Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
This guide describes how to install and use Nokia security appliances.
Installation and maintenance should be performed by experienced technicians
or Nokia-approved service providers only.
This preface provides the following information:
In this Guide
Conventions this Guide Uses
Related Documentation
In this Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the
appliance.
Chapter 2, “Installing the Nokia IP390 Appliance” describes how to
rack-mount the appliance and how to physically connect it to a network
and power.
Chapter 3, “Performing the Initial Configuration” describes how to make
the appliance available on the network.
Chapter 4, “Installing and Replacing Network Interface Cards” describes
how to install, monitor, and replace network interface cards (NICs).
Notes provide information of special interest or recommendations.
Command-Line Conventions
You might encounter one or more of the following elements on a commandline path.
Table 1 Command-Line Conventions
ConventionDescription
commandThis required element is usually the product name or other
short word that invokes the product or calls the compiler or
preprocessor script for a compiled Nokia product. It might
appear alone or precede one or more options. You must
spell a command exactly as shown and use lowercase
letters.
Conventions this Guide Uses
ItalicsIndicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
angle brackets < > Indicates arguments for which you must supply a value:
-flagA flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.extA filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
( . , ; + * - / )Punctuation and mathematical notations are literal symbols
that you must enter exactly as shown.
' 'Single quotation marks are literal symbols that you must
The Nokia IP390 appliance combines the power of Nokia IPSO software with
your choice of firewall and VPN applications. These appliances are ideally
suited for growing companies and satellite of fices that want high-performance
IP routing combined with the industry-leading Check Point VPN-1 enterprise
applications. The small size of the IP390 appliance makes it ideal for
installations that need to conserve space.
As network devices, these appliances support a comprehensive suite of
IP-routing functions and protocols, including RIPv1/RIPv2, IGRP, OSPF and
BGP4 for unicast traffic, and DVMRP for multicast traffic.
This chapter provides an overview of the IP390 appliance and the
requirements for using it. The following topics are covered:
About the Nokia Appliance
Managing the Appliance
Logging Options
Site Requirements, Warnings, and Cautions
Software Requirements
Product Disposal
The IP390 is a one rack-unit appliance that incorporates a serviceable
slide-out tray into the chassis design and support for various network interface
cards (NICs).
The Nokia IPSO system is stored in solid-state IDE compact flash memory.
Table 3 shows the specific
Table 3 Specifications for the
FeatureNokia IP390
Maximum memory size2 GB
Network interface cards
(NICs) support
ations for the appliance
Platform
• Two or fewer four-port 10/100 Ethernet NICs
• Two or fewer two-port copper Gigabit Ethernet NICs
• Two or fewer two-port fiber-optic Gigabit Ethernet
NICs
The following figures show component locations for the Nokia
appliance.
Figure 1 Component Locations Front View
System status LEDs
PMC NIC slots (slots 1 and 2)
unpopulated in base bundle
The four built-in Gigabit Ethernet ports are located on the front of the
appliance. Figure 3 shows the layout of the built-in Gigabit Ethernet ports and
status LEDs.
Figure 3 Built-In Gigabit Ethernet Ports Details
Activity LED (blinking yellow)
Link LED (solid yellow for 10/100 Mbps, solid green for 1000 Mbps)
About the Nokia IP390 Appliance
Power switch
00527
Power socket
RJ-45 connectors
00547
Caution
Cables that connect to the Gigabit Ethernet ports must be IEEE
“Two-Port Copper Gigabit Ethernet Network
Interface Card” on page 65
“Two-Port Fiber-Optic Gigabit Ethernet Network
Interface Card” on page 68
Note
Nokia products only support NICs purchased from Nokia or
Nokia-approved resellers. The Nokia Global Support Services group can
provide support only for Nokia products that use Nokia-approved
accessories. For sales or reseller information, contact a Nokia service
provider listed in the “Nokia Contact Information” on page 3.
You can monitor the basic operation of the appliance and NICs by
checking their status LEDs. The system status LEDs are located on the front
panel of the appliance, as Figure 4 shows.
Figure 4 Appliance Status LEDs
About the Nokia IP390 Appliance
System OK (green)
Warning (yellow)
!
Power indicator (blue)
Fault (red)
Table 5 shows the system status LEDs and describes their meaning.
Table 5 System Status LEDs
Status IndicatorMeaning Symbol
Solid bluePower on
Solid yellowAppliance is experiencing an
internal voltage problem.
Blinking yellowAppliance is experiencing a
temperature problem.
Solid redOne or more fans are not
operating properly.
Power supply over temperature
fault.
For information on the built-in Gigabit Ethernet interface LEDs, see
“Built-In Gigabit Ethernet Ports” on page 21.
For information on the four-port Ethernet NIC LEDs, see “Four-Port 10/
100 Mbps Ethernet NICs” on page 61.
Managing the IP390 Appliance
You can manage the appliance by using one of the following interfaces:
Nokia Network Vo yager—an SSL-secured, Web-based element
management interface to Nokia IP appliances. Network Voyager is
preinstalled on the
operating system. With Network Voyager, you can manage, monitor, and
configure the IP390 appliance from any authorized location within the
network by using a standard Web browser.
For information about how to access Network Voyager and the related
reference materials, see “Using Nokia Network Voyager” on page 45.
appliance and enabled through the IPSO
The IPSO command-line interface (CLI)—an SSHv2-secured interface
that enables you to easily configure Nokia IP appliances from the
command line. Everything that you can accomplish with Network
Voyager—manage, monitor, and con figure the IP390 appliance—you can
also accomplish with the CLI.
For information about how to access the CLI, see the CLI Reference Guide for the version of Nokia IPSO you are using.
management application. With Horizon Manager , you can securely install
and upgrade the Nokia IPSO operating system, plus hardware and thirdparty applications such as Check Point VPN-1. Horizon Manager can
perform installations and upgrades on up to 2,500 Nokia IP appliances,
offering administrators the most rapid and dependable method to perform
Check Point application upgrades.
The IP390 supports two options for storing local system log files, as described
in the following topics:
Using Hard-Disk Drives for Logging
Using a Flash-Memory PC Card for Logging
Note
You can use only one device for logging (whether it’s a hard-disk drive or
flash-memory PC card) at a time.
Using Hard-Disk Drives for Logging
The appliance supports a single hard-disk drive, which provides 40 GB
of disk storage. You can use the hard-disk drive for storing log files.
Logging Options
Using a Flash-Memory PC Card for Logging
The appliance has two PC-card slots, both of which support 1-GB flash memory
PC cards. The slots are labeled PCMCIA and are located on the front of the
appliance, as Figure 5 shows. The
flash-memory PC card at a time.
You can use the flash-memory PC card to store local system logs.
Nokia supports only flash-memory PC cards purchased from Nokia or
Nokia-approved resellers. For more information, contact the appropriate
Nokia customer support site listed in “Nokia Contact Information” on page 3.
Site Requirements, Warnings, and Cautions
Before you install a Nokia appliance, ensure that your computer room
or wiring closet conforms to the environmental specifications listed in
Chapter A, “Technical Specifications.”
Warning
Excessive electromagnetic interference (EMI) can occur if you use
controls, make performance adjustments, or follow procedures that are
not described in this document.
Warning
To reduce the risk of fire, electric shock, and injury when you use
telephone equipment, follow basic safety precautions. Do not use the
product near water.
Caution
Replace the battery only with the same or equivalent type battery
recommended by the manufacturer. Dispose of used batteries
according to the manufacturer's instructions.
Caution
Do not block any of the ventilation holes on the appliance. The
components might overheat and become damaged.
Hazardous radiation exposure can occur if you use controls, make
performance adjustments, or follow procedures that are not described in
this document.
Caution
For IP390 appliances intended for shipment outside of the United
States, the cord might be optional. If a cord is not provided, use a
power cord rated at 6A, 250V, maximum 15 feet long, made of HAR
cordage and IEC fittings approved by the country of end use.
Software Requirements
The Nokia appliance supports the following operating system and
applications:
Nokia operating system software requirements—IPSO v4.1 or later
Check Point VPN-1 versions compatible with the version of Nokia IPSO
you are using
Software Requirements
For information about updates to the software requirements or additional
applications that have become available since this guide was published,
contact your Nokia service provider, as listed in “Nokia Contact Information”
on page 3.
Product Disposal
At the end of its useful life, your appliance and all peripherals included with
it, including power cords and cables, must be disposed of in accordance with
all applicable national, state, and local laws and regulations. These devices
contain materials and components that must be disposed of properly.
Therefore, to help prevent damage to the environment, Nokia encourages you
to dispose of these devices in an environmentally-friendly manner.
The following resources are available to you to help with equipment-disposal
decisions:
Many Nokia products are labeled with information about the materials
used in their manufacture that can help those who will process equipment
after you have disposed of it.
The Nokia web site (http://www.nokia.com) provides information about
our environmental programs and practices, which includes details about
materials used in manufacturing and end-of-life practices. You can also
find your product’ s Eco Declaration, which provi des basic information on
the environmental attributes of the product covering material use,
packaging, disassembly, and recycling.
Contact your local waste management agencies for guidelines specific to
your area.
The crossed-out wheeled bin means that within the European Union the product
must be taken to separate collection at the product end-of-life. This applies to your
device but also to any enhancements marked with this symbol. Do not dispose of
these products as unsorted municipal waste.
To help guard against electrostatic discharge damage, make sure
you are properly grounded by using a grounding wrist strap and
following the instructions provided with the wrist strap before you
handle the components or open the appliance.
Rack Mounting the Appliance
The appliance mounts in a standard 19-inch rack with four mounting
screws as Figure 6 shows.
Note
To avoid damaging your equipment, Nokia recommends that you use all
four rack-mounting screws when you install your appliance on the rack.