console on page 40 Problem Not connected with a null modem cable Solution Verify that you are using a null modem cable For pinout information see To connect to the console on page 40 Problem Wrong terminal settings Solution Verify terminal settings 8 data bits 1 stop bit no parity 9600 b...

Page 115: ... prompt type Ctrl d to reboot with admin user and a new password 4 The admin password defaults to no password for admin Continue to boot to multiuser mode 5 Reconfigure the password as you normally would Note Blank passwords are not accepted in Network Voyager In such cases enter the following command to reset the password from the command line using a blank password dbpasswd admin newpassword The...

Page 116: ...rt Web site as listed in the Nokia Contact Information on page 3 Not Able to Connect to Nokia Network Voyager Using the Ethernet Port But Console Access Works Problem Using the wrong Ethernet cable Solution Use a crossover Ethernet cable if you are connecting directly to the computer Use a straight through cable if you are connecting to a hub For cabling information see Ethernet NIC Connectors and...

Page 117: ...le Use a crossover cable between the IP1200 Series and a host and a straight through cable between an appliance and a hub Problem Solid activity LED Solution You might have set the wrong speed Verify that the speeds match on each end of the Ethernet connection 10 Mbps 100 Mbps or 1000 Mbps Problem Port not enabled Solution Verify from the Interface page in Nokia Network Voyager that the interface ...

Page 118: ...8 Troubleshooting 118 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 119: ...of the rack 6 inches 15 centimeters behind the IP1200 Series to allow the back exit fan to move air through the appliances Caution Do not block the ventilation holes on the IP1200 Series The appliance might overheat and get damaged Dimensions Height 3 5 in 8 89 cm Width 17 in 44 cm 19 in 48 cm rack mountable Depth 21 in 53 34 cm Operational Temperature 5 C to 40 C 23 F to 104 F Humidity 5 to 85 Sh...

Page 120: ...A Technical Specifications 120 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 121: ...uct complies with the requirements of the Low Voltage Directive 73 23 EEC and the EMC Directive 2004 108 EC Manufacturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP1260 IP1220 500s Model Number IP01200 Product Options All Serial Number 1 to 100 000 Date First Applied 2003 Safety EN60950 1 2001 A11 IEC60950 1 2001 UL60950 Third Edition...

Page 122: ...istopher Saleem Compliance Reliability Engineering Manager Security Mobile Connectivity Enterprise Solutions Mountain View California January 2005 FCC Part 15 Subpart B Class A US Canada EN55022 CISPR 22 Class A European Community CE EN55024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 11 EN61000 3 2 European Community CE EN61000 3 3 European Communit...

Page 123: ...s and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense Caution Any changes or modifications not expressly appr...

Page 124: ...B Compliance Information 124 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Page 125: ...s 60 connectors for Ethernet network interface cards 59 console cable 40 console connection 40 console port 18 21 cooling 18 copper Gigabit Ethernet NICs 21 D data communications equipment device 40 DC power supplies 27 DIMMs accessing and removing 100 adding 100 socket locations 99 disk mirroring 18 24 82 document structure 13 dual inline memory module sockets DIMMs 99 E end of life information 3...

Page 126: ...a IPSO command line interface 19 Nokia IPSO requirements 30 Nokia Network Voyager 19 opening 44 null modem cable 40 O opening Nokia Network Voyager 44 output connector Ethernet cable 60 P PC card removing 94 PCMCIA slots 18 pin assignments for modem connections 22 PMC carrier installing a NIC 54 power connections 40 power supplies load sharing 26 42 108 redundancy 26 42 108 status LEDs 28 power su...

Page 127: ...stallation Guide Index 127 troubleshooting 113 two port Ethernet network interface card 64 65 U upgrading memory 99 UTP5 dual mode Ethernet 58 V VT100 compatible terminal 40 W warning notices 14 All manuals and user guides at all guides com ...

Page 128: ...Index 128 IP1220 and IP1260 Security Platforms Installation Guide All manuals and user guides at all guides com ...

Search results

Summary of Contents for IP1220 - Security Appliance

Reviews:

Related manuals for IP1220 - Security Appliance

Brands by name

Popular brands

Nokia IP1220 - Security Appliance, Installation Manual

Search results

Summary of Contents for IP1220 - Security Appliance

Reviews:

Related manuals for IP1220 - Security Appliance

Brands by name

Popular brands