Installation Guide
Page 4
... 58 Check Point ADP Module LED Reference Information 66 Configuring Check Point IPSO with IP690 ADP Interfaces 67 Effect on Interfaces 67 Check Point ADP Module Interface Names for IP690 Appliances 68 Configuring Network Topology with an IP690 Appliance 68 Configuration Example with VRRP 69 Deleting VRRP Configurations 70 Reconfiguring Interfaces 71 Reconfiguring VRRP 74 7 Installing and...
... 58 Check Point ADP Module LED Reference Information 66 Configuring Check Point IPSO with IP690 ADP Interfaces 67 Effect on Interfaces 67 Check Point ADP Module Interface Names for IP690 Appliances 68 Configuring Network Topology with an IP690 Appliance 68 Configuration Example with VRRP 69 Deleting VRRP Configurations 70 Reconfiguring Interfaces 71 Reconfiguring VRRP 74 7 Installing and...
Installation Guide
Page 5
...ADP) Services Modules 77 Replacing the Compact Flash Memory Card 78 Installing and Using a PC Card 81 Installing a Hard-Disk Drive 82 Before You Begin 82 Replacing a Check Point Encryption Accelerator Card 86 Before You Begin 86 Configuring Software to Use Hardware Acceleration 90 Replacing ...a Fan Unit 91 Before You Begin 91 Replacing a Power Supply 92 Before You Begin 92 Monitoring the IP690 Appliance Power Supply 94 Replacing the Battery 95 8 ...
...ADP) Services Modules 77 Replacing the Compact Flash Memory Card 78 Installing and Using a PC Card 81 Installing a Hard-Disk Drive 82 Before You Begin 82 Replacing a Check Point Encryption Accelerator Card 86 Before You Begin 86 Configuring Software to Use Hardware Acceleration 90 Replacing ...a Fan Unit 91 Before You Begin 91 Replacing a Power Supply 92 Before You Begin 92 Monitoring the IP690 Appliance Power Supply 94 Replacing the Battery 95 8 ...
Installation Guide
Page 11
...a general overview of the Check Point IP690 security platform. „ Chapter 2, "Installing the Check Point IP690 Appliance" describes how to rack-mount the appliance. „ Chapter 3, "Performing the Initial Configuration" describes how to physically connect the Check Point IP690 security platform to a network and to ...) Services Modules" describes how to install or replace memory, hard-disk drives, the fan unit, power supplies, battery, compact flash memory card, PC card, and the Check Point encryption accelerator card. „ Chapter 8, "Troubleshooting" discusses problems you might ...
...a general overview of the Check Point IP690 security platform. „ Chapter 2, "Installing the Check Point IP690 Appliance" describes how to rack-mount the appliance. „ Chapter 3, "Performing the Initial Configuration" describes how to physically connect the Check Point IP690 security platform to a network and to ...) Services Modules" describes how to install or replace memory, hard-disk drives, the fan unit, power supplies, battery, compact flash memory card, PC card, and the Check Point encryption accelerator card. „ Chapter 8, "Troubleshooting" discusses problems you might ...
Installation Guide
Page 14
... Indicates command syntax, or represents computer or screen output, for example: Log error 12453 bold monospace font Indicates text you enter or type, for example: # configure nat Key names Keys that you type something and then press the Return or Enter key. 1 Text Conventions Table 2 describes the text conventions this guide... press simultaneously are defined in the text. • Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name 14 Check Point IP690 Security Platform Installation Guide
... Indicates command syntax, or represents computer or screen output, for example: Log error 12453 bold monospace font Indicates text you enter or type, for example: # configure nat Key names Keys that you type something and then press the Return or Enter key. 1 Text Conventions Table 2 describes the text conventions this guide... press simultaneously are defined in the text. • Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name 14 Check Point IP690 Security Platform Installation Guide
Installation Guide
Page 15
... that incorporates a serviceable slide-out tray into the chassis design. 1 Overview This chapter provides an overview of the Check Point IP690 security platform and the requirements for IP appliances operating system with the Check Point VPN-1/FW-1 firewall application. The following topics are... Data Path (ADP) services modules, including: „ An option for the enterprise data center. In its base configuration, the IP690 consists of: „ Solid state IDE compact flash storage, which stores the Check Point IPSO operating system „ 2-GB system RAM „ Redundant hot-swappable...
... that incorporates a serviceable slide-out tray into the chassis design. 1 Overview This chapter provides an overview of the Check Point IP690 security platform and the requirements for IP appliances operating system with the Check Point VPN-1/FW-1 firewall application. The following topics are... Data Path (ADP) services modules, including: „ An option for the enterprise data center. In its base configuration, the IP690 consists of: „ Solid state IDE compact flash storage, which stores the Check Point IPSO operating system „ 2-GB system RAM „ Redundant hot-swappable...
Installation Guide
Page 16
... a standard Web browser. Use one of IP-routing functions and protocols. Horizon Manager can manage the IP690 security platform by using . „ Check Point Horizon Manager for IP appliances-a secure GUI-based software image management application. You can accept a Check Point-approved NIC. For information about how to... an optional PC card for logging. The PCMCIA PC card carrier that you can accomplish with Network Voyager-manage, monitor, and configure the IP690 security platform-you can also do with the CLI. You can be used for an Ethernet NIC. In addition, the...
... a standard Web browser. Use one of IP-routing functions and protocols. Horizon Manager can manage the IP690 security platform by using . „ Check Point Horizon Manager for IP appliances-a secure GUI-based software image management application. You can accept a Check Point-approved NIC. For information about how to... an optional PC card for logging. The PCMCIA PC card carrier that you can accomplish with Network Voyager-manage, monitor, and configure the IP690 security platform-you can also do with the CLI. You can be used for an Ethernet NIC. In addition, the...
Installation Guide
Page 18
...6 2 RxD GND 4 5 5 GND GND 5 4 5 GND RxD 6 3 3 TxD DSR 7 2 4 DTR CTS 8 1 7 RTS The console cable provided with the IP690 is comprised of the serial ports are: 9600 baud, 8 bits, no parity, and 1 stop. Table 3 provides pin assignment information for network interface card (NIC) and....checkpoint.com/.. Console Port The default configuration of two parts: „ A 6' rollover cable with RJ-45 terminations 18 Check Point IP690 Security Platform Installation Guide 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion...
...6 2 RxD GND 4 5 5 GND GND 5 4 5 GND RxD 6 3 3 TxD DSR 7 2 4 DTR CTS 8 1 7 RTS The console cable provided with the IP690 is comprised of the serial ports are: 9600 baud, 8 bits, no parity, and 1 stop. Table 3 provides pin assignment information for network interface card (NIC) and....checkpoint.com/.. Console Port The default configuration of two parts: „ A 6' rollover cable with RJ-45 terminations 18 Check Point IP690 Security Platform Installation Guide 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion...
Installation Guide
Page 33
... hardware components before you perform the initial configuration procedure this chapter describes. This process enables you turn on power to a Check Point IP690 appliance, the initial configuration process begins. Check Point IP690 Security Platform Installation Guide 33 For information ...about how to use the DHCP client for initial configuration, see Chapter 7, "Installing and Replacing Components ...
... hardware components before you perform the initial configuration procedure this chapter describes. This process enables you turn on power to a Check Point IP690 appliance, the initial configuration process begins. Check Point IP690 Security Platform Installation Guide 33 For information ...about how to use the DHCP client for initial configuration, see Chapter 7, "Installing and Replacing Components ...
Installation Guide
Page 34
...the following settings for the console connection, see "Console Port" on the back of the IP690. emulation program. Connect the supplied null-modem cable (console cable) to perform the initial configuration of the cable to the VT100 console or to a data communications equipment (DCE) device,...If you no longer need the console connection. Connect the other end of your Check Point IP690 security platform, you must use a straight-through cable. After you perform the initial configuration, you connect the console port to a system running a terminal- One RJ-45 termination has...
...the following settings for the console connection, see "Console Port" on the back of the IP690. emulation program. Connect the supplied null-modem cable (console cable) to perform the initial configuration of the cable to the VT100 console or to a data communications equipment (DCE) device,...If you no longer need the console connection. Connect the other end of your Check Point IP690 security platform, you must use a straight-through cable. After you perform the initial configuration, you connect the console port to a system running a terminal- One RJ-45 termination has...
Installation Guide
Page 36
...appliance turn on power to ensure that the power supply is turned on page 19. After you perform the initial configuration, you must use DHCP to perform the initial configuration of the appliance and that the front panel retaining screws are tightened. „ Make sure that the serial ...cable is completely plugged in to prevent the DHCP client from starting. 36 Check Point IP690 Security Platform Installation Guide If the ...
...appliance turn on power to ensure that the power supply is turned on page 19. After you perform the initial configuration, you must use DHCP to perform the initial configuration of the appliance and that the front panel retaining screws are tightened. „ Make sure that the serial ...cable is completely plugged in to prevent the DHCP client from starting. 36 Check Point IP690 Security Platform Installation Guide If the ...
Installation Guide
Page 37
...straight-through RJ-45 cable to connect to any request). For details, see "Ethernet NIC Connectors and Cables" on page 53. Check Point IP690 Security Platform Installation Guide 37 c. Reboot the appliance. At each NIC interface. Log into the system using . 5. Enter the following: rm ... DHCP client from restarting. 4. For more information about how to respond to the Hostname? Respond to the prompts during the initial configuration process. Connecting Network Interfaces Connect at this point, although you are not required to use a fiber-optic cable with an incorrect ...
...straight-through RJ-45 cable to connect to any request). For details, see "Ethernet NIC Connectors and Cables" on page 53. Check Point IP690 Security Platform Installation Guide 37 c. Reboot the appliance. At each NIC interface. Log into the system using . 5. Enter the following: rm ... DHCP client from restarting. 4. For more information about how to respond to the Hostname? Respond to the prompts during the initial configuration process. Connecting Network Interfaces Connect at this point, although you are not required to use a fiber-optic cable with an incorrect ...
Installation Guide
Page 38
...username login screen does not open Check Point Network Voyager 1. You are firmly connected. Confirm the information you entered during the initial configuration and check that all cables are prompted to enter the admin username and the password you entered when you might not have a ...you are viewing, click Help. Open a Web browser on the left side of the initial interface you configured for the window you view. 38 Check Point IP690 Security Platform Installation Guide 3 Performing the Initial Configuration Using Check Point Network Voyager Use Check Point Network Voyager to...
...username login screen does not open Check Point Network Voyager 1. You are firmly connected. Confirm the information you entered during the initial configuration and check that all cables are prompted to enter the admin username and the password you entered when you might not have a ...you are viewing, click Help. Open a Web browser on the left side of the initial interface you configured for the window you view. 38 Check Point IP690 Security Platform Installation Guide 3 Performing the Initial Configuration Using Check Point Network Voyager Use Check Point Network Voyager to...
Installation Guide
Page 39
..., but you cannot change and view configuration settings on all the cluster nodes. For information about how to the appliance. You can also do with Check Point Network Voyager you can now execute CLI commands from the command line. Check Point IP690 Security Platform Installation Guide 39 To access..., or monitor user: „ If you log in as a cadmin (cluster administrator) user, you can change them. Log on to manage and configure Check Point IP security appliances from the CLI shell and the Check Point IPSO shell. Nearly everything that you can accomplish with the CLI. Using...
..., but you cannot change and view configuration settings on all the cluster nodes. For information about how to the appliance. You can also do with Check Point Network Voyager you can now execute CLI commands from the command line. Check Point IP690 Security Platform Installation Guide 39 To access..., or monitor user: „ If you log in as a cadmin (cluster administrator) user, you can change them. Log on to manage and configure Check Point IP security appliances from the CLI shell and the Check Point IPSO shell. Nearly everything that you can accomplish with the CLI. Using...
Installation Guide
Page 40
.... Using Check Point Horizon Manager Check Point Horizon Manager is designed to network configuration tasks (such as interface configuration and routing configuration) and security configuration tasks (such as user configuration and access configuration), Check Point Horizon Manager concentrates on a corporate enterprise, managed service provider (MSP...to access and use the CLI, see the Check Point Web site at www.checkpoint.com. 40 Check Point IP690 Security Platform Installation Guide The argument must place double-quotation marks around the CLI command. Check Point Horizon Manager...
.... Using Check Point Horizon Manager Check Point Horizon Manager is designed to network configuration tasks (such as interface configuration and routing configuration) and security configuration tasks (such as user configuration and access configuration), Check Point Horizon Manager concentrates on a corporate enterprise, managed service provider (MSP...to access and use the CLI, see the Check Point Web site at www.checkpoint.com. 40 Check Point IP690 Security Platform Installation Guide The argument must place double-quotation marks around the CLI command. Check Point Horizon Manager...
Installation Guide
Page 41
... are removing or replacing an installed NIC, use Check Point Network Voyager to the procedures described in PMC expansion slots. Deactivating Configured Interfaces If you attempt to remove, add, or replace NICs later if it . „ Deactivate all of the logical .... Caution Limit service of networking equipment before removing it becomes necessary. Check Point IP690 Security Platform Installation Guide 41 4 Installing and Replacing Network Interface Cards Your Check Point IP690 security platform comes with the wrist strap before you ordered already installed. You should...
... are removing or replacing an installed NIC, use Check Point Network Voyager to the procedures described in PMC expansion slots. Deactivating Configured Interfaces If you attempt to remove, add, or replace NICs later if it . „ Deactivate all of the logical .... Caution Limit service of networking equipment before removing it becomes necessary. Check Point IP690 Security Platform Installation Guide 41 4 Installing and Replacing Network Interface Cards Your Check Point IP690 security platform comes with the wrist strap before you ordered already installed. You should...
Installation Guide
Page 42
...point out steps appropriate to install a NIC in Network Voyager. To install a network interface card 1. Installing NICs Note Before removing a configured network interface card with the chassis tray assembly fully removed from the front of the physical interfaces on page 38. For additional information, see...do not deactivate the interfaces before removing the NIC, you remove the chassis tray assembly from the appliance. Any servicing of the IP690 appliance. Turn off the power to manually disconnect power for this procedure. Before You Begin To install a NIC, you must ...
...point out steps appropriate to install a NIC in Network Voyager. To install a network interface card 1. Installing NICs Note Before removing a configured network interface card with the chassis tray assembly fully removed from the front of the physical interfaces on page 38. For additional information, see...do not deactivate the interfaces before removing the NIC, you remove the chassis tray assembly from the appliance. Any servicing of the IP690 appliance. Turn off the power to manually disconnect power for this procedure. Before You Begin To install a NIC, you must ...
Installation Guide
Page 45
... chassis tray assembly, screw in the bezel retaining screws. 10. Check Point IP690 Security Platform Installation Guide 45 SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 1 2 3 4 SLOT 4 IP690 00583 The IPSO operating system automatically recognizes the NIC and applies the original configuration to the new NIC. From the top of the NIC. Insert and close...
... chassis tray assembly, screw in the bezel retaining screws. 10. Check Point IP690 Security Platform Installation Guide 45 SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 1 2 3 4 SLOT 4 IP690 00583 The IPSO operating system automatically recognizes the NIC and applies the original configuration to the new NIC. From the top of the NIC. Insert and close...
Installation Guide
Page 46
... the NIC. SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 SLOT 4 1 2 3 4 Chassis tray assembly retaining screws IP690 00581 Configuring and Activating Interfaces The IP690 appliance automatically detects any new NIC when the appliance is restarted. For information about how to configure and activate the logical and physical interfaces on . You can asses the general operating condition...
... the NIC. SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 SLOT 4 1 2 3 4 Chassis tray assembly retaining screws IP690 00581 Configuring and Activating Interfaces The IP690 appliance automatically detects any new NIC when the appliance is restarted. For information about how to configure and activate the logical and physical interfaces on . You can asses the general operating condition...
Installation Guide
Page 48
...add or replace a NIC, see "Using Check Point Network Voyager" on page 38. Note The IP690 appliance requires IPSO 4.2 or later. As data is turned on and the cables are connected, the Ethernet link LEDs...how to 100 Mbps „ Link speed auto advertising (10/100) „ PCI operation at 133 MHz. In the IP690, the four-port Ethernet NIC supports the following features: „ Tracing through tcpdump „ High bandwidth „ Full-...MHz „ Compliance with IEEE 802.3ab Gigabit Ethernet specifications You can configure and monitor Ethernet NIC interfaces by using Check Point Network Voyager.
...add or replace a NIC, see "Using Check Point Network Voyager" on page 38. Note The IP690 appliance requires IPSO 4.2 or later. As data is turned on and the cables are connected, the Ethernet link LEDs...how to 100 Mbps „ Link speed auto advertising (10/100) „ PCI operation at 133 MHz. In the IP690, the four-port Ethernet NIC supports the following features: „ Tracing through tcpdump „ High bandwidth „ Full-...MHz „ Compliance with IEEE 802.3ab Gigabit Ethernet specifications You can configure and monitor Ethernet NIC interfaces by using Check Point Network Voyager.
Installation Guide
Page 50
... and two-port copper Gigabit Ethernet NICs installed on the IP690 „ Compliance with IEEE 802.3ab Gigabit Ethernet specifications You can configure and monitor Gigabit Ethernet NIC interfaces with your IP690, the NIC is installed before the appliance is delivered to you. The IP690 can use Network Voyager to set the port speed...
... and two-port copper Gigabit Ethernet NICs installed on the IP690 „ Compliance with IEEE 802.3ab Gigabit Ethernet specifications You can configure and monitor Gigabit Ethernet NIC interfaces with your IP690, the NIC is installed before the appliance is delivered to you. The IP690 can use Network Voyager to set the port speed...
