Installation Guide
Page 6
...Using Nokia Network Voyager 44 Viewing Nokia IPSO Documentation by Using Nokia Network Voyager 45 Using the Command-Line Interface 46 Using Nokia Horizon Manager 46 4 Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules 49 Removing, Installing, and Replacing NICs or the ADP Module 50 Before You Begin 50 Configuring and Activating Interfaces 56 Monitoring Network Interface Cards 56 5 About IP1200 Series Appliance Network Interface Cards 57 Four-Port 10/100 Ethernet NICs 58 10/100 Ethernet NIC Features 58 Ethernet NIC Connectors and Cables...
...Using Nokia Network Voyager 44 Viewing Nokia IPSO Documentation by Using Nokia Network Voyager 45 Using the Command-Line Interface 46 Using Nokia Horizon Manager 46 4 Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules 49 Removing, Installing, and Replacing NICs or the ADP Module 50 Before You Begin 50 Configuring and Activating Interfaces 56 Monitoring Network Interface Cards 56 5 About IP1200 Series Appliance Network Interface Cards 57 Four-Port 10/100 Ethernet NICs 58 10/100 Ethernet NIC Features 58 Ethernet NIC Connectors and Cables...
Installation Guide
Page 17
Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance. 1 Overview This chapter provides an overview of the Nokia IP1200 Series security platform and the requirements for a smaller data center. Table 2 presents specifics about the Nokia IP1200 Series disk-based security platforms. Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1260 Minimum: 1 GB Maximum: 2 GB 32 MB Nokia IP1220 Minimum...
Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance. 1 Overview This chapter provides an overview of the Nokia IP1200 Series security platform and the requirements for a smaller data center. Table 2 presents specifics about the Nokia IP1200 Series disk-based security platforms. Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1260 Minimum: 1 GB Maximum: 2 GB 32 MB Nokia IP1220 Minimum...
Installation Guide
Page 18
... Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades. About the Nokia IP1200 Series Flash-Based Security Platforms Table 3 presents specifics about the Nokia IP1200 Series flash-based security platforms. Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1220 Minimum: 1 GB Maximum: 2 GB 1 GB Nokia IP1260 Minimum: 1 GB Maximum: 2 GB 1 GB 18 IP1220 and IP1260 Security Platforms Installation Guide to high-end availability requirements, including port...
... Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades. About the Nokia IP1200 Series Flash-Based Security Platforms Table 3 presents specifics about the Nokia IP1200 Series flash-based security platforms. Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1220 Minimum: 1 GB Maximum: 2 GB 1 GB Nokia IP1260 Minimum: 1 GB Maximum: 2 GB 1 GB 18 IP1220 and IP1260 Security Platforms Installation Guide to high-end availability requirements, including port...
Installation Guide
Page 19
... Check Point VPN-1. Use one of the four Ethernet management ports to perform Check Point application upgrades. With Horizon Manager, you can accomplish with the CLI. Horizon Manager can perform installations and upgrades on up to 2,500 Nokia IP security platforms, offering administrators the most rapid and dependable method to access the Network Voyager interface. IP1220 and IP1260 Security Platforms Installation Guide 19 Managing the Nokia IP1200 Series Security Platform Note The IP1220 and IP1260 model numbers are used for both disk-based and flash-based security...
... Check Point VPN-1. Use one of the four Ethernet management ports to perform Check Point application upgrades. With Horizon Manager, you can accomplish with the CLI. Horizon Manager can perform installations and upgrades on up to 2,500 Nokia IP security platforms, offering administrators the most rapid and dependable method to access the Network Voyager interface. IP1220 and IP1260 Security Platforms Installation Guide 19 Managing the Nokia IP1200 Series Security Platform Note The IP1220 and IP1260 model numbers are used for both disk-based and flash-based security...
Installation Guide
Page 21
Table 4 PMC Expansion Slots Interface For details, see Chapter 6, "About IP1200 Appliance ADP Services Modules." The Nokia Global Support Services group can install a single ADP module in Table 4. Note Nokia products only support NICs and ADP modules purchased from Nokia or Nokiaapproved resellers. If you need to access the devices locally, you can only provide support for Nokia products that makes the appliance available on the network. Console Port Use the built-in console port, shown in the "Nokia Contact...
Table 4 PMC Expansion Slots Interface For details, see Chapter 6, "About IP1200 Appliance ADP Services Modules." The Nokia Global Support Services group can install a single ADP module in Table 4. Note Nokia products only support NICs and ADP modules purchased from Nokia or Nokiaapproved resellers. If you need to access the devices locally, you can only provide support for Nokia products that makes the appliance available on the network. Console Port Use the built-in console port, shown in the "Nokia Contact...
Installation Guide
Page 24
... a disk failure. Hard-Disk Drive LEDs The hard-disk drive LEDs are running. Figure 5 Hard-Disk Drive Front Pane l Hard-disk drive LEDs Hot swap button 00319 24 IP1220 and IP1260 Security Platforms Installation Guide You can create mirror sets that consist of a source hard-disk drive (which holds the active copy of Nokia IPSO you can use the hot swap button, shown in Table 7. Note The IP1200 series flash-based appliances do not support disk mirroring. For information about disk mirroring, including configuration details, see "Replacing a Hard-Disk Drive" on...
... a disk failure. Hard-Disk Drive LEDs The hard-disk drive LEDs are running. Figure 5 Hard-Disk Drive Front Pane l Hard-disk drive LEDs Hot swap button 00319 24 IP1220 and IP1260 Security Platforms Installation Guide You can create mirror sets that consist of a source hard-disk drive (which holds the active copy of Nokia IPSO you can use the hot swap button, shown in Table 7. Note The IP1200 series flash-based appliances do not support disk mirroring. For information about disk mirroring, including configuration details, see "Replacing a Hard-Disk Drive" on...
Installation Guide
Page 39
... document, Using DHCP to Configure Your Appliance, included with the appliance. IP1220 and IP1260 Security Platforms Installation Guide 39 3 Performing the Initial Configuration The first time you to configure the network settings and provides access to the admin account. This process enables you turn on power to a Nokia IP1200 Series appliance, the initial configuration process begins. Note Nokia recommends that you physically install all NICs, ADP module, and other components, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data...
... document, Using DHCP to Configure Your Appliance, included with the appliance. IP1220 and IP1260 Security Platforms Installation Guide 39 3 Performing the Initial Configuration The first time you to configure the network settings and provides access to the admin account. This process enables you turn on power to a Nokia IP1200 Series appliance, the initial configuration process begins. Note Nokia recommends that you physically install all NICs, ADP module, and other components, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data...
Installation Guide
Page 40
... modem port. You can use a serial console connection (cable included). the serial (AUX) port is Cisco compatible. Connecting Power and Turning the Power On A power switch and a receptacle for the power cord are located on each power supply on the back of the cable to the VT100 console or to the console port on the front panel of your Nokia IP1200 Series appliance, you no longer need the console connection. After you perform the initial configuration...
... modem port. You can use a serial console connection (cable included). the serial (AUX) port is Cisco compatible. Connecting Power and Turning the Power On A power switch and a receptacle for the power cord are located on each power supply on the back of the cable to the VT100 console or to the console port on the front panel of your Nokia IP1200 Series appliance, you no longer need the console connection. After you perform the initial configuration...
Installation Guide
Page 42
... must use a serial console connection (cable included). If the settings are still not running, or if the power LED does not illuminate, contact your Nokia service provider or Nokia Support as listed in "Nokia Contact Information" on the screen for load sharing and redundancy. Respond to prevent the DHCP client from starting. 42 IP1220 and IP1260 Security Platforms Installation Guide Performing the Initial Configuration If you do not see the Nokia IPSO Boot Manager Reference Guide. After...
... must use a serial console connection (cable included). If the settings are still not running, or if the power LED does not illuminate, contact your Nokia service provider or Nokia Support as listed in "Nokia Contact Information" on the screen for load sharing and redundancy. Respond to prevent the DHCP client from starting. 42 IP1220 and IP1260 Security Platforms Installation Guide Performing the Initial Configuration If you do not see the Nokia IPSO Boot Manager Reference Guide. After...
Installation Guide
Page 44
... the Initial Configuration." For more information, see "Viewing Nokia IPSO Documentation by Using Nokia Network Voyager" later in the installation guide for each interface. Open a Web browser on the type of the cable can also connect the remaining LAN interface cables at least one of the initial interface you configured for the destination Gigabit Ethernet device. The destination end of connector required for the appliance. Using Nokia Network Voyager Use Nokia Network Voyager to enter the admin username and the password you entered...
... the Initial Configuration." For more information, see "Viewing Nokia IPSO Documentation by Using Nokia Network Voyager" later in the installation guide for each interface. Open a Web browser on the type of the cable can also connect the remaining LAN interface cables at least one of the initial interface you configured for the destination Gigabit Ethernet device. The destination end of connector required for the appliance. Using Nokia Network Voyager Use Nokia Network Voyager to enter the admin username and the password you entered...
Installation Guide
Page 47
... necessary licensing to multiple platforms simultaneously, thereby reducing potential human error and improving productivity. For information about how to obtain Horizon Manager or to manage and configure a large number of Nokia security appliances that reside on page 3. 051115 IP1220 and IP1260 Security Platforms Installation Guide 47 Horizon Manager is designed to learn more . Using Nokia Horizon Manager Using Horizon Manager, an administrator can manage multiple devices simultaneously, perform parallel software upgrades, device verifications, device configuration, file backups...
... necessary licensing to multiple platforms simultaneously, thereby reducing potential human error and improving productivity. For information about how to obtain Horizon Manager or to manage and configure a large number of Nokia security appliances that reside on page 3. 051115 IP1220 and IP1260 Security Platforms Installation Guide 47 Horizon Manager is designed to learn more . Using Nokia Horizon Manager Using Horizon Manager, an administrator can manage multiple devices simultaneously, perform parallel software upgrades, device verifications, device configuration, file backups...
Installation Guide
Page 56
Configuring and Activating Interfaces The Nokia IP1200 Series appliance automatically detects any new NICs or an ADP module when the device is completely installed. For information about how to examine the traffic on a specific port. 56 IP1220 and IP1260 Security Platforms Installation Guide Monitoring Network Interface Cards You can also use the Nokia IPSO tcpdump command to access Network Voyager, see "Using Nokia Network Voyager" on page 44. 4 Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules The power indicator LED on the PMC...
Configuring and Activating Interfaces The Nokia IP1200 Series appliance automatically detects any new NICs or an ADP module when the device is completely installed. For information about how to examine the traffic on a specific port. 56 IP1220 and IP1260 Security Platforms Installation Guide Monitoring Network Interface Cards You can also use the Nokia IPSO tcpdump command to access Network Voyager, see "Using Nokia Network Voyager" on page 44. 4 Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules The power indicator LED on the PMC...
Installation Guide
Page 57
... Mhz. IP1220 and IP1260 Security Platforms Installation Guide 57 For example, if a two-port Ethernet NIC and a two-port fiberoptic Gigabit Ethernet NIC are described: Four-Port 10/100 Ethernet NICs Two-Port and Four-Port Copper Gigabit Ethernet NICs Two-Port Fiber-Optic Gigabit Ethernet NICs For instructions about how to add or replace NICs, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules." The following NICs are installed on your network. Use this...
... Mhz. IP1220 and IP1260 Security Platforms Installation Guide 57 For example, if a two-port Ethernet NIC and a two-port fiberoptic Gigabit Ethernet NIC are described: Four-Port 10/100 Ethernet NICs Two-Port and Four-Port Copper Gigabit Ethernet NICs Two-Port Fiber-Optic Gigabit Ethernet NICs For instructions about how to add or replace NICs, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules." The following NICs are installed on your network. Use this...
Installation Guide
Page 64
... reference materials, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules." For information about how to add or replace a NIC, see "Using Nokia Network Voyager" on Nokia IPSO v4.2 or higher. Specifically, you can use in the IP1200 run on a PMC expansion slot. Figure 19 shows the front panel details for the two-port short-range (1000 BASE-SX) fiber-optic Gigabit Ethernet NIC you set the port speed and full-duplex mode...
... reference materials, see Chapter 4, "Installing and Replacing Network Interface Cards and Accelerated Data Path (ADP) Services Modules." For information about how to add or replace a NIC, see "Using Nokia Network Voyager" on Nokia IPSO v4.2 or higher. Specifically, you can use in the IP1200 run on a PMC expansion slot. Figure 19 shows the front panel details for the two-port short-range (1000 BASE-SX) fiber-optic Gigabit Ethernet NIC you set the port speed and full-duplex mode...
Installation Guide
Page 65
... Gigabit Ethernet device. Caution Depending on the remote equipment illuminate to indicate the connection. You can also use a half-duplex LC-to-LC cable to loop back the transmit port of the two fiber-optic two-port Gigabit Ethernet NICs access a separate PCI bus. You can order additional cables from a cable vendor of the two 6U PMC card carrier units to get maximum system throughput. IP1220 and IP1260 Security Platforms Installation Guide...
... Gigabit Ethernet device. Caution Depending on the remote equipment illuminate to indicate the connection. You can also use a half-duplex LC-to-LC cable to loop back the transmit port of the two fiber-optic two-port Gigabit Ethernet NICs access a separate PCI bus. You can order additional cables from a cable vendor of the two 6U PMC card carrier units to get maximum system throughput. IP1220 and IP1260 Security Platforms Installation Guide...
Installation Guide
Page 67
... ports. The modules use swappable small form-factor pluggable (SFP) transceivers to accelerate firewall and VPN throughput. For IP1220 and IP1260 appliances, ADP is a technology designed to forward packets at the highest possible rate. Nokia IP1220 and IP1260 ADP modules help to provide Gigabit Ethernet copper, Gigabit Ethernet short-range fiber, and Gigabit Ethernet long-range fiber interface options. It includes the following sections: Installing and Replacing ADP Modules Nokia ADP Card LED Reference Information Configuring Nokia IPSO...
... ports. The modules use swappable small form-factor pluggable (SFP) transceivers to accelerate firewall and VPN throughput. For IP1220 and IP1260 appliances, ADP is a technology designed to forward packets at the highest possible rate. Nokia IP1220 and IP1260 ADP modules help to provide Gigabit Ethernet copper, Gigabit Ethernet short-range fiber, and Gigabit Ethernet long-range fiber interface options. It includes the following sections: Installing and Replacing ADP Modules Nokia ADP Card LED Reference Information Configuring Nokia IPSO...
Installation Guide
Page 81
The grounding plug on page 20) provides a chassis grounding point. IP1220 and IP1260 Security Platforms Installation Guide 81 The following topics are covered: Replacing a Hard-Disk Drive Installing a PC Card Replacing the Compact Flash Memory Card Replacing or Upgrading Memory Installing a Nokia Encryption Accelerator Card Installing a Fan Unit Installing or Replacing a Power Supply Replacing Motherboard Batteries For information about how to service an IP1200 Series. You should have a grounding wrist strap, make...
The grounding plug on page 20) provides a chassis grounding point. IP1220 and IP1260 Security Platforms Installation Guide 81 The following topics are covered: Replacing a Hard-Disk Drive Installing a PC Card Replacing the Compact Flash Memory Card Replacing or Upgrading Memory Installing a Nokia Encryption Accelerator Card Installing a Fan Unit Installing or Replacing a Power Supply Replacing Motherboard Batteries For information about how to service an IP1200 Series. You should have a grounding wrist strap, make...
Installation Guide
Page 116
... link speed. Solution Correct duplex setting. 116 IP1220 and IP1260 Security Platforms Installation Guide This procedure erases any configuration database on page 59. An unblinking data and activity LED on page 3. The release notes are set for the IP1200 Series configuration. Under Configuration Database Management (Config > System Configuration > Manage Configuration Sets), choose the option to Nokia Network Voyager Using the Ethernet Port, But Console Access Works Problem Using the wrong Ethernet cable. Not Able to Connect to create a new factory default configuration...
... link speed. Solution Correct duplex setting. 116 IP1220 and IP1260 Security Platforms Installation Guide This procedure erases any configuration database on page 59. An unblinking data and activity LED on page 3. The release notes are set for the IP1200 Series configuration. Under Configuration Database Management (Config > System Configuration > Manage Configuration Sets), choose the option to Nokia Network Voyager Using the Ethernet Port, But Console Access Works Problem Using the wrong Ethernet cable. Not Able to Connect to create a new factory default configuration...
Installation Guide
Page 117
... connections one at a time until the problem is not installed correctly. IP1220 and IP1260 Security Platforms Installation Guide 117 Solution You might have set the wrong speed. Problem Solid activity LED. Solution You might be Present Problem Local IP1200 Series ports do not appear. Solution Repeat memory installation procedures. Appliance Does Not Recognize New Memory Configuration Problem The DIMMs are not properly seated in another slot. General Troubleshooting Information Problem NIC or ADP module...
... connections one at a time until the problem is not installed correctly. IP1220 and IP1260 Security Platforms Installation Guide 117 Solution You might have set the wrong speed. Problem Solid activity LED. Solution You might be Present Problem Local IP1200 Series ports do not appear. Solution Repeat memory installation procedures. Appliance Does Not Recognize New Memory Configuration Problem The DIMMs are not properly seated in another slot. General Troubleshooting Information Problem NIC or ADP module...
Installation Guide
Page 126
...status 23 M management ports 20 managing the appliance 19 memory capacity 99 flash 88 upgrading 99 modem connection pin assignments for the 22 monitoring the appliance 23 motherboard 106 multi-mode, fiber-optic cable 65 N network interface cards Ethernet 61 installing 49 list of available 57 monitoring 56 removing 50 replacing 50 two-port Ethernet 64, 65 two-port fiber-optic Gigabit Ethernet 64 network interfaces, connecting 44 Nokia encryption accelerator card 102 Nokia Horizon Manager 19 Nokia IPSO command-line interface 19 Nokia IPSO requirements 30 Nokia Network Voyager 19 opening 44 Index...
...status 23 M management ports 20 managing the appliance 19 memory capacity 99 flash 88 upgrading 99 modem connection pin assignments for the 22 monitoring the appliance 23 motherboard 106 multi-mode, fiber-optic cable 65 N network interface cards Ethernet 61 installing 49 list of available 57 monitoring 56 removing 50 replacing 50 two-port Ethernet 64, 65 two-port fiber-optic Gigabit Ethernet 64 network interfaces, connecting 44 Nokia encryption accelerator card 102 Nokia Horizon Manager 19 Nokia IPSO command-line interface 19 Nokia IPSO requirements 30 Nokia Network Voyager 19 opening 44 Index...