Nokia IP390 - Security Appliance Скачать руководство пользователя

Страница: 3 / 97

IP390 Security Platform Installation Guide

Contact Information

Nokia Contact Information

Corporate Headquarters

Regional Contact Information

Nokia Global Technical Assistance Center

Non-Technical Support

Web Site

http://www.nokia.com

Telephone

1 914 368 0400

Mail Address

Nokia Inc.
102 Corporate Park Drive
White Plains, NY 10604
USA

Americas

Nokia Inc.
102 Corporate Park Drive
White Plains, NY 10604
USA

Tel: 1 877 997 9199
E-mail:

[email protected]

Europe, Mid-
dle East, and
Africa

Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG
UK

Tel: (UK) 44 161 601 8908
Tel: (France) 33 170 708 166
Tel: (Middle East, Africa, Dubai) 971 4 3697600
E-mail:

[email protected]

E-mail:

[email protected]

Asia-Pacific

438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968

Tel: 603 9145 1032
E-mail:

[email protected]

Web Site

https://support.nokia.com

Voice

Americas

Europe, Middle East,
Africa

Asia-Pacific

International

1 888 361 5030

44 1252 868900

65 6723 2999

1 613 271 6721

For non-technical support issues, including your Nokia Support Agreement, licensing, and Web
site access, use the following contact information:
E-mail:

[email protected]

080919

Содержание IP390 - Security Appliance

Страница 1: ...Part No N450000381 Rev 001 Published October 2008 Title Page IP390 Security Platform Installation Guide ...

Страница 2: ...Nokia Inc as is and any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or service...

Страница 3: ...kia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 Tel Middle East Africa Dubai 971 4 3697600 E mail europe nokiaforbusiness com E mail mea nokiaforbusiness com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 603 9145 1032 E mail asia nokiaforbusiness com Web Site https support nokia com Voice Americ...

Страница 4: ...4 IP390 Security Platform Installation Guide ...

Страница 5: ...nce 20 Site Requirements Warnings and Cautions 21 Software Requirements 22 Product Disposal 22 2 Installing the Nokia IP390 Appliance 23 Before You Begin 23 Rack Mounting the Appliance 23 Connecting Power 24 Connecting to the Console or Auxiliary Port 25 Console Port 27 Auxiliary Port 28 Connecting to Network Interfaces 29 3 Performing the Initial Configuration 31 Using a Console Connection 31 Usi...

Страница 6: ...5 5 Installing and Replacing Network Interface Cards 49 Deactivating Configured Interfaces 49 Removing Installing and Replacing NICs 50 Before You Start 50 Configuring and Activating Interfaces 55 Monitoring Network Interface Cards 55 6 Installing and Replacing Components Other than Network Interface Cards 57 Replacing the Compact Flash Memory Card 57 Installing a Flash Memory PC Card 60 Before Yo...

Страница 7: ...IP390 Security Platform Installation Guide 7 B Compliance Information 89 Declaration of Conformity 89 Compliance Statements 90 FCC Requirements US 91 FCC Notice US 92 Index 93 ...

Страница 8: ...8 IP390 Security Platform Installation Guide ...

Страница 9: ...ventions 14 Table 2 Text Conventions 15 Table 3 Specifications for the IP390 Platform 17 Table 4 PMC Network Interface Card Slots 19 Table 5 System Status LEDs 20 Table 6 Pin Assignments Console Connector and Cable 28 Table 7 Pin Assignments for AUX Connector and Modem Cable 28 ...

Страница 10: ...10 IP390 Security Platform Installation Guide ...

Страница 11: ...nments 39 Figure 11 Ethernet Crossover Cable Pin Connections 39 Figure 12 Gigabit Ethernet Crossover Cable Pin Connections 40 Figure 13 Two Port Copper Gigabit Ethernet NIC 41 Figure 14 Copper Gigabit Ethernet Cable Connector Pin Assignments 42 Figure 15 Gigabit Ethernet Crossover Cable Pin Connections 42 Figure 16 PMC Two Port Short Range Gigabit Ethernet NIC 43 Figure 17 PMC Two Port Long Range ...

Страница 12: ...12 IP390 Security Platform Installation Guide ...

Страница 13: ...d power Chapter 3 Performing the Initial Configuration describes how to make the appliance available on the network Chapter 4 About IP390 Appliance Network Interface Cards describes how to connect to and use each of the supported NICs Chapter 5 Installing and Replacing Network Interface Cards describes how to install monitor and replace network interface cards NICs Chapter 6 Installing and Replaci...

Страница 14: ...ght encounter one or more of the following elements on a command line path Table 1 Command Line Conventions Convention Description command This required element is usually the product name or other short word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product It might appear alone or precede one or more options You must spell a command exactly as sho...

Страница 15: ...actly as shown immediately after the name of the file The extension might be optional in certain products Punctuation and mathematical notations are literal symbols that you must enter exactly as shown Single quotation marks are literal symbols that you must enter as shown Table 1 Command Line Conventions Convention Description Table 2 Text Conventions Convention Description monospace font Indicat...

Страница 16: ...lustering Configuration Guide for the version of Nokia IPSO you are using Nokia Network Voyager inline help You can find the most up to date version of the Nokia IP390 Security Platform Installation Guide in PDF on the Nokia support site https support nokia com You can access inline help the Nokia Network Voyager Reference Guide and the CLI Reference Guide from Nokia Network Voyager Check Point do...

Страница 17: ...iance and the requirements for using it The following topics are covered About the Nokia IP390 Appliance Managing the IP390 Appliance Site Requirements Warnings and Cautions Software Requirements Product Disposal About the Nokia IP390 Appliance The IP390 is a one rack unit disk based or flash based appliance that incorporates a serviceable slide out tray into the chassis design and support for var...

Страница 18: ...ports and status LEDs Figure 3 Built In Gigabit Ethernet Ports Details Caution Cables that connect to the Gigabit Ethernet ports must be IEEE 802 3 compliant to prevent potential data loss 00525 IP390 System status LEDs AUX port Console port Four port Gigabit Ethernet Flash memory PC card slots PMC NIC slots slots 1 and 2 unpopulated in base bundle Reset button 00527 Power socket Power switch 0054...

Страница 19: ...r reseller information contact a Nokia service provider listed in the Nokia Contact Information on page 3 System Status LEDs You can monitor the basic operation of the IP390 appliance and NICs by checking their status LEDs The system status LEDs are located on the front panel of the appliance as Figure 4 shows Table 4 PMC Network Interface Card Slots Interface For details see Four port copper 10 1...

Страница 20: ... following interfaces Nokia Network Voyager an SSL secured Web based element management interface to Nokia IP appliances Network Voyager is preinstalled on the IP390 appliance and enabled through the Nokia IPSO operating system With Network Voyager you can manage monitor and configure the IP390 appliance from any authorized location within the network by using a standard Web browser Table 5 System...

Страница 21: ...00 Nokia IP appliances offering administrators the most rapid and dependable method to perform Check Point application upgrades Site Requirements Warnings and Cautions Before you install a Nokia IP390 appliance ensure that your computer room or wiring closet conforms to the environmental specifications listed in Chapter A Technical Specifications Warning Excessive electromagnetic interference EMI ...

Страница 22: ...ons These devices contain materials and components that must be disposed of properly Therefore to help prevent damage to the environment Nokia encourages you to dispose of these devices in an environmentally friendly manner The following resources are available to you to help with equipment disposal decisions Many Nokia products are labeled with information about the materials used in their manufa...

Страница 23: ...nding wrist strap Suitable grounded work surface on which to place the chassis tray assembly Caution To help guard against electrostatic discharge damage make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance Rack Mounting the Appliance The IP390 appliance mounts in a s...

Страница 24: ...n openings during installation may result in damage to the appliance Connecting Power The power plug and power switch for the IP390 appliance is located on the back of the appliance as Figure 7 shows Note The IP390 appliance power supply automatically detects the input voltage 115VAC 60Hz 90 to 132 or 220VAC 50Hz 180 to 264 and configures itself appropriately 00525 IP390 Mounting screw slots 00539...

Страница 25: ... see Chapter 3 Performing the Initial Configuration After you perform the initial configuration you no longer need the console connection You can use any standard VT100 compatible terminal with an RS 232 data terminal equipment DTE interface or terminal emulation program If you connect the console port to a data communications equipment DCE device use a straight through cable Use the following con...

Страница 26: ...l emulation program The cable that Nokia provides with IP390 appliances includes a latching mechanism used to secure the cable to the console port or auxiliary port of your appliance Note To use the cable for modem connections from the auxiliary port you need to order a modem cable kit For information about contacting Nokia to order the kit see Nokia Contact Information on page 3 Note The cable de...

Страница 27: ...ection using the appliance auxiliary port and the DB 25 male adaptor The DB 9 adapter is provided with the cable The DB 25 adaptor is provided with Nokia modem cable kits for the IP390 Console Port Use the built in console port shown in Figure 6 to supply information that makes the appliance available on the network at speeds up to 9600 bps The default configuration of the serial ports are 9600 ba...

Страница 28: ... for managing the appliance remotely or out of band The default configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop bit Table 7 provides pin assignment information for modem connections Table 7 Pin Assignments for AUX Connector and Modem Cable Console Port DTE RJ 45 to RJ 45 Rollover Cable RJ 45 to DB 9 Terminal Adapter Remote Device Signal RJ 45 Pin RJ 45 Pin DB 9 Pin Sign...

Страница 29: ...ps 100 Mbps or 1000 Mbps hub or directly to a host Note All Nokia copper Gigabit Ethernet NICs support cable auto sensing You can use a straight through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch or to connect directly to a host For details see Copper Gigabit Ethernet Connectors and Cables on page 41 To connect fiber optic Gigabit Ethernet devices Use a multi mode fi...

Страница 30: ...2 Installing the Nokia IP390 Appliance 30 IP390 Security Platform Installation Guide After you connect the network interfaces continue with Chapter 3 Performing the Initial Configuration ...

Страница 31: ...following sections Using a Console Connection Using Nokia Network Voyager Using the Command Line Interface Using Nokia Horizon Manager For information about how to use the DHCP client for initial configuration see the Read Me First document Using a Console Connection If you have not already done so you need to connect to the console port to complete the initial configuration For information about ...

Страница 32: ...r if the power LED is not illuminated Check the power supply cord to make sure it is properly connected Make sure the power switch is on Make sure the chassis tray assembly is pushed all the way in from the front of the appliance and that the front panel retaining screws are tightened Make sure that power is turned on to the power strip or wall receptacle you plugged the appliance in to If the fan...

Страница 33: ...word c Enter the following rm config active or mv config active config active old d Reboot the appliance e Respond to the Hostname prompt within 30 seconds to prevent the DHCP client from restarting 4 At each subsequent prompt type the requested configuration information and then press Enter For more information about how to respond to the prompts during the initial configuration process see the G...

Страница 34: ...ge Packages and turning the package on The following documentation is available in Nokia Network Voyager and is accessible from the Network Voyager interface as shown in Figure 8 Nokia Network Voyager Reference Guide This guide is the comprehensive reference source for Nokia Network Voyager To access this source look at the list in the navigation tree on the left side of the window as shown in Fig...

Страница 35: ...ork as an admin cadmin or monitor user If you log in as a cadmin cluster administrator user you can change and view configuration settings on all the cluster nodes For information about how to administer a cluster see the traffic management commands section in the CLI Reference Guide for the version of Nokia IPSO you are using 2 If you log in as a monitor user you can execute only the show form of...

Страница 36: ...roving productivity Using Horizon Manager a network security professional can manage multiple devices simultaneously perform parallel software upgrades device verifications device configuration file backups and more Horizon Manager is designed to manage and configure a large number of Nokia security appliances that reside on a corporate enterprise managed service provider MSP or hosted application...

Страница 37: ... Network Interface Cards Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any electronic component Four Port 10 100 Mbps Ethernet Network Interface Card The IP390 appliance supports Nokia approved four port UTP5 dual mode 10 Mbps and 100 Mbps Ethernet NICs When you purchase an Ether...

Страница 38: ...ote equipment illuminate to indicate the connection As data is transmitted the activity LEDs on the appliance light up Ethernet NIC Connectors and Cables The connectors on the Ethernet NIC are RJ 45 connectors To connect to a hub use a straight through RJ 45 cable To connect directly to a host use an RJ 45 crossover cable For further details about cables that you should use see NIC Interfaces on p...

Страница 39: ...copper tabs facing up and toward you Figure 10 Ethernet Cable Connector Pin Assignments The following figure shows the pin assignments for the RJ 45 cross over cable Figure 11 Ethernet Crossover Cable Pin Connections You can also use cables intended for Gigabit Ethernet NIC connections for your Ethernet NIC connections as shown in Figure 12 Pin Assignment 1 TX 2 TX 3 RX 4 5 6 RX 7 8 00270 8 1 0001...

Страница 40: ...other NICs do not occupy Note Copper Gigabit Ethernet NICs you use in IP390 appliances need to be the Version 2 type as indicated on the right end of the NIC faceplate These NICs are sold by Nokia under the order code NIF4425 Copper Gigabit Ethernet NIC Features The copper Gigabit Ethernet NIC supports the following features Supports traffic at 10 100 and 1000 Mbps High bandwidth Half duplex mode ...

Страница 41: ...ectors To connect to a hub use a straight through RJ 45 cable To connect directly to a host use an RJ 45 crossover cable For further details about cables that you should use see NIC Interfaces on page 88 Caution Cables that connect to the Gigabit Ethernet NIC must be IEEE 802 3 compliant to prevent potential data loss You can order appropriate adapter cables separately You can order additional cab...

Страница 42: ... Ethernet Crossover Cable Pin Connections To connect the IP390 appliance to other network components you can order appropriate adapter cables separately from a cable vendor of your choice Two Port Fiber Optic Gigabit Ethernet Network Interface Card All NICs installed in an IP390 are installed into slots on the appliance Gigabit Ethernet NICs can occupy any of the slots or subslots in an appliance ...

Страница 43: ...0 1 or higher The long range single mode fiber SMF fiber optic Gigabit Ethernet NICs in the IP390 run on Nokia IPSO v4 2 or higher You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager Specifically you set the port speed and full duplex mode with Network Voyager For information about how to access Network Voyager and the related reference materials see Chapter 3 ...

Страница 44: ...optic Gigabit Ethernet NIC to other network components use a single mode fiber optic cable with an LC connector for each NIC interface The destination end of the cable can be either LC or SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port LC and ...

Страница 45: ...C provides up to 1 5 Mbps of throughput and is deployed in the United States The following figure shows T1 NIC front panel details Figure 18 Four port T1 NIC front panel details T1 Connectors and Cables To connect the NIC to a T1 device use a straight through RJ 48 cable Note Cable types C S and X will all work properly with your Nokia T1 NICs Note If you use an RJ 45 cable with your T1 NIC by mis...

Страница 46: ...okia requires that all equipment be connected to a power source using a socket outlet with protective earthing connection In the following figure the RJ 48 connector is numbered from right to left with the copper pins facing up and toward you Figure 19 T1 Network Interface Card Receptacle and Pin Assignments In the following figure wiring is shown for a T1 crossover cable Figure 20 T1 Crossover Ca...

Страница 47: ...t T1 Network Interface Card IP390 Security Platform Installation Guide 47 Note Your T1 cable might not include straight through wiring for pins 3 6 7 and 8 It will however work properly with your Nokia T1 NICs ...

Страница 48: ...4 About IP390 Appliance Network Interface Cards 48 IP390 Security Platform Installation Guide ...

Страница 49: ...Chapter 4 About IP390 Appliance Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP390 appliance Limit service of the unit to the procedures described in this chapter Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD by making sure you are properly grounded before touching ...

Страница 50: ...ore You Start To remove install or replace a Nokia NIC you need the following A Phillips head screwdriver Physical access to the appliance Access to the appliance by using Nokia Network Voyager or the CLI Suitable grounded work surface Network interface card kit To remove install or replace a NIC Note Because power to the IP390 appliance is automatically disconnected when the chassis tray assembly...

Страница 51: ...assembly forward to expose the NIC connectors Remove the tray completely to avoid damaging components 4 From underneath the chassis tray assembly remove the bezel retaining screws If you are installing a NIC in an unoccupied slot remove the blank bezel that occupies the space in the appliance front panel retain it for future use and proceed to step 7 00525 IP390 Chassis tray assembly retaining scr...

Страница 52: ...gently away from the front panel 7 Insert the new NIC or blank bezel If you are removing a NIC without installing another NIC a Insert a blank bezel into the front panel slot formerly occupied by the NIC and push it gently into place Make sure that the bezel is completely seated into the front panel and that the screw holes on the bottom of the bezel align with those in the front panel Note To red...

Страница 53: ...f the NIC as close as possible to the connector locations down toward the chassis tray assembly For T1 NICs note that only two connectors on the NIC are used for the interface as the following figure shows Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly 00532a 00689 As shown on the bottom of the T1 NIC only these two NIC connectors are used for the...

Страница 54: ... the NIC retaining screws into the standoffs on the back of the NIC 9 From beneath the chassis tray assembly screw in the bezel retaining screws 10 Gently slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly clicks into place 00531 00528 00538 IP390 ...

Страница 55: ...atus indicator information for the built in Gigabit Ethernet ports see Built In Gigabit Ethernet Ports on page 18 For status indicator information for the four port Ethernet NIC see Four Port 10 100 Mbps Ethernet Network Interface Card on page 37 For status indicator information for the two port copper Gigabit Ethernet NIC see Two Port Copper Gigabit Ethernet Network Interface Card on page 40 For ...

Страница 56: ...5 Installing and Replacing Network Interface Cards 56 IP390 Security Platform Installation Guide ...

Страница 57: ...nce Limit service of the appliance to the procedures described in this chapter Caution Protect your IP390 appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any component Replacing the Compact Flash Memory Card In flash based IP390 appliances the compact flash memory card stores the Nokia IPSO operating system ...

Страница 58: ...nic component You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembly to service internal components Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be complete...

Страница 59: ...the two front panel retaining screws 3 Gently slide the chassis tray assembly forward and completely remove the assembly to expose the motherboard components 4 Place the chassis tray assembly on a table top 5 Locate and remove the existing compact flash memory card from the slot by holding the edges of the card and gently sliding it out of the slot 6 Gently insert the new compact flash memory card...

Страница 60: ...k Voyager or the command line interface CLI Compact flash memory PC card and accompanying documentation Caution To avoid potential equipment malfunction Nokia recommends that you obtain flash memory PC cards only from Nokia or authorized resellers For further information contact the appropriate Nokia customer support site listed in Nokia Contact Information on page 3 Caution You risk damage to the...

Страница 61: ...iance mount dev wd1 cdrom Or if you do have a hard disk drive installed in your appliance mount dev wd2 cdrom The cdrom directory is a default directory in Nokia IPSO for mounting media 4 Use the cp command to transfer Nokia IPSO images or configuration files to and from the flash memory PC card For example to copy the current Nokia IPSO image from the compact flash memory to the flash memory PC c...

Страница 62: ...cess to the appliance A Nokia approved hard disk drive Access to the appliance through Network Voyager A Phillips head screwdriver A torque screwdriver capable of a 69 4ozf in 5kgf cm setting To install or replace a hard disk drive 1 Use Network Voyager or the CLI to halt the appliance To use Network Voyager to shut the appliance down select System Configuration Reboot or Shutdown Halt To use the ...

Страница 63: ...ay Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply...

Страница 64: ...ve the retaining screws that hold the hard disk drive unit from the bottom of the chassis tray assembly Gently remove the hard disk drive from the motherboard taking care not to damage the connector 5 Insert the hard disk drive unit Note Push the hard disk drive gently into place Take care to align the connectors correctly as the connectors are not keyed 00534 00536 ...

Страница 65: ...ews that hold the chassis tray assembly Configuring a Hard Disk Drive for Logging On the flash based IP390 you can save log files locally by installing and configuring an optional hard disk drive The Nokia Network Voyager Reference Guide and the CLI Reference Guide for Nokia IPSO contain instructions for configuring a Nokia appliance to store Nokia IPSO log messages on the disk This section explai...

Страница 66: ...e 10 When the appliance has rebooted log into it and start Nokia Network Voyager 11 Navigate to the System Logging configuration page 12 Select the option Logging to Optional Disk The other options on this page do not apply to Check Point logging 13 Click Apply 14 Click Save Note The appliance can use only one local logging device at a time For more information about storing Nokia IPSO system logs...

Страница 67: ...he motherboard as you look at the appliance from the front as Figure 23 shows Figure 23 DIMM Socket Locations Before You Start To upgrade or replace the memory in your appliance you need the following Physical access to the appliance Nokia memory upgrade kit and accompanying documentation Network or console access to the appliance Caution To protect the IP390 appliance and the memory modules from ...

Страница 68: ...tray assembly forward to expose the DIMM sockets Remove the tray completely to avoid damaging components Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the applian...

Страница 69: ...to pull opposite ends of the DIMM alternately to gradually free it from the contact pins 5 The memory DIMMs are keyed to prevent improper insertion Press the new DIMM into the socket until it clicks into place The top of the DIMM is smooth The bottom edge has three different length sets of contacts which mate with the slots on the socket Be sure the contacts and slots are properly aligned before y...

Страница 70: ...ining screws The appliance automatically recognizes the new memory configuration You can verify this from the Network Voyager the CLI or from the Nokia IPSO shell To verify the memory from the CLI enter show asset hardware To verify the memory from the Nokia IPSO shell enter dmesg grep real memory Replacing the Battery To replace the battery you need the following The appropriate Nokia battery rep...

Страница 71: ...k with burns or death resulting for the user Caution Make certain that you are properly grounded when you handle components internal to the appliance to protect against electrostatic discharge damage to the appliance Use the grounding wrist strap included in the battery replacement kit To install the battery 1 Use Network Voyager or the CLI to halt the appliance To use Network Voyager to shut the ...

Страница 72: ...n the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply or power supply wiring without disconnecting the power cord 5 Locate the bat...

Страница 73: ...the positive side facing up slide the new battery through the cutout in the battery holder Caution You must place the new battery into the battery holder observing the correct polarity The positive terminal of the battery must be facing up 8 Gently slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly ...

Страница 74: ...6 Installing and Replacing Components Other than Network Interface Cards 74 IP390 Security Platform Installation Guide ...

Страница 75: ...hat the terminal communicates with the IP390 appliance If this is not possible using your laptop computer or terminal the problem is with the terminal or cable and not the appliance Problem You do not have a console connection to the IP390 appliance Solution For information about how to create a console connection see Using a Console Connection on page 31 Problem Not connected with a null modem ca...

Страница 76: ...have local serial access to your appliance console to perform this procedure With a keyboard and monitor directly connected to the appliance the boot prompt does not appear and you cannot perform this procedure 1 Boot up the appliance in single user mode by restarting or power cycling the appliance When the boot prompt appears type boot s and press enter before the appliance goes into multiuser mo...

Страница 77: ...nformation about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 2 Under Configuration Database Management Config System Configuration Manage Configuration Sets choose the option to create a new factory default configuration 3 Create the new default configuration Do Not Get a Login Prompt Error Messages Appear Problem The IP390 appliance...

Страница 78: ...on and fix it if necessary Problem Wrong link speed Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Do Not See Interfaces that Should be Present Problem Local IP390 appliance ports do not appear Solution Your NIC might be defective Contact the appropriate Nokia customer support site as listed in Nokia Contact Information on page 3 Note...

Страница 79: ...Solution Check the routing table to see if a route exists to the network where the interface is located If no route exists see Troubleshooting Routing Problems on page 82 Problem Attached device does not have proper default route or routing information Solution If a local computer is unable to ping through an attached appliance the computer might contain either an invalid default route or invalid ...

Страница 80: ...n Verify that DVMRP is enabled on the interfaces in use Problem Exceeding TTL on clients Solution Verify that the client is set up for the proper TTL number Many clients are set to receive local traffic only one hop away Problems Interfacing to 1483 Devices Problem Remote and local devices are not configured for the same VC and VP value Solution Set remote and local devices to the same VC and VP v...

Страница 81: ...IPSO with a console connection No error messages appear but the appliance stops responding to console and network Problem During the upgrade process some of the environment variables might not have updated correctly Solution You can verify what the current boot manager settings are by issuing a printenv command at the boot manager prompt as shown in this example Loading boot manager BOOTMGR 0 prin...

Страница 82: ...bleshooting Routing Problems Several useful tools are available to troubleshoot routing problems The first tool is available from the Monitor page in Network Voyager from which you display routing statistics and errors You can access this information from the command line interface using the ICLID IPSRD command line interface daemon command An example use of the ICLID command is shown below For in...

Страница 83: ...3 age 3111 In addition several trace options are available You can enable these options under the routing options in Network Voyager When a trace is enabled the output appears in var tmp ipsrd log Common Problems with OSPF Use tcpdump to view routing information Use the following command display routing updates for that interface tcpdump i interface proto ospf For more information about how to use...

Страница 84: ...nce Guide Under routing options in Network Voyager you can also enable several types of trace options for routing information protocol RIP These traces are logged in var tmp ipsrd log For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 Problem Inconsistent subnet mask netmask does not match the class of IP address for R...

Страница 85: ...o access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 33 Problem Routing protocol is not functioning properly Solution to ensure that each routing protocol is functioning properly see Common Problems with OSPF on page 83 and Common Problems with RIP on page 84 ...

Страница 86: ...7 Troubleshooting 86 IP390 Security Platform Installation Guide ...

Страница 87: ...s behind the front panel of the rack 6 inches 15 centimeters behind the IP390 appliance to allow the back exit fan to move air through the appliances Caution Do not place objects over the ventilation holes on the appliance The appliance might overheat and become damaged Operating Temperature The operating temperature range for the Nokia IP390 appliance is 0 C to 45 C 32 F to 113 F Dimensions Heigh...

Страница 88: ...ble in some cases shielded Cat 5 Ethernet cable can be used to improve interference radiated emissions RJ 45 Fiber optic Gigabit Ethernet IEEE 802 32 Gigabit Ethernet multi mode Fiber LC Copper Gigabit Ethernet IEEE 802 3 1000 Base T unshielded twisted pair full duplex or half duplex Straight through cable Cat 5 type or crossover cable in some cases shielded Cat 5 Ethernet cable can be used to imp...

Страница 89: ...Pursuant to ISO IEC 17050 this product complies with the requirements of the Low Voltage Directive 73 23 EEC and the EMC Directive 2004 108 EC Manufacturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP390 Model Number EM7500 Product Options All Serial Number 1 to 100 000 Date First Applied 2006 Safety EN60950 1 2001 A11 IEC60950 1 2001 ...

Страница 90: ... Christopher Saleem Compliance Reliability Engineering Manager Security Mobile Connectivity Enterprise Solutions Mountain View California May 2008 FCC Part 15 Subpart B Class A US Canada EMI ICES 003 Class A Canada EN55022 CISPR 22 Class A European Community CE EN55024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 11 EN61000 3 2 European Community CE E...

Страница 91: ...s communications facilities equipment and operation procedures where such action is reasonably required in the operation of its business and is not inconsistent with the rules and regulations of the Federal Communications Commission If they do you will be notified in advance to give you an opportunity to maintain uninterrupted telephone service Do not attempt to repair or modify this equipment If ...

Страница 92: ...talled and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense Caution Any changes or modifications not expressly approved by the grantee of this device could void the user ...

Страница 93: ... of conformity 89 FCC notice 92 statements 90 component locations 17 connections auxiliary port 26 console port 26 Ethernet NICs 38 Gigabit Ethernet NIC fiber optic 44 Gigabit Ethernet NICs copper 41 modem 28 power 24 T1 NICs 45 connector pin assignments auxiliary connection 28 console connection 28 Ethernet crossover cable 39 Gigabit Ethernet crossover cable 42 Gigabit Ethernet NICs copper 42 mod...

Страница 94: ...ct flash memory card internal 57 flash memory PC card 60 hard disk drive a 61 memory RAM 66 NICs 49 IP routing 17 L LC connector 44 LEDs Ethernet NICs 38 Gigabit Ethernet NICs copper 41 Gigabit Ethernet NICs long range fiber optic 44 Gigabit Ethernet NICs short range fiber optic 43 system status 19 M memory RAM DIMM socket locations 67 replacing 66 specification upgrading 66 modem connecting to th...

Страница 95: ...twork interfaces 88 operating temperature 87 physical dimensions 87 space requirements 87 technical 87 weight 87 width 87 system logging with hard disk drive 65 system status LEDs 19 T T1 NICs cable pin assignments 46 connecting to 45 front panel 45 tcpdump Ethernet connections for 37 Gigabit Ethernet connections for copper 40 Gigabit Ethernet connections for fiber optic 43 technical specification...

Страница 96: ...Index 96 IP390 Security Platform Installation Guide ...

Страница 97: ...re you with the help you received from this document Feel free to elaborate on your answer Where did you find this document If you chose other where did you get the document Was the document easy to find Feel free to enter suggestions for improving this document May we contact you at your e mail address if we have questions about your feedback Note This form is returned to us through your e mail W...

Результаты поиска

Содержание IP390 - Security Appliance

Отзывы:

Похожие инструкции для IP390 - Security Appliance

Бренды по названию

Популярные бренды

Nokia IP390 - Security Appliance, Руководство по установке

Результаты поиска

Содержание IP390 - Security Appliance

Отзывы:

Похожие инструкции для IP390 - Security Appliance

Бренды по названию

Популярные бренды