Nokia IP380 - Security Appliance Appliance Installation Manual Download

Page: 1 / 114

IP350 and IP380

Appliance Installation

Guide

Part No. N450709003 Rev A

Published

September

2004

All manuals and user guides at all-guides.com

all-guides.com

Summary of Contents for IP380 - Security Appliance

Page 1: ...IP350 and IP380 Appliance Installation Guide Part No N450709003 Rev A Published September 2004 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 2: ...n as is and any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or services loss o...

Page 3: ... and Canada 1 512 437 7089 email ipsecurity na nokia com Europe Middle East and Africa Nokia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 email ipsecurity emea nokia com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 65 6588 3364 email ipsecurity apac nokia com Web Site https support nokia com Ema...

Page 4: ...4 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 5: ...380 IP Security Appliances 17 Memory 17 Encryption Acceleration 18 Managing the IP350 and IP380 Appliance 18 Appliance Overview 19 Ethernet Management Ports 20 Built in Console Port 21 Built in AUX Port 23 Status LEDs 24 Site Requirements 25 Software Requirements 26 2 Installing the Appliance 27 Rack Mounting the Appliance 27 Connecting Power and Turning the Power On 29 Connecting Network Interfac...

Page 6: ...s 46 Monitoring Network Interface Cards 47 5 Connecting PMC Network Interface Cards 49 Dual Port 10 100 Ethernet Interface PMC 49 Ethernet PMC NIC Features 50 Ethernet NIC Connectors and Cables 50 6 Installing and Replacing Other Components 53 Installing a PCMCIA Modem 54 Replacing a Hard Disk Drive 55 Replacing or Upgrading Memory 59 Before You Start 60 Adding or Replacing DIMMs 61 Installing an ...

Page 7: ...lling the Boot Manager 84 Upgrading the Boot Manager 85 8 Troubleshooting 87 General Troubleshooting Information 87 Troubleshooting Routing Problems 97 A Technical Specifications 103 Physical Dimensions 103 Space Requirements 103 NIC Interfaces 104 B Compliance Information 105 Declaration of Conformity 106 Compliance Statements 108 FCC Notice US 109 Index 111 All manuals and user guides at all gui...

Page 8: ...8 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 9: ...ion 23 Figure 6 Appliance Status LEDs 24 Figure 7 Mounting Screws Location 28 Figure 8 Adjustable Mounting Brackets 28 Figure 9 Back Panel Power Switch 29 Figure 10 Voyager Reference Access Points 37 Figure 11 Dual Port Ethernet NIC Front Panel Details 50 Figure 12 Output Connector for the Ethernet Cable 51 Figure 13 Ethernet Crossover Cable Pin Connections 52 Figure 14 Hard Disk Drive Location 55...

Page 10: ...10 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 11: ...hapters and appendixes Chapter 1 Overview presents a general overview of the IP350 and IP380 appliances Chapter 2 Installing the Appliance explains how to rack mount the appliance and how to physically connect it to a network and power Chapter 3 Performing the Initial Configuration explains how to make the appliance available on the network Chapter 4 Installing and Replacing Network Interface Card...

Page 12: ...interface characteristics Appendix B Warranty and Software License contains Nokia warranty and software license information Appendix C General Public Licensed Software provides information about publicly licensed software that comes with the appliance Appendix B Compliance Information includes compliance and regulatory information Appendix E Glossary provides a glossary of acronyms used in this do...

Page 13: ...r more of the following elements on a command line path Table 1 Command Line Conventions Convention Description command This required element is usually the product name or other short word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product It might appear alone or precede one or more options You must spell a command exactly as shown and use lowercas...

Page 14: ...the command supply the value For example framing sonet or framing sdh flag A flag is usually an abbreviation for a function menu or option name or for a compiler or preprocessor argument You must enter a flag exactly as shown including the preceding hyphen ext A filename extension such as ext might follow a variable that represents a filename Type this extension exactly as shown immediately after ...

Page 15: ...Table 1 Command Line Conventions continued Convention Description Table 2 Text Conventions Convention Description monospace font Indicates command syntax or represents computer or screen output for example Log error 12453 bold monospace font Indicates text you enter or type for example configure nat Key names Keys that you press simultaneously are linked by a plus sign Press Ctrl Alt Del Menu comm...

Page 16: ...t click the Help button next to the subject Access the Voyager Reference Guide for tasks examples and more information by clicking the Doc button You can order Check Point documentation from Nokia or download it from the Nokia support site at https support nokia com The words enter and type Enter indicates you type something and then press the Return or Enter key Do not press the Return or Enter k...

Page 17: ...liance About the Nokia IP350 and IP380 IP Security Appliances The Nokia IP350 and IP380 IP security appliances combine the power of Nokia IPSO software with your choice of firewall VPN and intrusion detection security applications Both platforms share the same one rack unit 1 RU size and support the same selection of network interface cards Memory The IP350 appliance supports from 256 MB to 512 MB...

Page 18: ... support a comprehensive suite of IP routing functions and protocols including RIPv1 RIPv2 IGRP OSPF and BGP4 for unicast traffic and DVMRP for multicast traffic The integrated router functionality eliminates the need for separate intranet and access routers in security applications Managing the IP350 and IP380 Appliance You can manage the IP350 and IP380 appliances by using one of the following i...

Page 19: ...SO operating system plus hardware and third party applications such as Check Point FireWall 1 and RealSecure for Nokia Horizon Manager can perform installations and upgrades on up to 2 500 Nokia IP security platforms offering administrators the most rapid and dependable upgrade to Check Point NG For information about how to obtain Horizon Manager see Nokia Contact Information on page 3 Appliance O...

Page 20: ... and link LEDs Note The Ethernet management ports are intended for management purposes These ports do not provide the same performance as Ethernet cards in the PMC slots Figure 3 Ethernet Management Ports Details Caution Cables that connect to the Ethernet ports must be IEEE 802 3 compliant to prevent potential data loss 00249 Power plug Power switch 00120 Activity LED yellow Link LED green RJ 45 ...

Page 21: ...ly support NICs purchased from Nokia Corporation or Nokia approved resellers The Nokia Global Support Services group can only provide support for Nokia products that use Nokia approved accessories For sales or reseller information contact a Nokia service provider listed in the Nokia Contact Information on page 3 Built in Console Port Use the built in console port shown in Figure 1 to supply the in...

Page 22: ...on Guide Figure 4 Pin Assignments for Console Connection 700001 6 9 5 1 Pin Assignment Input Output 1 DCD Input 2 RXD Input 3 TXD Output 4 DTR Output 5 GND 6 DSR Input 7 RTS Output 8 CTS Input 9 DTR Output All manuals and user guides at all guides com ...

Page 23: ...t information for modem connections Figure 5 Pin Assignments for Modem Connection 700001 6 9 5 1 Pin Input Output To DB25 Cable Out To DB9 Cable Out 1 DCD Input 8 DCD 7 RTS 8 CTS 2 RXD Input 2 TXD 3 TXD 3 TXD Output 3 RXD 2 RXD 4 DTR Output 20 DTR 6 DSR 9 RI 5 GND 7 GND 5 GND 6 DSR Input 6 DSR 4 DTR 7 RTS Output 4 RTS 1 DCD 8 CTS Input 5 CTS 1 DCD 9 RI Output 22 RI 4 DTR All manuals and user guide...

Page 24: ... panel of the appliance as Figure 6 shows Figure 6 Appliance Status LEDs Table 3 Appliance Status LEDs Status Indication Explanation LED Front Panel Symbol Solid Power on Solid Unit is experiencing an internal Voltage problem Blinking The unit is experiencing a temperature problem Solid red One or more fans are not operating properly or a 5V 3 3V or 12V fuse is blown Power status Fan problem Volta...

Page 25: ...room or wiring closet conforms to the environmental specifications listed in Appendix A Technical Specifications Warning Hazardous radiation exposure can occur if you use controls make performance adjustments or follow procedures that are not described in this document Warning An explosion can occur if the battery is incorrectly placed Replace only with the same or equivalent type battery recommen...

Page 26: ...of end use Software Requirements IP350 and IP380 appliances support the following operating system and applications when this guide was published Operating System Requirements IPSO v 3 5 1 3 7 and later Firewall and VPN Software Requirements Check Point NG VPN 1 FW 1 FP2 or higher Intrusion Detection Software Requirements ISS RealSecure version 6 5 or 7 0 For information about changes to the softw...

Page 27: ...twork Interfaces Caution Protect your IP350 and IP380 appliance and other electronic equipment from static discharge by making sure you are properly grounded before you touch any electronic components Note The operating temperature range for the IP350 and IP380 appliance is 0 C to 45 C Rack Mounting the Appliance The IP350 and IP380 appliances mount in a standard 19 inch rack with four mounting sc...

Page 28: ...iance on the rack Figure 7 Mounting Screws Location You can relocate the mounting brackets as Figure 8 shows so that the unit is 2 inches forward of the rack Figure 8 Adjustable Mounting Brackets Two mounting positions are available allowing you to mount the unit either flush with the rack or two inches forward of the rack 00248a Mounting Screws 00251a All manuals and user guides at all guides com...

Page 29: ...he IP350 and IP380 appliance power supplies automatically detect the input voltage 115VAC 90 to 132 or 220VAC 180 to 264 and configure themselves appropriately Figure 9 Back Panel Power Switch To connect the power supply 1 Connect the power cord securely into the power socket on the back of the appliance 2 Plug the other end of the cord into a three wire grounded power strip or wall outlet 3 Press...

Page 30: ...e sure that power is turned on to the power strip or wall receptacle you plugged the appliance in to If the fans are still not running or if the power LED does not illuminate contact your Nokia service provider as listed in Nokia Contact Information on page 3 for technical support Connecting Network Interfaces Connect at least one network interface to the network to use as the Voyager system manag...

Page 31: ...faces IP350 and IP380 Appliance Installation Guide 31 After you connect the network interfaces continue with Chapter 3 Performing the Initial Configuration All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 32: ...2 Installing the Appliance 32 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 33: ...e initial configuration information the first time the appliance is started You can perform the initial configuration manually by using a console connection This chapter describes how to perform the initial configuration manually by using a console connection It includes the following sections Using a Console Connection to Perform the Initial Configuration Accessing Nokia Network Voyager Using Nok...

Page 34: ... equipment DTE interface or terminal emulation program configured with the following settings for the console 9600 bps 8 data bits No parity 1 stop bit To connect to the console 1 Connect the supplied null modem cable console cable to the console port on the front panel of the IP350 and IP380 appliance Use only the DB9 port on the front panel labeled Console the serial AUX port is an auxiliary mod...

Page 35: ...heck the console port and console display connections to ensure that the serial cable is completely plugged in at both ends If you verify the console connections and still do not see either the BOOTMGR or Hostname prompts verify that the terminal or terminal emulator program settings are correct If the settings are correct contact your Nokia service provider as listed in Nokia Contact Information ...

Page 36: ...iguration you can use Voyager to configure the remaining network ports Accessing Nokia Network Voyager You can use Voyager to configure the remaining network ports on your IP350 and IP380 appliance To open Voyager 1 Start Netscape Navigator or Microsoft Internet Explorer on the host you want to use to complete the configuration 2 In the Location or Address field enter the IP address of the initial...

Page 37: ...Voyager the Voyager Reference Guide and Voyager inline help are available for you to use You can access both information sources from the Voyager interface as Figure 10 shows Figure 10 Voyager Reference Access Points Voyager Reference Guide The Voyager Reference Guide is the reference source for Voyager To access this source click Doc Links to Inline Help Context Sensitive Link to Online Help Voya...

Page 38: ...ng Voyager to Monitor an IP350 or 380 Appliance After you install and configure your IP350 and IP380 appliance you can use Voyager to monitor its operation Click Monitor from the Voyager home page to access the monitoring functions After you finish configuring the network interfaces with Voyager the appliance is ready for routing and application configuration Use Voyager to configure the routing p...

Page 39: ...are covered Deactivating Configured Interfaces Removing Installing and Replacing NICs Configuring and Activating Interfaces Monitoring Network Interface Cards For detailed information on specific network interface cards see Chapter 5 Connecting PMC Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP350 or IP380 appliance Li...

Page 40: ...hysical interfaces on the NIC If you do not deactivate the interfaces before removing the NIC you may have to reinstall the NIC to deactivate its logical and physical interfaces in Voyager For information about how to access Voyager see Accessing Nokia Network Voyager on page 36 Removing Installing and Replacing NICs Note Before removing a configured network interface card with these instructions ...

Page 41: ...be completed with the chassis assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply or power supply wiring without disconnecting the power cord 1 Use Network Voyager to shut the system down For information about how to access Voyager see Accessing Nokia Network Voyager on page 36 2 Use your fingers or a screwdr...

Page 42: ...careful not to pull the chassis assembly entirely out of the appliance 4 From underneath the chassis assembly remove the bezel retaining screws If you are installing a NIC in an unoccupied slot remove the blank bezel that occupies the space in the appliance front panel retain it for future use and proceed to step 7 00252a 00254b All manuals and user guides at all guides com ...

Page 43: ...the chassis assembly remove the NIC retaining screws from the back of the NIC 6 Remove the NIC by lifting the back of the NIC away from the chassis assembly and pulling the NIC gently away from the front panel 7 Insert the new NIC or blank bezel 00255a 00 All manuals and user guides at all guides com ...

Page 44: ...hat the bezel is completely seated into the front panel and that the screw holes on the bottom of the bezel align with those in the front panel b Proceed to step 9 If you are installing or replacing a NIC insert the NIC a Insert the NIC bezel into the front panel b Gently push the back of the NIC down toward the chassis assembly Make sure that the NIC edge is completely seated into the connectors ...

Page 45: ... Installation Guide 45 8 From the top of the chassis assembly screw the NIC retaining screws into the standoffs on the back of the NIC 9 From beneath the chassis assembly screw in the bezel retaining screws 00255b 00254a All manuals and user guides at all guides com ...

Page 46: ... assembly clicks into place Configuring and Activating Interfaces The IP350 or IP380 appliance automatically detects any new NIC when the system is restarted Use Voyager to configure and activate the logical and physical interfaces on the NIC For information about how to access Voyager and the related reference materials see To open Voyager on page 36 00252c 00248a Chassis assembly thumbscrews All...

Page 47: ...or each NIC are explained in the NIC reference chapter For the status indicator information for the built in Ethernet ports or the dual port Ethernet NIC see Dual Port 10 100 Ethernet Interface PMC on page 49 Use Voyager to access detailed port information For information about accessing Voyager see Accessing Nokia Network Voyager on page 36 You can also use the IPSO tcpdump command to examine the...

Page 48: ...4 Installing and Replacing Network Interface Cards 48 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 49: ... Protect your IP350 or IP380 appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any electronic component Dual Port 10 100 Ethernet Interface PMC Every IP350 and IP380 appliance has four built in dual mode 10 Mbps and 100 Mbps ports Additionally the appliance supports Nokia approved dual port UTP5 dual mode 10 M...

Page 50: ...rials see Accessing Nokia Network Voyager on page 36 Figure 11 shows the front panel layout of the dual port Ethernet NIC Figure 11 Dual Port Ethernet NIC Front Panel Details After the power is turned on the Ethernet link LEDs on the appliance and on the remote equipment illuminate to indicate the connection As data is transmitted the activity LEDs on the appliance light up Ethernet NIC Connectors...

Page 51: ...appropriate adapter cables separately You can order additional cables from a cable vendor of your choice Figure 12 shows the pin assignments for the cable The RJ 45 cable output connector is numbered from right to left with the copper tabs facing up and toward you Figure 12 Output Connector for the Ethernet Cable Figure 13 shows the pin assignments for the RJ 45 cross over cable 00113b Pin Assignm...

Page 52: ...5 Connecting PMC Network Interface Cards 52 IP350 and IP380 Appliance Installation Guide Figure 13 Ethernet Crossover Cable Pin Connections 00017 All manuals and user guides at all guides com ...

Page 53: ...ryption Accelerator Card For instructions on adding or replacing interface cards see Chapter 4 Installing and Replacing Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP350 or IP380 appliance Limit service of the appliance to the procedures described in this chapter Caution Protect your IP350 or IP380 appliance and other ...

Page 54: ...ite listed Nokia Contact Information on page 3 To use a modem with an IP350 or IP380 appliance 1 If the modem is not already installed insert the PCMCIA modem into either the top or bottom PCMCIA slot until the modem clicks into place The modem and the ejector tab on the left of the slot protrude from the unit The appliance automatically recognizes the modem 2 Connect the modem to a phone line Use...

Page 55: ...lace The following figure shows the location of the hard disk drive on the motherboard Note Back up your hard drive files to a remote system on a regular basis For back up and restore procedures see the IPSO release notes Figure 14 Hard Disk Drive Location Note The disk drive must contain the IPSO partitions and boot loader before installation For further information contact the appropriate Nokia ...

Page 56: ...move the tray from the appliance so you can access the hard disk drive retaining screws from the bottom of the tray Note Because power to a IP350 or IP380 is automatically disconnected when the chassis assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis assembly fully removed from the applianc...

Page 57: ...pply wiring without disconnecting the power cord 4 From the bottom of the chassis assembly remove the retaining screws that hold the hard disk drive unit 5 Gently remove the hard disk drive from the motherboard taking care not to damage the connector 6 Insert the new hard disk drive unit 00261 00262 All manuals and user guides at all guides com ...

Page 58: ...isk gently into place Take care to align the connectors correctly as the connectors are not keyed 7 Tighten the retaining screws that holds the hard disk drive into place 8 Slide the chassis assembly back into the appliance until it clicks into place 00261 00252c All manuals and user guides at all guides com ...

Page 59: ...ng a Nokia approved memory upgrade kit The IP350 comes with 256 MB of memory in one DIMM and can be upgraded to 512 MB by adding a second 256 MB DIMM Caution The IP350 appliance cannot function with more than 512 MB of memory If more than 512 MB of memory is installed in an IP350 the system displays a warning message and shuts down The IP380 appliance comes with 256 MB of memory in one DIMM and ca...

Page 60: ...tact Information on page 3 The DIMM sockets are located at the right of the motherboard as you look at the appliance from the front as Figure 15 shows Figure 15 DIMM Socket Locations Before You Start To upgrade or replace the memory in your appliance you need the following Physical access to the appliance Nokia memory upgrade kit and accompanying documentation Access to the appliance through Voyag...

Page 61: ...onnect the power for this procedure Any servicing of the unit however should be completed with the chassis assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply or power supply wiring without disconnecting the power cord Adding or Replacing DIMMs To add or replace DIMMs 1 Use Voyager or Lynx to perform an order...

Page 62: ...lation Guide 2 Loosen the two front panel thumbscrews 3 Slide the chassis assembly forward to expose the DIMM sockets Be careful not to pull the chassis assembly entirely out of the appliance 00248a Chassis assembly thumbscrews 00252a All manuals and user guides at all guides com ...

Page 63: ...outward and carefully pulling each DIMM upward as the following figure shows You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins 5 The memory DIMMs are keyed to prevent improper insertion Press the new DIMM into the socket until it clicks into place 00263 All manuals and user guides at all guides com ...

Page 64: ...ength sets of contacts which mate with the slots on the socket Be sure the contacts and slots are properly aligned before you insert the DIMM The retaining clips move into the lock position as you press the DIMM into place 6 Slide the chassis assembly back into the appliance until it clicks into place 00264 00252c All manuals and user guides at all guides com ...

Page 65: ...Installation Guide 65 7 Resecure the two thumbscrews The appliance automatically recognizes the new memory configuration You can verify this from the Voyager or Lynx interface 00248a Chassis assembly thumbscrews All manuals and user guides at all guides com ...

Page 66: ...ables the built in accelerator and enables the card Removing the card reverses the process You must however use Voyager to configure your software applications IPsec or Checkpoint VPN to make use of the available hardware accelerator For details see Configuring Software to Use Hardware Acceleration on page 71 When you order an accelerator card with the appliance the card is installed before the ap...

Page 67: ...n packaging A disposable wrist strap included in packaging Warning To help guard against electrostatic discharge damage follow the instructions on the wrist strap envelope before you handle the accelerator card or open the appliance Installing the Card 1 Use Voyager or Lynx to shut down the appliance 2 Loosen the two front panel thumbscrews 00248a Chassis assembly thumbscrews All manuals and user ...

Page 68: ...otherboard components as the following figure shows 4 Locate the PMC connectors on the rear of the motherboard Caution Make sure you locate the correct connectors for the VPN acceleration card Do not use the PMC connectors located at the front of the motherboard those connectors are for NICs 00252a All manuals and user guides at all guides com ...

Page 69: ...otherboard The two sets of connectors should be aligned with each other The four screw holes and four standoffs should also be aligned with one another 6 Push down on the card until it is properly seated on the motherboard 00267 A B Standoffs Insert the VPN card into connectors Screw card into standoffs PMC connectors for VPN card All manuals and user guides at all guides com ...

Page 70: ...ot tighten completely 9 Make sure that all four standoff connections are properly aligned 10 To secure the connections tighten the screws firmly but do not overtighten 11 Slide the chassis assembly back into the appliance and resecure the two thumbscrews Reseating the chassis assembly automatically restores power to the appliance Screw Accelerator card Standoff hole Motherboard standoff 00248a Cha...

Page 71: ...ck Point software If you use Voyager to create a VPN tunnel see To configure IPsec If you use Check Point software to create a VPN tunnel see To configure Check Point VPN To configure IPsec 1 Start Nokia Network Voyager for your appliance 2 On the Voyager home page click Config 3 Under Interfaces click IPSec 4 Scroll down and click IPSec Advanced Configuration 5 At Hardware Device Configuration cl...

Page 72: ...iance Installation Guide You can also monitor Nokia encryption accelerator card interfaces with Voyager For more information about accessing Voyager and locating relevant reference materials see the Voyager Reference Guide All manuals and user guides at all guides com ...

Page 73: ... following Booting from alternate kernels which might reside on nondefault devices or directories Installing new versions of IPSO the operating system Obtaining system information Performing various housekeeping tasks When you first receive your IP350 or IP380 appliance the boot manager uses factory default parameters kernel boot device and so on for the boot process The factory defaults cause the...

Page 74: ...ber of the boot manager This variable cannot be set from the command line autoboot If autoboot is set to no the IP350 or IP380 appliance stops at the boot manager command line during the boot process If autoboot is set to yes the IP350 or IP380 appliance does not stop at the boot manager command line during a boot up It does wait for the amount of time specified in bootwait for input from the keyb...

Page 75: ...y default image current kernel boot flags The string of flags passed to the kernel Factory default x Flag Meaning d Debug Mode Enters the kernel debugger as soon as possible in the kernel initialization s Single User Mode If the console is marked as insecure you must enter the root password to access the manager v Verbose Mode Verbose during device probing and thereafter Table 4 Boot manager varia...

Page 76: ...values of variables currently stored in the boot manager nonvolatile memory The command has the following syntax printenv For example BOOTMGR 93 printenv Bootmgr Revision 3 3 base kernel 3 5 1 06 12 2002 080000 autoboot YES testboot NO bootwait 0 boot file boot flags boot device vendor Nokia model IP All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 77: ...etwork Interfaces loop0 flags 10b UP LINK LOOPBACK PRESENT soverf0 flags 2923 UP LINK MULTICAST PRESENT IPV6ONLY stof0 flags 2903 UP LINK PRESENT IPV6ONLY tun0 flags 107 UP LINK POINTOPOINT PRESENT eth1 flags 131 LINK BROADCAST MULTICAST PRESENT ether 0 20 30 0 11 4 speed 10M full duplex eth2 flags 130 BROADCAST MULTICAST PRESENT ether 0 20 30 0 11 5 speed 10M full duplex eth3 flags 130 BROADCAST ...

Page 78: ...nd directory are optional The default directory is image on the wd0 device For example BOOTMGR 2 ls wd0 image current description bootmgr etc kernel debug usr VERSION cdrom ipso tgz mnt web bin dev kernel sbin Setting the Variables setenv Use the setenv command to set a particular variable The command has the following syntax setenv name value where name is the name of the variable and value is th...

Page 79: ... set defaults command to set variables to their factory default values The command has the following syntax set defaults name where name is the name of the variable to be set to its factory default If name is not specified all variables are set to their factory defaults For example the following command sets the value of autoboot to be yes the factory default BOOTMGR 2 set defaults autoboot setali...

Page 80: ... an alias The command has the following syntax unsetalias name where name is the name of the alias to be cleared For example the following command deletes the disk alias from the list of aliases BOOTMGR 2 unsetalias disk Other commands halt Use the halt command to halt the system The command has the following syntax halt help Use the help command to display a list of the available commands The com...

Page 81: ...r to the boot flag table in Variables on page 74 For example at the boot manager command prompt enter the following BOOTMGR 0 boot wd0 image current mykernel vd This command boots mykernel from disk wd0 in verbose and debug mode You can supply all any or none of the arguments If you do not supply an argument the boot manager uses its default It first searches its nonvolatile memory to see if the c...

Page 82: ...es the existing IPSO image on the IP350 or IP380 appliance To install a new copy of the IPSO kernel 1 At the boot manager command prompt enter BOOTMGR 0 install If you used the passwd command to protect this command with a password the boot manager prompts you for your password before allowing you to execute the install command 2 Enter the information the install command requests your system IP ad...

Page 83: ... manager not access to IPSO To set a password 1 At the boot manager command prompt enter BOOTMGR 0 passwd The passwd program prompts you for your current password 2 If the appliance is protected by a password enter your current password The program prompts you for the new password 3 Enter the new password The program prompts you to re enter the new password for verification 4 Enter the new passwor...

Page 84: ...hich you write the new boot manager image and from which boot manager image loads at boot up Boot file is the new boot manager The new boot manager options are cpipflash cpvpnflash nkipflash and nkvpnflash Execute the install_bootmgr command from IPSO the operating system not from the boot manager Note To install the new boot manager you must be in single user mode To install the new boot manager ...

Page 85: ...er For complete upgrade procedures refer to the appropriate version of release notes Note To install the new boot manager you must be in single user mode To upgrade the boot manager 1 Get the upgraded boot manager image from the appropriate Nokia customer support site as listed in the Nokia Contact Information section at the front of this guide 2 Start the IP350 or IP380 appliance in single user m...

Page 86: ...7 Using the Boot Manager 86 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 87: ... section relates to non routing problems For information about how to troubleshoot routing problems see Troubleshooting Routing Problems on page 97 Unable to Log in to the Console Port No Error Message Two laptop computers using terminal emulation programs or terminals should be able to communicate back to back in the same way that the terminal communicates with the IP350 and IP380 appliance If th...

Page 88: ...top no parity 9600 bps Problem Terminal set for flow control Solution The IP350 and IP380 appliance does not use flow control The terminal should be set for no flow control Problem Defective IP350 and IP380 appliance or file system Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Problem Database is corrupt Solution Return to default settings according...

Page 89: ... the following text appears Enter pathname of shell or RETURN for sh Press Enter 3 Type etc overpw at the prompt When the response asks if you want to continue type y 4 The admin password defaults to no password for admin Continue to boot to multiuser mode 5 Reconfigure the password as you normally would in Lynx Note Blank passwords are not accepted in Voyager or Lynx In such cases enter the follo...

Page 90: ...ult configuration 3 Create the new default configuration Do Not Get a Login Prompt Error Messages Appear Problem The IP350 and IP380 appliance is defective or the file system on the IP350 and IP380 appliance is defective Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Note Use the full installation procedure to install a new system The new system comp...

Page 91: ...tion is incorrect Solution Check host Ethernet port settings Verify that IP address and netmask settings are correct for the IP350 and IP380 appliance configuration Problem Wrong link speed Solution Verify that the port on the host and the port on the IP350 and IP380 appliance are set for the same speed 10 Mbps or 100 Mbps An unblinking data and activity LED on a port is a good indication that the...

Page 92: ...a and activity LED Solution You might have set the wrong speed Verify that the speeds match on each end of the Ethernet connection 10 Mbps or 100Mbps Problem Port not enabled Solution Verify from the Interface page in Voyager that the interface port is configured as active Problem High collision rate on the hub Solution Disconnect connections one at a time until the problem is localized to one com...

Page 93: ...ed device does not have proper default route or routing information Solution If a local computer is unable to ping through an attached appliance the computer might contain either an invalid default route or invalid routing information If you are using default routes from a computer ensure that the local interface is the default route for that computer Problem The ARP table has old information Solu...

Page 94: ...n in Voyager you can also enable several types of trace options for DVMRP These traces are logged into var tmp ipsrd log For information about how to access Voyager and the related reference materials see Accessing Nokia Network Voyager on page 36 Problem No IP connectivity Solution Verify that you have IP connectivity ping various hosts on each network Problem DVMRP is not enabled on the interfac...

Page 95: ... the following command ipsctl ifphys logical interface max_rxlabel Problem Encapsulation is not set to LLC SNAP Solution Set encapsulation to LLC SNAP Consult your 1483 device documentation Problem The MTU size is not 1500 Solution The MTU size must be 1500 Nokia does not support larger MTU sizes Appliance Not Receiving Power Problem Power cord is not properly plugged in Solution Check cord Make s...

Page 96: ...ectly Solution You can verify what the current boot manager settings are by issuing a printenv command at the boot manager prompt as shown in this example Loading boot manager BOOTMGR 0 printenv Bootmgr Revision 3 3 base kernel 3 5 1 fcs1 02 12 2001 102644 autoboot NO bootwait 5 boot file boot flags boot device No referenced boot file or boot device appears Setting the boot manager to defaults cau...

Page 97: ...eshooting Routing Problems Several useful tools are available to troubleshoot routing problems The first tool is available from the Monitor page in Voyager from which you display routing statistics and errors You can access this information from the command line interface using the ICLID IPSRD command line interface daemon command An example use of the ICLID command is shown below For information ...

Page 98: ...ter dvmrp interface memory resource version hostname IP address show route aggregate bgp igrp ospf static all direct inactive rip summary hostname IP address show route ospf Codes C connected S static I IGRP R RIP B BGP O OSPF E OSPF external A Aggregate K Kernel Remnant H Hidden S Suppressed The response to the preceding ICLID command is as follows 0 172 16 16 via 10 1 1 225 eith sp4p1c0 cost 3 a...

Page 99: ...SPF is not configured Solution Verify that OSPF is properly configured for all interfaces that are involved in OSPF routing For more information see Configuring OSPF from the Configuring Routing document page in Voyager You can access the document page by pressing Doc Problem OSPF hello and dead timers are not the same on each interface for a given link Solution Verify that the settings at the end...

Page 100: ... subnet mask netmask does not match the class of IP address for RIP v1 Solution RIP version 1 must use consistent subnet masks change to RIP version 2 or OSPF to use inconsistent subnet masks Problem Number of networks exceeds the RIP limit Solution RIP can span up to 16 networks Verify that your network topology does not exceed this limit Common Problems Exchanging Routes Always enter a metric va...

Page 101: ... 101 Problem Routing protocol is not functioning properly Solution to ensure that each routing protocol is functioning properly see Common Problems with OSPF on page 99 and Common Problems with RIP on page 100 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 102: ...8 Troubleshooting 102 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 103: ...wing space in a rack 1 75 inches 4 45 centimeters of vertical space 18 inches 46 centimeters behind the front panel of the rack 6 inches 15 centimeters behind the IP350 or IP380 appliance to allow the back exit fan to move air through the appliances Dimensions Height 1 75 in 4 45 cm Width 17 in 44 cm 19 in 48 cm rack mountable Depth 16 12 in 40 94 cm Weight 17 lbs 7 7 kg base system All manuals an...

Page 104: ...cts over the ventilation holes on the IP350 or IP380 appliance The appliance might overheat and become damaged NIC Interfaces Cable Type Cable Output Connector Ethernet IEEE 802 3 10BASE T 100BASE TX unshielded twisted pair full duplex or half duplex RJ 45 All manuals and user guides at all guides com ...

Page 105: ...iance Installation Guide 105 B Compliance Information This appendix contains the following compliance information Declaration of Conformity Compliance Statements FCC Notice US All manuals and user guides at all guides com ...

Page 106: ... Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP350 IP380 Model Number IP0380 Product Options All Serial Number 1 to 100 000 Date First Applied 2002 Safety EN60950 1992 A1 A2 1993 A3 1995 A4 1997 A11 1998 with Japanese National Deviations EMC EN55024 1998 EN55022A 1998 EN61000 3 2 EN61000 3 3 All manuals and user guides at all guides com a ...

Page 107: ...ant to directive 1999 5 EC this product complies with the requirements of the Low Voltage Directive 73 23 EEC and the EMC Directive 89 336 EEC with Amendment 93 68 EEC Alan Hutchinson Manager Regulatory Compliance Engineering Mountain View California August 2002 All manuals and user guides at all guides com ...

Page 108: ...ss A US Canada EN55022 CISPR 22 Class A European Community CE Immunity Standards EN50024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 8 EN61000 4 11 ENV50204 Harmonics and Voltage Fluctuation EN61000 3 2 European Community CE EN61000 3 3 European Community CE Safety Standards UL60950 US Can CSA C22 2 No 950 Canada All manuals and user guides at all gu...

Page 109: ...re is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio or television reception the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the computer and receiver Connect the computer into an outlet on ...

Page 110: ...B Compliance Information 110 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Page 111: ...ble 75 bootwait variable 74 C commands halt 80 help 80 ICLID 97 install 82 ls 78 printenv 76 setalias 79 set defaults 79 setenv 78 sysinfo 77 unsetalias 80 unsetenv 79 configuring with Voyager 36 connections Ethernet network interface cards 50 modem 23 power 29 connector pin assignments Ethernet network interface cards 51 connectors for Ethernet network interface cards 50 console cable 34 D data c...

Page 112: ...toring 24 IPSO booting 81 L ls command 78 M management ports 20 memory capacity 59 upgrading 59 modems PMCIA 21 monitoring IP350 and IP380 appliances 24 N network interface cards deactivating 40 dual port Ethernet 50 front panel location 19 installing 39 40 types supported 21 NIC deactivating 40 null modem cable 34 O opening Voyager 36 output connector for the Ethernet cable 51 P PCMCIA modem inst...

Page 113: ...technical 103 static discharge 61 sysinfo command 77 T technical specifications 103 troubleshooting 87 U unsetalias command 80 unsetenv command 79 upgrading memory 59 V variables autoboot 74 boot flag 75 boot manager 74 boot device 75 boot file 75 bootwait 74 setting 78 viewing 76 Voyager opening 36 All manuals and user guides at all guides com ...

Page 114: ...Index 114 IP350 and IP380 Appliance Installation Guide All manuals and user guides at all guides com ...

Search results

Summary of Contents for IP380 - Security Appliance

Reviews:

Related manuals for IP380 - Security Appliance

Brands by name

Popular brands

Nokia IP380 - Security Appliance, Appliance Installation Manual

Search results

Summary of Contents for IP380 - Security Appliance

Reviews:

Related manuals for IP380 - Security Appliance

Brands by name

Popular brands