Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013. Notwithstanding any other license agreement that may pertain to, or
accompany the delivery of, this computer software, the rights of the United States Government
regarding its use, reproduction, and disclosure are as set forth in the Commercial Computer
Software-Restricted Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Corporation as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage. Nokia reserves the right to
make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
2Nokia 60s and 100s Installation Guide
Nokia Contact Information
Corporate Headquarters
Web Sitehttp://www.nokia.com
Telephone1-888-477-4566 or
1-650-625-2000
Fax1-650-691-2170
Mail
Address
Regional Contact Information
AmericasNokia Internet Communications
Europe,
Middle East,
and Africa
Asia-Pacific 438B Alexandra Road
Nokia Customer Support
Web Site:https://support.nokia.com/
Email:tac.support@nokia.com
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
#07-00 Alexandra Technopark
Singapore 119968
Tel: 1-877-997-9199
Outside USA and Canada: +1 512-437-7089
email: ipsecurity.na@nokia.com
This manual provides information for the installation and use of the Nokia 60s
and 100s appliances. Installation and maintenance should be performed by
experienced technicians or Nokia-approved service providers only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the 60s and 100s
appliances.
Chapter 2, “Installing the Appliance” explains how to rack-mount the
appliance and how to physically connect it to a network and power.
Chapter 3, “Performing the Initial Configuration” explains how to make
the appliance available on the network.
Chapter 4, “Installing and Replacing Network Interface Cards” explains
how to install, monitor, and replace network interface cards (NICs).
Chapter 5, “Connecting PMC Network Interface Cards” explains how to
connect to and use each of the supported NICs.
Nokia 60s and 100s Installation Guide11
Chapter 6, “Installing and Replacing Other Components” explains how to
install or replace PCMCIA modems, memory, the hard-disk drive, and an
encryption accelerator card (Nokia 100s only).
Chapter 7, “Using the Boot Manager” explains how to use the boot
manager, which is part of the IPSO software.
Chapter 8, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” gives technical specifications
such as interface characteristics.
Appendix B, “Warranty and Software License” contains Nokia warranty
and software license information.
Appendix C, “General Public Licensed Software” provides information
about publicly licensed software that comes with the appliance.
Appendix B, “Compliance Information” includes compliance and
regulatory information.
Appendix E, “Glossary” provides a glossary of acronyms used in this
document.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.
12Nokia 60s and 100s Installation Guide
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Internet Communications products. You might encounter one or more of the
following elements on a command-line path.
Conventions This Guide Uses
Table 1 Command-Line Conventions
ConventionDescription
commandThis required element is usually the product name or other
short word that invokes the product or calls the compiler or
preprocessor script for a compiled Nokia product. It might
appear alone or precede one or more options. You must
spell a command exactly as shown and use lowercase
letters.
ItalicsIndicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
Nokia 60s and 100s Installation Guide13
Table 1 Command-Line Conventions (continued)
ConventionDescription
angle brackets < > Indicates arguments for which you must supply a value:
To complete the command, supply the value. For example:
framing sonet
or
framing sdh
-flagA flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.extA filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
14Nokia 60s and 100s Installation Guide
Table 1 Command-Line Conventions (continued)
ConventionDescription
( . , ; + * - / )Punctuation and mathematical notations are literal symbols
' 'Single quotation marks are literal symbols that you must
Text Conventions
Table 2 describes the text conventions this guide uses.
Table 2 Text Conventions
ConventionDescription
Conventions This Guide Uses
that you must enter exactly as shown.
enter as shown.
monospace font
Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key namesKeys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commandsMenu commands are separated by a greater than
sign (>):
Choose File > Open.
Nokia 60s and 100s Installation Guide15
Table 2 Text Conventions (continued)
ConventionDescription
The words enter and typeEnter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics
Related Documentation
The Nokia 60s and 100s documentation set consists of Release Notes for the
Nokia software release you are running, the Nokia 60s and 100s Installation
Guide (this document), a Voyager inline help feature, and the Voyager
Reference Guide (online).
You can find the Nokia 60s and 100s Installation Guide in PDF on the World
Wide Web support site (https://support.nokia.com/).
You can access inline help and the Voyager Reference Guide from Voyager,
the interface to the IPSO operating system.
To access inline help for a specific subject, click the Help button next to the
subject.
• Emphasizes a point or denotes new terms at the
place where they are defined in the text.
• Indicates an external book title reference.
• Indicates a variable in a command:
delete interface
if_name
Access the Voyager Reference Guide for tasks, examples, and more
information by clicking the Doc button.
16Nokia 60s and 100s Installation Guide
1Overview
This chapter provides an overview of the 60s and 100s appliances and the
requirements for using those appliances. The following topics are covered:
About the Nokia 60s and 100s Appliances
Managing the Nokia 60s and 100s Appliances
Site Requirements
Software Requirements
About the Nokia 60s and 100s Appliances
The Nokia 60s and 100s appliances combine the power of the Nokia IPSO
operating system and Nokia Secure Access System (Nokia SAS). Both the
60s and 100s platforms share the same one-rack unit (1 RU) size and support
the same selection of network interface cards.
Memory
The Nokia 60s appliance supports from 256 MB to 512 MB of memory.
The Nokia 100s appliance supports from 256 MB to 1 GB of memory and
provides approximately twice the throughput of the Nokia 60s.
Nokia 60s and 100s Installation Guide17
1 Overview
Encryption Acceleration
Both the 60s and 100s appliances provide built-in hardware-based encryption
acceleration. The 100s appliance also supports an optional encryption
accelerator card to further enhance SSL VPN performance.
This guide provides documentation for both the 60s and 100s appliances.
Most of the information for how to use these two appliances is the same.
Where differences exist, they are noted in the documentation.
The Nokia 60s and 100s appliances are ideally suited for growing companies
and satellite offices. The small size of the 60s and 100s appliance makes them
ideal for installations that need to conserve space.
As network devices, the 60s and 100s appliances support a comprehensive
suite of IP-routing functions and protocols, including RIPv1/RIPv2, IGRP,
OSPF and BGP4 for unicast traffic, and DVMRP for multicast traffic. The
integrated router functionality eliminates the need for separate intranet and
access routers in security applications.
Managing the Nokia 60s and 100s Appliances
You can manage the 60s and 100s appliances by using the Nokia Network
Voyager:
Nokia Network Voyager—an SSL-secured, Web-based element
management interface. Voyager is preinstalled on the 60s and 100s appliance
and enabled through the IPSO operating system. With Voyager, you can
manage, monitor, and configure the 60s and 100s appliance from any
authorized location within the network by using a standard Web browser.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
18Nokia 60s and 100s Installation Guide
Appliance Overview
The following figures show component locations for the Nokia 60s and 100s.
Figure 1 Component Locations Front View
Appliance Overview
Status LEDsModem (AUX) port
60s
00487
PMC interfaces
PCMCIA slotsReset switch
Figure 2 Component Locations Rear View
Console port
Built-in Ethernet ports for
management connection
00249
Power plugPower switch
Nokia 60s and 100s Installation Guide19
1 Overview
Ethernet Management Ports
The Ethernet management ports are located on the front of the appliance.
Figure 3 shows the layout of the Ethernet management ports and link LEDs.
Note
The Ethernet management ports are intended for management purposes.
These ports do not provide the same performance as Ethernet cards in
the PMC slots.
Figure 3 Ethernet Management Ports Details
Activity LED (yellow)
Link LED (green)
RJ-45 connectors
00120
Caution
Cables that connect to the Ethernet ports must be IEEE 802.3
compliant to prevent potential data loss.
The 60s and 100s appliances include two PMC (PCI mezzanine cards)
expansion slots for Nokia supported network interface cards. For information
about using supported LAN cards, see page 47
.
The 60s and 100s appliances also include a PCMCIA slot that supports
PCMCIA modems. See “Installing a PCMCIA Modem” on page 52.
20Nokia 60s and 100s Installation Guide
Note
Nokia products only support NICs purchased from Nokia Corporation or
Nokia-approved resellers. The Nokia Global Support Services group can
only provide support for Nokia products that use Nokia-approved
accessories. For sales or reseller information, contact a Nokia service
provider listed in the “Nokia Contact Information” on page 3.
Built-in Console Port
Use the built-in console port, shown in Figure 1 to supply the information that
makes the appliance available on the network. Figure 4 provides pin
assignment information for console connections.
Figure 4 Pin Assignments for Console Connection
Appliance Overview
1
69
5
700001
Pin#AssignmentInput/Output
1DCDInput
2RXDInput
3TXDOutput
4DTROutput
5GND
6DSRInput
7RTSOutput
8CTSInput
9DTROutput
Nokia 60s and 100s Installation Guide21
1 Overview
Built-in AUX Port
Use can use the AUX port, shown in Figure 1, to establish a modem
connection for managing the appliance. Figure 5 provides pin assignment
information for modem connections.
Figure 5 Pin Assignments for Modem Connection
1
69
PinInput/Output
1 (DCD)Input8 (DCD)7 (RTS)
2 (RXD)Input2 (TXD)3 (TXD)
3 (TXD)Output3 (RXD)2 (RXD
4 (DTR)Output20 (DTR)6 (DSR)
5 (GND)7 (GND)5 (GND)
6 (DSR)Input6 (DSR)4 (DTR)
7 (RTS)Output4 (RTS)1 (DCD)
5
700001
To DB25
Cable Out
To DB9
Cable Out
8 (CTS)
9 (RI)
8 (CTS)Input5 (CTS)1 (DCD)
9 (RI)Output22 (RI)4 (DTR)
22Nokia 60s and 100s Installation Guide
Status LEDs
!
!
You can monitor the basic operation of 60s and 100s appliances and network
interface cards (NICs) by checking their status LEDs. The system status LEDs
are located on the front panel of the appliance, as Figure 6 shows.
Figure 6 Appliance Status LEDs
Appliance Overview
Power-status
Voltage
Table 3 Appliance Status LEDs
Status IndicationExplanation
Solid Power on
Solid Unit is experiencing an
internal Voltage problem
Fan problem
LED Front Panel
Symbol
Blinking The unit is experiencing
Solid redOne or more fans are not
Nokia 60s and 100s Installation Guide23
a temperature problem
operating properly, or a
5V, 3.3V, or 12V fuse is
blown
1 Overview
The location and meaning of the status LEDs for network interface cards are
explained in Chapter 5, “Connecting PMC Network Interface Cards.”
For information on the built-in Ethernet interface LEDs, see “Ethernet
Management Ports” on page 20.
For information on the Dual port Ethernet card LEDs, see “Dual-Port 10/
100 Ethernet Interface, PMC” on page 47.
Site Requirements
Before you install a Nokia 60s or Nokia 100s appliance, ensure that your
computer room or wiring closet conforms to the environmental specifications
listed in Appendix A, “Technical Specifications.”
Warning
Hazardous radiation exposure can occur if you use controls, make
performance adjustments, or follow procedures that are not described in
this document.
Warning
An explosion can occur if the battery is incorrectly placed. Replace only
with the same or equivalent type battery recommended by the
manufacturer. Dispose of used batteries according to the manufacturer's
instructions.
Warning
To reduce the risk of fire, electric shock, and injury when you use
telephone equipment, follow basic safety precautions. Do not use the
product near water.
24Nokia 60s and 100s Installation Guide
Caution
Do not place objects over the ventilation holes on the Nokia 60s or
100s appliance. The components might overheat and become
damaged.
Caution
For Nokia 60s or 100s appliances intended for shipment outside of
the United States, the cord might be optional. If a cord is not
provided, use a power cord rated at 6A, 250V, maximum 15 feet
long, made of HAR cordage and IEC fittings approved by the country
of end use.
Software Requirements
Software Requirements
Nokia 60s and 100s appliances support the following operating system when
this guide was published — IPSO v3.8.1 or later.
For information about changes to the software requirements or additional
applications that have become available since this guide was published,
contact your Nokia service provider, as listed in “Nokia Contact Information”
on page 3.
Nokia 60s and 100s Installation Guide25
1 Overview
26Nokia 60s and 100s Installation Guide
2Installing the Appliance
This chapter describes how to install the Nokia 60s and 100s appliances. The
following topics are covered:
Rack Mounting the Appliance
Connecting Power and Turning the Power On
Connecting Network Interfaces
Caution
Protect your 60s and 100s appliances and other electronic
equipment from static discharge by making sure you are properly
grounded before you touch any electronic components.
Note
The operating temperature range for the 60s and 100s appliances is
0° C to 45° C.
Rack Mounting the Appliance
The 60s and 100s appliances mount in a standard 19-inch rack with four
mounting screws as Figure 7 shows.
Nokia 60s and 100s Installation Guide27
2 Installing the Appliance
Note
To avoid damaging your equipment, Nokia recommends that you use all
four rack-mounting screws when you install your appliance on the rack.
Figure 7 Mounting Screws Location
60s
Mounting Screws
00487
You can relocate the mounting brackets as Figure 8 shows so that the unit is 2
inches forward of the rack.
Figure 8 Adjustable Mounting Brackets
100s
00488
28Nokia 60s and 100s Installation Guide
Connecting Power and Turning the Power On
Caution
Blocking ventilation openings during installation may result in
damage to the appliance.
Connecting Power and Turning the Power On
The power plug and power switch for the 60s and 100s appliances are located
on the back of the appliance as Figure 9 shows.
Note
The Nokia 60s and 100s appliance power supplies automatically detect
the input voltage (115VAC [90 to 132] or 220VAC [180 to 264]) and
configure themselves appropriately.
Figure 9 Back Panel Power Switch
00249
Power plugPower switch
To connect the power supply
1.Connect the power cord securely into the power socket on the back of the
appliance.
2.Plug the other end of the cord into a three-wire grounded power strip or
wall outlet.
3.Press the power supply switch to the “on” position to activate the 60s and
100s appliance.
Nokia 60s and 100s Installation Guide29
2 Installing the Appliance
The fan unit on the power supply turns on when you press the power switch.
Verify that the fans are running after you press the switch.
Check the power LED on the front panel of the appliance (the Nokia logo) to
ensure that the power supply is operating correctly. The power LED should be
illuminated. For more information about the system status LEDs, see “Status
LEDs” on page 23.
If the power supply fans are not running, or if the power LED is not
illuminated:
Check the power supply cord to make sure it is properly connected.
Make sure the power supply switch is on.
Make sure the chassis assembly is pushed all the way in from the front of
the platform.
Make sure that power is turned on to the power strip or wall receptacle
you plugged the appliance in to.
If the fans are still not running, or if the power LED does not illuminate,
contact your Nokia service provider as listed in “Nokia Contact Information”
on page 3 for technical support.
Connecting Network Interfaces
Connect at least one network interface to use as the Voyager system
management interface. This interface is configured during the system startup
procedure, as described in Chapter 3, “Performing the Initial Configuration.”
You can also connect the remaining LAN interface wires at this point,
although you are not required to do so.
To connect Ethernet devices:
Use a straight-through RJ-45 cable to connect to a 10-Mbps or
100-Mbps hub.
Use a crossover RJ-45 cable to connect directly to a host.
For details, see “Ethernet NIC Connectors and Cables” on page 48.
After you connect the network interfaces, continue with Chapter 3,
“Performing the Initial Configuration.”.
30Nokia 60s and 100s Installation Guide
3Performing the Initial
Configuration
The first time you turn power on to a Nokia 60s or 100s appliance, the initial
configuration process begins. This process enables you to configure the
network settings and provides access to the admin account.
You can perform the initial configuration in two ways.
You can configure a DHCP server to provide the initial configuration
information the first time the appliance is started.
You can perform the initial configuration manually by using a console
connection.
This chapter describes how to perform the initial configuration manually by
using a console connection. It includes the following sections:
Using a Console Connection to Perform the Initial Configuration
Accessing Nokia Network Voyager
For information about how to use the DHCP client for initial configuration,
see the Read Me First document included with the appliance.
Nokia 60s and 100s Installation Guide31
3 Performing the Initial Configuration
Using a Console Connection to Perform the
Initial Configuration
If you do not use DHCP to perform the initial configuration of your 60s and
100s appliance, you must use a serial console connection (cable included).
After you perform the initial configuration, the console connection is no
longer required.
You can use any standard VT100-compatible terminal with an RS-232 data
terminal equipment (DTE) interface or terminal-emulation program
configured with the following settings for the console:
9600 bps
8 data bits
No parity
1 stop bit
To connect to the console
1.Connect the supplied null-modem cable (console cable) to the console
port on the front panel of the 60s and 100s appliance.
Use only the DB9 port on the front panel labeled Console; the serial
(AUX) port is an auxiliary modem port.
If you connect the console port to a data communications equipment
(DCE) device, use a straight-through cable.
60s
00487
Console port
For cable pin assignments for the console connection, see “Built-in
Console Port” on page 21.
32Nokia 60s and 100s Installation Guide
Using a Console Connection to Perform the Initial Configuration
2.Connect the other end of the cable to the VT100 console or to a system
running a terminal-emulation program.
To perform the initial configuration
1.Turn on the appliance.
At the console a series of startup messages appears, then the following
prompt appears:
BOOTMGR[0]>
The prompt remains on the screen for about five seconds.
Note
For information about using the boot manager, see Chapter 7, “Using
the Boot Manager.”
After some miscellaneous output appears, the following prompt appears:
Hostname?
If the
Hostname?
prompt does not appear on the console, check the
console port and console display connections to ensure that the serial
cable is completely plugged in at both ends. If you verify the console
connections and still do not see either the
BOOTMGR>
or
Hostname?
prompts, verify that the terminal or terminal emulator program settings
are correct. If the settings are correct, contact your Nokia service provider
as listed in “Nokia Contact Information” on page 3.
2.Respond to the
Hostname?
prompt within 30 seconds to prevent the
DHCP client from starting.
If the DHCP client starts, it might configure the appliance with an
incorrect host name and IP address (this could happen if a DHCP server
on your network is configured to respond to any request). To reset the
incorrect host name and IP address:
a. Establish a console connection to the system.
b. Enter the following:
Nokia 60s and 100s Installation Guide33
3 Performing the Initial Configuration
rm /config/active
or
mv /config/active /config/active.old
c. Reboot the appliance.
d. Respond to the
Hostname?
prompt within 30 seconds to prevent the
DHCP client from restarting.
3.At each subsequent prompt, type the requested configuration information
and then press Enter.
For more information about how to respond to the prompts during the
initial configuration process, see the release notes for the Nokia software
release you are running.
4.After you complete the initial configuration, you can use Voyager to
configure the remaining network ports.
Accessing Nokia Network Voyager
You can use Voyager to configure the remaining network ports on your 60s
and 100s appliances.
To open Voyager
1.Start Netscape Navigator or Microsoft Internet Explorer on the host you
want to use to complete the configuration.
2.In the Location or Address field, enter the IP address of the initial
interface you configured on the appliance.
You are prompted to enter the admin username and the password you
entered when performing the initial configuration.
Note
If the username popup menu does not appear, you might not have a
network connection between the host and your 60s and 100s
34Nokia 60s and 100s Installation Guide
Accessing Nokia Network Voyager
appliance. Confirm the information you entered during the initial
configuration and check that all cables are firmly connected.
Accessing Voyager Reference Information
As you use Voyager, the Voyager Reference Guide and Voyager inline help are
available for you to use.
You can access both information sources from the Voyager interface, as
Figure 10 shows.
Figure 10 Voyager Reference Access Points
Link to Online Help (Voyager Reference
Links to Inline Help (Context Sensitive)
Voyager Reference Guide
The Voyager Reference Guide is the reference source for Voyager. To access
this source, click Doc.
Nokia 60s and 100s Installation Guide35
3 Performing the Initial Configuration
You can also access the Voyager Reference Guide at the Nokia support site
(https://support.nokia.com) or on the CD that was delivered with your 60s and
100s appliance (doc\voyager_guide.pdf).
Alternatively, you can order a printed copy.
Voyager Inline Help
You can access inline help when you use Voyager. Inline help is the contextsensitive information source for Voyager.
To enable inline help for a specific subject, click the Help icon next to the
subject. You can also click Help at the top of the Voyager window to get inline
help for the entire Voyager window. To turn off inline help, click Close.
Using Voyager to Monitor a Nokia 60s or 100s
Appliance
After you install and configure your 60s and 100s appliance, you can use
Voyager to monitor its operation. Click Monitor from the Voyager home page
to access the monitoring functions.
After you finish configuring the network interfaces with Voyager, the
appliance is ready for routing and application configuration.
Use Voyager to configure the routing performed by the appliance. For
information about how to access Voyager, see “To open Voyager” on page 34.
36Nokia 60s and 100s Installation Guide
4Installing and Replacing
Network Interface Cards
Your 60s and 100s appliances come with any network interface cards (NICs)
you ordered already installed. This chapter describes how to remove, add, or
replace NICs later if it becomes necessary.
The following topics are covered:
Deactivating Configured Interfaces
Removing, Installing, and Replacing NICs
Configuring and Activating Interfaces
Monitoring Network Interface Cards
For detailed information on specific network interface cards, see Chapter 5,
“Connecting PMC Network Interface Cards.”.
Caution
You should have a working knowledge of networking equipment
before attempting to service a 60s or 100s appliance. Limit service of
the unit to the procedures described in this chapter.
Nokia 60s and 100s Installation Guide37
4 Installing and Replacing Network Interface Cards
Caution
Protect your 60s or 100s appliance and other electronic equipment
from electrostatic discharge (ESD) by making sure you are properly
grounded before touching any electronic components.
Deactivating Configured Interfaces
If you are removing or replacing an installed network interface card, use
Voyager to deactivate any configured ports on the NIC before removing it.
Deactivate all of the logical interfaces on the NIC.
Deactivate all of the physical interfaces on the NIC.
If you do not deactivate the interfaces before removing the NIC, you may
have to reinstall the NIC to deactivate its logical and physical interfaces in
Voyager.
For information about how to access Voyager, see “Accessing Nokia Network
Voyager” on page 34.
Removing, Installing, and Replacing NICs
Note
Before removing a configured network interface card with these
instructions, you must deactivate the NIC in Voyager. See “Deactivating
Configured Interfaces” for additional information.
Use these instructions to remove, install, or replace a NIC in 60s and 100s
appliances. Some steps are not applicable to all procedures. The instructions
point out steps appropriate to each procedure.
38Nokia 60s and 100s Installation Guide
Removing, Installing, and Replacing NICs
To remove, install, or replace a network interface card
Note
Because power to 60s and 100s appliances is automatically
disconnected when the chassis assembly is opened, you do not need
to manually disconnect the power for this procedure. Any servicing of
the unit, however, should be completed with the chassis assembly
fully removed from the appliance. Power is still active in the chassis
body and care should be taken when working on the power supply or
power supply wiring without disconnecting the power cord.
1.Use Network Voyager to shut the system down.
For information about how to access Voyager, see “Accessing Nokia
Network Voyager” on page 34.
2.Use your fingers or a screwdriver to loosen the thumbscrews that hold the
chassis assembly.
60s
00487
Chassis assembly thumbscrews
Nokia 60s and 100s Installation Guide39
4 Installing and Replacing Network Interface Cards
3.Gently pull the chassis assembly forward to expose the NIC connectors.
Be careful not to pull the chassis assembly entirely out of the appliance.
4.From underneath the chassis assembly, remove the bezel retaining screws.
100s
00489
If you are installing a NIC in an unoccupied slot, remove the blank bezel
that occupies the space in the appliance front panel, retain it for future
use, and proceed to step 7.
40Nokia 60s and 100s Installation Guide
00254b
Removing, Installing, and Replacing NICs
5.From above the chassis assembly, remove the NIC retaining screws from
the back of the NIC.
00255a
6.Remove the NIC by lifting the back of the NIC away from the chassis
assembly and pulling the NIC gently away from the front panel.
Nokia 60s and 100s Installation Guide41
00257
4 Installing and Replacing Network Interface Cards
7.Insert the new NIC or blank bezel.
If you are removing a NIC without installing another NIC:
a. Insert a blank bezel into the front panel slot formerly occupied by the
NIC and push it gently into place.
Make sure that the bezel is completely seated into the front panel and
that the screw holes on the bottom of the bezel align with those in the
front panel.
b. Proceed to step 9.
If you are installing or replacing a NIC, insert the NIC.
a. Insert the NIC bezel into the front panel.
00256a
b. Gently push the back of the NIC down toward the chassis assembly.
Make sure that the NIC edge is completely seated into the connectors
on the chassis assembly.
42Nokia 60s and 100s Installation Guide
Removing, Installing, and Replacing NICs
8.From the top of the chassis assembly, screw the NIC retaining screws into
the standoffs on the back of the NIC.
00255b
9.From beneath the chassis assembly, screw in the bezel retaining screws.
Nokia 60s and 100s Installation Guide43
00254a
4 Installing and Replacing Network Interface Cards
10. Close the chassis assembly until it clicks into place.
11. Tighten the thumbscrews that hold the chassis assembly.
100s
00490
60s
Chassis assembly thumbscrews
The system automatically restarts when the chassis assembly clicks into place.
Configuring and Activating Interfaces
The Nokia 60s or 100s appliance automatically detects any new NIC when the
system is restarted. Use Voyager to configure and activate the logical and
physical interfaces on the NIC.
For information about how to access Voyager and the related reference
materials, see “To open Voyager” on page 34.
00487
44Nokia 60s and 100s Installation Guide
Monitoring Network Interface Cards
Monitoring Network Interface Cards
You can assess the general operating condition of the NICs in your appliance
by looking at the LED status indicators on the NICs. The status indicators for
each NIC are explained in the NIC reference chapter.
For the status indicator information for the built-in Ethernet ports or the
dual-port Ethernet NIC, see “Dual-Port 10/100 Ethernet Interface, PMC”
on page 47.
Use Voyager to access detailed port information. For information about
accessing Voyager, see “Accessing Nokia Network Voyager” on page 34.
You can also use the IPSO tcpdump command to examine the track on a
specific port.
Nokia 60s and 100s Installation Guide45
4 Installing and Replacing Network Interface Cards
46Nokia 60s and 100s Installation Guide
5Connecting PMC Network
Interface Cards
This chapter describes the PMC NICs available for the 60s and 100s
appliances and explains how to connect those NICs to your network. The
following NICs are covered:
Dual-Port 10/100 Ethernet Interface, PMC
For instructions on adding or replacing interface cards, see Chapter 4,
“Installing and Replacing Network Interface Cards”
Caution
Protect your 60s or 100s appliance and other electronic equipment
from electrostatic discharge (ESD) damage by making sure you are
properly grounded before you touch any electronic component.
Dual-Port 10/100 Ethernet Interface, PMC
Every 60s and 100s appliance has four built-in dual-mode 10-Mbps and 100Mbps ports. Additionally, the appliance supports Nokia-approved, dual-port
UTP5 dual-mode 10-Mbps and 100-Mbps Ethernet NICs.
When you purchase an Ethernet NIC with your 60s and 100s appliance, the
NIC is installed before the appliance is delivered to you. For information on
Nokia 60s and 100s Installation Guide47
5 Connecting PMC Network Interface Cards
how to add or replace a NIC later if it become necessary, see Chapter 4,
“Installing and Replacing Network Interface Cards.”
Ethernet PMC NIC Features
The Ethernet PMC NIC supports tracing through tcpdump.
You can configure and monitor Ethernet interfaces with Voyager. Specifically,
you set the port speed and full-duplex or half-duplex mode by using Voyager.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
Figure 11 shows the front panel layout of the dual-port Ethernet NIC.
Figure 11 Dual-Port Ethernet NIC Front Panel Details
Link LEDs (green)
NOKIA
10/100
RJ-45 connectors
After the power is turned on, the Ethernet link LEDs on the appliance and on
the remote equipment illuminate to indicate the connection. As data is
transmitted, the activity LEDs on the appliance light up.
Ethernet NIC Connectors and Cables
The connectors on the Ethernet NIC are RJ-45 connectors:
To connect to a 10-Mbps or 100-Mbps hub, use a straight-through RJ-45
cable.
To connect directly to a host, use an RJ-45 crossover cable.
00258
Activity LEDs (yellow)
48Nokia 60s and 100s Installation Guide
Dual-Port 10/100 Ethernet Interface, PMC
Use IEEE 802.3 10BASE-T, 100BASE-TX unshielded twisted-pair, fullduplex or half-duplex cable.
Caution
Cables that connect to the Ethernet card must be IEEE 802.3
compliant to prevent potential data loss.
You can order appropriate adapter cables separately. You can order additional
cables from a cable vendor of your choice.
Figure 12 shows the pin assignments for the cable. The RJ-45 cable output
connector is numbered from right to left, with the copper tabs facing up and
toward you.
Figure 12 Output Connector for the Ethernet Cable
81
00113b
Pin#Assignment
1TX
2TX
3RX
4
5
6RX
7
8
Figure 13 shows the pin assignments for the RJ-45 cross-over cable.
This chapter provides information on how to add or replace user serviceable
items other than network interface cards in your 60s and 100s appliance. The
following topics are covered:
Installing a PCMCIA Modem
Replacing a Hard-Disk Drive
Replacing or Upgrading Memory
Installing an Encryption Accelerator Card
For instructions on adding or replacing interface cards, see Chapter 4,
“Installing and Replacing Network Interface Cards”
Caution
You should have a working knowledge of networking equipment
before attempting to service a 60s or 100s appliance. Limit service of
the appliance to the procedures described in this chapter.
Caution
Protect your 60s or 100s appliance and other electronic equipment
from electrostatic discharge (ESD) damage by making sure you are
properly grounded before you touch any component.
Nokia 60s and 100s Installation Guide51
6 Installing and Replacing Other Components
Installing a PCMCIA Modem
The 60s and 100s appliances support a PCMCIA modem card that allows you
to set the country code through Voyager. For information about the country
codes, see the Voy a ger Refere n c e Guide.
Note
The 60s and 100s support Ositech Five of Clubs and Ositech Five of
Clubs II PCMCIA modems. Nokia recommends that you purchase your
modem only from Nokia or authorized resellers. For further information,
contact the appropriate Nokia customer support site listed “Nokia Contact
Information” on page 3.
To use a modem with a 60s or 100s appliance
1.If the modem is not already installed, insert the PCMCIA modem into
either the top or bottom PCMCIA slot until the modem clicks into place.
60s
PCMCIA Slots
00487
The modem and the ejector tab on the left of the slot protrude from the
unit. The appliance automatically recognizes the modem.
2.Connect the modem to a phone line.
Use the appropriate cable for the modem and telephone system in the
country in which the device is used.
To configure IPSO to allow logins through the modem, click Config on the
Home page in Voyager and then click on the Network Access and Services
link in the Security and Access Configuration section.
52Nokia 60s and 100s Installation Guide
For information about accessing Voyager and the related reference materials,
see “Using Voyager to Configure the Network Interfaces” on page 67.
Replacing a Hard-Disk Drive
The Nokia 60s and 100s appliances include one hard-disk drive unit, which
you can remove and replace. The following figure shows the location of the
hard-disk drive on the motherboard.
Note
Back up your hard-drive files to a remote system on a regular basis. For
back up and restore procedures, see the IPSO release notes.
Figure 14 Hard-Disk Drive Location
Hard-disk drive
Replacing a Hard-Disk Drive
100s
00491
Note
The disk drive must contain the IPSO partitions and boot loader before
installation. For further information, contact the appropriate Nokia
customer support site as listed in “Nokia Contact Information” on page 3.
Nokia 60s and 100s Installation Guide53
6 Installing and Replacing Other Components
To replace a hard-disk drive
1.Use Voyager to shut the system down.
For information about how to access Voyager, see “Accessing Nokia
Network Voyager” on page 34.
2.Loosen the thumbscrews that hold the chassis assembly.
Chassis assembly thumbscrews
3.Gently slide the chassis assembly forward to remove the tray from the
appliance so you can access the hard-disk drive retaining screws from the
bottom of the tray.
60s
00487
100s
00489
Note
Because power to a 60s or 100s is automatically disconnected when
the chassis assembly is opened, you do not need to manually
disconnect the power for this procedure. Any servicing of the unit,
however, should be completed with the chassis assembly fully
removed from the appliance. Power is still active in the chassis body
54Nokia 60s and 100s Installation Guide
Replacing a Hard-Disk Drive
and care should be taken when working on the power supply or
power supply wiring without disconnecting the power cord.
4.From the bottom of the chassis assembly, remove the retaining screws that
hold the hard-disk drive unit.
00261
5.Gently remove the hard-disk drive from the motherboard, taking care not
to damage the connector.
6.Insert the new hard-disk drive unit.
00262
Nokia 60s and 100s Installation Guide55
6 Installing and Replacing Other Components
Note
Push the disk gently into place. Take care to align the connectors
correctly as the connectors are not keyed.
7.Tighten the retaining screws that holds the hard-disk drive into place.
00261
8.Slide the chassis assembly back into the appliance until it clicks into
place.
100s
00490
56Nokia 60s and 100s Installation Guide
9.Tighten the thumbscrews that hold the chassis assembly.
Chassis assembly thumbscrews
The system automatically restarts when the chassis assembly clicks into place.
Replacing or Upgrading Memory
The Nokia 60s and 100s appliances have two dual inline memory-module
(DIMM) sockets. This section explains how to upgrade or replace the memory
for either platform by using a Nokia-approved memory upgrade kit.
Replacing or Upgrading Memory
60s
00487
The 60s comes with 256 MB of memory in one DIMM and can be
upgraded to 512 MB by adding a second 256 MB DIMM.
Caution
The 60s appliance cannot function with more than 512 MB of
memory. If more than 512 MB of memory is installed in a 60s, the
system displays a warning message and shuts down.
The 100s appliance comes with 256 MB of memory in one DIMM and
can be upgraded to 512 MB by adding a second 256 MB DIMM, or
upgraded to 1 GB by replacing the 256 MB DIMM with two (2) 512 MB
DIMMs.
Nokia 60s and 100s Installation Guide57
6 Installing and Replacing Other Components
Note
Nokia recommends that you obtain memory kits only from Nokia or
authorized resellers. For further information, contact the appropriate
Nokia customer support site listed “Nokia Contact Information” on page 3.
The DIMM sockets are located at the right of the motherboard, as you look at
the appliance from the front, as Figure 15 shows.
Figure 15 DIMM Socket Locations
100s
DIMM sockets
00492
Before You Start
To upgrade or replace the memory in your appliance, you need the following:
Physical access to the appliance
Nokia memory upgrade kit and accompanying documentation
Access to the appliance through Voyager or Lynx
58Nokia 60s and 100s Installation Guide
Replacing or Upgrading Memory
Caution
To protect the 60s or 100s appliance and the memory modules from
electrostatic discharge (ESD), make sure you are properly grounded
before you touch these components.
Note
Because power to a 60s or 100s appliance is automatically disconnected
when the chassis assembly is opened, you do not need to manually
disconnect the power for this procedure. Any servicing of the unit,
however, should be completed with the chassis assembly fully removed
from the appliance. Power is still active in the chassis body and care
should be taken when working on the power supply or power supply
wiring without disconnecting the power cord.
Adding or Replacing DIMMs
To add or replace DIMMs
1.Use Voyager or Lynx to perform an orderly shutdown of the 60s or 100s
appliance.
For information about accessing Voyager, see “Accessing Nokia Network
Voyager” on page 34.
Nokia 60s and 100s Installation Guide59
6 Installing and Replacing Other Components
2.Loosen the two front panel thumbscrews.
Chassis assembly thumbscrews
3.Slide the chassis assembly forward to expose the DIMM sockets
Be careful not to pull the chassis assembly entirely out of the appliance.
60s
00487
100s
00489
60Nokia 60s and 100s Installation Guide
Replacing or Upgrading Memory
4.Remove any memory module necessary by pressing the two retaining
clips outward and carefully pulling each DIMM upward as the following
figure shows.
00263
You might need to pull opposite ends of the DIMM alternately to
gradually free it from the contact pins.
5.The memory DIMMs are keyed to prevent improper insertion. Press the
new DIMM into the socket until it clicks into place.
Nokia 60s and 100s Installation Guide61
6 Installing and Replacing Other Components
The top of the DIMM is smooth. The bottom edge has three different
length sets of contacts, which mate with the slots on the socket. Be sure
the contacts and slots are properly aligned before you insert the DIMM.
The retaining clips move into the lock position as you press the DIMM
into place.
00264
6.Slide the chassis assembly back into the appliance until it clicks into
place.
100s
00490
62Nokia 60s and 100s Installation Guide
Replacing or Upgrading Memory
7.Resecure the two thumbscrews.
60s
00487
Chassis assembly thumbscrews
The appliance automatically recognizes the new memory configuration. You
can verify this from the Voyager or Lynx interface.
Nokia 60s and 100s Installation Guide63
6 Installing and Replacing Other Components
Installing an Encryption Accelerator Card
Note
The Nokia 60s does not support the optional encryption accelerator card.
This section contains information about the Nokia encryption accelerator card
for the Nokia 100s appliance. The card provides high-speed cryptographic
processing that enhances SSL VPN performance.
Both the 60s and 100s appliances provide built-in hardware-based encryption
acceleration. The 100s also supports an optional encryption accelerator card
to further enhance SSL VPN performance.
No hardware configuration is required for the encryption accelerators. The
built-in hardware encryption accelerators are enabled by default on both
appliances. Installing the optional encryption accelerator card on the 100s
automatically disables the built-in accelerator and enables the card. Removing
the card reverses the process.
You must, however, use Voyager to configure your software applications to
make use of the available hardware accelerator. For details, see “” on page 69.
When you order an accelerator card with the appliance, the card is installed
before the appliance is delivered. This section provides instructions for
installing or replacing the card at a later time.
The 100s appliances use a PMC format accelerator card. The accelerator card
has no external connections and requires no cables.
The accelerator card software package is part of IPSO, so the appliance
automatically detects and configures the card.
For tasks related to installing the encryption accelerator card, see “Installing
the Card” on page 65
Before You Start
Before you install the card, you need:
64Nokia 60s and 100s Installation Guide
Physical access to the unit
A Phillips-head screwdriver
Four screws (included in packaging)
A disposable wrist strap (included in packaging)
Warning
To help guard against electrostatic discharge damage, follow the
instructions on the wrist strap envelope before you handle the accelerator
card or open the appliance.
Installing the Card
1.Use Voyager or Lynx to shut down the appliance.
2.Loosen the two front-panel thumbscrews.
Installing an Encryption Accelerator Card
Chassis assembly thumbscrews
60s
00487
Nokia 60s and 100s Installation Guide65
6 Installing and Replacing Other Components
3.Slide the chassis assembly forward to expose the motherboard
components, as the following figure shows.
4.Locate the PMC connectors on the rear of the motherboard.
Caution
Make sure you locate the correct connectors for the SSL VPN
acceleration card. Do not use the PMC connectors located at the
front of the motherboard, those connectors are for NICs.
100s
00489
66Nokia 60s and 100s Installation Guide
Installing an Encryption Accelerator Card
PMC connectors
AB
for SSL VPN
card
Standoffs
Insert the VPN card
into connectors.
Screw card into standoffs.
100s
5.Position the male PMC connectors on the card over the female PMC
connectors on the motherboard. The two sets of connectors should be
aligned with each other. The four screw holes and four standoffs should
also be aligned with one another.
00493
6.Push down on the card until it is properly seated on the motherboard.
Nokia 60s and 100s Installation Guide67
6 Installing and Replacing Other Components
7.Place the screws through the standoff holes on the card and into the
standoffs on the motherboard.
8.Turn each screw clockwise so that the card is attached to the standoffs.
Do not tighten completely.
Screw
Accelerator card
Standoff hole
Motherboard standoff
9.Make sure that all four standoff connections are properly aligned.
10. To secure the connections, tighten the screws firmly, but do not
overtighten.
11. Slide the chassis assembly back into the appliance and resecure the two
thumbscrews.
60s
00487
Chassis assembly thumbscrews
Reseating the chassis assembly automatically restores power to the
appliance.
12. Configure your software to use hardware acceleration. For more
information, see “” on page 69.
68Nokia 60s and 100s Installation Guide
Installing an Encryption Accelerator Card
Nokia 60s and 100s Installation Guide69
6 Installing and Replacing Other Components
70Nokia 60s and 100s Installation Guide
7Using the Boot Manager
This chapter describes using the IPSO boot manager. The following topics are
discussed in this chapter:
Va ri a bl es
Booting the System
Using the Boot Manager to Install IPSO
Protecting the Boot Manager with a Password
Installing the Boot Manager
Upgrading the Boot Manager
The Nokia 60s and 100s platforms incorporate a boot manager on disk to
control the boot-up process. The boot manager allows you to perform a
number of tasks, including the following:
Booting from alternate kernels, which might reside on nondefault devices
or directories
Installing new versions of IPSO (the operating system)
Obtaining system information
Performing various housekeeping tasks
When you first receive your 60s or 100s appliance, the boot manager uses
factory-default parameters (kernel, boot device, and so on) for the boot
process. The factory defaults cause the appliance to bypass the boot manager
prompt after a five-second wait. You can change these defaults to reflect your
own needs, or you can use different parameters in the command line at boot
time. The boot manager maintains the default values of these parameters on
Nokia 60s and 100s Installation Guide71
7 Using the Boot Manager
the hard-disk drive. You can set these values by using boot manager
commands.
This chapter describes the boot manager commands.
Variables
A number of variables are stored by the boot manager in nonvolatile memory.
You can set and view most variables from the boot manager prompt. The
following sections describe how to view and set the variables. The variables
are:
Table 4 Boot manager variables
VariableDescription
boot manager
revision
autoboot
bootwait
The version number of the boot manager. This variable
cannot be set from the command line.
If autoboot is set to no, the 60s or 100s appliance stops at
the boot manager command line during the boot process.
If autoboot is set to yes, the 60s or 100s appliance does not
stop at the boot manager command line during a boot up. It
does wait for the amount of time specified in
bootwait
for
input from the keyboard. If input is received, the boot
manager goes to the command line; otherwise, it proceeds
with the boot up.
Factory default: yes.
The amount of time, in seconds, that the boot manager waits
for input during a boot up when autoboot is set to yes.
Factory default: five seconds.
72Nokia 60s and 100s Installation Guide
Table 4 Boot manager variables
VariableDescription
Variables
boot-file
The name of the operating system kernel file.
Factory default: /image/current/kernel.
boot-flags
The string of flags passed to the kernel.
-x
Factory default:
.
The following table shows possible boot flags.
FlagMeaning
-dDebug Mode: Enters the kernel debugger as soon as possible
in the kernel initialization.
-sSingle-User Mode: If the console is marked as insecure, you
must enter the root password to access the manager.
-vVerbose Mode: Verbose during device probing and thereafter.
boot-device: This is the device from which the boot-file loads.
wd0
Factory default:
wd0
Options:
Nokia 60s and 100s Installation Guide73
(hard disk).
.
7 Using the Boot Manager
Viewing the Variables and Other System Parameters
printenv
Use the printenv command to view the values of variables currently stored in
the boot manager nonvolatile memory. The command has the following
syntax:
Use the ls command to view the contents of directories on the devices in your
60s or 100s appliance. The command has the following syntax:
ls device directory
where device is the device containing the directory you want to look at, and
directory is the directory on that device. Both device and directory are
optional. The default directory is
For example:
BOOTMGR[2]> ls wd0 /image/current
.description bootmgr etc kernel.debug usr
VERSION cdrom ipso.tgz mnt web
bin dev kernel sbin
Setting the Variables
/image
on the
wd0
device.
setenv
Use the
following syntax:
where name is the name of the variable, and value is the new value you want
the variable to assume.
For example:
sets the value of
setenv
setenv name value
BOOTMGR[2]> setenv autoboot yes
command to set a particular variable. The command has the
autoboot
to be yes.
76Nokia 60s and 100s Installation Guide
unsetenv
Variables
Use the
unsetenv
command to clear a particular variable. The command has
the following syntax:
unsetenv name
where name is the name of the variable to be cleared.
For example, the following command clears the boot-file variable:
BOOTMGR[2]> unsetenv boot-file
Note
This command sets the
variable to zero.
autoboot
variable to no, and the
bootwait
set-defaults
Use the
values. The command has the following syntax:
where name is the name of the variable to be set to its factory default. If name
is not specified, all variables are set to their factory defaults.
set-defaults
set-defaults name
command to set variables to their factory-default
For example, the following command sets the value of autoboot to be yes, the
factory default:
BOOTMGR[2]> set-defaults autoboot
setalias
Use the
syntax:
where name is the alias name, and device the device for which name is the
alias.
Nokia 60s and 100s Installation Guide77
setalias
setaliasname device
command to set an alias. The command has the following
7 Using the Boot Manager
For example, the following command sets the alias
wd0
:
BOOTMGR[2]> setalias disk wd0
You can have a maximum of eight aliases set at one time.
unsetalias
Use the
following syntax:
where name is the name of the alias to be cleared.
For example, the following command deletes the
aliases:
unsetalias
unsetalias name
BOOTMGR[2]> unsetalias disk
Other commands
disk
to have the value of
command to clear an alias. The command has the
disk
alias from the list of
halt
Use the
syntax:
halt
halt
command to halt the system. The command has the following
help
Use the
command has the following syntax:
78Nokia 60s and 100s Installation Guide
help
help
command to display a list of the available commands. The
or
?
Booting the System
The
boot
command lets you boot up the operating system (IPSO). It allows
you to set the boot device, boot file, and boot flags from the command line.
The command has the following syntax:
boot boot-device boot-file boot-flags
where boot-device is the storage device from which the operating system
loads at boot up, and boot-file is the operating system kernel. The boot-flags
control the operation of the command. Refer to the boot flag table in
“Variables” on page 72.
For example, at the boot manager command prompt enter the following:
BOOTMGR[0]> boot wd0 /image/current/mykernel -vd
Booting the System
This command boots
mykernel
from disk
wd0
in verbose and debug mode.
You can supply all, any, or none of the arguments. If you do not supply an
argument, the boot manager uses its default. It first searches its nonvolatile
memory to see if the corresponding default argument is specified there. If so,
it uses that value; if not, it defaults to the values in the following table:
ArgumentDefault
boot-device
boot-file
boot-flags
wd0
(the hard-disk drive)
/image/current/kernel
-x
Nokia 60s and 100s Installation Guide79
7 Using the Boot Manager
Using the Boot Manager to Install IPSO
Use the install command to install IPSO. The syntax of the command is:
install
For complete installation procedures, refer to the appropriate version of
release notes.
Note
A full installation using the install command deletes the existing IPSO
image on the 60s or 100s appliance.
To install a new copy of the IPSO kernel
1.At the boot manager command prompt, enter:
BOOTMGR[0]>install
If you used the
passwd
command to protect this command with a
password, the boot manager prompts you for your password before
allowing you to execute the
2.Enter the information the
install
install
command.
command requests (your system IP
address, the server IP address, and other information).
3.Reboot the 60s or 100s appliance.
80Nokia 60s and 100s Installation Guide
Protecting the Boot Manager with a Password
Protecting the Boot Manager with a Password
To prevent accidental or unauthorized access to your 60s or 100s appliance
hard disk, you can require that the user enter a password to access the boot
manager
Note
The password you enter gives you access to the
boot manager, not access to IPSO.
To set a password
1.At the boot manager command prompt enter:
install
BOOTMGR[0]> passwd
The
passwd
command. Use the password command to set the password.
program prompts you for your current password.
install
command in
2.If the appliance is protected by a password, enter your current password.
The program prompts you for the new password.
3.Enter the new password.
The program prompts you to re-enter the new password for verification.
4.Enter the new password again.
Note
If you forget your install password, contact the appropriate Nokia
Customer Support site as listed in
3 for information on how to set a new one.
“Nokia Contact Information” on page
Installing the Boot Manager
The boot manager is installed at the factory; you should not need to re-install
it. If you should need to re-install the boot manager, contact the appropriate
Nokia 60s and 100s Installation Guide81
7 Using the Boot Manager
Nokia customer support site listed in the Nokia Contact Information section at
the front of this guide for instructions and a new boot manager.
The command to install the boot manager has the following syntax:
install_bootmgr boot-device boot-file
where boot-device is the storage device to which you write the new boot
manager image and from which boot manager image loads at boot up.
Boot-file is the new boot manager. The new boot manager options are
cpipflash, nkipflash
command from IPSO (the operating system), not from the boot manager.
Note
To install the new boot manager, you must be in single-user mode.
The command installs the new boot manager image (
flash device (
wd0
). The installation takes some time to complete. Do not
nkipflash
interrupt the installation process.
) into the
82Nokia 60s and 100s Installation Guide
Upgrading the Boot Manager
The command to upgrade your boot manager has the following syntax:
upgrade_bootmgr boot-device boot-file
where boot-device is the storage device from which the boot manager loads at
boot up and boot-file is the new boot manager image. The new boot manager
options are
upgrade_bootmgr
boot manager.
For complete upgrade procedures, refer to the appropriate version of release
notes.
Note
To install the new boot manager, you must be in single user mode.
cpipflash, nkipflash
command from IPSO (the operating system), not from the
, and
Upgrading the Boot Manager
nkvpnflash
. Execute the
To upgrade the boot manager
1.Get the upgraded boot manager image from the appropriate Nokia
customer support site as listed in the Nokia Contact Information section at
the front of this guide.
2.Start the 60s or 100s appliance in single-user mode.
3.At the IPSO command prompt, enter:
/etc/upgrade_bootmgr wd0 /etc/nkipflash
The command upgrades the boot manager with the new image
nkipflash
(
), writing it into the hard disk dirve (
wd0
). The upgrade takes
some time to complete. Do not interrupt the upgrade process.
Nokia 60s and 100s Installation Guide83
7 Using the Boot Manager
84Nokia 60s and 100s Installation Guide
8Troubleshooting
This chapter provides troubleshooting tips, problems, and solutions related to
60s and 100s appliance installations.
For information about how to reinstall the operating system (IPSO) on to your
appliance, see Chapter 7, “Using the Boot Manager.”
General Troubleshooting Information
The information in this section relates to non-routing problems. For
information about how to troubleshoot routing problems, see
“Troubleshooting Routing Problems” on page 95.
Unable to Log in to the Console Port—No Error Message
Two laptop computers (using terminal emulation programs) or terminals
should be able to communicate back to back in the same way that the terminal
communicates with the 60s and 100s appliance. If this is not possible using
your laptop computer or terminal, the problem is with the terminal or cable
and not the appliance.
Nokia 60s and 100s Installation Guide85
8 Troubleshooting
ProblemYou do not have a console connection to the 60s and 100s
appliance.
SolutionFor information about how to create a console connection,
see “Using a Console Connection to Perform the Initial Configuration” on
page 32.
ProblemNot connected with a null-modem cable.
SolutionVerify that you are using a null-modem cable. For pinout
information, see “Using a Console Connection to Perform the Initial
ProblemTerminal set for flow control.
SolutionThe 60s and 100s appliance does not use flow control. The
terminal should be set for no flow control.
ProblemDefective 60s and 100s appliance or file system.
SolutionContact the Nokia customer support site listed in “Nokia Contact
Information” on page 3.
ProblemDatabase is corrupt.
SolutionReturn to default settings according to the instructions included in
the instructions for resetting the default password, or contact the Nokia
customer support site listed in “Nokia Contact Information” on page 3.
Login Prompt Appears, But Password Not Accepted
ProblemEntered wrong password.
SolutionObtain a valid password or set the password to a default value.
86Nokia 60s and 100s Installation Guide
General Troubleshooting Information
To reset the admin password to a default value
Note
You must have local serial access to your appliance console to perform
this procedure. With a keyboard and monitor directly connected to the
appliance, the
this procedure.
boot:
prompt does not appear, and you cannot perform
1.Boot up the appliance in single-user mode by restarting or power cycling
the appliance.
When the
boot:
prompt appears, enter -s before the appliance goes into
multiuser mode; you have about 10 seconds to do this.
2.After the appliance boots up, the following text appears:
Enter pathname of shell or RETURN for sh:
Press Enter.
3.Type
/etc/overpw
at the # prompt.
When the response asks if you want to continue, type
y
.
4.The admin password defaults to no password for admin.
Continue to boot to multiuser mode.
5.Reconfigure the password as you normally would in Lynx.
Note
Blank passwords are not accepted in Voyager or Lynx. In such cases,
enter the following command to reset the password from the command
line using a blank password:
dbpasswd admin newpassword ""
The two double quotation marks at the end of the command properly
indicate a blank password.
After you execute this command, the system reports that the password
was not successfully changed. However, the password is changed and is
now newpassword.
Nokia 60s and 100s Installation Guide87
8 Troubleshooting
Finally, return the entire database to its default settings and bring up the new
system-startup procedure. The new system-startup procedure is described in
Chapter 3, “Performing the Initial Configuration”.
To reset the default database settings
1.Log in to the 60s and 100s appliance as admin by using Voyager.
2.Under Configuration Database Management (Config > System
3.Create the new default configuration.
Do Not Get a Login Prompt—Error Messages Appear
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
Configuration > Manage Configuration Sets), choose the option to create
a new factory default configuration.
ProblemThe 60s and 100s appliance is defective, or the file system on the
60s and 100s appliance is defective.
SolutionContact the Nokia customer support site listed in “Nokia Contact
Information” on page 3.
Note
Use the full installation procedure to install a new system. The new
system completely replaces the contents of the drive and might be
needed to restore or reload an 60s and 100s appliance. This procedure
erases any configuration database on the appliance. For information
about how to complete the full installation procedure, see the current
release notes. The release notes are located on the Nokia customer
support Web site as listed in the “Nokia Contact Information” on page 3.
88Nokia 60s and 100s Installation Guide
General Troubleshooting Information
Not Able to Connect to Voyager Using the Ethernet Port, But
Console Access Works
ProblemUsing the wrong Ethernet cable.
SolutionUse a crossover Ethernet cable if you are connecting directly to
the computer. Use a straight-through cable if you are connecting to a hub. For
cabling information, see “Dual-Port 10/100 Ethernet Interface, PMC” on page
47.
ProblemPort is not configured as active.
SolutionView the port in Voyager, or from Lynx, and verify that the
interface is configured as active.
ProblemHost port configuration is incorrect.
SolutionCheck host Ethernet port settings. Verify that IP address and
netmask settings are correct for the 60s and 100s appliance configuration.
ProblemWrong link speed.
SolutionVerify that the port on the host and the port on the 60s and 100s
appliance are set for the same speed (10 Mbps or 100 Mbps). An unblinking
data and activity LED on a port is a good indication that there is a speed
mismatch.
ProblemDuplex setting is wrong.
SolutionCorrect duplex setting.
Do Not See Interfaces that Should be Present
ProblemLocal 60s and 100s appliance ports do not appear.
SolutionYour NIC might be defective. Contact the appropriate Nokia
customer support site as listed in “Nokia Contact Information” on page 3.
Nokia 60s and 100s Installation Guide89
8 Troubleshooting
Note
The problem could be with the slot on the PMC card carrier. Try installing
the NIC in another slot.
Common Ethernet Problems—Connectivity with Attached
Device
ProblemNo link light.
SolutionYou might have used the wrong cable. Use a crossover cable
between an 60s and 100s appliance and a host, and a straight-through cable
between an appliance and a hub.
ProblemSolid data and activity LED.
SolutionYou might have set the wrong speed. Verify that the speeds match
on each end of the Ethernet connection (10 Mbps or 100Mbps).
ProblemPort not enabled.
SolutionVerify from the Interface page in Voyager that the interface port is
configured as active.
ProblemHigh collision rate on the hub.
SolutionDisconnect connections one at a time until the problem is
localized to one computer and troubleshoot further.
Unable to Ping Through Appliance—No Connectivity
Between Ports
This section covers connectivity issues that are isolated within an 60s and
100s appliance or network.
90Nokia 60s and 100s Installation Guide
General Troubleshooting Information
Localize the problem by issuing pings to various network interfaces. Use
tcpdump to help isolate the problem. Use tcpdump to verify that a packet is
leaving or entering a port.
ProblemInterfaces not up.
SolutionEnsure that all interfaces are up and active, as described in
Chapter 3, “Performing the Initial Configuration.”
ProblemNo route to network.
SolutionCheck the routing table to see if a route exists to the network
where the interface is located. If no route exists, see “Troubleshooting
Routing Problems” on page 95.
ProblemAttached device does not have proper default route or routing
information.
SolutionIf a local computer is unable to ping through an attached
appliance, the computer might contain either an invalid default route or
invalid routing information.
If you are using default routes from a computer, ensure that the local interface
is the default route for that computer.
ProblemThe ARP table has old information.
SolutionIf the ARP table has an old or invalid entry for the device
associated with the IP address you are attempting to ping, use Voyager to
delete the invalid entry.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
To delete the invalid entry
1.Click Config.
2.Click ARP in the Interfaces section.
Nokia 60s and 100s Installation Guide91
8 Troubleshooting
3.Click Display or Remove Dynamic ARP Entries.
4.Click Delete for the entry you want to delete.
5.Click Apply.
Problems with Multicast
Use tcpdump to view packets. To display packets for a specific interface, use
the following command: tcpdump
information about how to use the tcpdump command, see the Vo y ag e r Reference Guide.
Under Routing Options in the Routing Configuration section in Voyager, you
can also enable several types of trace options for DVMRP. These traces are
logged into
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
/var/tmp/ipsrd.log
-i interface proto igmp
.
. For more
ProblemNo IP connectivity.
SolutionVerify that you have IP connectivity; ping various hosts on each
network.
ProblemDVMRP is not enabled on the interfaces.
SolutionVerify that DVMRP is enabled on the interfaces in use.
ProblemExceeding TTL on clients.
SolutionVerify that the client is set up for the proper TTL number. Many
clients are set to receive local traffic only one hop away.
92Nokia 60s and 100s Installation Guide
General Troubleshooting Information
Problems Interfacing to 1483 Devices (Classical IP)
ProblemRemote and local devices are not configured for the same VC and
VP value.
SolutionSet remote and local devices to the same VC and VP values.
Consult your 1483 device documentation.
ProblemRemote and local devices are not in the supported VC range of
the network interface card.
SolutionUse
ipsctl
to determine the VC range. Enter the following
command:
ipsctl ifphys:logical interface:max_rxlabel
ProblemEncapsulation is not set to LLC/SNAP.
SolutionSet encapsulation to LLC/SNAP. Consult your 1483 device
documentation.
ProblemThe MTU size is not 1500.
SolutionThe MTU size must be 1500. Nokia does not support larger MTU
sizes.
Appliance Not Receiving Power
ProblemPower cord is not properly plugged in.
SolutionCheck cord. Make sure it is properly seated at both ends.
ProblemPower supply not providing power.
SolutionCheck power source. If there is no power at the source, take
appropriate action such as inserting a new fuse or resetting circuit breaker.
Nokia 60s and 100s Installation Guide93
8 Troubleshooting
Appliance Does Not Recognize New Memory Configuration
ProblemDIMMs are not properly seated in DIMM sockets.
SolutionRepeat memory installation procedures. Make sure DIMMs are
fully seated in sockets. Be sure DIMMs click into place.
Appliance locks up after you upgrade IPSO with a console
connection. No error messages appear, but the appliance
stops responding to console and network.
ProblemDuring the upgrade process, some of the environment variables
might not have updated correctly.
SolutionYou can verify what the current boot manager settings are by
issuing a
example:
printenv
command at the boot manager prompt, as shown in this
Several useful tools are available to troubleshoot routing problems. The first
tool is available from the Monitor page in Voyager, from which you display
routing statistics and errors. You can access this information from the
command-line interface using the ICLID (IPSRD command-line interface
daemon) command. An example use of the ICLID command is shown below.
For information about the ICLID command, see the Voyager Reference Guide.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
Nokia 60s and 100s Installation Guide95
8 Troubleshooting
Note
Adding a question mark (?) after any command provides additional
command options. Typing a question mark (?) at a prompt provides a list
of available commands.
hostname[admin]# iclid
hostname | IP address>
hostname | IP address> ?
exit get help quit show
hostname | IP address>
hostname | IP address> show ?
addressbgpigmpiphelper mfcrip
vrrp bootpgwigrpkrtospf route
inbound-filterdvmrpinterface memory
resource version
hostname | IP address> show route ?
aggregate bgp igrp ospf static
all direct inactive rip summary
hostname | IP address> show route ospf
Codes: C - connected, S - static, I - IGRP, R - RIP,
B - BGP, O - OSPF, E - OSPF external, A - Aggregate,
K - Kernel Remnant, H - Hidden, S - Suppressed
The response to the preceding ICLID command is as follows:
0 172.16/16 via 10.1.1.225, eith-sp4p1c0,cost 3, age 3111
In addition, several trace options are available. You can enable these options
under the routing options in Voyager. When a trace is enabled the output
appears in
/var/tmp/ipsrd.log.
96Nokia 60s and 100s Installation Guide
Troubleshooting Routing Problems
Common Problems with OSPF
Use tcpdump to view routing information. Use the following command
display routing updates for that interface:
tcpdump -i
interface
proto ospf
For more information about how to use the tcpdump command, see the
Voyager Reference Guide.
Under routing options in Voyager, you can also enable several types of trace
options for OSPF. These traces are logged in
/var/tmp/ipsrd.log
.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
ProblemOSPF is not configured.
SolutionVerify that OSPF is properly configured for all interfaces that are
involved in OSPF routing. For more information, see Configuring OSPF from
the Configuring Routing document page in Voyager. You can access the
document page by pressing Doc.
ProblemOSPF hello and dead timers are not the same on each interface for
a given link.
SolutionVerify that the settings at the end of each link are identical.
ProblemAttached devices do not support OSPF.
SolutionEnsure that the attached 60s and 100s appliance supports OSPF.
If the attached appliance does not support OSPF, configure it with a protocol
that the appliance supports and exchange routes with OSPF, or set a default or
static route.
Note
You can also use ICLID to display OSPF details.
Nokia 60s and 100s Installation Guide97
8 Troubleshooting
Common Problems with RIP
Use tcpdump to view routing information. Use the following command to
display routing updates for a specific interface:
tcpdump -i
interface
proto rip
For more information about how to use the tcpdump command, see the
Voyager Reference Guide.
Under routing options in Voyager, you can also enable several types of trace
options for routing information protocol (RIP). These traces are logged in
/var/tmp/ipsrd.log
.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
ProblemInconsistent subnet mask (netmask does not match the class of IP
address for RIP v1).
SolutionRIP version 1 must use consistent subnet masks; change to RIP
version 2 or OSPF to use inconsistent subnet masks.
ProblemNumber of networks exceeds the RIP limit.
SolutionRIP can span up to 16 networks. Verify that your network
topology does not exceed this limit.
Common Problems Exchanging Routes
Always enter a metric value if you are exporting routes from OSPF to RIP.
ProblemExchanging routes are not configured correctly.
SolutionExchanging routes involves several configuration steps. Follow
the tasks in the Voyager Reference Guide (online documentation) to ensure
that you follow all steps.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.
98Nokia 60s and 100s Installation Guide
Troubleshooting Routing Problems
ProblemRouting protocol is not functioning properly.
Solutionto ensure that each routing protocol is functioning properly, see
“Common Problems with OSPF” on page 97 and “Common Problems with
RIP” on page 98.
Nokia 60s and 100s Installation Guide99
8 Troubleshooting
100Nokia 60s and 100s Installation Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.