Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
060101
2Nokia IP200 Series Security Platform Installation Guide
Nokia Contact Information
Corporate Headquarters
Web Sitehttp://www.nokia.com
Telephone1-888-477-4566 or
1-650-625-2000
Fax1-650-691-2170
Mail
Address
Regional Contact Information
AmericasNokia Inc.
Europe,
Middle East,
and Africa
Asia-Pacific 438B Alexandra Road
Nokia Customer Support
Web Site:https://support.nokia.com/
Email:tac.support@nokia.com
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
#07-00 Alexandra Technopark
Singapore 119968
Tel: 1-877-997-9199
Outside USA and Canada: +1 512-437-7089
email: info.ipnetworking_americas@nokia.com
Nokia IP200 Series Security Platform Installation Guide11
12Nokia IP200 Series Security Platform Installation Guide
About this Guide
This guide provides information for the installation and use of the Nokia
IP200 Series security platform, which consists of the Nokia IP260 and Nokia
IP265 appliances. Installation and maintenance should be performed by
experienced technicians or Nokia-approved service providers only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the Nokia IP200
Security Platform.
Chapter 2, “Installing a Nokia IP200 Security Appliance” explains how to
rack mount the appliance and how to physically connect it to a network
and power.
Chapter 3, “Performing the Initial Configuration” explains how to make
the appliance available on the network.
Chapter 4, “Connecting to the Ethernet Ports” describes how to connect to
the supported Ethernet ports.
Nokia IP200 Series Security Platform Installation Guide13
Chapter 5, “Configuring and Activating Encryption Acceleration”
describes how to configure and activate the built-in encryption
acceleration feature.
Chapter 6, “Installing Flash-Memory PC Cards” explains how to install or
replace ATA flash-memory PC cards in your IP200 appliance.
Chapter 7, “Using the Nokia IPSO Boot Manager” explains how to use
the boot manager, which is part of the Nokia IPSO software.
Chapter 8, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” gives technical specifications
such as interface characteristics.
Appendix B, “Compliance Information” includes compliance and
regulatory information.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
14Nokia IP200 Series Security Platform Installation Guide
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Internet Communications products. You might encounter one or more of the
following elements in a command-line path.
Table 1 Command-Line Conventions
ConventionDescription
commandA user-generated instruction typically sent using a console
or terminal. The command statement and its associated
syntax must be entered exactly as shown in lowercase
letters.
Conventions This Guide Uses
italicsIndicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60
Nokia IP200 Series Security Platform Installation Guide15
Table 1 Command-Line Conventions (continued)
ConventionDescription
-flagA flag is usually an abbreviation for a function, menu, or
.extA filename extension, such as .ext, might follow a variable
( . , ; + * - / )Punctuation and mathematical notations are literal symbols
Text Conventions
Table 2 describes the text conventions this guide uses.
Table 2 Text Conventions
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
that you must enter exactly as shown.
ConventionDescription
monospace font
Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key namesKeys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commandsMenu commands are separated by a greater than
sign (>):
Choose File > Open.
16Nokia IP200 Series Security Platform Installation Guide
Related Documentation
Table 2 Text Conventions (continued)
ConventionDescription
The words enter and typeEnter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics
Related Documentation
You can find this guide in PDF on the Nokia support We b site (https://
support.nokia.com/).
In addition to this guide, documentation for this product includes the
following:
Getting Started Guide and Release Notes for the version of IPSO you are
using
Nokia Network Voyager Reference Guide for the version of IPSO you are
using
CLI Reference Guide for the version of IPSO you are using
Nokia Network Voyager inline help
• Emphasizes a point or denotes new terms at the
place where they are defined in the text.
• Indicates an external book title reference.
• Indicates a variable in a command:
delete interface
if_name
You can access the Nokia Voyager inline help, the Nokia Network Voyager
Reference Guide, and the CLI Reference Guide for the version of IPSO you
are using from the Nokia Voyager application.
Check Point documentation is available from the Check Point Web site at
http://www.checkpoint.com. You can also order Check Point documentation
from Nokia or download it from the Nokia support site at https://
support.nokia.com.
Nokia IP200 Series Security Platform Installation Guide17
18Nokia IP200 Series Security Platform Installation Guide
1Overview
This chapter provides an overview of the Nokia IP200 Security Platform and
the requirements for using the IP200 appliances. The following topics are
covered:
About the Nokia IP200 Security Platform on page 19
Nokia IP200 Security Platform Appliance Overview on page 20
Site Requirements on page 26
Safety Warnings and Cautions on page 27
Product Disposal on page 26
Managing IP200 Security Platform Appliances on page 28
About the Nokia IP200 Security Platform
The Nokia IP200 Security Platform combines the power of Nokia IPSO
software with your choice of firewall and VPN applications.
The IP200 platform provides built-in hardware-based encryption acceleration.
The IP200 appliances are ideally suited for growing companies and satellite
offices that want high-performance IP routing combined with the
industry-leading Check Point VPN-1/FireWall-1 enterprise security suite. The
small size of the IP200 appliances makes them ideal for installations that need
to conserve space.
Nokia IP200 Series Security Platform Installation Guide19
1 Overview
As network devices, the IP200 appliances support a comprehensive suite of
IP-routing functions and protocols, including RIPv1/RIPv2, IGRP, OSPF and
BGP4 for unicast traffic, and DVMRP for multicast traffic. The integrated
router functionality eliminates the need for separate intranet and access
routers in security applications.
For more information and technical specifications, see “Technical
Specifications” on page 87.
Nokia IP200 Security Platform Appliance
Overview
The following figures show comp onent l ocations for Nokia IP 200 appliances.
Figure 1 Component Locations Front View
IP260
PCMCIA slots
Status LEDs
Built-in Ethernet ports
(10/100 Mbps)
Auxiliary (AUX) port
00024
Console port
Reset switch
20Nokia IP200 Series Security Platform Installation Guide
Figure 2 Component Locations Rear View
Built-in Ethernet Ports
Nokia IP200 Security Platform Appliance Overview
00321
Power plug
Power switch
Figure 3 shows the layout of the built-in Ethernet ports and LEDs.
Figure 3 Built-In Ethernet Interface Front Panel Details
Activity LED (yellow)
Link LED (green)
RJ-45 connectors
00120
Note
Nokia products support NICs purchased from Nokia Corporation or
Nokia-approved resellers only. The Nokia Global Support Services group
can provide support only for Nokia products that use Nokia-approved
accessories. For sales or reseller information, contact a Nokia service
provider listed in the “Nokia Contact Information” on page 3.
Nokia IP200 Series Security Platform Installation Guide21
1 Overview
Console and Serial (AUX) Ports
Use the built-in console port to supply the information that makes the
appliance available on the network. Use the built-in serial (AUX) port for
RS232-compliant equipment you are using with your appliance; for example,
as a modem connection for managing the appliance. Figure 4 provides pin
assignment information for console and serial connections.
Caution
Nokia recommends that you use the console cable that was
delivered with your appliance for your console connection.
Otherwise, ensure that the pin assignments for your cable match
those provided in this section.
Note
Although pin assignments are the same for console and serial
connections, they are used diff erently by the appliance. Ther efore, do not
use these two connectors interchangeably.
22Nokia IP200 Series Security Platform Installation Guide
Nokia IP200 Security Platform Appliance Overview
Figure 4 Pin Assignments for Console and AUX Connections
1
5
69
00460
Input or
Pin#Assignment
1DCD
output
Input
(AUX port
only; not used
by the console
port)
2RXDInput
3TXDOutput
4DTROutput
5GND
6DSRInput
7RTSOutput
8CTSInput
9not used
Nokia IP200 Series Security Platform Installation Guide23
1 Overview
Table 3 shows how to match pins at the console or serial connector with
output pins on DB9 or DB25 cables you are using with terminal devices or
other appropriate equipment.
Table 3 Pin Assignments for DB9 and DB25 Interface Cables
You can monitor the basic operation of Nokia IP200 appliances by checking
their status LEDs. The system status LEDs are located on the front panel of
the appliance, as Figure 5 shows.
DB9 cable output pin and
assignment
DB25 cable output pin and
assignment
24Nokia IP200 Series Security Platform Installation Guide
Nokia IP200 Security Platform Appliance Overview
Figure 5 Appliance Status LEDs
Power or Status
Caution
IP260
Critical
Figure 4 describes the status conditions for each of the LEDs for all
indications they might display.
Table 4 Appliance Status LEDs
00024
IndicatorColorDescription
CautionNone (off)
Yellow (steady)
Normal
Initial boot flash activity
or
Internal voltage problem
Yellow (blinking)
Temperature fault
Nokia IP200 Series Security Platform Installation Guide25
1 Overview
Figure 4 describes the status conditions for each of the LEDs for all
indications they might display.
Table 4 Appliance Status LEDs (continued)
IndicatorColorDescription
Power or
Status
CriticalNone (off)
None (off)
Blue
Red
For information about the built-in Ethernet interface LEDs, see “Built-in
Ethernet Ports” on page 21.
Site Requirements
Before you install a Nokia IP200 appliance, ensure that your computer room
or wiring closet conforms to the environmental specifications listed in
Appendix A, “Technical Specifications.”
Power off
Power on
Normal
One or more fans are defective.
or
No recognizable boot device with
a valid kernel found.
or
Kernel panic (followed in 20
seconds by CPU reset).
Product Disposal
At the end of its useful life, your appliance and all peripherals included with
it, including power cords and cables, must be disposed of in accordance with
all applicable national, state, and local laws and regulations. These devices
contain materials and components that must be disposed of properly.
26Nokia IP200 Series Security Platform Installation Guide
Safety Warnings and Cautions
Therefore, to help prevent damage to the environment, Nokia encourages you
to dispose of these devices in an environmentally-friendly manner.
The following resources are available to you to help with equipment-disposal
decisions:
Many Nokia products are labeled with information about the materials
used in their manufacture that can help those who will process equipment
after you have disposed of it.
The Nokia web site (http://www.nokia.com) provides information about
our environmental programs and practices, which includes details about
materials used in manufacturing and end-of-life practices. You can also
find your product’ s Eco Declaration , which provides basic information o n
the environmental attributes of the product covering material use,
packaging, disassembly, and recycling.
Contact your local waste management agencies for guidelines specific to
your area.
The crossed-out wheeled bin means that within the European Union the product
must be taken to separate collection at the product end-of-life. This applies to your
device but also to any enhancements marked with this symbol. Do not dispose of
these products as unsorted municipal waste.
Safety Warnings and Cautions
Warning
To reduce the risk of fire, electric shock, and injury when you use
telephone equipment, follow basic safety precautions. Do not use the
product near water.
Nokia IP200 Series Security Platform Installation Guide27
1 Overview
Caution
Do not place objects over the ventilation holes on the IP200
appliance. The components might overheat and become damaged.
Caution
For IP200 appliances intended for shipment outside of the United
States, the power cord might not be included. If a power cord is not
provided, use a power cord rated at 6A, 250V, maximum 15 feet
long, made of HAR cordage and IEC fittings approved by the country
of end use.
Managing IP200 Security Platform Appliances
You can manage Nokia IP200 appliances by using one of the following
interfaces:
Nokia Network Voyager—an SSL-secured, Web-based element
management interface to Nokia IP security platforms. Network V oyager is
preinstalled on the IP200 appliance and enabled through the IPSO
operating system. With Network Voyager, you can manage, monitor, and
configure the IP200 appliance from any authorized location within the
network by using a standard Web browser.
For information about how to access Network Voyager and the related
reference materials, see “Using Nokia Network Voyager to Manage Your
Appliance” on page 46.
The Nokia IPSO command-line interface (CLI)—an SSHv2-secured
interface that
from the
enables you to configure Nokia IP security platforms
command line. Everything that you can accomplish with Nokia
Voyager—to manage and configure the IP200 appliance—you can also do
with the CLI.
28Nokia IP200 Series Security Platform Installation Guide
Managing IP200 Security Platform Appliances
For information about how to access the CLI, see the Nokia CLI
Reference Guide for the version of IPSO you are using.
management application. With Horizon Manager , you can securely install
and upgrade the Nokia proprietary IPSO operating system, plus hardware
and third-party applications such as Check Point FireWall-1. Horizon
Manager can perform installations and upgrades on up to 2,500 Nokia IP
security platforms, offering administrators the most rapid and dependable
upgrade to Check Point NG.
For information about how to obtain Horizon Manager, see “Nokia
Contact Information” on page 3.
Nokia IP200 Series Security Platform Installation Guide29
1 Overview
30Nokia IP200 Series Security Platform Installation Guide
Loading...
+ 70 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.