Nokia IP560 - Hard Disk Drive Based Installation Manual Download | Manualshive

Page: 7 / 160

background image

IP560 Security Platform Installation Guide

7

Copper Gigabit Ethernet NIC Connectors and Cables . . . . . . . . 74

Two-Port Fiber-Optic Gigabit Ethernet NIC . . . . . . . . . . . . . . . . . . 76

Multi-Mode Fiber-Optic Gigabit Ethernet NIC Features . . . . . . . 77
Fiber-Optic Gigabit Ethernet NIC Connectors and Cables . . . . . 78

6 Using the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Viewing the Variables and Other System Parameters . . . . . . . . 81

printenv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  81
sysinfo  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  82
ls. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  84

Setting the Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

setenv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  84
unsetenv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  85
set-defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  85
setalias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  86
unsetalias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  86

Other commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

halt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Booting the System  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  87
Using the Boot Manager to Install Nokia IPSO  . . . . . . . . . . . . . . .  88
Protecting the Boot Manager with a Password  . . . . . . . . . . . . . . .  89
Installing the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  90
Upgrading the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  90

7 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 93
Troubleshooting Routing Problems . . . . . . . . . . . . . . . . . . . . . . . 103

«
...
5
6
7
8
9
...
»

Summary of Contents for IP560 - Hard Disk Drive Based

Page 1: ...Part No N450000014 Rev 001 Published December 2005 IP560 Security Platform Installation Guide ...

Page 2: ...Nokia Inc as is and any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or service...

Page 3: ...nd Canada 1 512 437 7089 email info ipnetworking_americas nokia com Europe Middle East and Africa Nokia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 email info ipnetworking_emea nokia com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 65 6588 3364 email info ipnetworking_apac nokia com Web Site ht...

Page 4: ...4 IP560 Security Platform Installation Guide ...

Page 5: ...ty Platform 19 Managing the Nokia IP560 Security Platform 21 Nokia IP560 Security Platform Overview 22 Four Port 10 100 1000 Ethernet NIC 23 PMC Expansion Slots 24 Console Port 25 Auxiliary Port 26 System Status LEDs 27 Logging Options 29 Using Hard Disk Drives for Logging 29 Using PC Card for Logging 30 Power Supply and Fan Unit 30 Power Supply 31 Fan Unit 32 Site Requirements Warnings and Cautio...

Page 6: ...Reference Guide 53 Nokia Network Voyager Inline Help 54 Using Nokia Network Voyager to Monitor a Nokia IP560 Security Platform 54 Using the Command Line Interface 54 Using Nokia Horizon Manager 55 4 Installing and Replacing Network Interface Cards 57 Deactivating Configured Interfaces 58 Installing NICs 58 Before You Begin 59 Configuring and Activating Interfaces 64 Monitoring Network Interface Ca...

Page 7: ...iables 80 Viewing the Variables and Other System Parameters 81 printenv 81 sysinfo 82 ls 84 Setting the Variables 84 setenv 84 unsetenv 85 set defaults 85 setalias 86 unsetalias 86 Other commands 87 halt 87 help 87 Booting the System 87 Using the Boot Manager to Install Nokia IPSO 88 Protecting the Boot Manager with a Password 89 Installing the Boot Manager 90 Upgrading the Boot Manager 90 7 Troub...

Page 8: ...gin 126 Replacing a Nokia Encryption Accelerator Card 130 Before You Begin 131 Configuring Software to Use Hardware Acceleration 137 Replacing a Fan Unit 138 Before You Begin 138 Replacing a Power Supply 140 Before You Begin 140 Monitoring the IP560 Appliance Power Supply 142 Replacing the Battery 143 A Technical Specifications 149 Space Requirements 150 B Compliance Information 151 Declaration of...

Page 9: ... Slot 30 Figure 7 Power Supply and Fan Unit Locations 31 Figure 8 Power Supply Cooling Fan and Power Switch Locations 31 Figure 9 Fan Unit 33 Figure 10 Rack Mounting Screw Locations 38 Figure 11 Power Switch Location 47 Figure 12 Nokia Network Voyager Reference Access Points Example 53 Figure 13 Four Port 10 100 Ethernet NIC Front Panel Details 69 Figure 14 Output Connector for the Ethernet Cable ...

Page 10: ...rnet Crossover Cable Pin Connections 76 Figure 20 Two Port Fiber Optic Gigabit Ethernet NIC Front Panel Details 77 Figure 21 Compact Flash Memory Card Slot 110 Figure 22 External PC Card Location 114 Figure 23 Location of Hard Disk Drive on Chassis Tray Assembly 120 Figure 24 DIMM Socket Locations 125 Figure 25 Power Supply Location 140 ...

Page 11: ...1 Command Line Conventions 15 Table 2 Text Conventions 17 Table 3 Nokia IP560 Security Platform Specifics 20 Table 4 PMC Expansion Slots 24 Table 5 System Status LEDs 28 Table 6 Power Supply Status LEDs 32 Table 7 NIC PCI Frequency 67 Table 8 Boot Manager Variables 80 ...

Page 12: ...12 IP560 Security Platform Installation Guide ...

Page 13: ...his Guide This guide is organized into the following chapters and appendixes Chapter 1 Overview presents a general overview of the Nokia IP560 security platform Chapter 2 Installing the Nokia IP560 Appliance describes how to rack mount the appliance Chapter 3 Performing the Initial Configuration describes how to physically connect the Nokia IP560 security platform to a network and to a power sourc...

Page 14: ...es the fan unit power supply battery compact flash memory card PC card and the Nokia encryption accelerator card Appendix A Technical Specifications provides technical specifications such as interface characteristics Appendix B Compliance Information provides compliance and regulatory information Conventions This Guide Uses The following sections describe the conventions this guide uses including ...

Page 15: ...ou might encounter one or more of the following elements on a command line path Table 1 Command Line Conventions Convention Description command This required element is usually the product name or other short word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product It might appear alone or precede one or more options You must spell a command exactly a...

Page 16: ...ing sdh flag A flag is usually an abbreviation for a function menu or option name or for a compiler or preprocessor argument You must enter a flag exactly as shown including the preceding hyphen ext A filename extension such as ext might follow a variable that represents a filename Type this extension exactly as shown immediately after the name of the file The extension might be optional in certai...

Page 17: ...screen output for example Log error 12453 bold monospace font Indicates text you enter or type for example configure nat Key names Keys that you press simultaneously are linked by a plus sign Press Ctrl Alt Del Menu commands Menu commands are separated by a greater than sign Choose File Open The words enter and type Enter indicates you type something and then press the Return or Enter key Do not p...

Page 18: ... Platform Quick Setup Guide Clustering Configuration Guide for the version of IPSO you are using You can access the Network Voyager inline help and the Nokia Network Voyager Reference Guide from the Network Voyager application To access inline help for a specific subject click Help next to the subject To access the Nokia Network Voyager Reference Guide for tasks examples and more information click...

Page 19: ... IP560 Security Platform Overview Logging Options Site Requirements Warnings and Cautions Software Requirements Product Disposal About the Nokia IP560 Security Platform The Nokia IP560 security platform combines the power of the Nokia IPSO operating system with the Check Point VPN 1 FW 1 firewall application The Nokia IP560 security platform is a high end multi port security platform that is ideal...

Page 20: ...nterfaces cards NICs including a single slot PCMCIA PMC option slot in slot 3 a four port Ethernet 10 100 1000 interface in slot 4 A console port An auxiliary port Front panel reset button Note Any slot can be used for an Ethernet NIC The PCMCIA PC card carrier that comes preinstalled in slot 3 is removable slot 3 can accept a Nokia approved NIC The network interfaces provide exceptional data forw...

Page 21: ...ite of IP routing functions and protocols including RIPv1 RIPv2 IGRP OSPFv3 BGP4 for unicast traffic DVMRP for multicast traffic The integrated router functionality eliminates the need for separate intranet and access routers in security applications Managing the Nokia IP560 Security Platform You can manage the IP560 security platform by using the following interfaces Nokia Network Voyager an SSL ...

Page 22: ...cess the CLI see the Nokia CLI Reference Guide for IPSO v3 6 or later Nokia Horizon Manager a secure GUI based software image management application With Horizon Manager you can securely install and upgrade the Nokia proprietary IPSO operating system plus hardware and third party applications such as Check Point VPN 1 FireWall 1 for Nokia Horizon Manager can perform installations and upgrades on u...

Page 23: ...he Ethernet ports and link LEDs The top link LED represents the left most port port 1 The remaining LEDs represent the remaining ports from top to bottom and left to right Note The Ethernet ports are intended for management or high speed traffic 00350 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 System status LEDs AUX port Console port Four port Ethernet 10 100 1000 slot 4 PC card slot slot 3 PMC NIC...

Page 24: ...s described in Table 4 00120a RJ 45 connectors LInk LEDs green Port 2 Port 4 Port 1 Port 3 Table 4 PMC Expansion Slots Interface For details see Four port copper 10 100 Ethernet Four Port 10 100 Ethernet NIC on page 68 Four port copper Gigabit Ethernet 10 100 1000 Mbps Four Port and Two Port Copper Gigabit Ethernet NIC 10 100 1000 on page 71 Two port copper Gigabit Ethernet 10 100 1000 Mbps Four P...

Page 25: ...console port shown in Figure 1 to supply information that makes the appliance available on the network at speeds up to 9600 bps The default configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop Figure 3 provides pin assignment information for console connections If you need to access the devices locally you must use the console port Figure 3 Pin Assignments for Console Connec...

Page 26: ...able by pulling back on the shroud On the opposite end of the console cable connect the RJ 45 to the DB 9 adapter which you can then connect to the host terminal Auxiliary Port Use the built in serial AUX port shown in Figure 1 to establish a modem connection for managing the appliance remotely or out of Band The default configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop b...

Page 27: ...tatus of the IP560 security platform by checking the system status LEDs The system status LEDs are located on the center of the front panel as shown in Figure 5 Auxiliary Port DTE RJ 45 to RJ 45 Rollover Cable RJ 45 to DB 25 Modem Adapter Modem Signal RJ 45 Pin RJ 45 Pin DB 25 Pin Signal RTS 1 8 4 RTS DTR 2 7 20 DTR TxD 3 6 3 TxD GND 4 5 7 GND GND 5 4 7 GND RxD 6 3 2 RxD DSR 7 2 8 DCD CTS 8 1 5 CT...

Page 28: ...atus Indicator Definition Symbol Solid blue Power on Solid yellow Appliance is experiencing an internal voltage problem Blinking yellow Appliance is experiencing a temperature problem Solid red One or more fans are not operating properly Power supply over temperature fault Blinking green System activity indicator 00351 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 Power indicator blue Fault red Warning yellow Syst...

Page 29: ... can use only one device for logging whether hard disk or PC CARD so only one should be plugged into the system at any one time Using Hard Disk Drives for Logging The IP560 security platform is a flash based diskless appliance that also supports one or two optional hard disk drives that plug into connectors on the motherboard Each hard disk drive provides 40 GB of disk storage The hard disk drives...

Page 30: ...ne PC card at a time Figure 6 Location of the PCMCIA PC Card Slot You can use the PC card flash memory to store local system logs Nokia only supports PC cards purchased from Nokia or Nokia approved resellers For more information contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 Power Supply and Fan Unit The power supply and fan unit are located at th...

Page 31: ...7Hz 64Hz and 85VAC 264VAC The power supply output is regulated to a tolerance of 5 percent of the specified output voltage Figure 8 Power Supply Cooling Fan and Power Switch Locations For information about how to install or remove and replace a failed power supply see Replacing a Power Supply on page 140 00353 Power supply Fan unit 00353 AC power receptacle Integrated power supply cooling fan Powe...

Page 32: ... can provide proper airflow for a short time even if an individual fan fails Table 6 Power Supply Status LEDs LED LED status Meaning Fault Red Power supply has a voltage problem and power was turned off or One power supply in a redundant system is not turned on Over Temp Yellow Power supply has an internal temperature problem All power to the unit is turned off After the internal temperature retur...

Page 33: ...ance show the status of the fan unit For more information about the system status LEDs see System Status LEDs on page 27 Site Requirements Warnings and Cautions Before you install a Nokia IP560 security platform ensure that your computer room or wiring closet conforms to the environmental specifications listed in Appendix A Technical Specifications Warning Excessive electromagnetic interference EM...

Page 34: ...Caution Replace the battery only with the same or equivalent type battery recommended by the manufacturer Dispose of used batteries according to the manufacturer s instructions Caution Do not block any of the ventilation holes on the appliance The components might overheat and become damaged Software Requirements The Nokia IP560 security platform supports the following operating system and applica...

Page 35: ...ducts are labeled with information about the materials used in their manufacture that can help those who will process equipment after you have disposed of it The Nokia web site http www nokia com provides information about our environmental programs and practices which includes details about materials used in manufacturing and end of life practices You can also find your product s Eco Declaration ...

Page 36: ...1 Overview 36 IP560 Security Platform Installation Guide ...

Page 37: ...Before You Begin To rack mount the appliance you need Phillips head screwdriver Grounding wrist strap Suitable grounded work surface on which to place the chassis tray assembly Caution To help guard against electrostatic discharge damage make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components...

Page 38: ...tall your appliance on the rack Figure 10 Rack Mounting Screw Locations Two rack mounting positions allow you to mount the appliance either flush with the rack or two inches forward of the equipment rack If the space behind the rack is insufficient the rack mounting brackets can be attached further back on the side of the appliance Caution During installation do not block any ventilation openings ...

Page 39: ...Use care when you remove it from the packaging 1 Remove the appliance from the packaging 2 Optionally remove the fan unit from the back of the appliance to lighten it a Locate the fan unit and the two retaining screws that secure it on the back of the IP560 b Loosen the retaining screws by turning them counterclockwise 00353 Fan unit ...

Page 40: ... unit out of the chassis toward the rear 3 Optionally remove the power supply from the rear of the appliance to lighten it as shown in the illustration above a Locate the power supply on the back of the IP560 and the two screws that secure it b Remove the two retaining screws 00363 00353 00353 Power supply ...

Page 41: ...ently pull the power supply out of the chassis 4 Optionally remove the chassis tray assembly from the appliance a Loosen the two chassis tray assembly retaining screws from the front panel of the appliance 00364 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 Chassis tray assembly retaining screws ...

Page 42: ...tray assembly c Slide the chassis tray assembly forward and pull it entirely out of the appliance d Place the chassis tray assembly on a properly grounded surface 5 Adjust the mounting brackets on the side of the appliance if necessary SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00360 ...

Page 43: ...see the Nokia IP560 Appliance Feature and Installation sheet that accompanied your IP560 appliance 7 Slide the chassis tray assembly back into the appliance until it clicks into place and resecure the two chassis tray assembly retaining screws 8 Reinstall the fan unit into the rear of the appliance 9 Reinstall the power supply After you rack mount the appliance you can ground it by using the groun...

Page 44: ...2 Installing the Nokia IP560 Appliance 44 IP560 Security Platform Installation Guide ...

Page 45: ...is started Perform the initial configuration manually by using a console connection This chapter describes how to perform the initial configuration manually by using a console connection It includes the following sections Using a Console Connection Connecting Power and Turning the Power On Performing the Initial Configuration Connecting Network Interfaces Using Nokia Network Voyager to Manage Your...

Page 46: ...ity platform you must use a serial console connection cable included After you perform the initial configuration you no longer need the console connection You can use any standard VT100 compatible terminal with an RS 232 data terminal equipment DTE interface or terminal emulation program configured with the following settings for the console 9600 bps 8 data bits No parity 1 stop bit To connect to ...

Page 47: ...ssignments for the console connection see Console Port on page 25 2 Connect the other end of the cable to the VT100 console or to a system running a terminal emulation program Connecting Power and Turning the Power On A power switch and a receptacle for the power cord are located on each power supply on the back of the appliance as shown in Figure 11 Figure 11 Power Switch Location 00350 SLOT 1 SL...

Page 48: ...tlet 3 Toggle the 1 O power switch to the 1 position to provide power to the IP560 The fan unit on the power supply turns on when you press the power switch Verify that the power supply fans are running after you press the switch Note The IP560 power supply automatically detects the input voltage 115 VAC or 220 VAC 85 to 264 and configures itself appropriately 4 Check the power LED the Nokia logo ...

Page 49: ...0 security platform you must use a serial console connection cable included After you perform the initial configuration you no longer need the console connection To perform the initial configuration 1 Turn on the appliance At the console a series of startup messages appears then the following prompt appears Type any character to enter command mode The prompt remains on the screen for about five se...

Page 50: ...ond to any request To reset the incorrect host name and IP address a Establish a console connection to the system b Enter the following rm config active or mv config active config active old c Reboot the appliance d Respond to the Hostname prompt within 30 seconds to prevent the DHCP client from restarting 3 At each subsequent prompt enter the requested configuration information For more informati...

Page 51: ...during the initial configuration process which is described in Chapter 3 Performing the Initial Configuration You can also connect the remaining LAN interface cables at this point although you are not required to do so Note Nokia recommends that you use one of the four front panel Ethernet ports for this connection To connect Ethernet devices use a straight through RJ 45 cable to connect to a 10 M...

Page 52: ...re or monitor your appliance 2 In the Location or Address field enter the IP address of the initial interface you configured for the appliance You are prompted to enter the admin username and the password you entered when you performed the initial configuration For more information see the section in the appropriate installation guide about entering passwords Note If the username login screen does...

Page 53: ... help are available for you to use You can access both information sources from the Network Voyager interface as Figure 12 shows Figure 12 Nokia Network Voyager Reference Access Points Example Nokia Network Voyager Reference Guide The Nokia Network Voyager Reference Guide is the comprehensive reference source for Voyager To access this source click Doc Link to online help Nokia Network Voyager Ref...

Page 54: ...e Using Nokia Network Voyager to Monitor a Nokia IP560 Security Platform After you install and configure your Nokia IP560 security platform you can use Network Voyager to monitor its operation Click Monitor from the Network Voyager home page to access the monitoring functions Using the Command Line Interface You can also use the IPSO command line interface CLI to manage and configure Nokia IP secu...

Page 55: ...on Manager Nokia Horizon Manager is an extension of the Network Voyager management functionality While Network Voyager provides the device administrator access to network configuration tasks such as interface configuration and routing configuration Execute from To implement Purpose IPSO command line Enter the following command to invoke the CLI shell clish The prompt changes and you can then enter...

Page 56: ...multiple platforms simultaneously thereby reducing potential human error and improving productivity Using Horizon Manager a network security professional can manage multiple devices simultaneously perform parallel software upgrades device verifications device configuration file backups and more Horizon Manager is designed to manage and configure a large number of Nokia security platforms devices t...

Page 57: ...e you attempt to service a appliance The IP560 supports the following NICs Four port 10 100 Ethernet Four port and two port copper Gigabit Ethernet Two port fiber optic Gigabit Ethernet This chapter describes how to remove add or replace NICs later if it becomes necessary The following topics are covered Deactivating Configured Interfaces Installing NICs Configuring and Activating Interfaces Monit...

Page 58: ...e removing or replacing an installed NIC use Nokia Network Voyager to deactivate any configured ports on the NIC before removing it Deactivate all of the logical interfaces on the NIC Deactivate all of the physical interfaces on the NIC If you do not deactivate the interfaces before removing the NIC you may have to reinstall the NIC to deactivate its logical and physical interfaces in Network Voya...

Page 59: ...d replaceable unit kit including the NIC Note You do not need to manually disconnect power for this procedure If the power supply switch at the rear of the appliance is difficult to reach you can safely disconnect power when you remove the chassis tray assembly from the front of the appliance Any servicing of the appliance however should be completed with the chassis tray assembly fully removed fr...

Page 60: ...the chassis tray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components 5 Place the chassis tray assembly on a table top 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 Chassis tray assembly retaining screws SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 61: ...e 61 6 From underneath the chassis tray assembly remove the bezel retaining screws If you are installing a NIC in an unoccupied slot remove the blank bezel that occupies the space in the appliance front panel and retain it for future use SLO T 1 SLO T 2 00440 ...

Page 62: ...m Installation Guide 7 Insert the new NIC a Insert the NIC bezel into the front panel b Gently push the back of the NIC down toward the chassis tray assembly Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly SLO T 1 SLO T 2 00443 ...

Page 63: ...m Installation Guide 63 8 From the top of the chassis tray assembly screw the NIC retaining screws into the standoffs on the back of the NIC 9 From beneath the chassis tray assembly screw in the bezel retaining screws SLO T 1 SLO T 2 00441 ...

Page 64: ...tion to the new NIC 11 Tighten the retaining screws that hold the chassis tray assembly 12 Turn the power on Configuring and Activating Interfaces The IP560 appliance automatically detects any new NIC when the appliance is restarted Use Nokia Network Voyager to configure and activate the logical and physical interfaces on the NIC SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00519 00354 SLOT 1 SL...

Page 65: ... LED status indicators on the NICs The status indicators for each NIC are explained in the NIC reference chapter For the status indicator information for the built in Ethernet ports or the two port Ethernet NIC see Four Port and Two Port Copper Gigabit Ethernet NIC 10 100 1000 on page 71 Use Network Voyager to access detailed port information For information about accessing Network Voyager see Acc...

Page 66: ...4 Installing and Replacing Network Interface Cards 66 IP560 Security Platform Installation Guide ...

Page 67: ... Ethernet NIC Four Port and Two Port Copper Gigabit Ethernet NIC 10 100 1000 Two Port Fiber Optic Gigabit Ethernet NIC For instructions about how to add or replace NICs see Chapter 4 Installing and Replacing Network Interface Cards The NICs supported in the Nokia IP560 security platform operate at the peripheral component interconnect PCI frequency listed in Table 7 Table 7 NIC PCI Frequency NIC o...

Page 68: ...Cs installed in a PMC expansion slot When you purchase a 10 100 Ethernet NIC with your IP560 the NIC is installed before the appliance is delivered to you For information about how to add or replace a NIC see Chapter 4 Installing and Replacing Network Interface Cards 10 100 Ethernet NIC Features The four port 10 100 Ethernet NIC supports PCI operation at 133 MHz and runs on Nokia IPSO v4 0 1 or hi...

Page 69: ...ort speed and full duplex or half duplex mode with Network Voyager For information about how to access Network Voyager and the related reference materials see Accessing Nokia Network Voyager Reference Information on page 53 Figure 13 Four Port 10 100 Ethernet NIC Front Panel Details After the power is turned on and the cables are connected the Ethernet link LEDs on both the IP560 and on the remote...

Page 70: ...omatically detects the correct cable type Use ANSI TIA EIA 568 A B compliant Cat 5 or Cat 5e unshielded twisted pair cable You can order appropriate adapter cables separately from a cable vendor of your choice Caution Cables that connect to the Ethernet card must be ANSI TIA EIA 568 A B compliant Cat 5 or Cat 5e to prevent potential data loss Figure 14 shows the pin assignments for the RJ 45 cable...

Page 71: ... copper Gigabit Ethernet NICs installed on a PMC expansion slot The IP560 can accommodate up to four Gigabit Ethernet NICs When you purchase a copper Gigabit Ethernet NIC with your IP560 the NIC is installed before the appliance is delivered to you For information about how to add or replace a NIC see Chapter 4 Installing and Replacing Network Interface Cards Copper Gigabit Ethernet NIC Features i...

Page 72: ...an configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager Specifically you can use Network Voyager to set the port speed and full duplex mode to 1000 100 or 10 Mbps For information about how to access Network Voyager and the related reference materials see Accessing Nokia Network Voyager Reference Information on page 53 Figure 16 Four Port Copper Gigabit Ethernet NIC Fron...

Page 73: ...te These NICs are sold by Nokia under the order code NIF4425 After the power is turned on and the cables are connected the Ethernet Link LEDs on both the IP560 and on the remote equipment illuminate to indicate the connection Note The Link LED on the NIC is bicolored A green LED indicates a 1 Gbps link speed and a yellow LED indicates a 10 100 Mbps link speed As the NIC transmits data the activity...

Page 74: ...at 5e to prevent potential data loss To connect to a 1 Gbps hub switch or router use a straight through RJ 45 cable Cat 5 or Cat 5e type cable or as required by your network configuration Note Nokia copper Gigabit Ethernet NICs support cable autosensing You can use a straight through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch or to connect directly to a host In Figur...

Page 75: ...tion Guide 75 Figure 18 Gigabit Ethernet Cable Connector Output Pin Assignments To connect directly to a host use an RJ 45 crossover cable wired as Figure 19 shows 00270 8 1 Pin 1000 Mbps Assignment 10 100 Mbps Assignment 1 BI_DA TX 2 BI_DA TX 3 BI_DB RX 4 BI_DC 5 BI_DC 6 BI_DB RX 7 BI_DD 8 BI_DD ...

Page 76: ...o connect the IP560 to other network components you can order appropriate adapter cables separately from a cable vendor of your choice Two Port Fiber Optic Gigabit Ethernet NIC The IP560 supports Nokia approved two port fiber optic Gigabit Ethernet NICs installed on a PMC expansion slot The IP560 can accommodate up to four Gigabit Ethernet NICs When you purchase a Gigabit Ethernet NIC with your IP...

Page 77: ...igure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager Specifically you set the port speed and full duplex mode with Network Voyager For information about how to access Network Voyager and the related reference materials see Accessing Nokia Network Voyager Reference Information on page 53 Figure 20 Two Port Fiber Optic Gigabit Ethernet NIC Front Panel Details After the power ...

Page 78: ... SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port LC and SC define the fiber optic connector types LC connectors are smaller than SC connectors An LC to SC cable is included with single port fiber optic Gigabit Ethernet NICs and two LC to SC ca...

Page 79: ...e following sections Variables Booting the System Using the Boot Manager to Install Nokia IPSO Protecting the Boot Manager with a Password Installing the Boot Manager Upgrading the Boot Manager When you first receive your Nokia IP560 security platform the boot manager uses factory default parameters such as kernel and boot device for the boot process The factory defaults cause the appliance to byp...

Page 80: ...oboot If autoboot is set to no the IP560 stops at the boot manager command line during the boot process If autoboot is set to yes the IP560 does not stop at the boot manager command line during a boot up It does wait for the amount of time specified in bootwait for input from the keyboard If input is received the boot manager goes to the command line otherwise it proceeds with the boot up Default ...

Page 81: ...he values of variables currently stored in the boot manager nonvolatile memory The command has the following syntax printenv Flag Meaning d Debug mode enters the kernel debugger as soon as possible in the kernel initialization s Single user mode if the console is marked as insecure you must enter the root password to access the manager v Verbose mode verbose during device probing and thereafter ...

Page 82: ...TMGR VERSION 4 0 1 DEV00110 18 2005 115113 autoboot YES testboot NO bootwait 3 boot file image current kernel boot flags boot device wd0 vendor Nokia model IP bmslice 1 BOOTMGR 12 sysinfo Use the sysinfo command to view system information such as CPU speed and memory size This command has the following syntax sysinfo ...

Page 83: ...140160 sectors 4864 cyls 255 heads 63 S T 512 B S Network Interfaces eth s3p1 flags 130 BROADCAST MULTICAST PRESENT ether 0 a0 8e a4 fa f speed 1000M full duplex eth s3p2 flags 130 BROADCAST MULTICAST PRESENT ether 0 a0 8e a4 fa 10 speed 1000M full duplex eth s3p3 flags 130 BROADCAST MULTICAST PRESENT ether 0 a0 8e a4 fa 11 speed 1000M full duplex eth s3p4 flags 131 LINK BROADCAST MULTICAST PRESEN...

Page 84: ...ce Both device and directory are optional The default directory is image on the wd0 device For example BOOTMGR 2 ls wd0 image current description bootmgr etc kernel debug usr VERSION cdrom ipso tgz mnt web bin dev kernel sbin Setting the Variables setenv Use the setenv command to set a particular variable The command has the following syntax setenv name value where name is the name of the variable...

Page 85: ...oot to NO BOOTMGR 4 unsetenv bootwait clears bootwait to 3 BOOTMGR 5 unsetenv boot file clears boot file to image current kernel BOOTMGR 6 unsetenv boot flags clears boot flags to x BOOTMGR 7 unsetenv boot device clears boot device to wd0 set defaults Use the set defaults command to set variables to their factory default values The command has the following syntax set defaults name where name is t...

Page 86: ...here name is the alias name and device the device for which name is the alias For example BOOTMGR 2 setalias disk wd0 sets the alias disk to the value of wd0 You can have a maximum of eight aliases set at one time unsetalias Use the unsetalias command to clear an alias The command has the following syntax unsetalias name where name is the name of the alias to be cleared For example the following c...

Page 87: ... device boot file boot flags where boot device is the storage device from which the operating system loads at boot up and boot file is the operating system kernel The boot flags control the operation of the command For example at the boot manager command prompt enter the following BOOTMGR 0 boot wd0 image current mykernel vd This command boots mykernel from disk wd0 in verbose and debug mode You c...

Page 88: ...n the IP560 To install a new copy of the Nokia IPSO kernel 1 At the boot manager command prompt enter BOOTMGR 0 install If you used the passwd command to protect this command with a password see Protecting the Boot Manager with a Password on page 89 the boot manager prompts you for your password before allowing you to execute the install command 2 Enter the information the install command requests...

Page 89: ...e install command in boot manager not access to Nokia IPSO To set a password 1 At the boot manager command prompt enter BOOTMGR 0 passwd The passwd program prompts you for your current password 2 If the appliance is protected by a password enter your current password The program prompts you for the new password 3 Enter the new password The program prompts you to re enter the new password for verif...

Page 90: ...the install_bootmgr command from Nokia IPSO the operating system not from the boot manager To install the new boot manager at the Nokia IPSO command prompt enter etc install_bootmgr wd1 image current bootmgr nkipflash The command installs the new boot manager image nkipflash into the flash device wd1 The installation takes some time to complete Do not interrupt the installation process Upgrading t...

Page 91: ...ropriate Nokia Customer Support site as listed in Nokia Contact Information on page 3 2 At the Nokia IPSO command prompt enter etc upgrade_bootmgr wd0 etc nkipflash The command upgrades the boot manager with the new image nkipflash writing it into the internal compact flash wd0 The upgrade takes some time to complete Do not interrupt the upgrade process ...

Page 92: ...6 Using the Boot Manager 92 IP560 Security Platform Installation Guide ...

Page 93: ...ting Problems on page 103 Unable to Log in to the Console Port No Error Message Two laptop computers using terminal emulation programs or terminals should be able to communicate back to back in the same way that the terminal communicates with the IP560 If this is not possible using your laptop computer or terminal the problem is with the terminal or cable and not the appliance Problem You do not h...

Page 94: ... use flow control The terminal should be set for no flow control Problem Defective IP560 or file system Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Problem Database is corrupt Solution Return to default settings according to the instructions included in the instructions for resetting the default password or contact the Nokia customer support site ...

Page 95: ...ter the appliance boots up the following text appears Enter pathname of shell or RETURN for sh Press Enter 3 Type etc overpw at the prompt When the response asks if you want to continue type y 4 The admin password defaults to no password for admin Continue to boot to multiuser mode 5 Reconfigure the password as you normally would Note Blank passwords are not accepted in Network Voyager In such cas...

Page 96: ...iguration Sets choose the option to create a new factory default configuration 3 Create the new default configuration Do Not Get a Login Prompt Error Messages Appear Problem The IP560 is defective or the file system on the IP560 is defective Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Note Use the full installation procedure to install a new syste...

Page 97: ...onsole connection to verify the interface configuration and fix it if necessary Problem Host port configuration is incorrect Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Problem Wrong link speed Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Do Not See Interfaces that S...

Page 98: ...rom the Interface page in Network Voyager that the interface port is configured as active Problem High collision rate on the hub Solution Disconnect connections one at a time until the problem is localized to one computer and troubleshoot further Unable to Ping Through Appliance No Connectivity Between Ports This section covers connectivity issues that are isolated within an IP560 or network Local...

Page 99: ...that the local interface is the default route for that computer Problem The ARP table has old information Solution If the ARP table has an old or invalid entry for the device associated with the IP address you are attempting to ping use Network Voyager to delete the invalid entry For information about how to access Network Voyager and the related reference materials see Accessing Nokia Network Voy...

Page 100: ...k Voyager Reference Information on page 53 Problem No IP connectivity Solution Verify that you have IP connectivity ping various hosts on each network Problem DVMRP is not enabled on the interfaces Solution Verify that DVMRP is enabled on the interfaces in use Problem Exceeding TTL on clients Solution Verify that the client is set up for the proper TTL number Many clients are set to receive local ...

Page 101: ...is not 1500 Solution The MTU size must be 1500 Nokia does not support larger MTU sizes Appliance Not Receiving Power Problem Power cord is not properly plugged in Solution Check cord Make sure it is properly seated at both ends Problem Power supply not providing power Solution Check power source If there is no power at the source take appropriate action such as inserting a new fuse or resetting ci...

Page 102: ...own in this example Loading boot manager BOOTMGR 0 printenv Bootmgr Revision 3 3 base kernel 3 5 1 fcs1 02 12 2001 102644 autoboot NO bootwait 5 boot file boot flags boot device No referenced boot file or boot device appears Setting the boot manager to defaults causes the boot manager to determine that no environment variables are set and it responds by importing the defaults from the binary file ...

Page 103: ...to troubleshoot routing problems The first tool is available from the Monitor page in Network Voyager from which you display routing statistics and errors You can access this information from the command line interface using the ICLID IPSRD command line interface daemon command An example use of the ICLID command is shown below For information about the ICLID command see the Nokia Network Voyager ...

Page 104: ... route inbound filter dvmrp interface memory resource version hostname IP address show route aggregate bgp igrp ospf static all direct inactive rip summary hostname IP address show route ospf Codes C connected S static I IGRP R RIP B BGP O OSPF E OSPF external A Aggregate K Kernel Remnant H Hidden S Suppressed The response to the preceding ICLID command is as follows 0 172 16 16 via 10 1 1 225 eit...

Page 105: ...work Voyager Reference Information on page 53 Problem OSPF is not configured Solution Verify that OSPF is properly configured for all interfaces that are involved in OSPF routing For more information see Configuring OSPF from the Configuring Routing document page in Network Voyager You can access the document page by pressing Doc Problem OSPF hello and dead timers are not the same on each interfac...

Page 106: ...ence materials see Accessing Nokia Network Voyager Reference Information on page 53 Problem Inconsistent subnet mask netmask does not match the class of IP address for RIP v1 Solution RIP version 1 must use consistent subnet masks change to RIP version 2 or OSPF to use inconsistent subnet masks Problem Number of networks exceeds the RIP limit Solution RIP can span up to 16 networks Verify that you...

Page 107: ...ork Voyager and the related reference materials see Accessing Nokia Network Voyager Reference Information on page 53 Problem Routing protocol is not functioning properly Solution to ensure that each routing protocol is functioning properly see Common Problems with OSPF on page 105 and Common Problems with RIP on page 106 ...

Page 108: ...7 Troubleshooting 108 IP560 Security Platform Installation Guide ...

Page 109: ... Encryption Accelerator Card Replacing a Fan Unit Replacing a Power Supply Replacing the Battery For information about how to add or replace NICs see Chapter 4 Installing and Replacing Network Interface Cards You should have a working knowledge of networking equipment before you attempt to service an IP560 appliance Limit service of the appliance to the procedures described in this chapter Note To...

Page 110: ...card stores the IPSO operating system and the boot manager program Use the internal compact flash to boot the system and install the IPSO operating system on the compact flash memory card The compact flash card is located on the motherboard in a slot in front of the hard disk drive slot B Figure 21 shows the location of the compact flash memory card Figure 21 Compact Flash Memory Card Slot SLO T 1...

Page 111: ... before you touch any electronic component You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembly to service internal components Caution You risk damage to the appliance or loss of data if you do not use the following procedure when you replace the compact flash memory 1 Use Nokia Network Voyager or the command line interface CLI ...

Page 112: ...s tray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components 5 Place the chassis tray assembly on a table top 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 Chassis tray assembly retaining screws SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 113: ...ecurity Platform Installation Guide 113 6 Locate and remove the existing compact flash card from the slot by gently sliding it out of the slot 7 Gently insert the new compact flash card into the slot SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP5 60 00522 ...

Page 114: ... 9 Resecure the two chassis tray assembly retaining screws 10 Turn on the power supply at the back of the appliance Installing and Using a PC Card Figure 22 shows the external PC card location Figure 22 External PC Card Location SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00359 00350 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 PCMCIA PC card slot Eject button ...

Page 115: ...logging options For more information see the section on using an optional disk in the Nokia Network Voyager Reference Guide If you want to remove a PC card that was configured as an optional disk you must turn it off as an optional disk and then perform an orderly system shutdown before you remove it as described in the following procedure You do not need to turn off the power Caution If you do no...

Page 116: ... the eject button 4 Reboot the system Installing a Hard Disk Drive The IP560 is a flash based appliance that also supports one or two optional hard disk drives that plug into connectors on the motherboard Each hard disk drive contains 40 GB of storage space The hard disk drives are not included in the standard package When you purchase your IP560 you can order one or two hard disk drive s for fact...

Page 117: ...g wrist strap make sure you are properly grounded before you touch any electronic component To install or replace a hard disk drive you need Physical access to the appliance or gateway Nokia hard disk drive kit and accompanying supplement A Phillips head screwdriver The following procedure requires removing the chassis tray assembly from the chassis Caution Make sure you perform an orderly shut do...

Page 118: ...might lose data 1 Use Nokia Network Voyager or the command line interface CLI to perform an orderly shutdown of the IP560 appliance For information about how to access Network Voyager and the related reference materials see To open Nokia Network Voyager on page 52 2 Turn off the power to the IP560 appliance 3 Loosen the two front panel retaining screws 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP5...

Page 119: ...9 4 Slide the chassis tray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components 5 Place the chassis tray assembly on a table top SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 120: ...curity Platform Installation Guide Figure 23 Location of Hard Disk Drive on Chassis Tray Assembly Note In single hard drive configurations install the hard disk in Slot A first 00352 SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 Slot A Slot B ...

Page 121: ...Installing a Hard Disk Drive IP560 Security Platform Installation Guide 121 6 Remove the four screws from the base of the hard disk drive and remove the hard disk drive 00445 ...

Page 122: ...8 Replacing Other Components 122 IP560 Security Platform Installation Guide 7 Slide the new hard disk drive onto the mounting locations 00355 ...

Page 123: ...m Installation Guide 123 8 Replace the four screws 9 Slide the chassis tray assembly back into the appliance until it clicks into place 10 Resecure the two chassis tray assembly retaining screws 00445 SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00359 ...

Page 124: ...IP560 comes with 1 GB of RAM in two 512 MB DIMMs and can be upgraded to 2 GB of RAM by the addition of a pair of 512 MB DIMMs Note You must upgrade the memory in pairs of 512 MB DIMMs Nokia products support only memory kits purchased from Nokia or Nokia approved resellers For further information contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 The D...

Page 125: ...4 DIMM Socket Locations Note You must install DIMMs in pairs starting from the left Insert a pair of DIMMS into adjacent slots J1 J2 and or J3 J4 otherwise the DIMMS do not work You can also use all four slots at one time SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00418 DIMM sockets ...

Page 126: ...e instructions provided with the wrist strap before you handle the components or open the appliance Note You do not need to manually disconnect power for this procedure If the power supply switch at the rear of the appliance is difficult to reach you can safely disconnect power when you remove the chassis tray assembly from the front of the appliance Any servicing of the appliance should be comple...

Page 127: ...essing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components 5 Remove the DIMM by pressing the two retaining clips outward and carefully pulling each DIMM upward 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 Chassis tray assembly retaining screws SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 128: ...ree it from the contact pins 6 Press the new DIMM into the socket until it clicks into place The top of the DIMM is smooth The bottom edge has two different length sets of contacts which mate with the slots on the socket Be sure the contacts and slots are properly aligned before you insert the DIMM SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00469 ...

Page 129: ...acing or Upgrading Memory IP560 Security Platform Installation Guide 129 The retaining clips move into the lock position as you press the DIMM into place SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00511 ...

Page 130: ...the CLI Replacing a Nokia Encryption Accelerator Card The IP1560 comes with the Nokia encryption accelerator card preinstalled as part of its base bundle to further enhance VPN performance The accelerator card provides high speed cryptographic processing that enhances VPN performance The IP560 appliance uses a PMC format accelerator card The accelerator card has no external connections and require...

Page 131: ...tion accelerator card and installation kit Phillips head screwdriver Four screws included in kit Grounding wrist strap included in kit Caution To help guard against electrostatic discharge damage make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance Note You do not nee...

Page 132: ...CLI to perform an orderly shutdown of the IP560 For information about how to access Network Voyager and the related reference materials see To open Nokia Network Voyager on page 52 2 Turn off the power to the IP560 appliance 3 Loosen the two chassis tray assembly retaining screws 00354 SLOT 1 SLOT 2 SLOT 3 SLOT 4 1 2 3 4 IP560 Chassis tray assembly retaining screws ...

Page 133: ...ty Platform Installation Guide 133 4 Slide the chassis tray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 134: ...llation Guide 5 Locate the PMC encryption accelerator card on the motherboard The encryption card is located on the back left side of the motherboard 6 Loosen the four retaining screws and remove the card SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP56 0 00361 00517 ...

Page 135: ...e acceleration card Those connectors are for the NICs 7 Position the three male PMC connectors on the card over the three female PMC connectors on the motherboard The two sets of connectors should be aligned with each other The four screw holes and four standoffs should also be aligned with each other 8 Push down on the card until it is properly seated on the motherboard 00518 ...

Page 136: ...l four standoff connections are properly aligned before tightening the screws completely 11 Slide the chassis tray assembly back into the appliance until it clicks into place resecure the two retaining screws 12 Configure your software to use hardware acceleration by following the instructions in Configuring Software to Use Hardware Acceleration on page 137 00175 1 Screw Accelerator card Standoff ...

Page 137: ...el see To configure a Check Point VPN To configure IPSec 1 Access Network Voyager 2 On the Network Voyager home page click Config 3 Under Interfaces click IPSec 4 Scroll down and click IPSec Advanced Configuration 5 At Hardware Device Configuration click On 6 Click Apply to enable the card To configure a Check Point VPN 1 Access Network Voyager 2 On the Network Voyager home page click Config 3 Scr...

Page 138: ...e a fan unit you need Physical access to the IP560 appliance Replacement fan unit kit and appropriate supplement A Phillips head screwdriver Caution Components inside the appliance can overheat if they are not cooled even for a short period of time If you are replacing a failed fan unit you must completely remove power to the appliance To replace a fan unit 1 Use Nokia Network Voyager or the comma...

Page 139: ...iance and the two retaining screws that secure it 4 Loosen the retaining screws by turning them counterclockwise 5 Slowly pull the fan unit out of the chassis toward the rear 6 Insert the new fan unit into the chassis 7 Tighten the two retaining screws on the new fan unit 8 Turn on the power 00353 Retaining screws 00363 ...

Page 140: ...f the specified output voltage Before You Begin To install or replace a power supply you need Physical access to the appliance or gateway A Phillips head screwdriver A replacement power supply and appropriate supplement Figure 25 Power Supply Location Caution You should have working knowledge of networking equipment before you attempt to service an appliance or gateway Limit service to the procedu...

Page 141: ...or command line interface CLI to perform an orderly shutdown of the IP560 appliance For information about how to access Network Voyager see Using Nokia Network Voyager to Manage Your Security Platform on page 52 2 Locate the power supply on the back of the appliance or gateway and the two retaining screws that secure it 3 Turn off the power to the power supply 4 Remove the power cord 5 Loosen the ...

Page 142: ...Insert the new power supply into the empty bay 9 Replace the grounding cable if being used 10 Reinstall the two retaining screws 11 Turn on the power Monitoring the IP560 Appliance Power Supply You can monitor the status of the IP560 appliance power supply with Nokia Network Voyager Similarly you can also use the command line interface 00364 00521 ...

Page 143: ... the right of the Power Supply link the status indicator is green for normal and red for fault 4 For more detailed information about the power supply status click Power Supply Replacing the Battery To replace the battery you need the following The appropriate Nokia battery replacement kit for your appliance Physical access to the appliance A Phillips head screwdriver A grounding wrist strap Option...

Page 144: ...le components internal to the appliance to protect against electrostatic discharge damage to the appliance Use the grounding strap included in the battery replacement kit To install the battery perform the following tasks 1 Use Nokia Network Voyager or the command line interface CLI to perform an orderly shutdown of the IP560 For information about how to access Network Voyager and the related refe...

Page 145: ...ray assembly forward pressing the release tab on the right side of the assembly and completely remove the chassis to expose the motherboard components 5 Place the chassis tray assembly on a table top 6 Locate the battery on the motherboard SLO T 1 SLO T 2 SLO T 3 SLO T 4 1 2 3 4 IP5 60 00520 ...

Page 146: ...e the battery out of the battery holder through the cutout in the holder To properly dispose of the battery see Related Documentation on page 17 8 With the positive side facing up slide the new battery through the cutout in the battery holder Caution You must place the new battery into the battery holder observing the correct polarity The positive terminal of the battery must be facing up 00446 SL...

Page 147: ... up normally with the new battery installed If it does not repeat step 1 through step 11 If the appliance does not start up normally after that contact your Nokia service provider For more information see Nokia Contact Information on page 3 12 Reset the appliance date and time information by using Nokia Network Voyager or the command line interface The battery is required to maintain the date and ...

Page 148: ...8 Replacing Other Components 148 IP560 Security Platform Installation Guide ...

Page 149: ...form Installation Guide 149 A Technical Specifications Dimensions Height 3 5 in 8 89 cm Width 17 in 44 cm 19 in 48 cm rack mountable Depth 26 in 53 34 cm Operational Temperature 0 C to 40 C 32 F to 104 F Humidity 5 to 85 ...

Page 150: ... inch rack Each IP560 requires the following space in a rack 3 5 inches 8 89 centimeters of vertical space 28 inches 71 centimeters behind the front panel of the rack 6 inches 15 centimeters behind the IP560 to allow the back exit fan to move air through the appliances Caution Do not block the ventilation holes on the IP560 The appliance might overheat and become damaged ...

Page 151: ...mation Declaration of Conformity Compliance Statements FCC Notice US Declaration of Conformity According to ISO IEC Guide 22 and EN 45014 declares that the product Manufacturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP560 Model Number EM7800 Product Options All ...

Page 152: ...93 68 EEC Serial Number 1 to 100 000 Date First Applied 2006 Safety UL60950 1 First Edition 2003 CAN CSA C22 2 No 60950 2000 IEC60950 1 2001 EN60950 1 2001 A11 with Japanese National Deviations EMC EN55024 1998 EN55022A 1998 EN61000 3 2 EN61000 3 3 Christopher Saleem Compliance Reliability Engineering Manager Security Mobile Connectivity Enterprise Solutions Mountain View California November 2005 ...

Page 153: ...rt 15 Subpart B Class A US Canada EN55022 CISPR 22 Class A European Community CE EN55024 European Community CE EN61000 4 2 European Community CE EN61000 4 3 European Community CE EN61000 4 4 European Community CE EN61000 4 5 European Community CE EN61000 4 6 European Community CE EN61000 4 11 European Community CE EN61000 3 2 European Community CE EN61000 3 3 European Community CE UL60950 EN60950 ...

Page 154: ...ons However there is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio or television reception the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the computer and receiver Connect the computer int...

Page 155: ...ttery holder 146 location 146 replacing 143 blinking green LED 28 blinking yellow LED 28 blue LED 28 boot command 87 boot manager 79 arguments 87 booting the system 87 installing 90 installing IPSO 80 88 password protection for 89 revision variable 80 upgrading 90 variables used by 80 87 boot device variable 80 boot file variable 80 boot flags variable 80 bootwait variable 80 C caution notices 15 ...

Page 156: ...4 accessing and removing 126 adding 126 retaining clips 129 socket locations 125 disk storage 29 diskless 29 DMZ 21 document structure 13 dual inline memory module sockets DIMMs 124 E ejector for PC card slot 114 EMC standards 152 emissions standards 153 encryption accelerator card 20 configuring software to use 137 location 134 replacing 130 132 end of life information 35 Ethernet cable output co...

Page 157: ...EDs power supply 32 system status 27 log files storing 116 logging 21 hard disk drives 29 PC card 30 ls command 84 M managing the appliance 21 memory capacity 124 flash 30 replacing or upgrading 124 monitoring 27 NICs 65 power supply 142 mounting brackets 42 multicast traffic 21 multimode fiber optic cable 78 N network interface cards deactivating 58 four port copper Gigabit Ethernet 72 installing...

Page 158: ...retired equipment 35 red LED 28 32 release tab 112 reset button 20 retaining clips DIMM 129 RJ 45 cable 51 connector 25 70 71 RS 232 data terminal equipment 46 S safety standards 152 SC connector 78 serial port 20 26 setalias command 86 set defaults command 85 setenv command 84 setting variables 84 signal auxiliary port 27 site requirements 33 slot identification 50 slot numbering 50 software requ...

Page 159: ... autoboot 80 boot flag 80 boot manager 80 boot device 80 boot file 80 bootwait 80 setting 84 viewing 81 ventilation 34 ventilation holes 150 vertical space requirements 150 virtual private network 137 voltage 31 voltage fluctuation 153 VPN performance 130 VT100 compatible terminal 46 W warning notices 14 width 149 Y yellow LED 28 32 ...

Page 160: ...Index 160 IP560 Security Platform Installation Guide ...

Reviews:

No comments

Related manuals for IP560 - Hard Disk Drive Based

Brand: TC Electronic Pages: 2

Brand: Makita Pages: 2

OfficeConnect 1600

Brand: 3Com Pages: 8

Brand: 3Com Pages: 8

Brand: F-SECURE Pages: 19

Brand: ICP DAS USA Pages: 14

Brand: ICP DAS USA Pages: 25

Brand: ICP DAS USA Pages: 15

Brand: ICP DAS USA Pages: 8

Brand: ICP Pages: 14

Brand: Yamaha Pages: 6

Brand: Yamaha Pages: 4

Brand: Yamaha Pages: 22

Brand: Yamaha Pages: 49

Brand: Idis Pages: 86

Brand: Paradyne Pages: 20

Brand: Paradyne Pages: 2

Brand: NETGEAR Pages: 2

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands