Installation Guide
Page 6
... Connectors and Cables 65 Performance Considerations 65 6 About IP1200 Appliance ADP Services Modules 67 Installing and Replacing ADP Modules 68 Before You Begin 68 Nokia ADP Card LED Reference Information 71 Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces 71 Effect on Interfaces 71 Nokia ADP Card Interface Names for IP1220 and IP1260 Appliances 72 Configuration Example...
... Connectors and Cables 65 Performance Considerations 65 6 About IP1200 Appliance ADP Services Modules 67 Installing and Replacing ADP Modules 68 Before You Begin 68 Nokia ADP Card LED Reference Information 71 Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces 71 Effect on Interfaces 71 Nokia ADP Card Interface Names for IP1220 and IP1260 Appliances 72 Configuration Example...
Installation Guide
Page 13
... Path (ADP) services modules. Chapter 5, "About IP1200 Series Appliance Network Interface Cards" describes how to connect to and use each of the Nokia IP1200 Series security platforms. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. IP1220 and IP1260 Security Platforms Installation Guide 13 This preface provides the following information...
... Path (ADP) services modules. Chapter 5, "About IP1200 Series Appliance Network Interface Cards" describes how to connect to and use each of the Nokia IP1200 Series security platforms. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only. IP1220 and IP1260 Security Platforms Installation Guide 13 This preface provides the following information...
Installation Guide
Page 14
... information of service. Menu commands Menu commands are linked by a greater than sign (>): Choose File > Open. 14 IP1220 and IP1260 Security Platforms Installation Guide Caution Cautions indicate potential equipment damage, equipment malfunction, loss of performance, loss of data, or interruption of special interest or recommendations. Table 1 Text Conventions Convention Description monospace font Indicates...
... information of service. Menu commands Menu commands are linked by a greater than sign (>): Choose File > Open. 14 IP1220 and IP1260 Security Platforms Installation Guide Caution Cautions indicate potential equipment damage, equipment malfunction, loss of performance, loss of data, or interruption of special interest or recommendations. Table 1 Text Conventions Convention Description monospace font Indicates...
Installation Guide
Page 17
.... The Nokia IP1220 security platform is a mid-range security platform that is a two-rack unit appliance that is ideally suited for its use. The front panel of the Nokia IPSO operating system with the Nokia Secure Access System and firewall applications. Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance. The Nokia IP1260 security platform is...
.... The Nokia IP1220 security platform is a mid-range security platform that is a two-rack unit appliance that is ideally suited for its use. The front panel of the Nokia IPSO operating system with the Nokia Secure Access System and firewall applications. Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance. The Nokia IP1260 security platform is...
Installation Guide
Page 18
... performance as needed through next-generation, high-end Nokia Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades. About the Nokia IP1200 Series Flash-Based Security Platforms Table 3 presents specifics about the Nokia IP1200 Series flash-based security platforms. Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1220...
... performance as needed through next-generation, high-end Nokia Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades. About the Nokia IP1200 Series Flash-Based Security Platforms Table 3 presents specifics about the Nokia IP1200 Series flash-based security platforms. Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics Platform RAM (Minimum and Maximum Supported Configurations) Compact Flash Nokia IP1220...
Installation Guide
Page 19
... of the four Ethernet management ports to easily configure Nokia IP security platforms from any authorized location within the network by using a standard Web browser. Horizon Manager can accomplish with the CLI. IP1220 and IP1260 Security Platforms Installation Guide 19 For information about how to perform Check Point application upgrades. For information about how to...
... of the four Ethernet management ports to easily configure Nokia IP security platforms from any authorized location within the network by using a standard Web browser. Horizon Manager can accomplish with the CLI. IP1220 and IP1260 Security Platforms Installation Guide 19 For information about how to perform Check Point application upgrades. For information about how to...
Installation Guide
Page 20
...located in the PMC slots. Figure 2 shows the layout of the Ethernet management ports and link LEDs. These ports do not provide the same performance as Ethernet cards in slot 3. Figure 2 Ethernet Management Ports Details LInk LEDs (green) Port 1 Port 2 Port 3 Port 4 RJ-... bottom and left -most port (port 1). The remaining LEDs represent the remaining ports from top to prevent potential data loss. 20 IP1220 and IP1260 Security Platforms Installation Guide 1 Overview Figure 1 Component Locations Front View System status LEDs Dual 6U PMC carrier or ADP module expansion slots ...
...located in the PMC slots. Figure 2 shows the layout of the Ethernet management ports and link LEDs. These ports do not provide the same performance as Ethernet cards in slot 3. Figure 2 Ethernet Management Ports Details LInk LEDs (green) Port 1 Port 2 Port 3 Port 4 RJ-... bottom and left -most port (port 1). The remaining LEDs represent the remaining ports from top to prevent potential data loss. 20 IP1220 and IP1260 Security Platforms Installation Guide 1 Overview Figure 1 Component Locations Front View System status LEDs Dual 6U PMC carrier or ADP module expansion slots ...
Installation Guide
Page 26
... hot to the touch when the power supply unit is plugged in to two power supplies for power sharing and redundancy. Caution The Nokia IP1200 Series appliance power supply might be turned on for each power supply runs only when the unit is turned on , the Fault LED illuminates....LEDs" on . This is not turned on page 28. The power supplies are hot swappable and perform load sharing while two active power supplies are not turned on . 26 IP1220 and IP1260 Security Platforms Installation Guide The power supplies are autosensing and can accept input voltages between 85 VAC and ...
... hot to the touch when the power supply unit is plugged in to two power supplies for power sharing and redundancy. Caution The Nokia IP1200 Series appliance power supply might be turned on for each power supply runs only when the unit is turned on , the Fault LED illuminates....LEDs" on . This is not turned on page 28. The power supplies are hot swappable and perform load sharing while two active power supplies are not turned on . 26 IP1220 and IP1260 Security Platforms Installation Guide The power supplies are autosensing and can accept input voltages between 85 VAC and ...
Installation Guide
Page 28
...Series appliance, ensure that are not described in Appendix A, "Technical Specifications." Site Requirements Before you use controls, make performance adjustments, or follow procedures that your computer room or wiring closet conforms to the environmental specifications listed in this document. 28 IP1220 and IP1260 Security ... to the unit is functioning properly. Over Temp Yellow Power supply has an internal temperature problem. Fan Unit The IP1200 Series appliance fan unit is not turned on . Caution If an individual fan fails, replace the fan unit as soon as described in...
...Series appliance, ensure that are not described in Appendix A, "Technical Specifications." Site Requirements Before you use controls, make performance adjustments, or follow procedures that your computer room or wiring closet conforms to the environmental specifications listed in this document. 28 IP1220 and IP1260 Security ... to the unit is functioning properly. Over Temp Yellow Power supply has an internal temperature problem. Fan Unit The IP1200 Series appliance fan unit is not turned on . Caution If an individual fan fails, replace the fan unit as soon as described in...
Installation Guide
Page 39
...) Services Modules." For information about how to the admin account. IP1220 and IP1260 Security Platforms Installation Guide 39 For information about how to a Nokia IP1200 Series appliance, the initial configuration process begins. This process enables you perform the initial configuration procedure this chapter describes. You can perform the initial configuration in two ways: Configure a DHCP...
...) Services Modules." For information about how to the admin account. IP1220 and IP1260 Security Platforms Installation Guide 39 For information about how to a Nokia IP1200 Series appliance, the initial configuration process begins. This process enables you perform the initial configuration procedure this chapter describes. You can perform the initial configuration in two ways: Configure a DHCP...
Installation Guide
Page 40
... Initial Configuration Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series appliance, you no longer need the console connection. You can use any standard VT100-compatible terminal with an RS-232 data terminal equipment (DTE)...of the cable to the VT100 console or to the console port on page 21. 2. Connect the other end of the appliance as shown in Figure 10. 40 IP1220 and IP1260 Security Platforms Installation Guide emulation program. Connecting Power and Turning the Power On A power switch and a receptacle for the power ...
... Initial Configuration Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series appliance, you no longer need the console connection. You can use any standard VT100-compatible terminal with an RS-232 data terminal equipment (DTE)...of the cable to the VT100 console or to the console port on page 21. 2. Connect the other end of the appliance as shown in Figure 10. 40 IP1220 and IP1260 Security Platforms Installation Guide emulation program. Connecting Power and Turning the Power On A power switch and a receptacle for the power ...
Installation Guide
Page 42
... to prevent the DHCP client from starting. 42 IP1220 and IP1260 Security Platforms Installation Guide Note On an appliance with two active power supplies installed, connect and turn on both ends. Performing the Initial Configuration If you plugged the appliance. At the console a series of your Nokia IP1200 Series appliance, you must use the boot manager, see...
... to prevent the DHCP client from starting. 42 IP1220 and IP1260 Security Platforms Installation Guide Note On an appliance with two active power supplies installed, connect and turn on both ends. Performing the Initial Configuration If you plugged the appliance. At the console a series of your Nokia IP1200 Series appliance, you must use the boot manager, see...
Installation Guide
Page 43
... (slot_num), subslot number (subslot_num) and port number (port_num). IP1220 and IP1260 Security Platforms Installation Guide 43 e. Respond to prevent the DHCP client ...from restarting. 3. At each subsequent prompt, enter the requested configuration information. To select an interface, enter the number adjacent to select an interface, Nokia...the list of connected interfaces. Performing the Initial Configuration If the DHCP client starts, it might configure the appliance with an incorrect host name ...
... (slot_num), subslot number (subslot_num) and port number (port_num). IP1220 and IP1260 Security Platforms Installation Guide 43 e. Respond to prevent the DHCP client ...from restarting. 3. At each subsequent prompt, enter the requested configuration information. To select an interface, enter the number adjacent to select an interface, Nokia...the list of connected interfaces. Performing the Initial Configuration If the DHCP client starts, it might configure the appliance with an incorrect host name ...
Installation Guide
Page 44
..., you might have a physical network connection between the host and your appliance. 44 IP1220 and IP1260 Security Platforms Installation Guide For additional information about how to configure or monitor your appliance. 3 Performing the Initial Configuration Connecting Network Interfaces Connect at this point, although you...can be either LC or SC, depending on page 65. For details, see "Viewing Nokia IPSO Documentation by Using Nokia Network Voyager" later in Chapter 3, "Performing the Initial Configuration." You are prompted to enter the admin username and the password you ...
..., you might have a physical network connection between the host and your appliance. 44 IP1220 and IP1260 Security Platforms Installation Guide For additional information about how to configure or monitor your appliance. 3 Performing the Initial Configuration Connecting Network Interfaces Connect at this point, although you...can be either LC or SC, depending on page 65. For details, see "Viewing Nokia IPSO Documentation by Using Nokia Network Voyager" later in Chapter 3, "Performing the Initial Configuration." You are prompted to enter the admin username and the password you ...
Installation Guide
Page 46
...appliance by using a command-line connection (SSH, console, or Telnet) over a TCP/IP network as an admin, cadmin, or monitor user: If you log in as a monitor user, you can execute only the show form of commands. Using Nokia Horizon Manager Nokia Horizon Manager is an extension of Nokia IP security platforms. 46 IP1220.... Execute from the CLI shell and the Nokia IPSO shell. Nokia IPSO command line Enter clish -c "cli-command" Execute a single CLI command. To access the command-line interface 1. 3 Performing the Initial Configuration Using the Command-Line Interface...
...appliance by using a command-line connection (SSH, console, or Telnet) over a TCP/IP network as an admin, cadmin, or monitor user: If you log in as a monitor user, you can execute only the show form of commands. Using Nokia Horizon Manager Nokia Horizon Manager is an extension of Nokia IP security platforms. 46 IP1220.... Execute from the CLI shell and the Nokia IPSO shell. Nokia IPSO command line Enter clish -c "cli-command" Execute a single CLI command. To access the command-line interface 1. 3 Performing the Initial Configuration Using the Command-Line Interface...
Installation Guide
Page 47
... multiple platforms simultaneously, thereby reducing potential human error and improving productivity. Using Horizon Manager, a network security professional can obtain configuration information, upgrade (or downgrade) the operating system, perform application installations, and distribute necessary licensing to manage and configure a large number of Nokia security appliances that reside on page 3. 051115 IP1220 and IP1260 Security Platforms Installation Guide 47
... multiple platforms simultaneously, thereby reducing potential human error and improving productivity. Using Horizon Manager, a network security professional can obtain configuration information, upgrade (or downgrade) the operating system, perform application installations, and distribute necessary licensing to manage and configure a large number of Nokia security appliances that reside on page 3. 051115 IP1220 and IP1260 Security Platforms Installation Guide 47
Installation Guide
Page 48
3 Performing the Initial Configuration 48 IP1220 and IP1260 Security Platforms Installation Guide
3 Performing the Initial Configuration 48 IP1220 and IP1260 Security Platforms Installation Guide
Installation Guide
Page 62
... B emissions requirements. Note Certain circumstances might require shielded Cat 5 Ethernet cables to prevent potential data loss. Performance Considerations If you . 62 IP1220 and IP1260 Security Platforms Installation Guide Each 6U PMC card carrier unit has a separate PCI bus connection to left, with the...green LED indicates a 1 Gbps link speed, and a yellow LED indicates a 10/100 Mbps link speed. For the IP1200 Series appliance, any two NICs installed on the NIC is bicolored. Copper Gigabit Ethernet NIC Connectors and Cables The IP1200 Series receptacles are RJ45 connectors...
... B emissions requirements. Note Certain circumstances might require shielded Cat 5 Ethernet cables to prevent potential data loss. Performance Considerations If you . 62 IP1220 and IP1260 Security Platforms Installation Guide Each 6U PMC card carrier unit has a separate PCI bus connection to left, with the...green LED indicates a 1 Gbps link speed, and a yellow LED indicates a 10/100 Mbps link speed. For the IP1200 Series appliance, any two NICs installed on the NIC is bicolored. Copper Gigabit Ethernet NIC Connectors and Cables The IP1200 Series receptacles are RJ45 connectors...
Installation Guide
Page 65
... PMC card carrier units to indicate the connection. As data is turned on the appliance illuminate. Two-Port Fiber-Optic Gigabit Ethernet NICs Figure 20 shows the front panel ...-type cable provides longer transmission reach. LC and SC define the fiber-optic connector types; Performance Considerations If you can use a half-duplex LC-to-LC cable to other network components,...Gigabit Ethernet NICs. The destination end of an interface to the main system motherboard. IP1220 and IP1260 Security Platforms Installation Guide 65 LC connectors are connected, the Ethernet link LEDs on both...
... PMC card carrier units to indicate the connection. As data is turned on the appliance illuminate. Two-Port Fiber-Optic Gigabit Ethernet NICs Figure 20 shows the front panel ...-type cable provides longer transmission reach. LC and SC define the fiber-optic connector types; Performance Considerations If you can use a half-duplex LC-to-LC cable to other network components,...Gigabit Ethernet NICs. The destination end of an interface to the main system motherboard. IP1220 and IP1260 Security Platforms Installation Guide 65 LC connectors are connected, the Ethernet link LEDs on both...
Installation Guide
Page 71
...ADP transceivers installed that are not supported by Nokia. Note The Non-Supported SFP Components table appears only if you might perform to use the interfaces on a Nokia ADP module. Nokia ADP Card LED Reference Information All Nokia IP1220 and IP1260 ADP modules provide a single .... Nokia ADP Card LED Reference Information rejected interfaces on the Interface Configuration page in Nokia Network Voyager, as described below: If you install an ADP module in an IP1220 or IP1260 appliance, the names and configuration information for each port. IP1220 and IP1260 Security Platforms...
...ADP transceivers installed that are not supported by Nokia. Note The Non-Supported SFP Components table appears only if you might perform to use the interfaces on a Nokia ADP module. Nokia ADP Card LED Reference Information All Nokia IP1220 and IP1260 ADP modules provide a single .... Nokia ADP Card LED Reference Information rejected interfaces on the Interface Configuration page in Nokia Network Voyager, as described below: If you install an ADP module in an IP1220 or IP1260 appliance, the names and configuration information for each port. IP1220 and IP1260 Security Platforms...