Installation Guide
Page 6
4 About IP390 Appliance Network Interface Cards 37 Four-Port 10/100 Mbps Ethernet Network Interface Card 37 Ethernet NIC Features 37 Ethernet NIC Connectors and Cables 38 Two-... 65 Replacing or Upgrading Memory 66 Before You Start 67 Replacing the Battery 70 7 Troubleshooting 75 General Troubleshooting Information 75 Troubleshooting Routing Problems 82 A Technical Specifications 87 Physical Dimensions 87 Space Requirements 87 Operating Temperature 87 NIC Interfaces 88 6 IP390 Security Platform Installation Guide
4 About IP390 Appliance Network Interface Cards 37 Four-Port 10/100 Mbps Ethernet Network Interface Card 37 Ethernet NIC Features 37 Ethernet NIC Connectors and Cables 38 Two-... 65 Replacing or Upgrading Memory 66 Before You Start 67 Replacing the Battery 70 7 Troubleshooting 75 General Troubleshooting Information 75 Troubleshooting Routing Problems 82 A Technical Specifications 87 Physical Dimensions 87 Space Requirements 87 Operating Temperature 87 NIC Interfaces 88 6 IP390 Security Platform Installation Guide
Installation Guide
Page 9
Tables Table 1 Command-Line Conventions 14 Table 2 Text Conventions 15 Table 3 Specifications for the IP390 Platform 17 Table 4 PMC Network Interface Card Slots 19 Table 5 System Status LEDs 20 Table 6 Pin Assignments Console Connector and Cable 28 Table 7 Pin Assignments for AUX Connector and Modem Cable 28 IP390 Security Platform Installation Guide 9
Tables Table 1 Command-Line Conventions 14 Table 2 Text Conventions 15 Table 3 Specifications for the IP390 Platform 17 Table 4 PMC Network Interface Card Slots 19 Table 5 System Status LEDs 20 Table 6 Pin Assignments Console Connector and Cable 28 Table 7 Pin Assignments for AUX Connector and Modem Cable 28 IP390 Security Platform Installation Guide 9
Installation Guide
Page 13
..." describes problems you might encounter and proposes solutions to and use Nokia IP390 security appliances. IP390 Security Platform Installation Guide 13 About This Guide This guide describes how to install and use each of the IP390 appliance. Chapter 2, "Installing the Nokia IP390 Appliance" describes how to rack-mount the appliance and how to physically connect it to a network and power. ...
..." describes problems you might encounter and proposes solutions to and use Nokia IP390 security appliances. IP390 Security Platform Installation Guide 13 About This Guide This guide describes how to install and use each of the IP390 appliance. Chapter 2, "Installing the Nokia IP390 Appliance" describes how to rack-mount the appliance and how to physically connect it to a network and power. ...
Installation Guide
Page 17
...incorporates a serviceable slide-out tray into the chassis design and support for the Nokia IP390 appliance. Table 3 shows the specifications for the IP390 appliance Table 3 Specifications for the IP390 Platform Feature Nokia IP390 Maximum memory size Network interface cards (NICs) support 2 GB • Two ...choice of firewall and VPN applications. IP390 Security Platform Installation Guide 17 1 Overview The Nokia IP390 appliance combines the power of Nokia IPSO software with the industry-leading Check Point VPN-1 enterprise applications. The Nokia IPSO system is a one rack-unit...
...incorporates a serviceable slide-out tray into the chassis design and support for the Nokia IP390 appliance. Table 3 shows the specifications for the IP390 appliance Table 3 Specifications for the IP390 Platform Feature Nokia IP390 Maximum memory size Network interface cards (NICs) support 2 GB • Two ...choice of firewall and VPN applications. IP390 Security Platform Installation Guide 17 1 Overview The Nokia IP390 appliance combines the power of Nokia IPSO software with the industry-leading Check Point VPN-1 enterprise applications. The Nokia IPSO system is a one rack-unit...
Installation Guide
Page 21
... electromagnetic interference (EMI) can perform installations and upgrades on page 33. The Nokia IPSO command-line interface (CLI)-an SSHv2-secured interface that enables you install a Nokia IP390 appliance, ensure that you are not described in Chapter A, "Technical Specifications." Dispose of Nokia IPSO you can accomplish with the same or equivalent type battery recommended by the...
... electromagnetic interference (EMI) can perform installations and upgrades on page 33. The Nokia IPSO command-line interface (CLI)-an SSHv2-secured interface that enables you install a Nokia IP390 appliance, ensure that you are not described in Chapter A, "Technical Specifications." Dispose of Nokia IPSO you can accomplish with the same or equivalent type battery recommended by the...
Installation Guide
Page 22
... in accordance with this guide was published, contact your Nokia service provider, as unsorted municipal waste. 050930 22 IP390 Security Platform Installation Guide If a cord is not provided, use a power cord rated at the product end-of -life practices. 1 Overview Caution For IP390 appliances intended for guidelines specific to separate collection at 6A, 250V, maximum 15...
... in accordance with this guide was published, contact your Nokia service provider, as unsorted municipal waste. 050930 22 IP390 Security Platform Installation Guide If a cord is not provided, use a power cord rated at the product end-of -life practices. 1 Overview Caution For IP390 appliances intended for guidelines specific to separate collection at 6A, 250V, maximum 15...
Installation Guide
Page 38
... mode by using Network Voyager. Specifically, you should use an RJ-45 crossover cable. You can order appropriate adapter cables separately. You can order additional cables from a cable vendor of your choice. 38 IP390 Security Platform Installation Guide Figure 9 Four.... Ethernet NIC Connectors and Cables The connectors on the appliance light up. 4 About IP390 Appliance Network Interface Cards Compliance with IEEE 802.3 Ethernet specification You can configure and monitor Ethernet interfaces with Nokia Network Voyager. The following figure shows Ethernet NIC front ...
... mode by using Network Voyager. Specifically, you should use an RJ-45 crossover cable. You can order appropriate adapter cables separately. You can order additional cables from a cable vendor of your choice. 38 IP390 Security Platform Installation Guide Figure 9 Four.... Ethernet NIC Connectors and Cables The connectors on the appliance light up. 4 About IP390 Appliance Network Interface Cards Compliance with IEEE 802.3 Ethernet specification You can configure and monitor Ethernet interfaces with Nokia Network Voyager. The following figure shows Ethernet NIC front ...
Installation Guide
Page 40
... for analysis through tcpdump Compliance with IEEE 802.3ab Gigabit Ethernet specification 40 IP390 Security Platform Installation Guide 4 About IP390 Appliance Network Interface Cards Figure 12 Gigabit Ethernet Crossover Cable Pin Connections 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 00020 Two-Port Copper Gigabit Ethernet Network Interface Card All NICs installed in an IP390 are sold by Nokia under the order code NIF4425.
... for analysis through tcpdump Compliance with IEEE 802.3ab Gigabit Ethernet specification 40 IP390 Security Platform Installation Guide 4 About IP390 Appliance Network Interface Cards Figure 12 Gigabit Ethernet Crossover Cable Pin Connections 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 00020 Two-Port Copper Gigabit Ethernet Network Interface Card All NICs installed in an IP390 are sold by Nokia under the order code NIF4425.
Installation Guide
Page 43
...) fiber-optic Gigabit Ethernet NICs in the IP390 run on Nokia IPSO v4.2 or higher. You can use in IP390 appliance. For information about how to 1 Gbps (no half-duplex support) Link speed auto advertising Tracing through tcpdump Compliance with IEEE 802.3z Gigabit Ethernet specification The short-range multi-mode fiber... 3, "Performing the Initial Configuration.". Figure 16 PMC Two-Port Short-Range Gigabit Ethernet NIC Link LEDs (solid green) Activity LEDs (blinking amber) GIGE Ports 00206 IP390 Security Platform Installation Guide 43
...) fiber-optic Gigabit Ethernet NICs in the IP390 run on Nokia IPSO v4.2 or higher. You can use in IP390 appliance. For information about how to 1 Gbps (no half-duplex support) Link speed auto advertising Tracing through tcpdump Compliance with IEEE 802.3z Gigabit Ethernet specification The short-range multi-mode fiber... 3, "Performing the Initial Configuration.". Figure 16 PMC Two-Port Short-Range Gigabit Ethernet NIC Link LEDs (solid green) Activity LEDs (blinking amber) GIGE Ports 00206 IP390 Security Platform Installation Guide 43
Installation Guide
Page 49
...of the physical interfaces on specific NICs, see Chapter 4, "About IP390 Appliance Network Interface Cards." Deactivating Configured Interfaces If you are removing or replacing an installed NIC, use Nokia Network Voyager to remove, add..., or replace NICs later if it . Deactivate all of the logical interfaces on the NIC. Deactivate all of networking equipment before removing it becomes necessary. IP390 Security...
...of the physical interfaces on specific NICs, see Chapter 4, "About IP390 Appliance Network Interface Cards." Deactivating Configured Interfaces If you are removing or replacing an installed NIC, use Nokia Network Voyager to remove, add..., or replace NICs later if it . Deactivate all of the logical interfaces on the NIC. Deactivate all of networking equipment before removing it becomes necessary. IP390 Security...
Installation Guide
Page 55
... condition of the NICs in your appliance by looking at the LED status indicators on page 40. Monitoring Network Interface Cards You can also use the Nokia IPSO tcpdump command to access detailed port information. For status indicator information for the built-in the NIC reference chapter. IP390 Security Platform Installation Guide 55 For...
... condition of the NICs in your appliance by looking at the LED status indicators on page 40. Monitoring Network Interface Cards You can also use the Nokia IPSO tcpdump command to access detailed port information. For status indicator information for the built-in the NIC reference chapter. IP390 Security Platform Installation Guide 55 For...
Installation Guide
Page 80
.... Enter the following command: tcpdump -i interface proto igmp. Solution Verify that the client is set to LLC/SNAP. To display packets for a specific interface, use the following command: ipsctl ifphys:logical interface:max_rxlabel Problem Encapsulation is enabled on the interfaces in Network Voyager, you have IP connectivity; ...Set encapsulation to determine the VC range. Solution The MTU size must be 1500 (for Ethernet interfaces) or 16018 (for Gigabit Ethernet interfaces). Nokia does not support larger MTU sizes. 80 IP390 Security Platform Installation Guide
.... Enter the following command: tcpdump -i interface proto igmp. Solution Verify that the client is set to LLC/SNAP. To display packets for a specific interface, use the following command: ipsctl ifphys:logical interface:max_rxlabel Problem Encapsulation is enabled on the interfaces in Network Voyager, you have IP connectivity; ...Set encapsulation to determine the VC range. Solution The MTU size must be 1500 (for Ethernet interfaces) or 16018 (for Gigabit Ethernet interfaces). Nokia does not support larger MTU sizes. 80 IP390 Security Platform Installation Guide
Installation Guide
Page 84
...not match the class of trace options for a specific interface: tcpdump -i interface proto rip For more information about how to view routing information. Problem Number of each interface for RIP v1). If the attached appliance does not support OSPF, configure it with RIP...the tcpdump command, see "Using Nokia Network Voyager" on each link are exporting routes from OSPF to ensure that you follow all steps. 84 IP390 Security Platform Installation Guide Problem Attached devices do not support OSPF. Common Problems with a protocol that the attached IP390 appliance supports OSPF.
...not match the class of trace options for a specific interface: tcpdump -i interface proto rip For more information about how to view routing information. Problem Number of each interface for RIP v1). If the attached appliance does not support OSPF, configure it with RIP...the tcpdump command, see "Using Nokia Network Voyager" on each link are exporting routes from OSPF to ensure that you follow all steps. 84 IP390 Security Platform Installation Guide Problem Attached devices do not support OSPF. Common Problems with a protocol that the attached IP390 appliance supports OSPF.
Installation Guide
Page 87
...IP390 Security Platform Installation Guide 87 A Technical Specifications Physical Dimensions Dimensions Height: Width: Weight Depth: 1.75 in. (4.45 cm) 17 in. (44 cm) 19 in. (48 cm) rack mountable 16.12 in. (40.94 cm) 17 lbs. (7.7 kg) base system Space Requirements The IP390 appliance...(32° F to move air through the appliances Caution Do not place objects over the ventilation holes on the appliance. The appliance might overheat and become damaged. Operating Temperature The operating temperature range for the Nokia IP390 appliance is designed for front-screw mounting in a rack...
...IP390 Security Platform Installation Guide 87 A Technical Specifications Physical Dimensions Dimensions Height: Width: Weight Depth: 1.75 in. (4.45 cm) 17 in. (44 cm) 19 in. (48 cm) rack mountable 16.12 in. (40.94 cm) 17 lbs. (7.7 kg) base system Space Requirements The IP390 appliance...(32° F to move air through the appliances Caution Do not place objects over the ventilation holes on the appliance. The appliance might overheat and become damaged. Operating Temperature The operating temperature range for the Nokia IP390 appliance is designed for front-screw mounting in a rack...
Installation Guide
Page 88
... 802.32 Gigabit Ethernet multi-mode Fiber LC IEEE 802.3 1000 Base-T unshielded twisted pair, full-duplex or half-duplex. RJ-48 88 IP390 Security Platform Installation Guide A Technical Specifications NIC Interfaces NIC Type 10/100 Ethernet Fiber-optic Gigabit Ethernet Copper Gigabit Ethernet T1 Cable Type Cable Connector IEEE 802.3 100 Base...
... 802.32 Gigabit Ethernet multi-mode Fiber LC IEEE 802.3 1000 Base-T unshielded twisted pair, full-duplex or half-duplex. RJ-48 88 IP390 Security Platform Installation Guide A Technical Specifications NIC Interfaces NIC Type 10/100 Ethernet Fiber-optic Gigabit Ethernet Copper Gigabit Ethernet T1 Cable Type Cable Connector IEEE 802.3 100 Base...
Installation Guide
Page 93
Index A appliance 17 auxiliary port connecting to the 26 pin assignments 28 B battery holder ...VPN-1 requirements 22 command-line interface (CLI) overview 21 using the 35 compact flash memory card (internal) Nokia IPSO storage 17 replacing 57 compliance information 89 declaration of conformity 89 FCC notice 92 statements 90 component locations ...depth specification 87 DHCP server 31 DIMMs see memory (RAM) E end-of-life information 22 Ethernet NICs cable pin assignments 39 connecting to 38 crossover-cable pin connections 39 front panel 38 IEEE 802.3ab compliance 38 LEDs 38 IP390 Security Platform...
Index A appliance 17 auxiliary port connecting to the 26 pin assignments 28 B battery holder ...VPN-1 requirements 22 command-line interface (CLI) overview 21 using the 35 compact flash memory card (internal) Nokia IPSO storage 17 replacing 57 compliance information 89 declaration of conformity 89 FCC notice 92 statements 90 component locations ...depth specification 87 DHCP server 31 DIMMs see memory (RAM) E end-of-life information 22 Ethernet NICs cable pin assignments 39 connecting to 38 crossover-cable pin connections 39 front panel 38 IEEE 802.3ab compliance 38 LEDs 38 IP390 Security Platform...
Installation Guide
Page 94
...short-range fiber-optic 43 system status 19 M memory (RAM) DIMM socket locations 67 replacing 66 specification upgrading 66 modem, connecting to the 28 monitoring appliances 19 multicast traffic 17 multi-mode, fiber-optic cable 44 N network interface cards see NICs network ... 49 interface specifications 88 specifications 17, 88 T1 45 Nokia Horizon Manager overview 21 using the 36 Nokia IPSO command-line interface (CLI) 35 reference documentation 34 requirements 22 transferring images 61 Nokia Network Voyager opening 33 overview 20 using 33 Index - 94 IP390 Security Platform Installation ...
...short-range fiber-optic 43 system status 19 M memory (RAM) DIMM socket locations 67 replacing 66 specification upgrading 66 modem, connecting to the 28 monitoring appliances 19 multicast traffic 17 multi-mode, fiber-optic cable 44 N network interface cards see NICs network ... 49 interface specifications 88 specifications 17, 88 T1 45 Nokia Horizon Manager overview 21 using the 36 Nokia IPSO command-line interface (CLI) 35 reference documentation 34 requirements 22 transferring images 61 Nokia Network Voyager opening 33 overview 20 using 33 Index - 94 IP390 Security Platform Installation ...
Installation Guide
Page 95
...recycling retired equipment 22 S serial port 28 SFP modules 44 single-mode, fiber-optic cable 44 space requirements 87 specifications depth 87 height 87 network interfaces 88 operating temperature 87 physical dimensions 87 space requirements 87 technical 87 weight 87 ..., for copper 40 Gigabit Ethernet connections, for fiber-optic 43 technical specifications 87 transferring files with flash-memory PC cards 61 transferring Nokia IPSO images 61 troubleshooting 75 V ventilation requirements 21 W weight specification 87 width specification 87 IP390 Security Platform Installation Guide Index - 95
...recycling retired equipment 22 S serial port 28 SFP modules 44 single-mode, fiber-optic cable 44 space requirements 87 specifications depth 87 height 87 network interfaces 88 operating temperature 87 physical dimensions 87 space requirements 87 technical 87 weight 87 ..., for copper 40 Gigabit Ethernet connections, for fiber-optic 43 technical specifications 87 transferring files with flash-memory PC cards 61 transferring Nokia IPSO images 61 troubleshooting 75 V ventilation requirements 21 W weight specification 87 width specification 87 IP390 Security Platform Installation Guide Index - 95