Nokia IP390 - Security Appliance Installation Manual Download

Page: 97 / 97

We Welcome Your Comments

Nokia is interested in improving our documentation to better serve our customers. Please feel
free to send comments and suggestions to

[email protected]

If you are using Adobe Acrobat Reader 6.0 or later, we invite you to provide feedback to us by
using the following form.

How satisfied are you with the help you received from this document?

Feel free to elaborate on your answer:

Where did you find this document?

If you chose “other,” where did you get the document?

Was the document easy to find?

Feel free to enter suggestions for improving this document:

May we contact you at your e-mail address if we have questions about your feedback?

Note: This form is returned to us through your e-mail. We respect your privacy and will not use
your e-mail address for any other purpose than communication about this form.

Summary of Contents for IP390 - Security Appliance

Page 1: ...Part No N450000381 Rev 001 Published October 2008 Title Page IP390 Security Platform Installation Guide ...

Page 2: ...Nokia Inc as is and any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or service...

Page 3: ...kia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 Tel Middle East Africa Dubai 971 4 3697600 E mail europe nokiaforbusiness com E mail mea nokiaforbusiness com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 603 9145 1032 E mail asia nokiaforbusiness com Web Site https support nokia com Voice Americ...

Page 4: ...4 IP390 Security Platform Installation Guide ...

Page 5: ...nce 20 Site Requirements Warnings and Cautions 21 Software Requirements 22 Product Disposal 22 2 Installing the Nokia IP390 Appliance 23 Before You Begin 23 Rack Mounting the Appliance 23 Connecting Power 24 Connecting to the Console or Auxiliary Port 25 Console Port 27 Auxiliary Port 28 Connecting to Network Interfaces 29 3 Performing the Initial Configuration 31 Using a Console Connection 31 Usi...

Page 6: ...5 5 Installing and Replacing Network Interface Cards 49 Deactivating Configured Interfaces 49 Removing Installing and Replacing NICs 50 Before You Start 50 Configuring and Activating Interfaces 55 Monitoring Network Interface Cards 55 6 Installing and Replacing Components Other than Network Interface Cards 57 Replacing the Compact Flash Memory Card 57 Installing a Flash Memory PC Card 60 Before Yo...

Page 7: ...IP390 Security Platform Installation Guide 7 B Compliance Information 89 Declaration of Conformity 89 Compliance Statements 90 FCC Requirements US 91 FCC Notice US 92 Index 93 ...

Page 8: ...8 IP390 Security Platform Installation Guide ...

Page 9: ...ventions 14 Table 2 Text Conventions 15 Table 3 Specifications for the IP390 Platform 17 Table 4 PMC Network Interface Card Slots 19 Table 5 System Status LEDs 20 Table 6 Pin Assignments Console Connector and Cable 28 Table 7 Pin Assignments for AUX Connector and Modem Cable 28 ...

Page 10: ...10 IP390 Security Platform Installation Guide ...

Page 11: ...nments 39 Figure 11 Ethernet Crossover Cable Pin Connections 39 Figure 12 Gigabit Ethernet Crossover Cable Pin Connections 40 Figure 13 Two Port Copper Gigabit Ethernet NIC 41 Figure 14 Copper Gigabit Ethernet Cable Connector Pin Assignments 42 Figure 15 Gigabit Ethernet Crossover Cable Pin Connections 42 Figure 16 PMC Two Port Short Range Gigabit Ethernet NIC 43 Figure 17 PMC Two Port Long Range ...

Page 12: ...12 IP390 Security Platform Installation Guide ...

Page 13: ...d power Chapter 3 Performing the Initial Configuration describes how to make the appliance available on the network Chapter 4 About IP390 Appliance Network Interface Cards describes how to connect to and use each of the supported NICs Chapter 5 Installing and Replacing Network Interface Cards describes how to install monitor and replace network interface cards NICs Chapter 6 Installing and Replaci...

Page 14: ...ght encounter one or more of the following elements on a command line path Table 1 Command Line Conventions Convention Description command This required element is usually the product name or other short word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product It might appear alone or precede one or more options You must spell a command exactly as sho...

Page 15: ...actly as shown immediately after the name of the file The extension might be optional in certain products Punctuation and mathematical notations are literal symbols that you must enter exactly as shown Single quotation marks are literal symbols that you must enter as shown Table 1 Command Line Conventions Convention Description Table 2 Text Conventions Convention Description monospace font Indicat...

Page 16: ...lustering Configuration Guide for the version of Nokia IPSO you are using Nokia Network Voyager inline help You can find the most up to date version of the Nokia IP390 Security Platform Installation Guide in PDF on the Nokia support site https support nokia com You can access inline help the Nokia Network Voyager Reference Guide and the CLI Reference Guide from Nokia Network Voyager Check Point do...

Page 17: ...iance and the requirements for using it The following topics are covered About the Nokia IP390 Appliance Managing the IP390 Appliance Site Requirements Warnings and Cautions Software Requirements Product Disposal About the Nokia IP390 Appliance The IP390 is a one rack unit disk based or flash based appliance that incorporates a serviceable slide out tray into the chassis design and support for var...

Page 18: ...ports and status LEDs Figure 3 Built In Gigabit Ethernet Ports Details Caution Cables that connect to the Gigabit Ethernet ports must be IEEE 802 3 compliant to prevent potential data loss 00525 IP390 System status LEDs AUX port Console port Four port Gigabit Ethernet Flash memory PC card slots PMC NIC slots slots 1 and 2 unpopulated in base bundle Reset button 00527 Power socket Power switch 0054...

Page 19: ...r reseller information contact a Nokia service provider listed in the Nokia Contact Information on page 3 System Status LEDs You can monitor the basic operation of the IP390 appliance and NICs by checking their status LEDs The system status LEDs are located on the front panel of the appliance as Figure 4 shows Table 4 PMC Network Interface Card Slots Interface For details see Four port copper 10 1...

Page 20: ... following interfaces Nokia Network Voyager an SSL secured Web based element management interface to Nokia IP appliances Network Voyager is preinstalled on the IP390 appliance and enabled through the Nokia IPSO operating system With Network Voyager you can manage monitor and configure the IP390 appliance from any authorized location within the network by using a standard Web browser Table 5 System...

Page 21: ...00 Nokia IP appliances offering administrators the most rapid and dependable method to perform Check Point application upgrades Site Requirements Warnings and Cautions Before you install a Nokia IP390 appliance ensure that your computer room or wiring closet conforms to the environmental specifications listed in Chapter A Technical Specifications Warning Excessive electromagnetic interference EMI ...

Page 22: ...ons These devices contain materials and components that must be disposed of properly Therefore to help prevent damage to the environment Nokia encourages you to dispose of these devices in an environmentally friendly manner The following resources are available to you to help with equipment disposal decisions Many Nokia products are labeled with information about the materials used in their manufa...

Page 23: ...nding wrist strap Suitable grounded work surface on which to place the chassis tray assembly Caution To help guard against electrostatic discharge damage make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance Rack Mounting the Appliance The IP390 appliance mounts in a s...

Page 24: ...n openings during installation may result in damage to the appliance Connecting Power The power plug and power switch for the IP390 appliance is located on the back of the appliance as Figure 7 shows Note The IP390 appliance power supply automatically detects the input voltage 115VAC 60Hz 90 to 132 or 220VAC 50Hz 180 to 264 and configures itself appropriately 00525 IP390 Mounting screw slots 00539...

Page 25: ... see Chapter 3 Performing the Initial Configuration After you perform the initial configuration you no longer need the console connection You can use any standard VT100 compatible terminal with an RS 232 data terminal equipment DTE interface or terminal emulation program If you connect the console port to a data communications equipment DCE device use a straight through cable Use the following con...

Page 26: ...l emulation program The cable that Nokia provides with IP390 appliances includes a latching mechanism used to secure the cable to the console port or auxiliary port of your appliance Note To use the cable for modem connections from the auxiliary port you need to order a modem cable kit For information about contacting Nokia to order the kit see Nokia Contact Information on page 3 Note The cable de...

Page 27: ...ection using the appliance auxiliary port and the DB 25 male adaptor The DB 9 adapter is provided with the cable The DB 25 adaptor is provided with Nokia modem cable kits for the IP390 Console Port Use the built in console port shown in Figure 6 to supply information that makes the appliance available on the network at speeds up to 9600 bps The default configuration of the serial ports are 9600 ba...

Page 28: ... for managing the appliance remotely or out of band The default configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop bit Table 7 provides pin assignment information for modem connections Table 7 Pin Assignments for AUX Connector and Modem Cable Console Port DTE RJ 45 to RJ 45 Rollover Cable RJ 45 to DB 9 Terminal Adapter Remote Device Signal RJ 45 Pin RJ 45 Pin DB 9 Pin Sign...

Page 29: ...ps 100 Mbps or 1000 Mbps hub or directly to a host Note All Nokia copper Gigabit Ethernet NICs support cable auto sensing You can use a straight through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch or to connect directly to a host For details see Copper Gigabit Ethernet Connectors and Cables on page 41 To connect fiber optic Gigabit Ethernet devices Use a multi mode fi...

Page 30: ...2 Installing the Nokia IP390 Appliance 30 IP390 Security Platform Installation Guide After you connect the network interfaces continue with Chapter 3 Performing the Initial Configuration ...

Page 31: ...following sections Using a Console Connection Using Nokia Network Voyager Using the Command Line Interface Using Nokia Horizon Manager For information about how to use the DHCP client for initial configuration see the Read Me First document Using a Console Connection If you have not already done so you need to connect to the console port to complete the initial configuration For information about ...

Page 32: ...r if the power LED is not illuminated Check the power supply cord to make sure it is properly connected Make sure the power switch is on Make sure the chassis tray assembly is pushed all the way in from the front of the appliance and that the front panel retaining screws are tightened Make sure that power is turned on to the power strip or wall receptacle you plugged the appliance in to If the fan...

Page 33: ...word c Enter the following rm config active or mv config active config active old d Reboot the appliance e Respond to the Hostname prompt within 30 seconds to prevent the DHCP client from restarting 4 At each subsequent prompt type the requested configuration information and then press Enter For more information about how to respond to the prompts during the initial configuration process see the G...

Page 34: ...ge Packages and turning the package on The following documentation is available in Nokia Network Voyager and is accessible from the Network Voyager interface as shown in Figure 8 Nokia Network Voyager Reference Guide This guide is the comprehensive reference source for Nokia Network Voyager To access this source look at the list in the navigation tree on the left side of the window as shown in Fig...

Page 35: ...ork as an admin cadmin or monitor user If you log in as a cadmin cluster administrator user you can change and view configuration settings on all the cluster nodes For information about how to administer a cluster see the traffic management commands section in the CLI Reference Guide for the version of Nokia IPSO you are using 2 If you log in as a monitor user you can execute only the show form of...

Page 36: ...roving productivity Using Horizon Manager a network security professional can manage multiple devices simultaneously perform parallel software upgrades device verifications device configuration file backups and more Horizon Manager is designed to manage and configure a large number of Nokia security appliances that reside on a corporate enterprise managed service provider MSP or hosted application...

Page 37: ... Network Interface Cards Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any electronic component Four Port 10 100 Mbps Ethernet Network Interface Card The IP390 appliance supports Nokia approved four port UTP5 dual mode 10 Mbps and 100 Mbps Ethernet NICs When you purchase an Ether...

Page 38: ...ote equipment illuminate to indicate the connection As data is transmitted the activity LEDs on the appliance light up Ethernet NIC Connectors and Cables The connectors on the Ethernet NIC are RJ 45 connectors To connect to a hub use a straight through RJ 45 cable To connect directly to a host use an RJ 45 crossover cable For further details about cables that you should use see NIC Interfaces on p...

Page 39: ...copper tabs facing up and toward you Figure 10 Ethernet Cable Connector Pin Assignments The following figure shows the pin assignments for the RJ 45 cross over cable Figure 11 Ethernet Crossover Cable Pin Connections You can also use cables intended for Gigabit Ethernet NIC connections for your Ethernet NIC connections as shown in Figure 12 Pin Assignment 1 TX 2 TX 3 RX 4 5 6 RX 7 8 00270 8 1 0001...

Page 40: ...other NICs do not occupy Note Copper Gigabit Ethernet NICs you use in IP390 appliances need to be the Version 2 type as indicated on the right end of the NIC faceplate These NICs are sold by Nokia under the order code NIF4425 Copper Gigabit Ethernet NIC Features The copper Gigabit Ethernet NIC supports the following features Supports traffic at 10 100 and 1000 Mbps High bandwidth Half duplex mode ...

Page 41: ...ectors To connect to a hub use a straight through RJ 45 cable To connect directly to a host use an RJ 45 crossover cable For further details about cables that you should use see NIC Interfaces on page 88 Caution Cables that connect to the Gigabit Ethernet NIC must be IEEE 802 3 compliant to prevent potential data loss You can order appropriate adapter cables separately You can order additional cab...

Page 42: ... Ethernet Crossover Cable Pin Connections To connect the IP390 appliance to other network components you can order appropriate adapter cables separately from a cable vendor of your choice Two Port Fiber Optic Gigabit Ethernet Network Interface Card All NICs installed in an IP390 are installed into slots on the appliance Gigabit Ethernet NICs can occupy any of the slots or subslots in an appliance ...

Page 43: ...0 1 or higher The long range single mode fiber SMF fiber optic Gigabit Ethernet NICs in the IP390 run on Nokia IPSO v4 2 or higher You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager Specifically you set the port speed and full duplex mode with Network Voyager For information about how to access Network Voyager and the related reference materials see Chapter 3 ...

Page 44: ...optic Gigabit Ethernet NIC to other network components use a single mode fiber optic cable with an LC connector for each NIC interface The destination end of the cable can be either LC or SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port LC and ...

Page 45: ...C provides up to 1 5 Mbps of throughput and is deployed in the United States The following figure shows T1 NIC front panel details Figure 18 Four port T1 NIC front panel details T1 Connectors and Cables To connect the NIC to a T1 device use a straight through RJ 48 cable Note Cable types C S and X will all work properly with your Nokia T1 NICs Note If you use an RJ 45 cable with your T1 NIC by mis...

Page 46: ...okia requires that all equipment be connected to a power source using a socket outlet with protective earthing connection In the following figure the RJ 48 connector is numbered from right to left with the copper pins facing up and toward you Figure 19 T1 Network Interface Card Receptacle and Pin Assignments In the following figure wiring is shown for a T1 crossover cable Figure 20 T1 Crossover Ca...

Page 47: ...t T1 Network Interface Card IP390 Security Platform Installation Guide 47 Note Your T1 cable might not include straight through wiring for pins 3 6 7 and 8 It will however work properly with your Nokia T1 NICs ...

Page 48: ...4 About IP390 Appliance Network Interface Cards 48 IP390 Security Platform Installation Guide ...

Page 49: ...Chapter 4 About IP390 Appliance Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP390 appliance Limit service of the unit to the procedures described in this chapter Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD by making sure you are properly grounded before touching ...

Page 50: ...ore You Start To remove install or replace a Nokia NIC you need the following A Phillips head screwdriver Physical access to the appliance Access to the appliance by using Nokia Network Voyager or the CLI Suitable grounded work surface Network interface card kit To remove install or replace a NIC Note Because power to the IP390 appliance is automatically disconnected when the chassis tray assembly...

Page 51: ...assembly forward to expose the NIC connectors Remove the tray completely to avoid damaging components 4 From underneath the chassis tray assembly remove the bezel retaining screws If you are installing a NIC in an unoccupied slot remove the blank bezel that occupies the space in the appliance front panel retain it for future use and proceed to step 7 00525 IP390 Chassis tray assembly retaining scr...

Page 52: ...gently away from the front panel 7 Insert the new NIC or blank bezel If you are removing a NIC without installing another NIC a Insert a blank bezel into the front panel slot formerly occupied by the NIC and push it gently into place Make sure that the bezel is completely seated into the front panel and that the screw holes on the bottom of the bezel align with those in the front panel Note To red...

Page 53: ...f the NIC as close as possible to the connector locations down toward the chassis tray assembly For T1 NICs note that only two connectors on the NIC are used for the interface as the following figure shows Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly 00532a 00689 As shown on the bottom of the T1 NIC only these two NIC connectors are used for the...

Page 54: ... the NIC retaining screws into the standoffs on the back of the NIC 9 From beneath the chassis tray assembly screw in the bezel retaining screws 10 Gently slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly clicks into place 00531 00528 00538 IP390 ...

Page 55: ...atus indicator information for the built in Gigabit Ethernet ports see Built In Gigabit Ethernet Ports on page 18 For status indicator information for the four port Ethernet NIC see Four Port 10 100 Mbps Ethernet Network Interface Card on page 37 For status indicator information for the two port copper Gigabit Ethernet NIC see Two Port Copper Gigabit Ethernet Network Interface Card on page 40 For ...

Page 56: ...5 Installing and Replacing Network Interface Cards 56 IP390 Security Platform Installation Guide ...

Page 57: ...nce Limit service of the appliance to the procedures described in this chapter Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any component Replacing the Compact Flash Memory Card In flash based IP390 appliances the compact flash memory card stores the Nokia IPSO operating system ...

Page 58: ...nic component You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembly to service internal components Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be complete...

Page 59: ...the two front panel retaining screws 3 Gently slide the chassis tray assembly forward and completely remove the assembly to expose the motherboard components 4 Place the chassis tray assembly on a table top 5 Locate and remove the existing compact flash memory card from the slot by holding the edges of the card and gently sliding it out of the slot 6 Gently insert the new compact flash memory card...

Page 60: ...k Voyager or the command line interface CLI Compact flash memory PC card and accompanying documentation Caution To avoid potential equipment malfunction Nokia recommends that you obtain flash memory PC cards only from Nokia or authorized resellers For further information contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 Caution You risk damage to the...

Page 61: ...iance mount dev wd1 cdrom Or if you do have a hard disk drive installed in your appliance mount dev wd2 cdrom The cdrom directory is a default directory in Nokia IPSO for mounting media 4 Use the cp command to transfer Nokia IPSO images or configuration files to and from the flash memory PC card For example to copy the current Nokia IPSO image from the compact flash memory to the flash memory PC c...

Page 62: ...cess to the appliance A Nokia approved hard disk drive Access to the appliance through Network Voyager A Phillips head screwdriver A torque screwdriver capable of a 69 4ozf in 5kgf cm setting To install or replace a hard disk drive 1 Use Network Voyager or the CLI to halt the appliance To use Network Voyager to shut the appliance down select System Configuration Reboot or Shutdown Halt To use the ...

Page 63: ...ay Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply...

Page 64: ...ve the retaining screws that hold the hard disk drive unit from the bottom of the chassis tray assembly Gently remove the hard disk drive from the motherboard taking care not to damage the connector 5 Insert the hard disk drive unit Note Push the hard disk drive gently into place Take care to align the connectors correctly as the connectors are not keyed 00534 00536 ...

Page 65: ...ews that hold the chassis tray assembly Configuring a Hard Disk Drive for Logging On the flash based IP390 you can save log files locally by installing and configuring an optional hard disk drive The Nokia Network Voyager Reference Guide and the CLI Reference Guide for Nokia IPSO contain instructions for configuring a Nokia appliance to store Nokia IPSO log messages on the disk This section explai...

Page 66: ...e 10 When the appliance has rebooted log into it and start Nokia Network Voyager 11 Navigate to the System Logging configuration page 12 Select the option Logging to Optional Disk The other options on this page do not apply to Check Point logging 13 Click Apply 14 Click Save Note The appliance can use only one local logging device at a time For more information about storing Nokia IPSO system logs...

Page 67: ...he motherboard as you look at the appliance from the front as Figure 23 shows Figure 23 DIMM Socket Locations Before You Start To upgrade or replace the memory in your appliance you need the following Physical access to the appliance Nokia memory upgrade kit and accompanying documentation Network or console access to the appliance Caution To protect the IP390 appliance and the memory modules from ...

Page 68: ...tray assembly forward to expose the DIMM sockets Remove the tray completely to avoid damaging components Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the applian...

Page 69: ...to pull opposite ends of the DIMM alternately to gradually free it from the contact pins 5 The memory DIMMs are keyed to prevent improper insertion Press the new DIMM into the socket until it clicks into place The top of the DIMM is smooth The bottom edge has three different length sets of contacts which mate with the slots on the socket Be sure the contacts and slots are properly aligned before y...

Page 70: ...ining screws The appliance automatically recognizes the new memory configuration You can verify this from the Network Voyager the CLI or from the Nokia IPSO shell To verify the memory from the CLI enter show asset hardware To verify the memory from the Nokia IPSO shell enter dmesg grep real memory Replacing the Battery To replace the battery you need the following The appropriate Nokia battery rep...

Page 71: ...k with burns or death resulting for the user Caution Make certain that you are properly grounded when you handle components internal to the appliance to protect against electrostatic discharge damage to the appliance Use the grounding wrist strap included in the battery replacement kit To install the battery 1 Use Network Voyager or the CLI to halt the appliance To use Network Voyager to shut the ...

Page 72: ...n the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply or power supply wiring without disconnecting the power cord 5 Locate the bat...

Page 73: ...the positive side facing up slide the new battery through the cutout in the battery holder Caution You must place the new battery into the battery holder observing the correct polarity The positive terminal of the battery must be facing up 8 Gently slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly ...

Page 74: ...6 Installing and Replacing Components Other than Network Interface Cards 74 IP390 Security Platform Installation Guide ...

Page 75: ...hat the terminal communicates with the IP390 appliance If this is not possible using your laptop computer or terminal the problem is with the terminal or cable and not the appliance Problem You do not have a console connection to the IP390 appliance Solution For information about how to create a console connection see Using a Console Connection on page 31 Problem Not connected with a null modem ca...

Page 76: ...have local serial access to your appliance console to perform this procedure With a keyboard and monitor directly connected to the appliance the boot prompt does not appear and you cannot perform this procedure 1 Boot up the appliance in single user mode by restarting or power cycling the appliance When the boot prompt appears type boot s and press enter before the appliance goes into multiuser mo...

Page 77: ...nformation about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 2 Under Configuration Database Management Config System Configuration Manage Configuration Sets choose the option to create a new factory default configuration 3 Create the new default configuration Do Not Get a Login Prompt Error Messages Appear Problem The IP390 appliance...

Page 78: ...on and fix it if necessary Problem Wrong link speed Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Do Not See Interfaces that Should be Present Problem Local IP390 appliance ports do not appear Solution Your NIC might be defective Contact the appropriate Nokia customer support site as listed in Nokia Contact Information on page 3 Note...

Page 79: ...Solution Check the routing table to see if a route exists to the network where the interface is located If no route exists see Troubleshooting Routing Problems on page 82 Problem Attached device does not have proper default route or routing information Solution If a local computer is unable to ping through an attached appliance the computer might contain either an invalid default route or invalid ...

Page 80: ...n Verify that DVMRP is enabled on the interfaces in use Problem Exceeding TTL on clients Solution Verify that the client is set up for the proper TTL number Many clients are set to receive local traffic only one hop away Problems Interfacing to 1483 Devices Problem Remote and local devices are not configured for the same VC and VP value Solution Set remote and local devices to the same VC and VP v...

Page 81: ...IPSO with a console connection No error messages appear but the appliance stops responding to console and network Problem During the upgrade process some of the environment variables might not have updated correctly Solution You can verify what the current boot manager settings are by issuing a printenv command at the boot manager prompt as shown in this example Loading boot manager BOOTMGR 0 prin...

Page 82: ...bleshooting Routing Problems Several useful tools are available to troubleshoot routing problems The first tool is available from the Monitor page in Network Voyager from which you display routing statistics and errors You can access this information from the command line interface using the ICLID IPSRD command line interface daemon command An example use of the ICLID command is shown below For in...

Page 83: ...3 age 3111 In addition several trace options are available You can enable these options under the routing options in Network Voyager When a trace is enabled the output appears in var tmp ipsrd log Common Problems with OSPF Use tcpdump to view routing information Use the following command display routing updates for that interface tcpdump i interface proto ospf For more information about how to use...

Page 84: ...nce Guide Under routing options in Network Voyager you can also enable several types of trace options for routing information protocol RIP These traces are logged in var tmp ipsrd log For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 Problem Inconsistent subnet mask netmask does not match the class of IP address for R...

Page 85: ...o access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 Problem Routing protocol is not functioning properly Solution to ensure that each routing protocol is functioning properly see Common Problems with OSPF on page 83 and Common Problems with RIP on page 84 ...

Page 86: ...7 Troubleshooting 86 IP390 Security Platform Installation Guide ...

Page 87: ...s behind the front panel of the rack 6 inches 15 centimeters behind the IP390 appliance to allow the back exit fan to move air through the appliances Caution Do not place objects over the ventilation holes on the appliance The appliance might overheat and become damaged Operating Temperature The operating temperature range for the Nokia IP390 appliance is 0 C to 45 C 32 F to 113 F Dimensions Heigh...

Page 88: ...ble in some cases shielded Cat 5 Ethernet cable can be used to improve interference radiated emissions RJ 45 Fiber optic Gigabit Ethernet IEEE 802 32 Gigabit Ethernet multi mode Fiber LC Copper Gigabit Ethernet IEEE 802 3 1000 Base T unshielded twisted pair full duplex or half duplex Straight through cable Cat 5 type or crossover cable in some cases shielded Cat 5 Ethernet cable can be used to imp...

Page 89: ...Pursuant to ISO IEC 17050 this product complies with the requirements of the Low Voltage Directive 73 23 EEC and the EMC Directive 2004 108 EC Manufacturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP390 Model Number EM7500 Product Options All Serial Number 1 to 100 000 Date First Applied 2006 Safety EN60950 1 2001 A11 IEC60950 1 2001 ...

Page 90: ... Christopher Saleem Compliance Reliability Engineering Manager Security Mobile Connectivity Enterprise Solutions Mountain View California May 2008 FCC Part 15 Subpart B Class A US Canada EMI ICES 003 Class A Canada EN55022 CISPR 22 Class A European Community CE EN55024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 11 EN61000 3 2 European Community CE E...

Page 91: ...s communications facilities equipment and operation procedures where such action is reasonably required in the operation of its business and is not inconsistent with the rules and regulations of the Federal Communications Commission If they do you will be notified in advance to give you an opportunity to maintain uninterrupted telephone service Do not attempt to repair or modify this equipment If ...

Page 92: ...talled and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense Caution Any changes or modifications not expressly approved by the grantee of this device could void the user ...

Page 93: ... of conformity 89 FCC notice 92 statements 90 component locations 17 connections auxiliary port 26 console port 26 Ethernet NICs 38 Gigabit Ethernet NIC fiber optic 44 Gigabit Ethernet NICs copper 41 modem 28 power 24 T1 NICs 45 connector pin assignments auxiliary connection 28 console connection 28 Ethernet crossover cable 39 Gigabit Ethernet crossover cable 42 Gigabit Ethernet NICs copper 42 mod...

Page 94: ...ct flash memory card internal 57 flash memory PC card 60 hard disk drive a 61 memory RAM 66 NICs 49 IP routing 17 L LC connector 44 LEDs Ethernet NICs 38 Gigabit Ethernet NICs copper 41 Gigabit Ethernet NICs long range fiber optic 44 Gigabit Ethernet NICs short range fiber optic 43 system status 19 M memory RAM DIMM socket locations 67 replacing 66 specification upgrading 66 modem connecting to th...

Page 95: ...twork interfaces 88 operating temperature 87 physical dimensions 87 space requirements 87 technical 87 weight 87 width 87 system logging with hard disk drive 65 system status LEDs 19 T T1 NICs cable pin assignments 46 connecting to 45 front panel 45 tcpdump Ethernet connections for 37 Gigabit Ethernet connections for copper 40 Gigabit Ethernet connections for fiber optic 43 technical specification...

Page 96: ...Index 96 IP390 Security Platform Installation Guide ...

Page 97: ...re you with the help you received from this document Feel free to elaborate on your answer Where did you find this document If you chose other where did you get the document Was the document easy to find Feel free to enter suggestions for improving this document May we contact you at your e mail address if we have questions about your feedback Note This form is returned to us through your e mail W...

Search results

Summary of Contents for IP390 - Security Appliance

Reviews:

Related manuals for IP390 - Security Appliance

Brands by name

Popular brands

Nokia IP390 - Security Appliance, Installation Manual

Search results

Summary of Contents for IP390 - Security Appliance

Reviews:

Related manuals for IP390 - Security Appliance

Brands by name

Popular brands