Nokia IP710 Series Installation Manual Download Page 5

Page: 5 / 182

IP700 Series Installation Guide

Contents

About This Guide

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

About Nokia IP700 Series

Network Security Platforms . . . . . . . . . . . . . . 12

IP700 Series Documentation. . . . . . . . . . . . . . . . . . . 13

Structure of This Guide . . . . . . . . . . . . . . . . . . . . . . . 14

Conventions Used in This Guide . . . . . . . . . . . . . . . 16

CHAPTER 1

Overview

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

About the IP700 Series Platform. . . . . . . . . . . . . . . . 19

Site Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

CHAPTER 2

Installing the IP700 Series Appliance

. . . . . . . 23

Using DHCP to Configure the Appliance . . . . . . . . . 24

Using the Console Connection to Configure the

Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Connecting Power and Turning the Power On . . . . . 28

Connecting to the Console . . . . . . . . . . . . . . . . . . . . 30

Monitoring the Appliance . . . . . . . . . . . . . . . . . . . . . 33

CHAPTER 3

Installing, Monitoring, and Replacing
Components

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Network Interface Card Preinstallation

Considerations . . . . . . . . . . . . . . . . . . . . . . . . 36

Installing a New Network Interface Card . . . . . . . . . 43

Monitoring Network Interface Cards . . . . . . . . . . . . 45

Removing a Network Interface Card . . . . . . . . . . . . 46

Replacing a Network Interface Card . . . . . . . . . . . . . 49

Installing a PCMCIA Modem . . . . . . . . . . . . . . . . . . 52

Monitoring and Replacing a Hard-Disk Drive Unit . 53

Replacing the Fan Tray . . . . . . . . . . . . . . . . . . . . . . . 59

All manuals and user guides at all-guides.com

Summary of Contents for IP710 Series

Page 1: ...Part Number N450436003 Rev B April 2004 IP700 Series Installation Guide All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 2: ...or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or services loss of use data or profits or...

Page 3: ...030 or 1 613 271 6721 Fax 1 613 271 8782 Europe Voice 44 0 125 286 8900 Fax 44 0 125 286 5666 Asia Pacific Voice 65 7232999 Fax 65 7232897 Americas Nokia Inc 313 Fairchild Drive Mountain View CA 94043 2215 USA Tel 1 877 997 9199 Outside USA and Canada 1 512 437 7089 e mail info ipnetworking_americas nokia com Europe Nokia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG U K Tel 00800 5...

Page 4: ...All manuals and user guides at all guides com ...

Page 5: ...ing the Console Connection to Configure the Appliance 27 Connecting Power and Turning the Power On 28 Connecting to the Console 30 Monitoring the Appliance 33 CHAPTER 3 Installing Monitoring and Replacing Components 35 Network Interface Card Preinstallation Considerations 36 Installing a New Network Interface Card 43 Monitoring Network Interface Cards 45 Removing a Network Interface Card 46 Replac...

Page 6: ...the Network 85 Connecting to Ethernet Devices 86 Connecting to V 35 or X 21 Devices 91 Connecting to E1 Built in CSU DSU Devices 95 Connecting to T1 Built in CSU DSU Devices 99 Connecting to ATM Devices 102 Connecting to Gigabit Ethernet Devices 104 Connecting to a Modem 107 CHAPTER 6 Installing the Nokia Encryption Accelerator Card 109 Installing the Encryption Accelerator Card 110 Enabling the E...

Page 7: ...raffic With tcpdump 149 Saving tcpdump Results to a Local File 150 CHAPTER 10 Tips for Installing Configuring and Maintaining Your Appliance 153 APPENDIX A Technical Specifications 155 Physical 155 Environmental 155 NIC Interfaces 156 Space Requirements 157 APPENDIX B Compliance Information 159 Declaration of Conformity 160 Compliance Statements 162 FCC Notice US 163 FCC Requirements US 164 Equipm...

Page 8: ...de Contents APPENDIX C General Public Licensed Software 167 GNU GENERAL PUBLIC LICENSE 168 APPENDIX D Warranty and Software License 171 APPENDIX E Glossary of Abbreviations 175 Index 177 All manuals and user guides at all guides com ...

Page 9: ...tails 87 Output Connector for the Ethernet Cable 89 Ethernet Crossover Cable Pin Connections 90 Typical Dual Port V 35 or X 21 Network Interface Card Front Panel Details 91 Output Connector for the V 35 Cable 93 Output Connector for the X 21 Cable 94 Typical E1 Network Interface Card Front Panel Details 96 Output Connector for the E1 Cable 97 E1 Crossover Cable Pin Connections 98 8 pin female host...

Page 10: ...10 IP700 Series Installation Guide Figures All manuals and user guides at all guides com ...

Page 11: ...he following information About Nokia IP700 Series Network Security Platforms see page 12 IP700 Series Documentation see page 13 Structure of This Guide see page 14 Conventions Used in This Guide see page 16 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 12: ...connections For high availability IP700 Series appliances allow you to hot swap network interface cards hard disk drive units power supplies and fan trays You can manage IP700 Series appliances by using Voyager a Nokia Web based management application and Nokia Horizon Manager software With Voyager you can manage monitor and configure IP700 Series appliances from any authorized location within the...

Page 13: ...stallation Guide in both HTML and PDF formats on the World Wide Web support site https support nokia com You can access inline help when you use Voyager Inline help is the context sensitive information source for Voyager To enable inline help for a specific subject click the button next to the subject Access the Voyager Reference Guide for tasks examples and more information by pressing the DOC bu...

Page 14: ... connect to and use each of the supported network interface cards CHAPTER 6 Installing the Nokia Encryption Accelerator Card explains how to install and enable the accelerator card CHAPTER 7 Using the Boot Manager explains how to use the boot manager which is part of the built in IPSO software CHAPTER 8 Troubleshooting discusses problems you might encounter and proposes solutions to these problems...

Page 15: ...ion about publicly licensed software that comes with the appliance APPENDIX D Warranty and Software License contains Nokia warranty and software license information APPENDIX E Glossary of Abbreviations provides definitions to acronyms and initialisms used throughout the guide All manuals and user guides at all guides com ...

Page 16: ...nt word or phrase Reference to a section or document Click the Interfaces link Turn Internal Clock off To delete a file type rm filename This is the Overview chapter SMALL CAPS Button to click with your mouse Click CONFIG Courier New File names directories Screen text presented by the computer rather than text you enter yourself Hostname Courier New Bold Literal text that you enter on the screen T...

Page 17: ...nored could cause injuries to you or to other people damage to your equipment or a potential security breach Caution Addresses actions that cause damage to equipment compromise the system or would cause data loss NOTE Calls special attention to important information All manuals and user guides at all guides com ...

Page 18: ...About This Guide 18 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 19: ... IP700 Series platform combines the power of IPSO software with your choice of applications Each IP700 Series appliance consists of components in three primary categories Nokia hardware Selected network interface cards Designated software applications All manuals and user guides at all guides com ...

Page 20: ...e can house two disk drive units However the feature of mirrored disk drives will only be supported when IPSO is released with disk mirroring capabilities 00082 Component Locations Sample Configuration Hard Disk Drive Four port Ethernet 10 100 Mbps card T1 Card Console port Four port Ethernet 10 100 Mbps Fan tray 00086 Power supplies Front View Rear View Modem port PCMCIA Slot All manuals and user...

Page 21: ...tomer Support Department supports Nokia cards purchased either from Nokia Inc or approved resellers Contact Nokia for sales or reseller information Interface Serial Card LAN Card WAN Card For information about using this card see Four port Ethernet 10 Mbps or 100 Mbps page 86 Dual port V 35 or X 21 page 91 Single port E1 with built in channel service unit data service unit CSU DSU page 95 Single p...

Page 22: ...ent type battery recommended by the manufacturer Dispose of used batteries according to the manufacturer s instructions WARNING To reduce the risk of fire electric shock and injury when you use telephone equipment follow basic safety precautions Do not use the product near water Caution Do not place objects over the ventilation holes on the IP700 Series appliance The components might overheat and ...

Page 23: ... maintaining your appliance Using DHCP to Configure the Appliance see page 24 Using the Console Connection to Configure the Appliance see page 27 Connecting Power and Turning the Power On see page 28 Connecting to the Console see page 30 Monitoring the Appliance see page 33 Caution Protect your IP700 Series appliance and other electronic equipment from static discharge by making sure you are prope...

Page 24: ...ly configured DHCP server to provide your IP700 Series appliance with the host name IP address and default route You can then use Voyager to reconfigure any of these settings Once you do so Voyager preserves the modified settings NOTE DHCP is not used if configuration information is already on the appliance The DHCP server automatically sets the administrative password of the IP700 Series applianc...

Page 25: ...imum IP address lease required is one year NOTE Either the DHCP server must be on the same network as your Nokia IP700 Series appliance or DHCP BOOTP relay must be configured on the intermediate routers Following is an example of relevant DHCP configuration information ddns update style ad hoc subnet 10 1 1 0 netmask 255 255 255 0 default gateway option routers 10 1 1 1 option subnet mask 255 255 ...

Page 26: ...you must connect the NIC that has that address 2 Turn the system on The DHCP client program in the IP700 Series appliance is started automatically and the DHCP server provides the appropriate configuration information This can require five to ten minutes 3 From a computer on the same network ping the IP address that you configured the DHCP server to provide to the IP700 Series appliance When you r...

Page 27: ...ient program starts automatically and the system might be provided a host name and IP address that is unknown to you This could happen if there is a DHCP server on your network that is configured to supply configuration information to any system that requests it In this situation you will not be able to connect to the IP700 Series appliance over the network because you don t know the appliance IP ...

Page 28: ...d securely into the power socket on the back of the IP700 Series appliance Plug the other end of the cord into a three wire grounded power strip or wall outlet If you are using two power supplies a typical method of connecting them is to plug one into an uninterruptable power supply and the other into a wall outlet Either power supply can safely power the IP700 Series appliance 2 Press the switch ...

Page 29: ...are both operating correctly Most importantly only the left LED Power OK should be illuminated on each power supply For more information about the LEDs see Monitoring and Replacing a Power Supply on page 61 3 If the power supply fans are not running check the power supply cord to make sure it is properly connected If the fans are still not running after this check contact technical support See Nok...

Page 30: ...00 bps Once you initialize the system the console connection is no longer required NOTE If you used DHCP to configure the system you can skip these instructions To connect to the console follow these steps 1 Select a console from the following list Any standard VT100 compatible terminal A DOS or Windows computer or laptop running a terminal emulation program A UNIX workstation 2 Connect a null mod...

Page 31: ...ecting to the Console NOTE If you connect the console port to a data communications equipment DCE device use a straight through cable 00082 Component Location Console port All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 32: ...lation program 4 Press RETURN The following prompt appears BOOTMGR 0 The prompt remains on the screen for about five seconds NOTE See CHAPTER 7 Using the Boot Manager for information about the boot manager 5 After some miscellaneous output appears the following prompt appears Hostname 700001 6 9 5 1 Pin Assignment Input Output 1 DCD Input 2 RXD Input 3 TXD Output 4 DTR Output 5 GND 6 DSR Input 7 R...

Page 33: ...he console port and console display connections to ensure that the serial cable is completely plugged in at both ends Monitoring the Appliance You can monitor the IP700 Series appliance and many of the installed components by checking their various status LEDs The primary status LEDs are located on the front panel of the appliance as shown in the following figure 00082 Appliance Status LEDs Fault ...

Page 34: ...See Typical E1 Network Interface Card Front Panel Details on page 96 T1 cards See Typical Nokia T1 Network Interface Card Front Panel Details on page 100 ATM cards See Typical ATM Network Interface Card Front Panel Details on page 102 Gigabit Ethernet cards See Single Port Gigabit Ethernet Network Interface Card Front Panel Details on page 105 See Dual Port Gigabit Ethernet Network Interface Card ...

Page 35: ...ated with your IP700 Series appliance Network Interface Card Preinstallation Considerations see page 36 Installing a New Network Interface Card see page 43 Monitoring Network Interface Cards see page 45 Removing a Network Interface Card see page 46 Replacing a Network Interface Card see page 49 Installing a PCMCIA Modem see page 52 Monitoring and Replacing a Hard Disk Drive Unit see page 53 Replac...

Page 36: ...rd take care not to damage the EMI shield on the top edge of the face plate Network Interface Card Preinstallation Considerations The IP700 Series platform connects to your installed network interface cards through two cPCI busses bus A and bus B As the following figure shows slots 1 and 2 are connected to bus A and slots 3 and 4 are connected to bus B Network Interface Card Bus Locations 00101 Sl...

Page 37: ...d of my cards How do I configure my IP700 Series appliance for optimum performance Circumstances Under Which the cPCI Busses Change Speed in the IP740 The bus speed is determined at boot time Cards that run at 66 Mhz can also run at 33 Mhz the current bus speed determines the card speed Until you reboot the appliance the bus speed is set to the speed of the slowest card connected to the bus For ex...

Page 38: ...nts across both busses Balancing the busses is especially important if you are installing more than one gigabit Ethernet card For example if you install the first gigabit Ethernet card in slot 1 then your second card should go in slot 3 your third in slot 2 and so on However if either of your busses is running at 33 Mhz try to keep all gigabit Ethernet cards on the faster bus to attain optimum per...

Page 39: ...ecting the two bus speeds Setting up Gigabit Ethernet NICs for High Availability With a DMZ You can use two IP700 Series appliances with six available gigabit Ethernet ports each for a total of twelve ports to provide a high availability firewall with a DMZ subnet All twelve ports can be used for the necessary connections Four of these ports are provided by two dual port gigabit Ethernet NICs The ...

Page 40: ...igabit CPC v2 Tx Rx Link Tx Rx Link Dual Gigabit CPC v2 P1 P2 P1 P1 P1 P2 Connecting to Gigabit Ethernet NICs for High Availability With a DMZ Port DMZ Port Backup Traffic 2 Port Synchronization Port Traffic 1 Port Traffic 2 Port Slot 3 Slot 4 Card Type Slot dual port gigabit Ethernet 1 dual port gigabit Ethernet 2 single port gigabit Ethernet 3 single port gigabit Ethernet 4 Slot 1 Slot 2 Backup ...

Page 41: ...and DMZ configurations see the Voyager Reference Guide 00240 Tx Rx Link Tx Rx Link Dual Gigabit CPC v2 Tx Rx Link Tx Rx Link Dual Gigabit CPC v2 Tx Rx Link Tx Rx Link Dual Gigabit CPC v2 Tx Rx Link Tx Rx Link Dual Gigabit CPC v2 High Availability With a DMZ Environment Switch Switch LAN DMZ IP700 IP700 ISP Internet Extranet VRRP Network Management E mail Web Server All manuals and user guides at a...

Page 42: ...hz card was previously present on that bus Reboot your IP740 appliance to reset the bus speed to 66 Mhz For information about how to access Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 Hot Plugging a 33 Mhz Card in the IP740 If you hot plug a 33 Mhz card in any slot the card is brought online automatically only if the bus is already r...

Page 43: ...face Card The following procedure applies to all network interface cards 1 See Network Interface Card Preinstallation Considerations on page 36 2 Use a screwdriver to remove the retaining screws that hold the blank panel in place 3 Remove the blank panel 00085 All manuals and user guides at all guides com ...

Page 44: ...e If the card has an ejector you can use it to assist in the final seating of the card 5 Screw the retaining screws into place The IP700 Series appliance detects the card 6 Use Voyager to configure and activate the logical and physical interfaces on the card For information about how to access Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page...

Page 45: ...s on page 87 E1 For information about the LEDs see Typical E1 Network Interface Card Front Panel Details on page 96 T1 For information about the LEDs see Typical Nokia T1 Network Interface Card Front Panel Details on page 100 ATM For information about the LEDs see Typical ATM Network Interface Card Front Panel Details on page 102 Gigabit Ethernet For information about the LEDs see Single Port Giga...

Page 46: ...l of the physical interfaces on the card If you do not deactivate these interfaces before you remove the card you might have to reinstall the card before you can deactivate the logical and physical interfaces For information about how to access Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 2 Use a screwdriver to remove the retaining sc...

Page 47: ...Guide 47 Removing a Network Interface Card 3 Gently pull the card forward from the card slot If the card has an ejector use it to assist you in removing the card from the slot 00084 All manuals and user guides at all guides com ...

Page 48: ...Components 48 IP700 Series Installation Guide 4 Cover the empty slot with a blank panel and screw the retaining screws into place NOTE The blank panel goes in only one way with the EMI fingers up 00096 All manuals and user guides at all guides com ...

Page 49: ...similar type for example replace an Ethernet card with another Ethernet card The two cards do not need to be made by the same manufacturer They only need to contain interfaces of the same type The following procedure applies to all network interface cards 1 See Network Interface Card Preinstallation Considerations on page 36 2 Use a screwdriver to remove the retaining screws that hold the card 000...

Page 50: ...eplacing Components 50 IP700 Series Installation Guide 3 Gently pull the card forward from the card slot If the card has an ejector use it to assist you in removing the card from the slot 00084 All manuals and user guides at all guides com ...

Page 51: ... 5 Screw the retaining screws into place The IP700 Series appliance detects the card 6 If you replaced the card with a card of a different type use Voyager to delete the interface configuration for the old card and configure and activate the logical and physical interfaces on the new card For information about accessing Voyager and the related reference materials see Using Voyager to Configure the...

Page 52: ...until the modem clicks into place The modem and the ejector on the left of the slot protrude from the unit The appliance automatically recognizes the modem 2 Whether or not the modem is factory installed connect the modem to a phone line Use a cable that is appropriate for the modem and for the telephone system in the country in which you will use the device To access this feature click Config on ...

Page 53: ...ng becomes a supported feature in IPSO do not use the hot swap switch on any IP700 Series appliance Back up your hard drive files to a remote system on a regular basis For the procedure for backing up and restoring files see the IPSO Getting Started Guide and Release Notes In addition when you are changing disk drives make sure that you insert the new hard disk drive into slot A the left hand slot...

Page 54: ...ty Blinking green Current drive unit activity Disk status Constant red The drive unit is turned on but is malfunctioning Constant green The drive unit is turned on and functioning Off One of the following The drive unit failed its test and was turned off No drive unit is installed The hot swap switch was pressed which caused the drive unit to be turned off For the location of the hot swap switch s...

Page 55: ...ollow these steps 1 On the Voyager home page for the appliance click CONFIG 2 Scroll to the bottom and click REBOOT SHUT DOWN SYSTEM 3 Click HALT 4 Wait until the Activity LED for the drive unit is off before proceeding to the next step 5 Turn off the appliance using the power supply switches on the back of the device 6 Wait until the Status LED for the drive unit is off before proceeding to the n...

Page 56: ...llation Guide 7 Use a screwdriver to remove the retaining screw holding the hard disk drive unit 8 Gently pull the hard disk drive unit forward from the card slot and remove the hard disk drive unit 00085 00100 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 57: ...nformation contact the appropriate Nokia customer support site as listed in Nokia Contact Information on page 3 NOTE Make sure you replace the new disk drive in slot A as the following figures show 1 Insert the new disk into the open hard disk drive 2 Push the unit gently into place Make sure that the card edge is completely seated into the connector inside the IP700 Series appliance 00100 All man...

Page 58: ...Installing Monitoring and Replacing Components 58 IP700 Series Installation Guide 3 Screw the retaining screws into place 4 Switch on the IP700 Series appliance 00085 All manuals and user guides at all guides com ...

Page 59: ...Caution Components inside the chassis can overheat if they are not cooled for even short periods of time If you keep the power to the IP700 Series appliance on do not allow the fan tray to remain out of the chassis for any longer than is necessary 1 Unscrew the screws that hold the fan tray to the chassis 00085 All manuals and user guides at all guides com ...

Page 60: ...acing Components 60 IP700 Series Installation Guide 2 Pull the fan tray forward to remove it from the chassis 3 Slide the new fan tray into the chassis 4 Screw in the retaining screws 00088 00088 All manuals and user guides at all guides com ...

Page 61: ...er switch as shown circled in the following figure Each LED is labeled and the information supplied by each is as follows reading from left to right Access the power supply from the back of the IP700 Series appliance To remove the power supply follow these steps LED Meaning Pwr OK green Performing within specifications Fault red Not performing within specifications Over Temp yellow Power supply ha...

Page 62: ...are replacing by turning off the switch on the back of the power supply 2 Unplug the power cord from the power supply Confirm that the cooling fan blade assembly is no longer turning 3 Use a screwdriver to unscrew the two screws that hold the power supply to the chassis 00099 00099 All manuals and user guides at all guides com ...

Page 63: ... Grasp the handle and firmly pull the power supply toward you 5 Slide the new power supply into place 6 Replace the retaining screws and screw them into place 7 Reconnect the power cord 8 Turn on the power supply switch 00087 00087 All manuals and user guides at all guides com ...

Page 64: ...ate Nokia customer support site as listed in Nokia Contact Information on page 3 The IP700 Series appliance base system contains four dual inline memory module DIMM sockets The IP740 appliance base system ships with either 512 MB of RAM or 1 GB of RAM provided by two or four 256 MB DIMMs respectively The IP710 appliance ships with 512 MB of RAM that is provided by two 256 MB DIMMs You can increase...

Page 65: ...urn off power to the appliance Caution To protect the IP700 Series appliance and protect memory modules from electric static discharge ESD ensure that you are properly grounded before you touch these components Preinstallation Steps Before you access the DIMM sockets perform the following steps 1 See how much RAM is currently installed in your appliance by viewing the main page for the appliance u...

Page 66: ...stallation Guide 3 Turn off both power switches on the rear of the appliance and remove both power cords from the power supplies Confirm that the two cooling fan blade assemblies are no longer turning 00099 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 67: ...e the two power supplies as follows removing the power supplies allows you to disengage the motherboard chassis assembly from its connectors and prevents the front panel from being damaged as the chassis assembly is pulled out a Use a screwdriver to unscrew the two screws that secure each power supply to the chassis 00099 All manuals and user guides at all guides com ...

Page 68: ...nents 68 IP700 Series Installation Guide b Grasp each power supply handle and firmly pull each power supply toward you 2 Loosen the four front panel thumbscrews indicated in the following figure 00087 00085 All manuals and user guides at all guides com ...

Page 69: ... Series Installation Guide 69 Upgrading the Memory 3 Slide the chassis assembly forward to expose the motherboard components as the following figure shows 00171 All manuals and user guides at all guides com ...

Page 70: ...IP700 mother board as you look at the appliance from the front as the following figure shows Installing the New DIMMs in the IP700 Series Appliance You can upgrade the memory of the IP700 Series appliance to 1 GB by inserting two additional 256 MB DIMMs DIMM Socket Locations Front of Motherboard All manuals and user guides at all guides com ...

Page 71: ...s and install a 256 MB DIMM into each of the four sockets This requires two memory kits 1 Press the two retaining clips outward and carefully pull each DIMM upward as the following figure shows You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins NOTE IP700 Series appliances use interleaved memory and work in pairs Therefore two DIMMs would not be...

Page 72: ... two keyed sets of contacts which mate with two key slots on the socket Be sure the two keys and slots line up The retaining clips move into the lock position as you press the DIMM into place Final Installation Steps After you install the DIMMs perform the following procedure 1 Slide the chassis assembly back into the appliance and resecure the four thumbscrews 00121d Pressing DIMMs Into DIMM Sock...

Page 73: ...into place 3 Replace the retaining screws and screw them into place 4 Reattach the power cords 5 Turn on the power The appliance automatically recognizes the new memory configuration You can verify this from the Voyager or Lynx interface 00087 All manuals and user guides at all guides com ...

Page 74: ...Chapter 3 Installing Monitoring and Replacing Components 74 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 75: ...m startup procedure runs Using the system startup procedure you assign a hostname to the appliance and assign a password to the admin account Then you configure the initial interface you use to establish a network connection to the appliance When you have network connectivity complete the configuration using the Web based Voyager configuration program For information about using Voyager see the Vo...

Page 76: ...rd for the admin account The admin account has read and write permissions on the IP700 Series appliance Passwords are case sensitive Entering the Browser Type System startup prompts you to select the browser type you plan to use to complete your configuration as follows You can configure your Nokia system in two ways 1 configure an interface and use our Web based Voyager via remote browser 2 VT100...

Page 77: ...on 2 Lynx if the host for your browser cannot be reached from the IP700 Series appliance by using a default route you do not have a host that can communicate with the appliance by using one of the interfaces and you cannot supply a default appliance address Lynx is an ASCII based browser that runs on the existing serial port console connection Lynx browser software is supplied as part of the stand...

Page 78: ...p1 4 atm s3p1 5 quit this menu Enter choice 1 5 To select an interface type the number adjacent to the physical IDs that appear Your selection determines the interface you use to access the IP700 Series appliance for configuration tasks NOTE A physical ID identifies the network interface card type nic type and provides information about its slot number slot num and port number port num The physica...

Page 79: ...route automatically sets the remote address of the interface 4 Enter the hardware configuration information for the interface you selected in step 1 If you selected an Ethernet interface enter An interface speed 100 Mbps or 10 Mbps The interface duplex full or half If you selected an FDDI interface enter the interface duplex full or half If you selected an ATM interface specify the virtual circuit...

Page 80: ...y The channel data link connection identifier DLCI for the interface The frame relay LMI type ANSI CCITT or frame relay Consortium The interface type DTE or DCE The frame relay keepalive interval 6 Entering modem configuration information If your appliance contains an internal modem or if an external modem is connected to one of the appliance serial ports you are prompted to specify the following ...

Page 81: ...ng Voyager Start Netscape Navigator or Microsoft Internet Explorer on the host you will use to complete configuration of the IP700 Series appliance In the Location or Address field enter the IP address of the initial interface you configured on the appliance You are prompted to enter the admin username and the password you entered earlier see Entering the Passwords on page 76 NOTE If the username ...

Page 82: ...ace as the following figure shows Voyager Reference Guide The Voyager Reference Guide is the reference source for Voyager To access this source click DOC You can also access the Voyager Reference Guide at the Nokia support site https support nokia com or on the CD that was delivered with your system see doc voyager_guide pdf Alternatively you can order a printed copy Voyager Reference Access Point...

Page 83: ...for each of the supported interfaces Interface Physical Name Logical Name Four port Ethernet 10 Mbps or 100 Mbps eth sslotpport eth sslotpport cchannel Dual port V 35 or X 21 ser sslotpport ser sslotpport cchannel Single port E1 with built in channel service unit data service unit CSU DSU ser sslotp1 ser sslotp1c channel Single port T1 with built in CSU DSU ser sslotp1 ser sslotp1c channel Single ...

Page 84: ...tion Guide Using Voyager to Monitor the IP700 Series Appliance After you install and configure your IP700 Series appliance you can use Voyager to monitor its operation Click MONITOR from the Voyager home page to access the monitoring functions All manuals and user guides at all guides com ...

Page 85: ...Connecting to Ethernet Devices see page 86 Connecting to V 35 or X 21 Devices see page 91 Connecting to E1 Built in CSU DSU Devices see page 95 Connecting to T1 Built in CSU DSU Devices see page 99 Connecting to ATM Devices see page 102 Connecting to Gigabit Ethernet Devices see page 104 Connecting to a Modem see page 107 WARNING When you are handling a card take care not to damage the EMI shield ...

Page 86: ...ceptions are the gigabit Ethernet card and the newest of the quad ethernet cards Connecting to Ethernet Devices Every IP700 Series appliance has four dual mode 10 Mbps and 100 Mbps ports Additionally the appliance supports Nokia approved four port UTP5 dual mode 10 Mbps and 100 Mbps Ethernet cards The card supports the following features Hot swappability Tracing through tcpdump You can configure a...

Page 87: ...hough Nokia distributes two versions of the quad port Ethernet cards only one is compatible with the IP700 Series platform The connector on the back of the correct quad port Ethernet card runs 00120 Built in Ethernet Interface Front Panel Details RJ 45 connectors Activity LED Yellow LInk LED Green 00019 Typical Four Port Ethernet Network Interface Card Front Panel Details Link LEDs Green Activity ...

Page 88: ...P700 Series appliance the board is installed before the appliance is delivered to you Connectors and Cables The Ethernet connectors on the appliance and on the card are RJ 45 To connect to a 10 Mbps or 100 Mbps hub use a straight through RJ 45 cable To connect directly to a host use an RJ 45 crossover cable wired as the following figure shows You can order appropriate adapter cables separately You...

Page 89: ... ports must use a minimum of 26 AWG wire In the following figures the RJ 45 cable output connector is numbered from right to left with the copper tabs facing up and toward you 00113b Pin Assignment 1 TX 2 TX 3 RX 4 5 6 RX 7 8 8 1 Output Connector for the Ethernet Cable All manuals and user guides at all guides com ...

Page 90: ...urned on the Ethernet link LEDs on both the IP700 Series appliance and on the remote equipment light up to indicate the connection As data is transmitted the activity LEDs on the appliance are illuminated 00017 Ethernet Crossover Cable Pin Connections All manuals and user guides at all guides com ...

Page 91: ... Cisco HDLC You can configure and monitor V 35 and X 21 interfaces with Voyager the Web based configuration and monitoring program For information about how to access Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 Front Panel Details NOTE V 35 or X 21 cards marked cPCI v2 are the only versions of this card that function properly in IP70...

Page 92: ...lue in the physical configuration section in the Voyager configuration program If the CSU DSU cannot supply a clock select internal clock and set the clock speed in Voyager You can however connect the card directly to a frame relay switch or to a platform serial port on a Cisco network application You can also connect the card directly to any appliance with a DCE serial port Connectors and Cables ...

Page 93: ...h connector type 00111 Signal Ground B Clear to Send D Receive Line Signal Detect F Local Loopback J Received Data R Received Data T Receive Timing V Receive Timing X A Chassis Ground C Request to Send E Data Set Ready H Data Terminal Ready P Transmitted Data S Transmitted Data U Terminal Timing W Terminal Timing Y Transmit Timing AA Transmit Timing Output Connector for the V 35 Cable All manuals ...

Page 94: ...B 10 Receive Data B 11 Indicate B 12 Signal Timing Element B 13 Byte Timing B 14 15 1 Protective Ground 2 Transmitted Data A 3 Control A 4 Received Data A 5 Indicate A 6 Signal Timing Element A 7 Byte Timing A 8 Signal Ground Output Connector for the X 21 Cable All manuals and user guides at all guides com ...

Page 95: ...Frame controllers support Up to 24 channels per card Built in CSU DSU Line speed to full E1 Hot swappability Tracing through tcpdump Conformance with RFC 1661 PPP 1662 PPP in HDLC like framing 1332 PPP IPCP and Cisco HDLC Compliance with ITUT G703 You can configure and monitor E1 interfaces with Voyager the Web based configuration and monitoring program For information about how to access Voyager ...

Page 96: ...st cases you connect the card to a E1 service provider You can however connect the card directly to another CSU DSU Connectors and Cables The connector on the card is an RJ 48 To connect the card to an E1 service use a straight through RJ 48 cable To connect the card to another CSU DSU use an RJ 48 crossover cable wired as the following figure shows Typical E1 Network Interface Card Front Panel De...

Page 97: ...able vendor of your choice Caution Cables connecting to the E1 card must use a minimum of 26 AWG wire In the following figures the RJ 48 cable output connector is numbered from right to left with the copper tabs facing up and toward you 00113b Pin Assignment 1 RX 2 RX 3 4 TX 5 TX 6 7 8 8 1 Output Connector for the E1 Cable All manuals and user guides at all guides com ...

Page 98: ...Chapter 5 Connecting to the Network 98 IP700 Series Installation Guide 00018 E1 Crossover Cable Pin Connections 8 pin female host All manuals and user guides at all guides com ...

Page 99: ...ers which allow operation at 1 544 Mbps Up to 24 channels per card IPSO supports only fractional channels Fractional T1 Tracing through tcpdump Conformance with RFC 1661 PPP 1662 PPP in HDLC like framing 1332 PPP IPCP 1490 frame relay RFC 1406 DS1 MIB support and Cisco HDLC Compliance with ANSI T1 403 You can configure and monitor T1 interfaces with Voyager the Web based configuration and monitori...

Page 100: ...e provider You can however connect the card directly to another CSU DSU Connectors and Cables The connector on the card is an RJ 48 To connect the card to a T1 device use a straight through RJ 48 cable To connect the card to another CSU DSU use an RJ 48 crossover cable wired as the following figure shows You can order appropriate adapter cables separately You can also order additional cables from ...

Page 101: ...e In the following figures the RJ 48 cable output connector is numbered from right to left with the copper tabs facing up and toward you 00113b Pin Assignment 1 RX 2 RX 3 4 TX 5 TX 6 7 8 8 1 Output Connector for the T1 Cable 00018 T1 Crossover Cable Pin Connections 8 pin female host All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 102: ...igure and monitor ATM interfaces with Voyager the Web based configuration and monitoring program For information about how to access Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 Front Panel Details NOTE ATM cards marked cPCI v2 are the only versions of this card that function properly in IP700 Series appliances CPCIv2 00093 ATM Connec...

Page 103: ...nce the board is installed before the appliance is delivered to you Connectors and Cables To connect the card to an ATM device use a multimode fiber optic cable with an SC output connector You can order appropriate adapter cables separately You can also order additional cables from a cable vendor of your choice All manuals and user guides at all guides com ...

Page 104: ...iance with PCI Industrial Computer Manufacturers Group PICMG cPCI specification version 2 Compliance with IEEE 802 3z gigabit Ethernet specification The IP700 Series appliances can accommodate one or more gigabit Ethernet NICs You can configure and monitor gigabit Ethernet interfaces with Voyager the web based configuration and monitoring program See Using Voyager to Configure the Network Interfac...

Page 105: ...it Ethernet Card Single Port Gigabit Ethernet Network Interface Card Front Panel Details 00122 Transmit LED Yellow Receive LED Yellow Link LED Green 00239 Tx Rx Link Tx Rx Link Dual Gigabit CPClv2 Dual Port Gigabit Ethernet Network Interface Card Front Panel Details Transmit LED Yellow Receive LED Yellow Link LED Green Port 1 P1 Port 2 P2 All manuals and user guides at all guides com ...

Page 106: ...nnect the card to other network components use a multimode fiber optic cable with an LC connector for each card interface The destination end of the cable can be either LC or SC depending on the type of connector required for the destination gigabit Ethernet device You can also use an LC to LC cable for loopback purposes An LC to SC cable is included with single port gigabit Ethernet NICs and two ...

Page 107: ...6 9 5 1 Pin Input Output To DB25 Cable Out To DB9 Cable Out 1 DCD Input 8 DCD 7 RTS 8 CTS 2 RXD Input 2 TXD 3 TXD 3 TXD Output 3 RXD 2 RXD 4 DTR Output 20 DTR 6 DSR 9 RI 5 GND 7 GND 5 GND 6 DSR Input 6 DSR 4 DTR 7 RTS Output 4 RTS 1 DCD 8 CTS Input 5 CTS 1 DCD 9 RI Output 22 RI 4 DTR Pin assignments for modem connections All manuals and user guides at all guides com ...

Page 108: ...Chapter 5 Connecting to the Network 108 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 109: ...pliance the card is installed before the appliance is delivered to you The accelerator card has no external cable connection ports and requires no cables NOTE The encryption accelerator card functions only with IPSO 3 4 1 or greater and with Check Point VPN 1 FireWall 4 1 SP4 or greater The accelerator card software package is part of IPSO 3 4 1 so the appliance automatically detects and configure...

Page 110: ...You Need Before you install the card you need Physical access to the unit A Phillips head screwdriver Four screws included in packaging A disposable wrist strap included in packaging WARNING To help guard against electrostatic discharge follow the instructions on the wrist strap envelope before you handle the accelerator card or open the appliance Before you install the card perform the following ...

Page 111: ...Installation Guide 111 Installing the Encryption Accelerator Card 3 Confirm that the two cooling fan blade assemblies are no longer turning 00099 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 112: ...Accelerator Card WARNING Before you open the appliance be sure to disconnect power to the unit to minimize the risk of electrical shock Use the following procedure to install the accelerator card 1 Loosen the four front panel thumbscrews indicated in the following figure 00085 All manuals and user guides at all guides com ...

Page 113: ...tallation Guide 113 Installing the Encryption Accelerator Card 2 Slide the chassis assembly forward to expose the motherboard components as the following figure shows 00171 All manuals and user guides at all guides com ...

Page 114: ...te the 66 MHz PMC connectors on the motherboard Caution Two 33 MHz connectors are also located on the motherboard Do not use the 33 MHz connectors as using them impairs performance Front of Motherboard 66 MHz PMC connectors 33 MHz PMC connectors do not use All manuals and user guides at all guides com ...

Page 115: ...Push down on the card until it is properly seated on the motherboard 6 Place the screws through the standoff holes on the card and into the standoffs on the motherboard 7 Turn each screw clockwise so that the card is attached to the standoffs Do not tighten completely 8 Make sure that all four standoff connections are properly aligned 9 To secure the connections tighten the screws firmly but do no...

Page 116: ...celerator card perform the following procedure 1 Slide the chassis assembly back into the appliance and resecure the four thumbscrews 2 Reattach the power cords 3 Turn on the power 4 Enable the card For more information see Enabling the Encryption Accelerator Card on page 117 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 117: ... or with Check Point software If you use Voyager to create a VPN tunnel see Enabling the accelerator card for an IPSO VPN on page 117 If you use Check Point software to create a VPN tunnel see Enabling the accelerator card for a Check Point VPN on page 117 Enabling the accelerator card for an IPSO VPN 1 Start Nokia Network Voyager for your appliance 2 On the Voyager home page click Config 3 Under ...

Page 118: ... Cryptographic Hardware Acceleration 4 At Hardware Device Configuration click On 5 Click Apply to enable the card You can also monitor Nokia encryption accelerator card interfaces with Voyager For more information about accessing Voyager and locating relevant reference materials see the Voyager Reference Guide All manuals and user guides at all guides com ...

Page 119: ...ing new versions of IPSO the operating system Obtaining system information Performing various housekeeping tasks The boot manager provides commands that allow you to boot from a specified kernel which typically resides on an appliance hard disk drive unit These tasks and the boot manager commands are discussed in the following sections Variables see page 120 Booting the System see page 128 Using t...

Page 120: ...he boot manager stores a number of variables in non volatile memory You can set and view most variables from the boot manager prompt The variables are boot manager revision The version number of the boot manager You cannot set this variable from the command line autoboot If autoboot is set to no the IP700 Series appliance stops at the boot manager command line during the boot process If autoboot i...

Page 121: ...printenv command to view the values of variables currently stored in the boot manager nonvolatile memory The command has the following form printenv Flag Meaning d Debug mode Enters the kernel debugger as soon as possible in the kernel initialization s Single user mode If the console is marked as insecure the root password must be entered to access the manager v Verbose mode Verbose during device ...

Page 122: ... showalias Use the showalias command to view the values of the aliases currently stored in the boot manager nonvolatile memory The command has the following form showalias For example BOOTMGR 46 showalias The current aliases list are Alias 0 disk1 aliased to wd1 Alias 1 disko aliased to wd0 Alias 2 disk3 aliased to wd3 Alias 3 net1 aliased to eth s3p1 Alias 4 net2 aliased to eth s3p2 Alias 5 empty...

Page 123: ...36870912 512M bytes Disk Devices IO port 0x1f0 wdc0 unit 1 wd0 IC35L020AVER07 0 20576MB 40188960 sectors 2501 cyls 255 heads 63 S T 512 B S IO port 0x1f0 wdc0 unit 0 wd1 SanDisk SDCFB 8 8MB 15680 sectors 15 cyls 16 heads 63 S T 512 B S Network Interfaces eth s3p1 flags 130 BROADCAST MULTICAST PRESENT ether 0 a0 8e 40 92 34 speed 1000M full duplex loop0 flags 10b UP LINK LOOPBACK PRESENT soverf0 fl...

Page 124: ...plex eth4 flags 130 BROADCAST MULTICAST PRESENT ether 0 a0 8e 40 92 3d speed 10M half duplex BOOTMGR 2 ls Use the ls command to view the contents of directories on the devices in your IP700 Series appliance The command has the following form ls device directory where device is the device that contains the directory you want to look at and directory is the directory on that device Both device and d...

Page 125: ...ariable and value is the new value you want the variable to assume For example BOOTMGR 2 setenv autoboot yes sets the value of autoboot to be yes unsetenv Use the unsetenv command to clear a particular variable The command has the following form unsetenv name where name is the name of the variable to be cleared For example BOOTMGR 2 unsetenv boot file clears the boot file variable All manuals and ...

Page 126: ...s are set to their factory defaults For example BOOTMGR 2 set defaults autoboot sets the value of autoboot to be yes the factory default setalias Use the setalias command to set an alias The command has the following form setalias name device where name is the alias name and device the device for which name is the alias For example BOOTMGR 2 setalias disk wd0 sets the alias disk to have the value ...

Page 127: ...MGR 2 unsetalias disk deletes the disk alias from the list of aliases Other commands halt Use the halt command to halt the system The command has the following form halt help Use the help command to display a list of the available commands The command has the following forms help or All manuals and user guides at all guides com ...

Page 128: ...st of possible boot flags see the boot flag table in Variables on page 120 For example at the boot manager command prompt enter the following BOOTMGR 0 boot wd0 image current mykernel vd This command boots mykernel from disk wd0 in verbose and debug mode You can supply all any or none of the arguments If you do not supply an argument the boot manager uses the default It first searches its non vola...

Page 129: ... appliance To install a new copy of the operating system IPSO kernel using the boot manager perform the following steps 1 At the boot manager command prompt enter BOOTMGR 0 install If you used the passwd command to protect this command with a password the boot manager prompts you for your password before allowing you to execute the install command 2 Enter the information the install command reques...

Page 130: ...ected by a password enter your current password The program prompts you for the new password 3 Enter the new password The program prompts you to re enter the new password for verification 4 Enter the new password again NOTE If you forgot your password the boot manager requires you to prove that you have physical access to the appliance before allowing you to set a new one Perform the following ste...

Page 131: ...ch the boot manager image loads at boot up Boot file is the new boot manager The new boot manager options are cpipflash cpvpnflash nkipflash and nkvpnflash Execute the install_bootmgr command from IPSO the operating system not from the boot manager NOTE To install the new boot manager you must be in single user mode For example to install the new boot manager complete the following steps 1 Start t...

Page 132: ...rade support for disk drives equal to or greater than 8 4 Gb is found in the IPSO 3 2 1 release notes NOTE To install the new boot manager you must be in single user mode For example to upgrade the boot manager in your IP700 Series appliance perform the following steps 1 Obtain the upgraded boot manager image from the appropriate Nokia customer support site as listed in the Nokia Contact Informati...

Page 133: ...e operating system IPSO on your appliance see CHAPTER 7 Using the Boot Manager for instructions General Troubleshooting Information The information in this section relates to problems that might occur that are not related to routing problems For troubleshooting information specific to routing problems see Troubleshooting Routing Problems on page 143 All manuals and user guides at all guides com ...

Page 134: ...null modem cable Solution Verify that you are using a null modem cable For pinout information see Connecting to the Console on page 30 Cause Wrong terminal settings Solution Verify terminal settings 8 data 1 stop no parity 9600 bps Cause Terminal set for flow control Solution The IP700 Series platform does not use flow control The terminal should be set for no flow control Cause Defective IP700 Se...

Page 135: ...do this 2 After the appliance boots up the following text appears Enter pathname of shell or RETURN for sh Press the Enter key 3 Type etc overpw at the prompt When the response asks if you want continue type y 4 The admin password defaults to no password for admin Continue to boot to multiuser mode 5 Reconfigure the password as you normally would in Lynx NOTE If you are defaulting the password wit...

Page 136: ...on 3 Create the new default configuration Do Not Receive a Login Prompt Error Messages Appear Cause The IP700 Series appliance is defective or the file system on the IP700 Series appliance is defective Solution Contact the appropriate Nokia customer support site as listed in the Nokia Contact Information section at the front of this guide NOTE Use the full installation procedure to install a new s...

Page 137: ...ort settings Verify that IP address and netmask settings are correct for the IP700 Series appliance configuration Cause Wrong link speed Solution Verify that the port on the host and the port on the IP700 Series appliance are set for the same speed 10 Mbps or 100 Mbps An unblinking data and activity LED on a port is a good indication that the speed is mismatched Cause Duplex setting is wrong Solut...

Page 138: ...TIVE Cause High collision rate on the hub Solution Disconnect connections one at a time until the problem is isolated to one computer and troubleshoot further Unable to Ping Through Appliance No Connectivity Between Ports This section covers connectivity issues that are isolated within an IP700 Series appliance or network Ping various network interfaces to pinpoint the problem Use tcpdump to help ...

Page 139: ...ter Cause ARP table has old information Solution If the ARP table has an old or invalid entry for the device associated with the IP address you are attempting to ping use Voyager to delete the invalid entry For information about accessing Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 1 Click CONFIG 2 Click the ARP link in the Interface...

Page 140: ...n the interfaces in use Cause Exceeding TTL on clients Solution Verify that the client is set up for the proper TTL number Many clients are set to receive local traffic only one hop away Problems Interfacing to 1483 Devices Classical IP Cause Remote and local devices are not configured for the same VC and VP value Solution Set remote and local devices to the same VC and VP values Consult your 1483...

Page 141: ...heck power source If there is no power at the source take appropriate action such as inserting a new fuse or resetting the circuit breaker IP700 Does Not Recognize New Memory Configuration Cause DIMMs are not properly seated in DIMM sockets Solution Repeat memory installation procedures Make sure DIMMs are fully seated in sockets Be sure DIMMs click into place IP700 Appliance Locks Up After You Up...

Page 142: ...Setting the boot manager to defaults causes the boot manager to determine that no environment variables are set and it responds by importing the defaults from the binary file To set the boot manager to defaults issue the set defaults command at the boot manager prompt as follows BOOTMGR set defaults If you issue the printenv command again the boot file and boot device entries are now present as th...

Page 143: ...le use of the ICLID command follows For information about the ICLID command see the Voyager Reference Guide For information about accessing Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 NOTE Adding a question mark after any command provides additional command information hostname admin iclid hostname IP address hostname IP address exit...

Page 144: ... Voyager When a trace is enabled the output appears in var tmp ipsrd log Common Problems with OSPF Use tcpdump to view routing information To display routing updates for an interface use the following command tcpdump i interface proto ospf For more information about using the tcpdump command see Filtering Traffic With tcpdump on page 149 Under routing options in Voyager you can also enable several...

Page 145: ... set a default or static route NOTE You can use ICLID to display OSPF details Common Problems with RIP Use tcpdump to view routing information To display routing updates for a specific interface use the following command tcpdump i interface proto rip For more information about using the tcpdump command see CHAPTER 9 Using tcpdump Under routing options in Voyager you can also enable several types o...

Page 146: ...n Exchanging routes involves several configuration steps Follow the tasks in the Voyager Reference Guide online documentation to ensure that all steps are followed For information about accessing Voyager and the related reference materials see Using Voyager to Configure the Network Interfaces on page 81 Cause Routing protocol is not functioning properly Solution To ensure that each routing protoco...

Page 147: ...network much like the tcpdump or snoop programs of a UNIX workstation Some features and commands that tcpdump uses are outlined in this section for more information see the man page for tcpdump NOTE control c stops tcpdump NOTE Substitute either physical or logical interface names for interface All manuals and user guides at all guides com ...

Page 148: ...terface proto protocol The following command returns OSPF traffic tcpdump i eth s2p3c0 proto ospf The following command returns IGRP traffic tcpdump i eth s2p1c0 proto igrp To View Packets Running the IGMP Protocol tcpdump 1 interface proto igmp The following command returns packets passing through the specified interface tcpdump 1 eth s2p3c0 proto igmp To Specify an Interface Using a TCP UDP Appl...

Page 149: ...port The following command returns all bootp and dhcp traffic tcpdump i eth s2p1c0 udp port 68 Filtering Traffic With tcpdump To Exclude Specific Types of Traffic tcpdump i interface ip or udp not TCP UDP application port The following command returns internet traffic for all ports other than port 80 tcpdump i eth s1p1c0 not port 80 To Delimit the Size of the Packet tcpdump i interface s packet si...

Page 150: ...support site as listed in the Nokia Contact Information section at the front of this guide The w flag copies the first 68 bytes of every packet unless the capture size is increased For users running without data encryption passwords are stored in the file NOTE The file grows very quickly if the network being viewed is busy Nokia recommends that you create this file on the var partition The followi...

Page 151: ...ation about routes tcpdump i atm s3p1c0 s 320 vv proto ospf The following command returns all IGRP traffic connected to that interface tcpdump i eth s1p1c0 s 320 vv proto igrp The following command returns all Telnet traffic connected to that interface tcpdump i eth s1p1c0 port 23 Read the trace file with the following command tcpdump r var tmp tracefile All manuals and user guides at all guides c...

Page 152: ...Chapter 9 Using tcpdump 152 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 153: ...ials see Using Voyager to Configure the Network Interfaces on page 81 Use crontab e to create a crontab file for root to schedule VPN 1 FireWall 1 log file switches Check Point SMTP proxy services do not work Assurenet Pathways Defender Security System does not work use Radius authentication with the Defender Security System Make sure you enter the correct feature and key with your license The net...

Page 154: ...Chapter 10 Tips for Installing Configuring and Maintaining Your Appliance 154 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 155: ... 44 cm 19 in 48 cm rack mountable Depth 21 in 53 cm Weight 34 lbs 15 5 kg base system 40 lbs 18 kg fully loaded Temperature Operating 5 C to 40 C Storage 40 C to 70 C Electrical Voltage 100 to 120 or 200 to 240 VAC Frequency 50 or 60 Hz Amps 3 5 1 5 A Pressure Maximum Altitude 11 500 ft 3 500 m All manuals and user guides at all guides com ...

Page 156: ...ll duplex or half duplex RJ 45 V 35 V 35 DB 26 to V 35 adapter cable V 35 X 21 X 21 DB 26 to X 21 adapter cable X 21 E1 built in CSU DSU Native E1 cable RJ 48 T1 built in CSU DSU Native T1 cable RJ 48 ATM 155 Mbps SONET SDH STS3c STM1 multimode fiber SC Gigabit Ethernet Fiber optic cable up to 275 meters long LC or SC All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 157: ...ects over the ventilation holes on the IP700 Series appliance The IP700 Series appliances might overheat and become damaged Stand alone or stacked installation If you have more than one IP700 Series appliance you can install the IP700 Series appliances standalone or stacked as follows Provide sufficient clearance six inches behind the IP700 Series appliances to allow the back exit fan to move air ...

Page 158: ...Appendix A Technical Specifications 158 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 159: ...dix contains the following compliance information Declaration of Conformity see page 160 Compliance Statements see page 162 FCC Notice US see page 163 FCC Requirements US see page 164 Equipment Attachment Regulations Canada see page 166 All manuals and user guides at all guides com ...

Page 160: ...facturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP710 IP740 Model Number IP0740 Product Options All Serial Number 1 to 100 000 Date First Applied 2001 Safety EN60950 1992 A1 A2 1993 A3 1995 A4 1997 A11 1998 with Japanese National Deviations EMC EN55024 1998 EN55022A 1998 EN61000 3 2 EN61000 3 3 All manuals and user guides at all gui...

Page 161: ...tive 73 23 EEC and the EMC Directive 89 336 EEC with Amendment 93 68 EEC Alan Hutchinson Manager Regulatory Compliance Engineering Mountain View California March 2002 European contact Greg Shortell Nokia Telecommunications 2 Heathrow Blvd 284 Bath Road Heathrow Middlesex UB7 ODQ England All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 162: ...n Community CE EN61000 3 2 European Community CE EN61000 3 3 European Community CE Immunity Standards EN50024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 8 EN61000 4 11 ENV50204 Safety Standards UL 1950 USA CAN CSA 22 2 No 950 M95 Canada EN60950 European Community CE TUV EN60950 w Japanese National Deviation Japan Telecom T1 FCC Part 68 CS 03 V 35 X ...

Page 163: ...no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio or television reception the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the computer and receiver Connect the computer into an outlet on a circ...

Page 164: ...tances You will be informed of your right to file a complaint with the FCC The telephone company may make changes in its communications facilities equipment and operation procedures where such action is reasonably required in the operation of its business and is not inconsistent with the rules and regulations of the Federal Communications Commission If they do you will be notified in advance to gi...

Page 165: ... with the FCC if you believe it is necessary The telephone company may make changes to its facilities equipment operations procedures that could affect the operation of the equipment If this happens the telephone company will provide advance notice in order for you to make necessary modifications to maintain uninterrupted service If this equipment is causing harm to the telephone network the telep...

Page 166: ... The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations Repairs to certified equipment should be coordinated by a representative designated by the supplier Any repairs or alterations made by the user to this equipment or equipment malfunctions may give the telecommunications company cause to request the user to disconnect th...

Page 167: ... 1 2003 whichever is longer Alternatively the Nokia Corporation modified source code can be downloaded from ftp ftp iprg nokia com pub GNU All requests for code on media shall be accompanied by Address of requester Check for 25 payable to Nokia Inc Address all such requests to Director of Customer Support Nokia Inc 313 Fairchild Drive Mountain View CA 94043 All other General Public Licensed files ...

Page 168: ...no warranty for this free software If the software is modified by someone else and passed on we want its recipients to know that what they have is not the original so that any problems introduced by others will not reflect on the original authors reputations Finally any free program is threatened constantly by software patents We wish to avoid the danger that redistributors of a free program will ...

Page 169: ...llowing a Accompany it with the complete corresponding machine readable source code which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange or b Accompany it with a written offer valid for at least three years to give any third party for a charge no more than your cost of physically performing source distribution a complete machine ...

Page 170: ...stribution limitation excluding those countries so that distribution is permitted only in or among countries not thus excluded In such case this License incorporates the limitation as if written in the body of this License 9 The Free Software Foundation may publish revised and or new versions of the General Public License from time to time Such new versions will be similar in spirit to the present...

Page 171: ...ct benefit of any third party Any fixes updates or new releases of the Software which may be made available to Customer shall be deemed part of the Software subject to the restrictions and limitations contained in this license 2 PROPRIETARY RIGHTS All right title and interest in and to the Software and documentation and any copies thereof provided by Nokia or which may be made by Customer are and ...

Page 172: ...e provide or otherwise make available such trade secrets or copyrighted material in any form to any third party without the prior consent of Nokia Customer agrees to implement reasonable security measures to protect such trade secrets and copyrighted material The obligations of confidentiality shall not apply to information which has entered the public domain except where such entry is the result ...

Page 173: ...l computer software documentation Consistent with the Federal Acquisition Guidelines and related laws any use modification reproduction release performance display or disclosure of such commercial software or commercial software documentation by the US Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of...

Page 174: ...Appendix D Warranty and Software License 174 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Page 175: ...eck CSU DSU Channel Service Unit Data Service Unit DCE data communications equipment DHCP Dynamic Host Configuration Protocol DIMM dual inline memory module DLCI data link connection identifier DTE Data Terminal Equipment DVMRP Distance Vector Multicast Routing Protocol EMI electromagnetic interference FDDI Fiber Distributed Data Interface FDL facilities data link HDLC High Level Data Link Control...

Page 176: ...sfer Unit OEM original equipment manufacturer OSPF Open Shortest Path First PCI Peripheral Component Interconnect PCMCIA Personal Computer Memory Card International Association RAID Redundant Array of Independent Disks RIP Routing Information Protocol SMF single mode fiber SMTP Simple Mail Transfer Protocol TTL time to live UDP User Datagram Protocol UTP5 unshielded twisted pair category 5 VC virt...

Page 177: ...attaching accelerator card to motherboard 115 autoboot variable 120 B boot command 128 boot manager 119 booting the system 128 installing 131 installing IPSO 120 129 password protection for 130 upgrading 132 variables used by 120 128 boot manager revision variable 120 boot device variable 121 boot file variable 121 boot flags variable 121 bootwait variable 120 browser type 76 built in CSU DSU devi...

Page 178: ...rds 91 96 100 102 CRC 175 CSU DSU 92 175 CSU DSU devices 95 D data communications equipment device 31 DCE 175 declaration of conformity 160 DHCP 175 dimension specifications 155 DIMM 175 DIMMs accessing and removing 67 socket locations 70 DLCI 175 DTE 175 dual port gigabit Ethernet network interface card 105 dual port network interface cards 91 DVMRP 175 E E1 crossover cable pin connections 98 E1 ...

Page 179: ...rk interface cards 104 IPSO booting up 128 IPSRD 176 L LC connector 106 LC to SC cable 106 LLC 176 LMI 176 load balancing 38 ls command 124 LSA 176 M maintenance tips 153 maximum length of hostname 76 memory 64 sockets 65 upgrading 64 memory interleaved 71 MMF 176 modem port connections 32 modems PMCIA 21 monitoring appliances 33 ATM network interface cards 102 E1 network interface cards 96 Ethern...

Page 180: ...les 125 showalias command 122 single port gigabit Ethernet network interface card 105 slot assignments for 33 Mhz cards 39 SMF 176 SMTP 176 software license 171 space requirements 157 specifications 155 specifications for interfaces 156 stand alone or stacked installation 157 static discharge 65 status LEDs 33 sysinfo command 123 T T1 crossover cable pin connections 101 T1 network interface cards ...

Page 181: ... 120 setting 125 VC 176 VCI 176 Voyager 12 opening 81 VPN 176 W warranty 171 weight specifications 155 X X 21 network interface cards connecting to 91 connectors 92 X 21 operating speed 38 X 21 specifications 156 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 182: ...Index 182 IP700 Series Installation Guide All manuals and user guides at all guides com ...

Search results

Summary of Contents for IP710 Series

Reviews:

Related manuals for IP710 Series

Brands by name

Popular brands

Nokia IP710 Series, Installation Manual

Search results

Summary of Contents for IP710 Series

Reviews:

Related manuals for IP710 Series

Brands by name

Popular brands